Edit tour

Windows Analysis Report
install.msi

Overview

General Information

Sample name:	install.msi
Analysis ID:	1586671
MD5:	872cb99a4886350aa57b1c40bba29b1c
SHA1:	03925fdc09e06c16bbfcce695029162db49fcf22
SHA256:	e16baa228ab77485f38b335510270943ab54df755bf72987ac229d819bb85401
Tags:	msiuser-JAMESWT_MHT
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Performs DNS queries to domains with low reputation

Tries to resolve many domain names, but no domain seems valid

Checks for available system drives (often done to infect USB drives)

Connects to many different domains

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Detected potential crypto function

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Executes massive DNS lookups (> 100)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Uses cacls to modify the permissions of files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w11x64_office

msiexec.exe (PID: 7336 cmdline: "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\install.msi" MD5: C0D3BDDE74C1EC82F75681D4D5ED44C8)

msiexec.exe (PID: 7536 cmdline: C:\Windows\system32\msiexec.exe /V MD5: C0D3BDDE74C1EC82F75681D4D5ED44C8)

msiexec.exe (PID: 7712 cmdline: C:\Windows\syswow64\MsiExec.exe -Embedding 2003FD93E0ADBEFC1EB843808504AFF5 MD5: FE653E9A818C22D7E744320F65A91C09)

icacls.exe (PID: 3340 cmdline: "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\." /SETINTEGRITYLEVEL (CI)(OI)HIGH MD5: DF132308B964322137C3AA6CD2705D24)

conhost.exe (PID: 504 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 9698384842DA735D80D278A427A229AB)

expand.exe (PID: 8016 cmdline: "C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files MD5: 63860F134FE4705269CE653A673DBD88)

conhost.exe (PID: 8036 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 9698384842DA735D80D278A427A229AB)

install.exe (PID: 44 cmdline: "C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe" /VERYSILENT /VERYSILENT MD5: 6E3F4D8C1D0D90D8346DFF0051B96D33)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://auayomwkewcomwas.xyz:443/api/client_hello

Avira URL Cloud: Label: malware

Multi AV Scanner detection for submitted file

Source: install.msi

ReversingLabs: Detection: 18%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 97.5% probability

Source:

Binary string: C:\ss2\Projects\MsiWrapper\MsiCustomActions\Release\MsiCustomActions.pdb source: install.msi, MSI4000.tmp.1.dr, 7b3e2b.msi.1.dr

Source: C:\Windows\System32\msiexec.exe	File opened: z:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: x:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: v:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: t:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: r:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: p:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: n:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: l:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: j:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: h:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: f:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: b:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: y:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: w:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: u:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: s:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: q:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: o:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: m:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: k:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: i:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: g:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: e:	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: c:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: a:	Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\	Jump to behavior

Networking

Performs DNS queries to domains with low reputation

Source:	DNS query: auayomwkewcomwas.xyz
Source:	DNS query: iyaikmkkowcqemsi.xyz
Source:	DNS query: ggicikyqcaiyguee.xyz
Source:	DNS query: ggicikyqcaiyguee.xyz
Source:	DNS query: oqyaoykomyoygics.xyz
Source:	DNS query: eqakguiwiqacqiwg.xyz
Source:	DNS query: eqakguiwiqacqiwg.xyz
Source:	DNS query: wgcaouuqqqwucogy.xyz
Source:	DNS query: ewacuagosgqmuocm.xyz
Source:	DNS query: ewacuagosgqmuocm.xyz
Source:	DNS query: wgqyouayikuyuqmk.xyz
Source:	DNS query: owaaygsacguucaye.xyz
Source:	DNS query: uwgicagyykoommga.xyz
Source:	DNS query: uiggameqqycugsqw.xyz
Source:	DNS query: goguooqkgysueime.xyz
Source:	DNS query: keosqeosukqcooco.xyz
Source:	DNS query: keosqeosukqcooco.xyz
Source:	DNS query: maoeeogmuauywsyu.xyz
Source:	DNS query: maoeeogmuauywsyu.xyz
Source:	DNS query: ismqaewykmoiguki.xyz
Source:	DNS query: ismqaewykmoiguki.xyz
Source:	DNS query: wucwykasawokemaw.xyz
Source:	DNS query: ukmcqucewskcqygg.xyz
Source:	DNS query: ukmcqucewskcqygg.xyz
Source:	DNS query: qqqmeagkkosgcayo.xyz
Source:	DNS query: ysawassgkwqygmmq.xyz
Source:	DNS query: osaeyoiqoqawauga.xyz
Source:	DNS query: iagisciiyoemgwaa.xyz
Source:	DNS query: iagisciiyoemgwaa.xyz
Source:	DNS query: ymysimqoykwqeqiq.xyz
Source:	DNS query: ymmcwogyimsuqmcc.xyz
Source:	DNS query: ymmcwogyimsuqmcc.xyz
Source:	DNS query: osmoygyawqmmimkq.xyz
Source:	DNS query: immyecuqwkiyscys.xyz
Source:	DNS query: omsqkuiwcwoegooq.xyz
Source:	DNS query: ukaiiiyqoooycyqm.xyz
Source:	DNS query: isemauqkwwiumyky.xyz
Source:	DNS query: keguuyioweymiaws.xyz
Source:	DNS query: keguuyioweymiaws.xyz
Source:	DNS query: kwaywmaequkqccai.xyz
Source:	DNS query: kwaywmaequkqccai.xyz
Source:	DNS query: yyimcoiwgckeakcm.xyz
Source:	DNS query: ekcwemuekgqsimae.xyz
Source:	DNS query: imigkomgmqgmakqk.xyz
Source:	DNS query: omasqkwqyskcagwi.xyz
Source:	DNS query: awyomscgweuqmgaw.xyz
Source:	DNS query: awyomscgweuqmgaw.xyz
Source:	DNS query: eyoyssauceguqwmk.xyz
Source:	DNS query: gwwcqeykmseicgaw.xyz
Source:	DNS query: gwwcqeykmseicgaw.xyz
Source:	DNS query: qwywqgsmgaoiwsga.xyz
Source:	DNS query: ososwckwcqmmwqcy.xyz
Source:	DNS query: osaymwoggqqycmse.xyz
Source:	DNS query: oyewqwkusieeoqey.xyz
Source:	DNS query: ommwaqgaemsmcqwc.xyz
Source:	DNS query: ommwaqgaemsmcqwc.xyz
Source:	DNS query: cauewwukyywyqiei.xyz
Source:	DNS query: cauewwukyywyqiei.xyz
Source:	DNS query: goeykqccmemkswom.xyz
Source:	DNS query: aksuakswwkiimamq.xyz
Source:	DNS query: isaeicumkcuwqmqq.xyz
Source:	DNS query: isaeicumkcuwqmqq.xyz
Source:	DNS query: qiswokuokugiooky.xyz
Source:	DNS query: qiswcssocuqsaqkq.xyz
Source:	DNS query: qiswcssocuqsaqkq.xyz
Source:	DNS query: qcyksokwumicscaa.xyz
Source:	DNS query: qcyksokwumicscaa.xyz
Source:	DNS query: esiaisyasoaoqwki.xyz
Source:	DNS query: giqukkwwcwgqcisg.xyz
Source:	DNS query: giqukkwwcwgqcisg.xyz
Source:	DNS query: ymqaaskiwomkucuy.xyz
Source:	DNS query: akueuaicusaoieiy.xyz
Source:	DNS query: sauygqecsusickcu.xyz
Source:	DNS query: kkwkgmcoawgaoiwg.xyz
Source:	DNS query: saumycuogqsqykes.xyz
Source:	DNS query: saumycuogqsqykes.xyz
Source:	DNS query: ukyokaigmmkumgoa.xyz
Source:	DNS query: eswweuycwwiiykwo.xyz
Source:	DNS query: eswweuycwwiiykwo.xyz
Source:	DNS query: uksgyqiqaaiaiesi.xyz
Source:	DNS query: smckcsaioceiyasu.xyz
Source:	DNS query: esimsqgcwwwmyoqc.xyz
Source:	DNS query: esimsqgcwwwmyoqc.xyz
Source:	DNS query: maiyuocqqiqiiskw.xyz
Source:	DNS query: smaaowemwiwggocu.xyz
Source:	DNS query: kwuuwgemogmuomwq.xyz
Source:	DNS query: kwuuwgemogmuomwq.xyz
Source:	DNS query: ukicsmiwggcwksam.xyz
Source:	DNS query: ukicsmiwggcwksam.xyz
Source:	DNS query: gwamoggwyegsseao.xyz
Source:	DNS query: immcqsiceooqyaay.xyz
Source:	DNS query: kkcqgowgkcoyokcu.xyz
Source:	DNS query: kkcqgowgkcoyokcu.xyz
Source:	DNS query: kecgikusmakuksma.xyz
Source:	DNS query: kecgikusmakuksma.xyz
Source:	DNS query: ymuiggyusggsymoi.xyz
Source:	DNS query: uecouukwkuceyuwg.xyz
Source:	DNS query: eyoaceoookqskqmy.xyz
Source:	DNS query: eyoaceoookqskqmy.xyz
Source:	DNS query: awwomgcseeqwkkom.xyz
Source:	DNS query: keykoekseemyiewq.xyz
Source:	DNS query: ysiwwoeeaaskykaw.xyz
Source:	DNS query: ysiwwoeeaaskykaw.xyz
Source:	DNS query: kwmcuwccqmuecgea.xyz
Source:	DNS query: gwyooeiscmwguqms.xyz
Source:	DNS query: wuokiysmiucoucak.xyz
Source:	DNS query: wuuiumemmigyyauq.xyz
Source:	DNS query: acwomuuukiomgqkm.xyz
Source:	DNS query: muwqwgaaymomgwmi.xyz
Source:	DNS query: muwqwgaaymomgwmi.xyz
Source:	DNS query: omgcoecwsqiuqyug.xyz
Source:	DNS query: omgcoecwsqiuqyug.xyz
Source:	DNS query: kqmsgskwgemyueya.xyz
Source:	DNS query: eyiyueewuaqmmwcm.xyz
Source:	DNS query: gwoyamckoqoaauoq.xyz
Source:	DNS query: qwqsoyoqkymakowm.xyz
Source:	DNS query: qwqsoyoqkymakowm.xyz
Source:	DNS query: gcmiymmqgwuquokm.xyz
Source:	DNS query: ymseciekayuweoww.xyz
Source:	DNS query: ymseciekayuweoww.xyz
Source:	DNS query: oyocwswugeiqqyoo.xyz
Source:	DNS query: omgooecquoweeomo.xyz
Source:	DNS query: imgeoyougkmmeuec.xyz
Source:	DNS query: smoswyoekkccyuga.xyz
Source:	DNS query: smoswyoekkccyuga.xyz
Source:	DNS query: suwkomiqcykeyako.xyz
Source:	DNS query: smwsugycuuckemue.xyz
Source:	DNS query: qigcqiaomwieqwka.xyz
Source:	DNS query: qigcqiaomwieqwka.xyz
Source:	DNS query: oekcyqqggaegsesm.xyz
Source:	DNS query: oekcyqqggaegsesm.xyz
Source:	DNS query: qcoysaaooaiccqyu.xyz
Source:	DNS query: mismuqiygyeysaoo.xyz
Source:	DNS query: wockoyekyageakcg.xyz
Source:	DNS query: ososokqeakgguwsq.xyz
Source:	DNS query: ososokqeakgguwsq.xyz
Source:	DNS query: wcgqccqcugomywua.xyz
Source:	DNS query: aqaqgemescmwsqks.xyz
Source:	DNS query: aqaqgemescmwsqks.xyz
Source:	DNS query: aqiwocaywcswuwsq.xyz
Source:	DNS query: aqgmgoqcoqqkguyk.xyz
Source:	DNS query: oywgqkusocouysua.xyz
Source:	DNS query: oywgqkusocouysua.xyz
Source:	DNS query: uyygagweoagcuqky.xyz
Source:	DNS query: uyygagweoagcuqky.xyz
Source:	DNS query: muiccguyaeaqwweg.xyz
Source:	DNS query: qiqueqokwqqgwwci.xyz
Source:	DNS query: uygmgoymcwcgkios.xyz
Source:	DNS query: qiyggmguowygeooc.xyz
Source:	DNS query: qiyggmguowygeooc.xyz
Source:	DNS query: acacoiqgoimayqwm.xyz
Source:	DNS query: smisyqewaummmwoc.xyz
Source:	DNS query: smisyqewaummmwoc.xyz
Source:	DNS query: mumuqocoisaucwmq.xyz
Source:	DNS query: qqoawmqqwqcusmee.xyz
Source:	DNS query: qcygacuamqqugcck.xyz
Source:	DNS query: kkiigoymgkmoggoq.xyz
Source:	DNS query: qqmicqemgcgieoau.xyz
Source:	DNS query: sagymwuwgeucsmac.xyz
Source:	DNS query: igmqooiwioymwkcm.xyz
Source:	DNS query: igmqooiwioymwkcm.xyz
Source:	DNS query: osyqameakgkceeog.xyz
Source:	DNS query: sgigamoeiwksoecq.xyz
Source:	DNS query: sgigamoeiwksoecq.xyz
Source:	DNS query: keckssemmeoqieqe.xyz
Source:	DNS query: keckssemmeoqieqe.xyz
Source:	DNS query: caysswwugsmkeksw.xyz
Source:	DNS query: cgiamwsqgcmqgqse.xyz
Source:	DNS query: cgiamwsqgcmqgqse.xyz
Source:	DNS query: uyeqwcuyimescesu.xyz
Source:	DNS query: ekiwqiyewuiqoemo.xyz
Source:	DNS query: oeakuqueisysswcg.xyz
Source:	DNS query: acemcwecgiqcukys.xyz
Source:	DNS query: qcwaiaiqiwcakawa.xyz
Source:	DNS query: esyiocqieemagwmo.xyz
Source:	DNS query: esyiocqieemagwmo.xyz
Source:	DNS query: kqsakygykwusqams.xyz
Source:	DNS query: kqsakygykwusqams.xyz
Source:	DNS query: ymygkkggyigeqcqe.xyz
Source:	DNS query: ymygkkggyigeqcqe.xyz
Source:	DNS query: qqqkagyoymmosuyo.xyz
Source:	DNS query: moiimkscmiswaesw.xyz
Source:	DNS query: igkiociagqsacmwa.xyz
Source:	DNS query: igkiociagqsacmwa.xyz
Source:	DNS query: ymugwyokyyccykmw.xyz
Source:	DNS query: gieksqwccmmqkemm.xyz
Source:	DNS query: iaueigwgocakgsku.xyz
Source:	DNS query: sgsasqgwayeckgoy.xyz
Source:	DNS query: kwogawueykiiumao.xyz
Source:	DNS query: kwogawueykiiumao.xyz
Source:	DNS query: iagmkeayqmuowswy.xyz
Source:	DNS query: iagmkeayqmuowswy.xyz
Source:	DNS query: yyyagyakeciucagk.xyz
Source:	DNS query: yyyagyakeciucagk.xyz
Source:	DNS query: isukyiwyscosaaqc.xyz
Source:	DNS query: goicqsmskkygkkka.xyz
Source:	DNS query: goicqsmskkygkkka.xyz
Source:	DNS query: awacwkqgsoomimye.xyz
Source:	DNS query: iaawaweqwceogamg.xyz
Source:	DNS query: kqueagsoikuyocca.xyz
Source:	DNS query: momoqikcaksewaua.xyz
Source:	DNS query: momoqikcaksewaua.xyz
Source:	DNS query: suagiqkqmkgysmiw.xyz
Source:	DNS query: gcwequgwyimwymsa.xyz
Source:	DNS query: igywsgwooemqiuss.xyz
Source:	DNS query: wikiagqsmeeaeegy.xyz
Source:	DNS query: wikiagqsmeeaeegy.xyz
Source:	DNS query: eeoeukoqgiwsumsu.xyz
Source:	DNS query: ygooiessycewaocg.xyz
Source:	DNS query: qcqgssmagywqcgws.xyz
Source:	DNS query: qcqgssmagywqcgws.xyz
Source:	DNS query: goiikukwyyauemqc.xyz
Source:	DNS query: comuwmkimocayeeu.xyz
Source:	DNS query: comuwmkimocayeeu.xyz
Source:	DNS query: isgasoomksiwqcmg.xyz
Source:	DNS query: qigismmgwsiseyuu.xyz
Source:	DNS query: wuqggcwmoscwykwg.xyz
Source:	DNS query: wuqggcwmoscwykwg.xyz
Source:	DNS query: qceawaaswmsuekmu.xyz
Source:	DNS query: qceawaaswmsuekmu.xyz
Source:	DNS query: ygucsucmagwqsqcu.xyz
Source:	DNS query: giuccqyqokookyue.xyz
Source:	DNS query: gceesusqmuockkgw.xyz
Source:	DNS query: ygesoycecmkuwayg.xyz
Source:	DNS query: ygesoycecmkuwayg.xyz
Source:	DNS query: sasqgsyksiccuuws.xyz
Source:	DNS query: sasqgsyksiccuuws.xyz
Source:	DNS query: qwggykgwkqoceiuo.xyz
Source:	DNS query: wiguisuayimaukgu.xyz
Source:	DNS query: qcwcgegyyieaoqca.xyz
Source:	DNS query: qcwcgegyyieaoqca.xyz
Source:	DNS query: gwcyyawigmwceaqi.xyz
Source:	DNS query: gwcyyawigmwceaqi.xyz
Source:	DNS query: mueuwcqsioowsmce.xyz
Source:	DNS query: mueuwcqsioowsmce.xyz
Source:	DNS query: qiewcykmuuacuoyk.xyz
Source:	DNS query: coayaokeissieqcc.xyz
Source:	DNS query: oeooiqokqsqcsaig.xyz
Source:	DNS query: oeooiqokqsqcsaig.xyz
Source:	DNS query: masegmsiqgamiugm.xyz
Source:	DNS query: smwywssyyaciqkae.xyz
Source:	DNS query: aweqoooqomueeiwi.xyz
Source:	DNS query: akasikewaomyiwqk.xyz
Source:	DNS query: akasikewaomyiwqk.xyz
Source:	DNS query: oyyamqygcecqocmq.xyz
Source:	DNS query: oyyamqygcecqocmq.xyz
Source:	DNS query: qwikoqqgiayyuakq.xyz
Source:	DNS query: qwikoqqgiayyuakq.xyz
Source:	DNS query: miqcugomwgmygyoq.xyz
Source:	DNS query: wiccyamsgmuqoeoy.xyz
Source:	DNS query: ymeiqyyqqyaaygie.xyz
Source:	DNS query: ymeiqyyqqyaaygie.xyz
Source:	DNS query: wiomcwmascsigags.xyz
Source:	DNS query: awgyuqqswicwkqcs.xyz
Source:	DNS query: awgyuqqswicwkqcs.xyz
Source:	DNS query: iacisiamimiiqyeo.xyz
Source:	DNS query: wogawoqysgiockwa.xyz
Source:	DNS query: wogawoqysgiockwa.xyz
Source:	DNS query: mayykkuyeuiggyws.xyz
Source:	DNS query: cosaygigqegeyewi.xyz
Source:	DNS query: cosaygigqegeyewi.xyz
Source:	DNS query: ekqyosgcumkcecmo.xyz
Source:	DNS query: qimmkmaumumswocw.xyz
Source:	DNS query: qimmkmaumumswocw.xyz
Source:	DNS query: acqaagqgmsmeouce.xyz
Source:	DNS query: awasockiaymagmci.xyz
Source:	DNS query: akuyqkmomwqyiyow.xyz
Source:	DNS query: caceukeeygaaqaec.xyz
Source:	DNS query: qwcaikouwwekssco.xyz
Source:	DNS query: qwcaikouwwekssco.xyz
Source:	DNS query: qqioykeogcwkowgq.xyz
Source:	DNS query: qqioykeogcwkowgq.xyz
Source:	DNS query: igeqissugeuswaus.xyz
Source:	DNS query: igeqissugeuswaus.xyz
Source:	DNS query: osoawyeyassgycgy.xyz
Source:	DNS query: cuaumuqcoeegomsq.xyz
Source:	DNS query: cuaumuqcoeegomsq.xyz
Source:	DNS query: oyogquqkmyqwwkuq.xyz
Source:	DNS query: gwyougsgeaaoiumg.xyz
Source:	DNS query: gwyougsgeaaoiumg.xyz
Source:	DNS query: ukeoemaaimqyuais.xyz
Source:	DNS query: oewuwcsmaacckewa.xyz
Source:	DNS query: esykokiigsgwcwsa.xyz
Source:	DNS query: ekgqymkkqiwogqsy.xyz
Source:	DNS query: wueossewygqoakoq.xyz
Source:	DNS query: wueossewygqoakoq.xyz
Source:	DNS query: isceiesauogasmoo.xyz
Source:	DNS query: isceiesauogasmoo.xyz
Source:	DNS query: giscmywoiaqmqcmw.xyz
Source:	DNS query: uyqweoyukcewugsu.xyz
Source:	DNS query: imuscegymggagewg.xyz
Source:	DNS query: wgesgakysuqaewik.xyz
Source:	DNS query: uwoyyqgiwowysqou.xyz
Source:	DNS query: syaouwwyoaemeekm.xyz
Source:	DNS query: syaouwwyoaemeekm.xyz
Source:	DNS query: aoscugususamokuy.xyz
Source:	DNS query: aoscugususamokuy.xyz
Source:	DNS query: aoscugususamokuy.xyz
Source:	DNS query: qucyaygweeasqeoy.xyz
Source:	DNS query: uiwwamyuymycooey.xyz
Source:	DNS query: iygukwyuqwiuoqmi.xyz
Source:	DNS query: koaeaguekwcaousw.xyz
Source:	DNS query: koaeaguekwcaousw.xyz
Source:	DNS query: skssioqkemoiieaa.xyz
Source:	DNS query: skssioqkemoiieaa.xyz
Source:	DNS query: yewomygmueegmoqi.xyz
Source:	DNS query: yewomygmueegmoqi.xyz
Source:	DNS query: kuyoukwwacqkcoyo.xyz
Source:	DNS query: gmcqgmkyguwkskyg.xyz
Source:	DNS query: mygiqcqokowwmgqq.xyz
Source:	DNS query: cymogqmasaiiwmww.xyz
Source:	DNS query: iykumkamcykgicyi.xyz
Source:	DNS query: iykumkamcykgicyi.xyz
Source:	DNS query: cyemcqwkasuimkgs.xyz
Source:	DNS query: cyemcqwkasuimkgs.xyz
Source:	DNS query: ieqeeiggkuqcomyo.xyz
Source:	DNS query: ssmkyomikukusksu.xyz
Source:	DNS query: kimakioiwmawksiw.xyz
Source:	DNS query: qumssmeysccykkyo.xyz
Source:	DNS query: qumssmeysccykkyo.xyz
Source:	DNS query: ykuoaucocogcwoky.xyz
Source:	DNS query: semyssioekmosauo.xyz
Source:	DNS query: aiiqyyikowqaygwy.xyz
Source:	DNS query: aiiqyyikowqaygwy.xyz
Source:	DNS query: kouumoyqiuckkcau.xyz
Source:	DNS query: qgwkkkyicoqmooqu.xyz
Source:	DNS query: qgwkkkyicoqmooqu.xyz
Source:	DNS query: uwwcocucusmeguaw.xyz
Source:	DNS query: cekggiciueyeyoku.xyz
Source:	DNS query: cekggiciueyeyoku.xyz
Source:	DNS query: iqqeoamqwiuiyuua.xyz
Source:	DNS query: uokqmokseqqakiui.xyz
Source:	DNS query: cyqqgacqkowwkqqe.xyz
Source:	DNS query: cmqqeimyycgqwsgg.xyz
Source:	DNS query: cmqqeimyycgqwsgg.xyz
Source:	DNS query: wmgeoqqiwqcmimwu.xyz
Source:	DNS query: wmgeoqqiwqcmimwu.xyz
Source:	DNS query: quyckaioggawuois.xyz
Source:	DNS query: eqciawooemoueyqu.xyz
Source:	DNS query: oqoaumkywacmuwwm.xyz
Source:	DNS query: ewueyekksqksycww.xyz
Source:	DNS query: csmasucykosuwouy.xyz
Source:	DNS query: csmasucykosuwouy.xyz
Source:	DNS query: seeogeqwsqmsoaqe.xyz
Source:	DNS query: gusmkkaiomeeqaiy.xyz
Source:	DNS query: gusmkkaiomeeqaiy.xyz
Source:	DNS query: msyecoiqeyqeiquy.xyz
Source:	DNS query: msyecoiqeyqeiquy.xyz
Source:	DNS query: skawoueawceoywsy.xyz
Source:	DNS query: iyuaqococuqcsgii.xyz
Source:	DNS query: kuyaasckcgacyesi.xyz
Source:	DNS query: aaeqiiecqqumcgky.xyz
Source:	DNS query: aawiysageawcoyok.xyz
Source:	DNS query: aawiysageawcoyok.xyz
Source:	DNS query: yqysoaosqewciiww.xyz
Source:	DNS query: yqysoaosqewciiww.xyz
Source:	DNS query: yessywkwcwmyewqe.xyz
Source:	DNS query: aueiqscgeicewaoo.xyz
Source:	DNS query: uccsgcekiwcyucou.xyz
Source:	DNS query: uccsgcekiwcyucou.xyz
Source:	DNS query: aiumyocycyyikiwc.xyz
Source:	DNS query: aoqayemwgmsyuimi.xyz
Source:	DNS query: aoqayemwgmsyuimi.xyz
Source:	DNS query: mmiowgeswucumqae.xyz
Source:	DNS query: mmiugosumuqmuqoc.xyz
Source:	DNS query: mmiugosumuqmuqoc.xyz
Source:	DNS query: ecqisawmymscauow.xyz
Source:	DNS query: iyoqqeicqoquiqka.xyz
Source:	DNS query: iyoqqeicqoquiqka.xyz
Source:	DNS query: ecoqwiswmwqokmay.xyz
Source:	DNS query: ecoqwiswmwqokmay.xyz
Source:	DNS query: ceckmwoyqkwgeoqg.xyz
Source:	DNS query: ceckmwoyqkwgeoqg.xyz
Source:	DNS query: kcoiygiwuyqyaoku.xyz
Source:	DNS query: aaeyckqsgmiqsgew.xyz
Source:	DNS query: qgaiosyouwwkgsmm.xyz
Source:	DNS query: ocqseueommkkqcgs.xyz
Source:	DNS query: owmesaosmycoeceq.xyz
Source:	DNS query: owmesaosmycoeceq.xyz
Source:	DNS query: qokauaicweuwscac.xyz
Source:	DNS query: qokauaicweuwscac.xyz
Source:	DNS query: sewmmwqeyauowwwo.xyz
Source:	DNS query: mmgowiccqoeomagq.xyz
Source:	DNS query: mmgowiccqoeomagq.xyz
Source:	DNS query: kcwiywyygywkkysk.xyz
Source:	DNS query: syiysgiqgqggqkoc.xyz
Source:	DNS query: syiysgiqgqggqkoc.xyz
Source:	DNS query: ykuasckuceswseig.xyz
Source:	DNS query: quugmiumsieaiyys.xyz
Source:	DNS query: ikqywgcqaggogqsa.xyz
Source:	DNS query: ikqywgcqaggogqsa.xyz
Source:	DNS query: eqyamamqwsseyoig.xyz
Source:	DNS query: eqyamamqwsseyoig.xyz
Source:	DNS query: seqkawokggwucsui.xyz
Source:	DNS query: gmqeqkcqackwkgao.xyz
Source:	DNS query: guowewgekuoqacyy.xyz
Source:	DNS query: guowewgekuoqacyy.xyz
Source:	DNS query: aaokyscqeecowaci.xyz
Source:	DNS query: ywywwwgwekicgico.xyz
Source:	DNS query: wsisaoaauqwmuomg.xyz
Source:	DNS query: wsisaoaauqwmuomg.xyz
Source:	DNS query: koouumcuucaeakye.xyz
Source:	DNS query: okccisioeycusekg.xyz
Source:	DNS query: okccisioeycusekg.xyz
Source:	DNS query: cymymsciyaiacwgw.xyz
Source:	DNS query: aoyeoimcuuqakckw.xyz
Source:	DNS query: qoaweokuqggaymks.xyz
Source:	DNS query: qoaweokuqggaymks.xyz
Source:	DNS query: ewuyacewswkoueqw.xyz
Source:	DNS query: ewuyacewswkoueqw.xyz
Source:	DNS query: kiuymkmaomciimcc.xyz
Source:	DNS query: oqaiyaoqwyeswaiy.xyz
Source:	DNS query: oqaiyaoqwyeswaiy.xyz
Source:	DNS query: koyokggaqsagggym.xyz
Source:	DNS query: koyokggaqsagggym.xyz
Source:	DNS query: cmsuagygagqceocm.xyz
Source:	DNS query: uisgoqaoksgqsqyg.xyz
Source:	DNS query: uisgoqaoksgqsqyg.xyz
Source:	DNS query: ocgcqsagaakgkcma.xyz
Source:	DNS query: okgigkmiieweagia.xyz
Source:	DNS query: skiwkmaaeeiqqgee.xyz
Source:	DNS query: skiwkmaaeeiqqgee.xyz
Source:	DNS query: aagokgyaswscyaeu.xyz
Source:	DNS query: aagokgyaswscyaeu.xyz
Source:	DNS query: gmciuwiycsqycggy.xyz
Source:	DNS query: ggeymcaisciikucq.xyz
Source:	DNS query: ggeymcaisciikucq.xyz
Source:	DNS query: uwskygguegqkasme.xyz
Source:	DNS query: cyumiiokkswcoeag.xyz
Source:	DNS query: oqisqmesaeoegmyc.xyz
Source:	DNS query: wagasowawsoyycom.xyz
Source:	DNS query: gaguweiwsgouugqe.xyz
Source:	DNS query: gaguweiwsgouugqe.xyz
Source:	DNS query: syyyweaywowycsia.xyz
Source:	DNS query: syyyweaywowycsia.xyz
Source:	DNS query: mmoycwqiuykiusuy.xyz
Source:	DNS query: mmoycwqiuykiusuy.xyz
Source:	DNS query: ikoycakqiuuascco.xyz
Source:	DNS query: cmuqekokuyuqgige.xyz
Source:	DNS query: cywoimwmsoamqoem.xyz
Source:	DNS query: skyiqyaeoykwcgiw.xyz
Source:	DNS query: skyiqyaeoykwcgiw.xyz
Source:	DNS query: ssiooaeoaocuyaow.xyz
Source:	DNS query: ssiooaeoaocuyaow.xyz
Source:	DNS query: ywmgykycywqqewqw.xyz
Source:	DNS query: uosaescwmkiyscay.xyz
Source:	DNS query: eigywisgeoiskekg.xyz
Source:	DNS query: eigywisgeoiskekg.xyz
Source:	DNS query: msqsoggkkoiokugk.xyz
Source:	DNS query: cmaaciimeememwao.xyz
Source:	DNS query: uigkauqkumywguig.xyz
Source:	DNS query: wggygeoisauouuoc.xyz
Source:	DNS query: wggygeoisauouuoc.xyz
Source:	DNS query: okoykokgycygucya.xyz
Source:	DNS query: ewaoowewmsomgaiw.xyz
Source:	DNS query: ewaoowewmsomgaiw.xyz
Source:	DNS query: ieiegkokewkqmkwe.xyz
Source:	DNS query: gakesieaaickekuo.xyz
Source:	DNS query: ecasigiwguqgguyw.xyz
Source:	DNS query: okwswuciummewsui.xyz
Source:	DNS query: ggaqiymaekkywusy.xyz
Source:	DNS query: ocicimqkgucacyim.xyz
Source:	DNS query: ocicimqkgucacyim.xyz
Source:	DNS query: qoyisgoayskswigs.xyz
Source:	DNS query: qoyisgoayskswigs.xyz
Source:	DNS query: wsywmuwgsogemomw.xyz
Source:	DNS query: wsywmuwgsogemomw.xyz
Source:	DNS query: skaeggkkcmoqoywy.xyz
Source:	DNS query: uowicsywgqmgagyc.xyz
Source:	DNS query: yqyqgowkwqiggewq.xyz
Source:	DNS query: aikmggymywuooyqc.xyz
Source:	DNS query: semgkyogsqqwgsmy.xyz
Source:	DNS query: ucmwywoqciswaguc.xyz
Source:	DNS query: ucmwywoqciswaguc.xyz
Source:	DNS query: qowoagcmkkgqcswk.xyz
Source:	DNS query: mmgusimiaqiweyas.xyz
Source:	DNS query: mmgusimiaqiweyas.xyz
Source:	DNS query: wgssaogcsscmkswu.xyz
Source:	DNS query: aoeewogkicikusoc.xyz
Source:	DNS query: ikggquqsigykqamc.xyz
Source:	DNS query: ikggquqsigykqamc.xyz
Source:	DNS query: waaqccyeaeywuoqu.xyz
Source:	DNS query: ecgiqiiieksaooyc.xyz
Source:	DNS query: iqcogqmwegaqewuu.xyz
Source:	DNS query: iqcogqmwegaqewuu.xyz
Source:	DNS query: aiusammkykucyyso.xyz
Source:	DNS query: qgkswogkcsaeegki.xyz
Source:	DNS query: ywcwqgmikmycwoeu.xyz
Source:	DNS query: eiqogaaggeswoges.xyz
Source:	DNS query: eiqogaaggeswoges.xyz
Source:	DNS query: sekqikccsokicgye.xyz
Source:	DNS query: ssqggwwkkaayqkgk.xyz
Source:	DNS query: ssqggwwkkaayqkgk.xyz
Source:	DNS query: seiiycgosccmaykm.xyz
Source:	DNS query: aosagqwwquakwceq.xyz
Source:	DNS query: aosagqwwquakwceq.xyz
Source:	DNS query: qoiigkweqeiwycuo.xyz
Source:	DNS query: oqycmugocqsyuaae.xyz
Source:	DNS query: ewwgmiicuyowacum.xyz
Source:	DNS query: mmmoiaecqyuquoya.xyz

Tries to resolve many domain names, but no domain seems valid

Source: unknown	DNS traffic detected: query: ecoqwiswmwqokmay.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwwcqeykmseicgaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kuyaasckcgacyesi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awacwkqgsoomimye.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukmcqucewskcqygg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqyaoykomyoygics.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqggiaeuuaskcisa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esykokiigsgwcwsa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okeyuasamkcqqeka.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wcuwikyucakswsgy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiuyuwqiqkkogmoe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uyeqwcuyimescesu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecogmmaysgwkmwqm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qgaiosyouwwkgsmm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwamoggwyegsseao.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uokqmokseqqakiui.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: miqcugomwgmygyoq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skawoueawceoywsy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cgiamwsqgcmqgqse.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: coosumygqywusaaq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cosaygigqegeyewi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ucmwywoqciswaguc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcqgssmagywqcgws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymysimqoykwqeqiq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: micemismikicsccc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cskowwiekeqaakki.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sewmmwqeyauowwwo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: akasikewaomyiwqk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sgckugycwoyyoeow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mskmgwkuiamqikce.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoyeoimcuuqakckw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gieksqwccmmqkemm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gaguweiwsgouugqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uqsqcgouceqmigcg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kqsakygykwusqams.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwuaqqsyegywuaya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyewqwkusieeoqey.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kcoiygiwuyqyaoku.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiswokuokugiooky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qoyisgoayskswigs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikuqcsooiucogaww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcweoeaqygkgoyqw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wagasowawsoyycom.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkiigoymgkmoggoq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kouumoyqiuckkcau.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isgasoomksiwqcmg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwggykgwkqoceiuo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ismqaewykmoiguki.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skmmaauasaqywsas.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqaiyaoqwyeswaiy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aosagqwwquakwceq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gcuasoickeyqugwe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymugwyokyyccykmw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cygmqaagqcuusmiq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwyikqowekcgesga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igkiociagqsacmwa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isemauqkwwiumyky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wuowyewqgeeycsio.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skyiqyaeoykwcgiw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gcgquesqkuokqoos.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: caceukeeygaaqaec.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oeooiqokqsqcsaig.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uegmseugcsaymygc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekommiasesmcaysg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoqayemwgmsyuimi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwsgiwukuaoocqgw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wuqggcwmoscwykwg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omsqkuiwcwoegooq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ocgcqsagaakgkcma.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikggquqsigykqamc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yyqmiikqggkgkcke.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awquimmiceucqika.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iagmkeayqmuowswy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikqokmauuissyuce.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: giscmywoiaqmqcmw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ygucsucmagwqsqcu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyocwswugeiqqyoo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eyoyssauceguqwmk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iqqeoamqwiuiyuua.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: quugmiumsieaiyys.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uowkoqwgqqeweume.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmgowiccqoeomagq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: giqagqyuwgskokgg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ososwckwcqmmwqcy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ueyeeeegieoukoci.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwwkyygoyymumeqa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sgiwoemuskksgmem.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsywmuwgsogemomw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mygiqcqokowwmgqq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqiwocaywcswuwsq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sagymwuwgeucsmac.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwuomysuqkaykwuy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wmgeoqqiwqcmimwu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwokcgwecseqcsck.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: goicqsmskkygkkka.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymygkkggyigeqcqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiswcssocuqsaqkq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwcaikouwwekssco.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esiaisyasoaoqwki.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyogquqkmyqwwkuq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: giuccqyqokookyue.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmmoiaecqyuquoya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyyagswauqyckoye.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qceawaaswmsuekmu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukeoemaaimqyuais.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uisgoqaoksgqsqyg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eyoaceoookqskqmy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ocicimqkgucacyim.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aiusammkykucyyso.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgwmaeskqmwumwkk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kecsceaqksygeamy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uikciyeoaumwomqo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wagyuykcqmqyygkw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oesgsmmsyegwkaii.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukicsmiwggcwksam.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qowoagcmkkgqcswk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qucyaygweeasqeoy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eeimyyskiwmsmwaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqumaeswmyusisoi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqkiemcseioemogk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ygooiessycewaocg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gugueqckkyuaeqqy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoeewogkicikusoc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oywgqkusocouysua.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osyawgmkggwwaise.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekcwemuekgqsimae.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: msyecoiqeyqeiquy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ygesoycecmkuwayg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wcagmacwieoosqok.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uqumusgyyygmiicq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aciemoayegyggwiq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omgcoecwsqiuqyug.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ggicikyqcaiyguee.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: owaaygsacguucaye.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekiwqiyewuiqoemo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqoaumkywacmuwwm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iyaikmkkowcqemsi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgqyouayikuyuqmk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qigaaawumoqgmwck.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yessywkwcwmyewqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cmuqekokuyuqgige.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewueyekksqksycww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wikiagqsmeeaeegy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sgsasqgwayeckgoy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqioykeogcwkowgq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: giqukkwwcwgqcisg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: masegmsiqgamiugm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iygukwyuqwiuoqmi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cyumiiokkswcoeag.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eiqogaaggeswoges.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igyccoycggkescsw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smckcsaioceiyasu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isaeicumkcuwqmqq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qoiigkweqeiwycuo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gokuyyiawuwwyeqi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iaueigwgocakgsku.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqakguiwiqacqiwg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iaamsmcuweooiums.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: coyikkwmyomyykmo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wockoyekyageakcg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isceiesauogasmoo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gcwequgwyimwymsa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukaiiiyqoooycyqm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssmkyomikukusksu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: akuyqkmomwqyiyow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iagisciiyoemgwaa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sauygqecsusickcu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osyqameakgkceeog.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: maiyuocqqiqiiskw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mycgaaaymgowwicw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wucwykasawokemaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iyoqqeicqoquiqka.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: suagiqkqmkgysmiw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cgwgwmsuyaicegcq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: coayaokeissieqcc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keyqaymgcyswowqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aweqoooqomueeiwi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imcgogsosiogeqgc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qimmkmaumumswocw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smwywssyyaciqkae.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: muwqwgaaymomgwmi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imigkomgmqgmakqk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omasqkwqyskcagwi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eyiyueewuaqmmwcm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sekqikccsokicgye.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wueossewygqoakoq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewacuagosgqmuocm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acqaagqgmsmeouce.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekgqymkkqiwogqsy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qagaeyiqsgakegya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oewuwcsmaacckewa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymmcwogyimsuqmcc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqycmugocqsyuaae.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ggaqiymaekkywusy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkqoqmmcwacsqiiu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwcyyawigmwceaqi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkwkgmcoawgaoiwg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmoycwqiuykiusuy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aakowgaeoeuekqyc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sgigamoeiwksoecq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acemcwecgiqcukys.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iesmewkokeqooioo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awyomscgweuqmgaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: moysoauykmieesas.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcwcgegyyieaoqca.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ekqyosgcumkcecmo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqyqgowkwqiggewq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eygeqyioakqgwkws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqmicqemgcgieoau.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: guwououoomacaysu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcyksokwumicscaa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uoeukcckqmmsuwaa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqmoakcgiagmaiou.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymmoqwiyeomigemu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: isukyiwyscosaaqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: auscackumyccuyuk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eswweuycwwiiykwo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsicgeayaoueooom.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: camkaaeqmmemkeqo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skiwkmaaeeiqqgee.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uosaescwmkiyscay.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okgigkmiieweagia.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uecouukwkuceyuwg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uigkauqkumywguig.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cekggiciueyeyoku.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: immcqsiceooqyaay.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ososokqeakgguwsq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cmaaciimeememwao.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: goguooqkgysueime.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igmqooiwioymwkcm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssiooaeoaocuyaow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wicwocqcucgaimwe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wuuiumemmigyyauq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqmqwygosgguwqsu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwaywmaequkqccai.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iyuaqococuqcsgii.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yqysoaosqewciiww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmiowgeswucumqae.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iaawaweqwceogamg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwoyamckoqoaauoq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kqmsgskwgemyueya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: miyuaaeqyewssisg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smisyqewaummmwoc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qumssmeysccykkyo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: seiiycgosccmaykm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smwcqasgeqikoqss.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gmcqgmkyguwkskyg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smaaowemwiwggocu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gakesieaaickekuo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ygquuyekcusgsqqu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aueiqscgeicewaoo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uysuukowkciwgmko.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okccisioeycusekg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: quyckaioggawuois.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwoesauawkouiecq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecgiqiiieksaooyc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aagokgyaswscyaeu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okwswuciummewsui.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skaeggkkcmoqoywy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ywcwqgmikmycwoeu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osaeyoiqoqawauga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmiugosumuqmuqoc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymqaaskiwomkucuy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gmqeqkcqackwkgao.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwskygguegqkasme.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymseciekayuweoww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwywqgsmgaoiwsga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikqywgcqaggogqsa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qieoqgsomueyeass.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmgusimiaqiweyas.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mmiccoqwqmssougs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acwomuuukiomgqkm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewaoowewmsomgaiw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: waucsgsqqsqkacog.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiyggmguowygeooc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: muikisowiqmckiao.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: suwkomiqcykeyako.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keckssemmeoqieqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wuokiysmiucoucak.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ommwaqgaemsmcqwc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: guwwqcuqmkmyyyyi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: koyokggaqsagggym.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uyqweoyukcewugsu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqkoemcaocsomwow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgssaogcsscmkswu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gusmkkaiomeeqaiy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: owmesaosmycoeceq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykuasckuceswseig.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qokauaicweuwscac.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awgyuqqswicwkqcs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esyiocqieemagwmo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwoyyqgiwowysqou.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ysmmeamaooogyuwa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewuyacewswkoueqw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ikoycakqiuuascco.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqqkagyoymmosuyo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwkiuumqgigawcek.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keosqeosukqcooco.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awcmmsyugikucuqg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gcmiymmqgwuquokm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okgquokwaassqyyi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uygmgoymcwcgkios.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sgowwwmqgkeyukwq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: muiccguyaeaqwweg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keykoekseemyiewq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukwgsimcamwqcqus.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqmmgwoeiissyuay.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uiaqcykmqwcwgmeg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgcaouuqqqwucogy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cymymsciyaiacwgw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mookqcgowekwsyme.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: semyssioekmosauo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymuiggyusggsymoi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uoiyoewsiosismow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uyygagweoagcuqky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imuscegymggagewg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oqisqmesaeoegmyc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sskawiyqmweogyqi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aiiqyyikowqaygwy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imgeoyougkmmeuec.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igywsgwooemqiuss.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cyqqgacqkowwkqqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: immyecuqwkiyscys.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awsigwcaesugycuk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kqueagsoikuyocca.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoscugususamokuy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qoaweokuqggaymks.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mumuqocoisaucwmq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiccyamsgmuqoeoy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mayykkuyeuiggyws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ucsoeygscgagowqw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukyokaigmmkumgoa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: momoqikcaksewaua.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiguisuayimaukgu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eigywisgeoiskekg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sasqgsyksiccuuws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: issaesuceymoyccq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wggygeoisauouuoc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aksuakswwkiimamq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwogawueykiiumao.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qigcqiaomwieqwka.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uccsgcekiwcyucou.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skssioqkemoiieaa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gmciuwiycsqycggy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ewwgmiicuyowacum.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwikoqqgiayyuakq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ceckmwoyqkwgeoqg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcoysaaooaiccqyu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cmqqeimyycgqwsgg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: koaeaguekwcaousw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: akueuaicusaoieiy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: csmasucykosuwouy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: esimsqgcwwwmyoqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: seeogeqwsqmsoaqe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecgmcmqswickqcgi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kkcqgowgkcoyokcu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wccgukagisyugimy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwwcocucusmeguaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwyooeiscmwguqms.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ieqeeiggkuqcomyo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: makysawqyqkmmkuo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: comuwmkimocayeeu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osaymwoggqqycmse.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awwomgcseeqwkkom.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqgmgoqcoqqkguyk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cymogqmasaiiwmww.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qigismmgwsiseyuu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omgooecquoweeomo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: keguuyioweymiaws.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssqggwwkkaayqkgk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aikmggymywuooyqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cekeeosckoouciwe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcwaiaiqiwcakawa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqgoeemewamgucie.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uiicikumwwsmaeem.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ywywwwgwekicgico.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gceesusqmuockkgw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: seqkawokggwucsui.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cgcukekaacucqesm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iqcogqmwegaqewuu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kimakioiwmawksiw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iacisiamimiiqyeo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ucoweesewcwiosgw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiwmqykuesscgkac.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awasockiaymagmci.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yyimcoiwgckeakcm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: msqsoggkkoiokugk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aaeyckqsgmiqsgew.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: guowewgekuoqacyy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwgicagyykoommga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cmsuagygagqceocm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qcygacuamqqugcck.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: skqsqowayeqesqqk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yewomygmueegmoqi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykeuawieaequiyag.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyyamqygcecqocmq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oeakuqueisysswcg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ggeymcaisciikucq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wogawoqysgiockwa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smoswyoekkccyuga.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cygeomikesiegqsk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: caysuwggmqimaqwq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aaokyscqeecowaci.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cywoimwmsoamqoem.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qgwkkkyicoqmooqu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iysmukmcmacuomic.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aaeqiiecqqumcgky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: goeykqccmemkswom.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kewweiikaaysqugi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uqswoygsykiwckyk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: moiimkscmiswaesw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecqisawmymscauow.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwcqymkoyiusyywg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wiomcwmascsigags.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: quwocusecekwqkaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iamowksweuqyssis.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gcyciogqguooyici.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ysiwwoeeaaskykaw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ymeiqyyqqyaaygie.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mismuqiygyeysaoo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yyyagyakeciucagk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osmoygyawqmmimkq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kiuymkmaomciimcc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gmoguamscceqkamk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiewcykmuuacuoyk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: caysswwugsmkeksw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ukgeakkwimkacgwm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qukyogcwsgswyayo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okoykokgycygucya.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwuuwgemogmuomwq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oywkwakwykimigck.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iaiyeiseoyssykuu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ywmgykycywqqewqw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwmqmwoieykcoums.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: syyyweaywowycsia.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: saumycuogqsqykes.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kuyoukwwacqkcoyo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: okoccmmgswcmakcw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oekcyqqggaegsesm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qwqsoyoqkymakowm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqyamamqwsseyoig.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kuscomokgkmaommk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smwsugycuuckemue.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: syaouwwyoaemeekm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aawiysageawcoyok.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: maoeeogmuauywsyu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mueuwcqsioowsmce.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wgesgakysuqaewik.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uwagocmgakuuykiu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eqciawooemoueyqu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aqaqgemescmwsqks.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oscegykuecgmiioq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqoawmqqwqcusmee.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cauewwukyywyqiei.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uowicsywgqmgagyc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qiqueqokwqqgwwci.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: waaqccyeaeywuoqu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsmyawqeqguacwas.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cyemcqwkasuimkgs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwmcuwccqmuecgea.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ysawassgkwqygmmq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imumkckaqyieaasa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kwieueawsewqigey.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: akqmmimguqeacqki.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eeoeukoqgiwsumsu.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yskeokkusmkcyosa.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: goiikukwyyauemqc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iesmkwqgmkmksgam.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aiumyocycyyikiwc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: syiysgiqgqggqkoc.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oeeoucsuawuqkqoi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ocqseueommkkqcgs.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: semgkyogsqqwgsmy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: oyqmksygwiuekomo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yywgmuqggsagcmco.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwswakimuyyacece.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kcwiywyygywkkysk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qgkswogkcsaeegki.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omoaicgooscecewq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: eeuqeoimgoqakquw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: koouumcuucaeakye.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: aoqymkkusuecomsw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecqoqckqoaogcesy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wcgqccqcugomywua.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wsisaoaauqwmuomg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ieiegkokewkqmkwe.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ykuoaucocogcwoky.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: cuaumuqcoeegomsq.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ecasigiwguqgguyw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: osoawyeyassgycgy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: gwyougsgeaaoiumg.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wggqoukyeokwgmoy.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: qqqmeagkkosgcayo.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: iykumkamcykgicyi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kecgikusmakuksma.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uksgyqiqaaiaiesi.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uiggameqqycugsqw.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: acacoiqgoimayqwm.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: igeqissugeuswaus.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: uiwwamyuymycooey.xyz replaycode: Name error (3)

Source: unknown

Network traffic detected: DNS query count 561

Source: global traffic

DNS traffic detected: number of DNS queries: 561

Source: Joe Sandbox View

ASN Name: AS40676US AS40676US

Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

HTTP traffic detected: GET /api/client_hello HTTP/1.1Accept: */*Connection: closeHost: auayomwkewcomwas.xyz:443User-Agent: cpp-httplib/0.12.1

Source: global traffic	DNS traffic detected: DNS query: auayomwkewcomwas.xyz
Source: global traffic	DNS traffic detected: DNS query: iyaikmkkowcqemsi.xyz
Source: global traffic	DNS traffic detected: DNS query: ggicikyqcaiyguee.xyz
Source: global traffic	DNS traffic detected: DNS query: oqyaoykomyoygics.xyz
Source: global traffic	DNS traffic detected: DNS query: eqakguiwiqacqiwg.xyz
Source: global traffic	DNS traffic detected: DNS query: wgcaouuqqqwucogy.xyz
Source: global traffic	DNS traffic detected: DNS query: ewacuagosgqmuocm.xyz
Source: global traffic	DNS traffic detected: DNS query: wgqyouayikuyuqmk.xyz
Source: global traffic	DNS traffic detected: DNS query: owaaygsacguucaye.xyz
Source: global traffic	DNS traffic detected: DNS query: uwgicagyykoommga.xyz
Source: global traffic	DNS traffic detected: DNS query: uiggameqqycugsqw.xyz
Source: global traffic	DNS traffic detected: DNS query: goguooqkgysueime.xyz
Source: global traffic	DNS traffic detected: DNS query: keosqeosukqcooco.xyz
Source: global traffic	DNS traffic detected: DNS query: maoeeogmuauywsyu.xyz
Source: global traffic	DNS traffic detected: DNS query: ismqaewykmoiguki.xyz
Source: global traffic	DNS traffic detected: DNS query: wucwykasawokemaw.xyz
Source: global traffic	DNS traffic detected: DNS query: ukmcqucewskcqygg.xyz
Source: global traffic	DNS traffic detected: DNS query: qqqmeagkkosgcayo.xyz
Source: global traffic	DNS traffic detected: DNS query: ysawassgkwqygmmq.xyz
Source: global traffic	DNS traffic detected: DNS query: osaeyoiqoqawauga.xyz
Source: global traffic	DNS traffic detected: DNS query: iagisciiyoemgwaa.xyz
Source: global traffic	DNS traffic detected: DNS query: ymysimqoykwqeqiq.xyz
Source: global traffic	DNS traffic detected: DNS query: ymmcwogyimsuqmcc.xyz
Source: global traffic	DNS traffic detected: DNS query: osmoygyawqmmimkq.xyz
Source: global traffic	DNS traffic detected: DNS query: immyecuqwkiyscys.xyz
Source: global traffic	DNS traffic detected: DNS query: omsqkuiwcwoegooq.xyz
Source: global traffic	DNS traffic detected: DNS query: ukaiiiyqoooycyqm.xyz
Source: global traffic	DNS traffic detected: DNS query: isemauqkwwiumyky.xyz
Source: global traffic	DNS traffic detected: DNS query: keguuyioweymiaws.xyz
Source: global traffic	DNS traffic detected: DNS query: kwaywmaequkqccai.xyz
Source: global traffic	DNS traffic detected: DNS query: yyimcoiwgckeakcm.xyz
Source: global traffic	DNS traffic detected: DNS query: ekcwemuekgqsimae.xyz
Source: global traffic	DNS traffic detected: DNS query: imigkomgmqgmakqk.xyz
Source: global traffic	DNS traffic detected: DNS query: omasqkwqyskcagwi.xyz
Source: global traffic	DNS traffic detected: DNS query: awyomscgweuqmgaw.xyz
Source: global traffic	DNS traffic detected: DNS query: eyoyssauceguqwmk.xyz
Source: global traffic	DNS traffic detected: DNS query: gwwcqeykmseicgaw.xyz
Source: global traffic	DNS traffic detected: DNS query: qwywqgsmgaoiwsga.xyz
Source: global traffic	DNS traffic detected: DNS query: ososwckwcqmmwqcy.xyz
Source: global traffic	DNS traffic detected: DNS query: osaymwoggqqycmse.xyz
Source: global traffic	DNS traffic detected: DNS query: oyewqwkusieeoqey.xyz
Source: global traffic	DNS traffic detected: DNS query: ommwaqgaemsmcqwc.xyz
Source: global traffic	DNS traffic detected: DNS query: cauewwukyywyqiei.xyz
Source: global traffic	DNS traffic detected: DNS query: goeykqccmemkswom.xyz
Source: global traffic	DNS traffic detected: DNS query: aksuakswwkiimamq.xyz
Source: global traffic	DNS traffic detected: DNS query: isaeicumkcuwqmqq.xyz
Source: global traffic	DNS traffic detected: DNS query: qiswokuokugiooky.xyz
Source: global traffic	DNS traffic detected: DNS query: qiswcssocuqsaqkq.xyz
Source: global traffic	DNS traffic detected: DNS query: qcyksokwumicscaa.xyz
Source: global traffic	DNS traffic detected: DNS query: esiaisyasoaoqwki.xyz
Source: global traffic	DNS traffic detected: DNS query: giqukkwwcwgqcisg.xyz
Source: global traffic	DNS traffic detected: DNS query: ymqaaskiwomkucuy.xyz
Source: global traffic	DNS traffic detected: DNS query: akueuaicusaoieiy.xyz
Source: global traffic	DNS traffic detected: DNS query: sauygqecsusickcu.xyz
Source: global traffic	DNS traffic detected: DNS query: kkwkgmcoawgaoiwg.xyz
Source: global traffic	DNS traffic detected: DNS query: saumycuogqsqykes.xyz
Source: global traffic	DNS traffic detected: DNS query: ukyokaigmmkumgoa.xyz
Source: global traffic	DNS traffic detected: DNS query: eswweuycwwiiykwo.xyz
Source: global traffic	DNS traffic detected: DNS query: uksgyqiqaaiaiesi.xyz
Source: global traffic	DNS traffic detected: DNS query: smckcsaioceiyasu.xyz
Source: global traffic	DNS traffic detected: DNS query: esimsqgcwwwmyoqc.xyz
Source: global traffic	DNS traffic detected: DNS query: maiyuocqqiqiiskw.xyz
Source: global traffic	DNS traffic detected: DNS query: smaaowemwiwggocu.xyz
Source: global traffic	DNS traffic detected: DNS query: kwuuwgemogmuomwq.xyz
Source: global traffic	DNS traffic detected: DNS query: ukicsmiwggcwksam.xyz
Source: global traffic	DNS traffic detected: DNS query: gwamoggwyegsseao.xyz
Source: global traffic	DNS traffic detected: DNS query: immcqsiceooqyaay.xyz
Source: global traffic	DNS traffic detected: DNS query: kkcqgowgkcoyokcu.xyz
Source: global traffic	DNS traffic detected: DNS query: kecgikusmakuksma.xyz
Source: global traffic	DNS traffic detected: DNS query: ymuiggyusggsymoi.xyz
Source: global traffic	DNS traffic detected: DNS query: uecouukwkuceyuwg.xyz
Source: global traffic	DNS traffic detected: DNS query: eyoaceoookqskqmy.xyz
Source: global traffic	DNS traffic detected: DNS query: awwomgcseeqwkkom.xyz
Source: global traffic	DNS traffic detected: DNS query: keykoekseemyiewq.xyz
Source: global traffic	DNS traffic detected: DNS query: ysiwwoeeaaskykaw.xyz
Source: global traffic	DNS traffic detected: DNS query: kwmcuwccqmuecgea.xyz
Source: global traffic	DNS traffic detected: DNS query: gwyooeiscmwguqms.xyz
Source: global traffic	DNS traffic detected: DNS query: wuokiysmiucoucak.xyz
Source: global traffic	DNS traffic detected: DNS query: wuuiumemmigyyauq.xyz
Source: global traffic	DNS traffic detected: DNS query: acwomuuukiomgqkm.xyz
Source: global traffic	DNS traffic detected: DNS query: muwqwgaaymomgwmi.xyz
Source: global traffic	DNS traffic detected: DNS query: omgcoecwsqiuqyug.xyz
Source: global traffic	DNS traffic detected: DNS query: kqmsgskwgemyueya.xyz
Source: global traffic	DNS traffic detected: DNS query: eyiyueewuaqmmwcm.xyz
Source: global traffic	DNS traffic detected: DNS query: gwoyamckoqoaauoq.xyz
Source: global traffic	DNS traffic detected: DNS query: qwqsoyoqkymakowm.xyz
Source: global traffic	DNS traffic detected: DNS query: gcmiymmqgwuquokm.xyz
Source: global traffic	DNS traffic detected: DNS query: ymseciekayuweoww.xyz
Source: global traffic	DNS traffic detected: DNS query: oyocwswugeiqqyoo.xyz
Source: global traffic	DNS traffic detected: DNS query: omgooecquoweeomo.xyz
Source: global traffic	DNS traffic detected: DNS query: imgeoyougkmmeuec.xyz
Source: global traffic	DNS traffic detected: DNS query: smoswyoekkccyuga.xyz
Source: global traffic	DNS traffic detected: DNS query: suwkomiqcykeyako.xyz
Source: global traffic	DNS traffic detected: DNS query: smwsugycuuckemue.xyz
Source: global traffic	DNS traffic detected: DNS query: qigcqiaomwieqwka.xyz
Source: global traffic	DNS traffic detected: DNS query: oekcyqqggaegsesm.xyz
Source: global traffic	DNS traffic detected: DNS query: qcoysaaooaiccqyu.xyz
Source: global traffic	DNS traffic detected: DNS query: mismuqiygyeysaoo.xyz
Source: global traffic	DNS traffic detected: DNS query: wockoyekyageakcg.xyz
Source: global traffic	DNS traffic detected: DNS query: ososokqeakgguwsq.xyz

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\7b3e2b.msi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\SourceHash{A4B71BFF-7E39-497F-811D-B224EDF412D9}	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\SystemTemp\~DF60CB8EE2A0627B6D.TMP	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\inprogressinstallinfo.ipi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\SystemTemp\~DF6B3FA32A3F368F13.TMP	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI4000.tmp	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F590F0	9_2_00F590F0
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F378D0	9_2_00F378D0
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F420D0	9_2_00F420D0
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F37080	9_2_00F37080
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F51080	9_2_00F51080
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F50020	9_2_00F50020
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F31000	9_2_00F31000
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F531B0	9_2_00F531B0
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F559A0	9_2_00F559A0
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_010D6880	9_2_010D6880
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F3D2F0	9_2_00F3D2F0
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F35AD0	9_2_00F35AD0
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F432D0	9_2_00F432D0
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F542C0	9_2_00F542C0
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F32AB0	9_2_00F32AB0
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F43AB0	9_2_00F43AB0
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F5C280	9_2_00F5C280
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F5F270	9_2_00F5F270
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F38250	9_2_00F38250
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F4EA50	9_2_00F4EA50
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F56A20	9_2_00F56A20
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F5EA20	9_2_00F5EA20
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F32200	9_2_00F32200
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F3BBE0	9_2_00F3BBE0
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F3C3A0	9_2_00F3C3A0
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F58350	9_2_00F58350
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F31C90	9_2_00F31C90
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F3CC40	9_2_00F3CC40
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F63DC0	9_2_00F63DC0
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F60D90	9_2_00F60D90
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F3B580	9_2_00F3B580
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F42D80	9_2_00F42D80
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F406C0	9_2_00F406C0
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F52670	9_2_00F52670
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F53610	9_2_00F53610
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F3F600	9_2_00F3F600
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F4D7B0	9_2_00F4D7B0
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F617B0	9_2_00F617B0
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F3CF90	9_2_00F3CF90
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F57F90	9_2_00F57F90
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F54F70	9_2_00F54F70
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F36760	9_2_00F36760
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F56F60	9_2_00F56F60
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F51730	9_2_00F51730

Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe

Code function: String function: 010D52A0 appears 37 times

Source: classification engine

Classification label: mal68.troj.winMSI@12/12@778/1

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:504:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8036:120:WilError_03

Source: C:\Windows\SysWOW64\msiexec.exe

File created: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\

Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe

File read: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\msiwrapper.ini

Jump to behavior

Source: C:\Windows\System32\msiexec.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: install.msi

ReversingLabs: Detection: 18%

Source: unknown	Process created: C:\Windows\System32\msiexec.exe "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\install.msi"
Source: unknown	Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding 2003FD93E0ADBEFC1EB843808504AFF5
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\icacls.exe "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\." /SETINTEGRITYLEVEL (CI)(OI)HIGH
Source: C:\Windows\SysWOW64\icacls.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\expand.exe "C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files
Source: C:\Windows\SysWOW64\expand.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe "C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe" /VERYSILENT /VERYSILENT
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding 2003FD93E0ADBEFC1EB843808504AFF5	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\icacls.exe "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\." /SETINTEGRITYLEVEL (CI)(OI)HIGH	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\expand.exe "C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe "C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe" /VERYSILENT /VERYSILENT	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: appidapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msihnd.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srclient.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: spp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: appidapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vcruntime140_1_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: cfgmgr32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: virtdisk.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: smartscreenps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: servicingcommon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: shdocvw.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\icacls.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: dpx.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: wdscore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: dbgcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Section loaded: fwpuclnt.dll	Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe

File written: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\msiwrapper.ini

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: install.msi

Static file information: File size 2064384 > 1048576

Source:

Binary string: C:\ss2\Projects\MsiWrapper\MsiCustomActions\Release\MsiCustomActions.pdb source: install.msi, MSI4000.tmp.1.dr, 7b3e2b.msi.1.dr

Source: 053799b4a77b3544aa6ba9cba740d547.tmp.7.dr	Static PE information: section name: .00cfg
Source: 053799b4a77b3544aa6ba9cba740d547.tmp.7.dr	Static PE information: section name: .voltbl

Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F51490 push eax; mov dword ptr [esp], ecx	9_2_00F51493
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_010D545A push ecx; ret	9_2_010D546D
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F57D50 push eax; mov dword ptr [esp], ecx	9_2_00F57D53
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_00F47FD6 push eax; iretd	9_2_00F47FDE

Source: 053799b4a77b3544aa6ba9cba740d547.tmp.7.dr

Static PE information: section name: .text entropy: 7.006123166298971

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI4000.tmp	Jump to dropped file
Source: C:\Windows\SysWOW64\expand.exe	File created: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe (copy)	Jump to dropped file
Source: C:\Windows\SysWOW64\expand.exe	File created: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\7145a5f98f114cfda252a2d82ba16369$dpx$.tmp\053799b4a77b3544aa6ba9cba740d547.tmp	Jump to dropped file

Source: C:\Windows\System32\msiexec.exe

File created: C:\Windows\Installer\MSI4000.tmp

Jump to dropped file

Source: C:\Windows\SysWOW64\msiexec.exe

Process created: C:\Windows\SysWOW64\icacls.exe "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\." /SETINTEGRITYLEVEL (CI)(OI)HIGH

Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Thread delayed: delay time: 600000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Thread delayed: delay time: 599984			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Window / User API: threadDelayed 554	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Window / User API: threadDelayed 891	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Window / User API: threadDelayed 7058	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Window / User API: threadDelayed 1123	Jump to behavior

Source: C:\Windows\System32\msiexec.exe

Dropped PE file which has not been started: C:\Windows\Installer\MSI4000.tmp

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe

API coverage: 6.4 %

Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe TID: 3440	Thread sleep count: 554 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe TID: 3440	Thread sleep time: -332400000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe TID: 3440	Thread sleep count: 891 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe TID: 3440	Thread sleep count: 197 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe TID: 3440	Thread sleep count: 7058 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe TID: 3440	Thread sleep time: -599984s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe TID: 3440	Thread sleep count: 1123 > 30	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Last function: Thread delayed

Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\expand.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Thread delayed: delay time: 600000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Thread delayed: delay time: 599984			Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\	Jump to behavior

Source: install.exe, 00000009.00000002.13118733625.000000000071F000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll5jU

Source: C:\Windows\System32\msiexec.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe

Code function: 9_2_010DCEAA IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

9_2_010DCEAA

Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_010E8C86 mov eax, dword ptr fs:[00000030h]	9_2_010E8C86
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_010E8C55 mov eax, dword ptr fs:[00000030h]	9_2_010E8C55
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_010DA698 mov eax, dword ptr fs:[00000030h]	9_2_010DA698

Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_010D4E8B SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		9_2_010D4E8B
Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe	Code function: 9_2_010DCEAA IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		9_2_010DCEAA

Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\icacls.exe "C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\." /SETINTEGRITYLEVEL (CI)(OI)HIGH	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\expand.exe "C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe "C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe" /VERYSILENT /VERYSILENT	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe

Code function: 9_2_010D5D8A GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

9_2_010D5D8A

Source: C:\Windows\SysWOW64\expand.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Replication Through Removable Media	Windows Management Instrumentation	1 Services File Permissions Weakness	11 Process Injection	2 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 Services File Permissions Weakness	21 Virtualization/Sandbox Evasion	LSASS Memory	11 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	11 Process Injection	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	21 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	3 Obfuscated Files or Information	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Services File Permissions Weakness	Cached Domain Credentials	11 Peripheral Device Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Software Packing	DCSync	3 File and Directory Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	14 System Information Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
install.msi	18%	ReversingLabs

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Windows\Installer\MSI4000.tmp	0%	ReversingLabs

Source	Detection	Scanner	Label	Link
https://auayomwkewcomwas.xyz:443/api/client_hello	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
auayomwkewcomwas.xyz	193.32.177.34	true	true	unknown
ggeymcaisciikucq.xyz	unknown	unknown	true	unknown
maoeeogmuauywsyu.xyz	unknown	unknown	true	unknown
esmcwycsgkmmkmie.xyz	unknown	unknown	true	unknown
miqcugomwgmygyoq.xyz	unknown	unknown	true	unknown
qweaumwmomesioio.xyz	unknown	unknown	true	unknown
yqyqgowkwqiggewq.xyz	unknown	unknown	true	unknown
smwcqasgeqikoqss.xyz	unknown	unknown	true	unknown
omasqkwqyskcagwi.xyz	unknown	unknown	true	unknown
oscegykuecgmiioq.xyz	unknown	unknown	true	unknown
oqaiyaoqwyeswaiy.xyz	unknown	unknown	true	unknown
gmciuwiycsqycggy.xyz	unknown	unknown	true	unknown
coayaokeissieqcc.xyz	unknown	unknown	true	unknown
qiyggmguowygeooc.xyz	unknown	unknown	true	unknown
caysswwugsmkeksw.xyz	unknown	unknown	true	unknown
yyimcoiwgckeakcm.xyz	unknown	unknown	true	unknown
oyogquqkmyqwwkuq.xyz	unknown	unknown	true	unknown
ywmgykycywqqewqw.xyz	unknown	unknown	true	unknown
uyeqwcuyimescesu.xyz	unknown	unknown	true	unknown
sauygqecsusickcu.xyz	unknown	unknown	true	unknown
ecgmcmqswickqcgi.xyz	unknown	unknown	true	unknown
uosaescwmkiyscay.xyz	unknown	unknown	true	unknown
kimakioiwmawksiw.xyz	unknown	unknown	true	unknown
ekqyosgcumkcecmo.xyz	unknown	unknown	true	unknown
uoeukcckqmmsuwaa.xyz	unknown	unknown	true	unknown
goicqsmskkygkkka.xyz	unknown	unknown	true	unknown
ucmwywoqciswaguc.xyz	unknown	unknown	true	unknown
kcwiywyygywkkysk.xyz	unknown	unknown	true	unknown
qigaaawumoqgmwck.xyz	unknown	unknown	true	unknown
uiicikumwwsmaeem.xyz	unknown	unknown	true	unknown
cygmqaagqcuusmiq.xyz	unknown	unknown	true	unknown
eigywisgeoiskekg.xyz	unknown	unknown	true	unknown
wggqoukyeokwgmoy.xyz	unknown	unknown	true	unknown
keykoekseemyiewq.xyz	unknown	unknown	true	unknown
ikuqcsooiucogaww.xyz	unknown	unknown	true	unknown
gcyciogqguooyici.xyz	unknown	unknown	true	unknown
aoyeoimcuuqakckw.xyz	unknown	unknown	true	unknown
smckcsaioceiyasu.xyz	unknown	unknown	true	unknown
wsmyawqeqguacwas.xyz	unknown	unknown	true	unknown
ymysimqoykwqeqiq.xyz	unknown	unknown	true	unknown
qimmkmaumumswocw.xyz	unknown	unknown	true	unknown
skyiqyaeoykwcgiw.xyz	unknown	unknown	true	unknown
gmqeqkcqackwkgao.xyz	unknown	unknown	true	unknown
skiwkmaaeeiqqgee.xyz	unknown	unknown	true	unknown
cyqqgacqkowwkqqe.xyz	unknown	unknown	true	unknown
qigcqiaomwieqwka.xyz	unknown	unknown	true	unknown
oywgqkusocouysua.xyz	unknown	unknown	true	unknown
ukwgsimcamwqcqus.xyz	unknown	unknown	true	unknown
ukmcqucewskcqygg.xyz	unknown	unknown	true	unknown
wgcaouuqqqwucogy.xyz	unknown	unknown	true	unknown
moiimkscmiswaesw.xyz	unknown	unknown	true	unknown
uwagocmgakuuykiu.xyz	unknown	unknown	true	unknown
ieqeeiggkuqcomyo.xyz	unknown	unknown	true	unknown
wgssaogcsscmkswu.xyz	unknown	unknown	true	unknown
ygucsucmagwqsqcu.xyz	unknown	unknown	true	unknown
aiiqyyikowqaygwy.xyz	unknown	unknown	true	unknown
gwuaqqsyegywuaya.xyz	unknown	unknown	true	unknown
skawoueawceoywsy.xyz	unknown	unknown	true	unknown
yyaqueaqcsokisee.xyz	unknown	unknown	true	unknown
osyawgmkggwwaise.xyz	unknown	unknown	true	unknown
mskmgwkuiamqikce.xyz	unknown	unknown	true	unknown
issaesuceymoyccq.xyz	unknown	unknown	true	unknown
cskowwiekeqaakki.xyz	unknown	unknown	true	unknown
mueuwcqsioowsmce.xyz	unknown	unknown	true	unknown
ssmkyomikukusksu.xyz	unknown	unknown	true	unknown
couqoiaioicsmiyi.xyz	unknown	unknown	true	unknown
aoeewogkicikusoc.xyz	unknown	unknown	true	unknown
qcwaiaiqiwcakawa.xyz	unknown	unknown	true	unknown
ywcwqgmikmycwoeu.xyz	unknown	unknown	true	unknown
waucsgsqqsqkacog.xyz	unknown	unknown	true	unknown
ssiooaeoaocuyaow.xyz	unknown	unknown	true	unknown
micemismikicsccc.xyz	unknown	unknown	true	unknown
gwoyamckoqoaauoq.xyz	unknown	unknown	true	unknown
wiuyuwqiqkkogmoe.xyz	unknown	unknown	true	unknown
keosqeosukqcooco.xyz	unknown	unknown	true	unknown
oyewqwkusieeoqey.xyz	unknown	unknown	true	unknown
suogmuweyqgoqkgk.xyz	unknown	unknown	true	unknown
qiqueqokwqqgwwci.xyz	unknown	unknown	true	unknown
mmiugosumuqmuqoc.xyz	unknown	unknown	true	unknown
keguuyioweymiaws.xyz	unknown	unknown	true	unknown
uiaqcykmqwcwgmeg.xyz	unknown	unknown	true	unknown
uowkoqwgqqeweume.xyz	unknown	unknown	true	unknown
guowewgekuoqacyy.xyz	unknown	unknown	true	unknown
oyyagswauqyckoye.xyz	unknown	unknown	true	unknown
coyikkwmyomyykmo.xyz	unknown	unknown	true	unknown
qiswokuokugiooky.xyz	unknown	unknown	true	unknown
moysoauykmieesas.xyz	unknown	unknown	true	unknown
kkqgkiqaiegyuuac.xyz	unknown	unknown	true	unknown
caceukeeygaaqaec.xyz	unknown	unknown	true	unknown
keqgamuiascccwou.xyz	unknown	unknown	true	unknown
keckssemmeoqieqe.xyz	unknown	unknown	true	unknown
ymmoqwiyeomigemu.xyz	unknown	unknown	true	unknown
kcoiygiwuyqyaoku.xyz	unknown	unknown	true	unknown
kewgquswkewgaweo.xyz	unknown	unknown	true	unknown
mayykkuyeuiggyws.xyz	unknown	unknown	true	unknown
awoiesggoyaqumsc.xyz	unknown	unknown	true	unknown
uwskygguegqkasme.xyz	unknown	unknown	true	unknown
akasikewaomyiwqk.xyz	unknown	unknown	true	unknown
aweqoooqomueeiwi.xyz	unknown	unknown	true	unknown
skqsqowayeqesqqk.xyz	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://auayomwkewcomwas.xyz:443/api/client_hello	false	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
193.32.177.34	auayomwkewcomwas.xyz	Russian Federation		40676	AS40676US	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1586671
Start date and time:	2025-01-09 13:43:24 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 11 23H2 with Office Professional Plus 2021, Chrome 131, Firefox 133, Adobe Reader DC 24, Java 8 Update 431, 7zip 24.09
Run name:	Potential for more IOCs and behavior
Number of analysed new started processes analysed:	24
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	install.msi
Detection:	MAL
Classification:	mal68.troj.winMSI@12/12@778/1
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .msi Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, SIHClient.exe, appidcertstorecheck.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.56.254.164, 20.109.210.53, 40.126.32.138
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, x1.c.lencr.org, slscr.update.microsoft.com, login.live.com, ctldl.windowsupdate.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: install.msi

Simulations

Behavior and APIs

Time	Type	Description
07:45:03	API Interceptor	978076x Sleep call for process: install.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
193.32.177.34	EwpsQzeky5.msi	Get hash	malicious	Unknown	Browse	kuywuskkgqsigqqs.xyz:443/api/client_hello
	CH2emxsgb7.msi	Get hash	malicious	Unknown	Browse	uoigsiqmemcscosu.xyz:443/api/client_hello
	MJhe4xWsnR.msi	Get hash	malicious	Unknown	Browse	uoigsiqmemcscosu.xyz:443/api/client_hello
	Bp4LoSXw83.lnk	Get hash	malicious	Unknown	Browse	uoigsiqmemcscosu.xyz:443/api/client_hello

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AS40676US	download.ps1	Get hash	malicious	Unknown	Browse	45.61.136.138
	download.ps1	Get hash	malicious	Unknown	Browse	45.61.136.138
	5.elf	Get hash	malicious	Unknown	Browse	104.149.140.73
	download.ps1	Get hash	malicious	Unknown	Browse	45.61.136.138
	download.ps1	Get hash	malicious	Unknown	Browse	45.61.136.138
	download.ps1	Get hash	malicious	Unknown	Browse	45.61.136.138
	download.ps1	Get hash	malicious	Unknown	Browse	45.61.136.138
	download.ps1	Get hash	malicious	Unknown	Browse	45.61.136.138

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Windows\Installer\MSI4000.tmp	EwpsQzeky5.msi	Get hash	malicious	Unknown	Browse
	EwpsQzeky5.msi	Get hash	malicious	Unknown	Browse
	CH2emxsgb7.msi	Get hash	malicious	Unknown	Browse
	MJhe4xWsnR.msi	Get hash	malicious	Unknown	Browse
	CH2emxsgb7.msi	Get hash	malicious	Unknown	Browse
	MJhe4xWsnR.msi	Get hash	malicious	Unknown	Browse
	Bp4LoSXw83.lnk	Get hash	malicious	Unknown	Browse
	510286.msi	Get hash	malicious	Unknown	Browse
	33abb.msi	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files.cab

Download File

Process:	C:\Windows\SysWOW64\msiexec.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 1738270 bytes, 1 file, at 0x2c +A "install.exe", ID 8962, number 1, 20880 datablocks, 0x1503 compression
Category:	dropped
Size (bytes):	1738270
Entropy (8bit):	5.612276783740066
Encrypted:	false
SSDEEP:	24576:r7VZTi1RldQkwadtGaxft3UbV7mqppdqw:rHTi1zmkltRt3UB7meB
MD5:	7778A5CC3C274DDA5D7C573CFEBEE3AC
SHA1:	F5EB3956FF0C123448DF56FBE42739DBF9E9DF1D
SHA-256:	1F9FC4ECA2984469990FC56AE03BE40908A8F4A603C7120FBE0AAB895AF79CB5
SHA-512:	D6EF98CF141FCB48156533DB6EC7CD202801CAC6FAB52F3CF3364D1B3BE267BECE05ECD17A58BC351D9BFF880A3323862E360C95E77188597C6F3C26A16A1134
Malicious:	false
Reputation:	low
Preview:	MSCF............,................#..H....Q.....(......(Z.4 .install.exe..ll.>..[...6 .m.....5!.P..lN.0...j...(]=.p.n.J..^...0.......S;{...l...t..a...xmC..UU......?..{{.l...7.7..m..-.n-..%9....y+.9...y.g..{...8.}.O.0.6.x..+..Yt...G#E(b..0.#E.ub.I..P...$l.$]..l$.J'ub..Y..............#..s........{..k..Z.g[...].>Y.Z.%U.$...#.D.....{........^.....D...pVpr..V........7..8._.=ti.c.......x..~.T..=.~n.J...C.E..p.\|..x.........r...>9.8=...G...T..._./pO1...3.wB.....^.L/..f.m..7.....&...w... ^.][.o.8...GY......~Z....omg!S2x....y...0Z..m..6.<I..3&H5W.....a.6.'....`.!.\.j[m...+m.....v^C.......O...wQ6.a.R.M33At..e.S<.,....x...._.).%A.M...P..XN..+..l.[._=..->.g..{x..5v:.9..q.."..y.._..G.2d..Y._2o..g.u:qd.:...M..\|.-..U.Q.(..k...N......?t..q...H..}lpD..%...8.bO$Z..&.:...>..j....J .......fI.,...E'.?&.].(1E.f'...q]PeY..N.V?8..N..2]1x.......0.`.......(........D...J,.......^"....k+?....`C....6b.Z.......&.G..[0..gL...2i...-.x...g....Z.D*.&......4x..t.S.4.....w.C5j..M;..

C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\7145a5f98f114cfda252a2d82ba16369$dpx$.tmp\053799b4a77b3544aa6ba9cba740d547.tmp

Download File

Process:	C:\Windows\SysWOW64\expand.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	684188672
Entropy (8bit):	0.054240732561698174
Encrypted:	false
SSDEEP:
MD5:	6E3F4D8C1D0D90D8346DFF0051B96D33
SHA1:	A83D70D040B4DC15ADAFDF8EAC43B5C971B6AE99
SHA-256:	85A2EA7607C9782B12F75B6E5BF91EF542FBFA4D6E7F626190A7B8248F96F7F4
SHA-512:	298DB1E4DC2E1DAD23EECC362728C95FD5B13EB2F62000178AB7978069F1E1C719FC4202B7D09BCD2A94248184EEE621D45F1B9110840990BFFA0E8D2365B14C
Malicious:	false
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....~g.................6...4......5]............@..........................p'......X.(..@.....................................x.............................&.p................................... }...............................................text....5.......6.................. ..`.rdata...)...P...*...:..............@..@.data............>...d..............@....00cfg.......`......................@..@.tls.........p......................@....voltbl.,................................rsrc...............................@..@.reloc..p.....&.......%.............@..B........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe (copy)

Download File

Process:	C:\Windows\SysWOW64\expand.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	684188672
Entropy (8bit):	0.054240732561698174
Encrypted:	false
SSDEEP:
MD5:	6E3F4D8C1D0D90D8346DFF0051B96D33
SHA1:	A83D70D040B4DC15ADAFDF8EAC43B5C971B6AE99
SHA-256:	85A2EA7607C9782B12F75B6E5BF91EF542FBFA4D6E7F626190A7B8248F96F7F4
SHA-512:	298DB1E4DC2E1DAD23EECC362728C95FD5B13EB2F62000178AB7978069F1E1C719FC4202B7D09BCD2A94248184EEE621D45F1B9110840990BFFA0E8D2365B14C
Malicious:	false
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....~g.................6...4......5]............@..........................p'......X.(..@.....................................x.............................&.p................................... }...............................................text....5.......6.................. ..`.rdata...)...P...*...:..............@..@.data............>...d..............@....00cfg.......`......................@..@.tls.........p......................@....voltbl.,................................rsrc...............................@..@.reloc..p.....&.......%.............@..B........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\msiwrapper.ini

Download File

Process:	C:\Windows\SysWOW64\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	1486
Entropy (8bit):	3.686969293677802
Encrypted:	false
SSDEEP:	24:+dv8DW8XjsjpR3GfP7jSpZESrFEkz1ikz12VyJkz12VQ8GOl7tdq3/Ucl:+AglRUPHSpZJFEkz1ikz12Vykz126OCX
MD5:	5A49D1E1DE1BA460754E73427C10D4B9
SHA1:	2656F1A790A006972BE697BFDFA87180EF492E56
SHA-256:	D26BDB09694606E4FF4F97A93385032943FDEBCFAEE4C957442C124C4A47BBE7
SHA-512:	E315EB33892A2132AD9763D0704CDE3E71A3E1668FA0F1549214744597E9F6FD4CC352BC9E3EA3642C64978CF883C38F7819E4141DAEA76459770341A6A0FC84
Malicious:	false
Preview:	W.r.a.p.p.e.d.A.p.p.l.i.c.a.t.i.o.n.I.d.=.M.i.c.r.o.s.o.f.t. .E.d.g.e...W.r.a.p.p.e.d.R.e.g.i.s.t.r.a.t.i.o.n.=.N.o.n.e...I.n.s.t.a.l.l.S.u.c.c.e.s.s.C.o.d.e.s.=.0...E.l.e.v.a.t.i.o.n.M.o.d.e.=.n.e.v.e.r...B.a.s.e.N.a.m.e.=.i.n.s.t.a.l.l...e.x.e...C.a.b.H.a.s.h.=.1.f.9.f.c.4.e.c.a.2.9.8.4.4.6.9.9.9.0.f.c.5.6.a.e.0.3.b.e.4.0.9.0.8.a.8.f.4.a.6.0.3.c.7.1.2.0.f.b.e.0.a.a.b.8.9.5.a.f.7.9.c.b.5...S.e.t.u.p.P.a.r.a.m.e.t.e.r.s.=./.V.E.R.Y.S.I.L.E.N.T. . ./.V.E.R.Y.S.I.L.E.N.T. ...W.o.r.k.i.n.g.D.i.r.=...C.u.r.r.e.n.t.D.i.r.=..S.O.U.R.C.E.D.I.R....U.I.L.e.v.e.l.=.5...F.o.c.u.s.=.y.e.s...S.e.s.s.i.o.n.D.i.r.=.C.:.\.U.s.e.r.s.\.M.a.o.g.a.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.M.W.-.3.2.8.d.9.c.0.d.-.b.9.8.5.-.4.d.e.f.-.8.0.a.c.-.c.c.6.c.2.c.7.d.e.1.2.c.\...F.i.l.e.s.D.i.r.=.C.:.\.U.s.e.r.s.\.M.a.o.g.a.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.M.W.-.3.2.8.d.9.c.0.d.-.b.9.8.5.-.4.d.e.f.-.8.0.a.c.-.c.c.6.c.2.c.7.d.e.1.2.c.\.f.i.l.e.s.\...R.u.n.B.e.f.o.r.e.I.n.s.t.a.l.l.F.i.l.e.=...R.u.n.B.e.f.o.r.

C:\Windows\Installer\7b3e2b.msi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Microsoft Edge 131.0.2903.112, Subject: Microsoft Edge, Author: Microsoft Corporation, Keywords: Installer, Template: Intel;1033, Revision Number: {D351D4BA-601A-46F9-B65D-B792D968A912}, Create Time/Date: Thu Jan 11 14:59:44 2024, Last Saved Time/Date: Thu Jan 11 14:59:44 2024, Number of Pages: 200, Number of Words: 12, Name of Creating Application: MSI Wrapper (11.0.53.0), Security: 2
Category:	dropped
Size (bytes):	2064384
Entropy (8bit):	5.850792642727805
Encrypted:	false
SSDEEP:	24576:Wt9cpVDhf6x7VZTi1RldQkwadtGaxft3UbV7mqppdq:ZpRhSxHTi1zmkltRt3UB7me
MD5:	872CB99A4886350AA57B1C40BBA29B1C
SHA1:	03925FDC09E06C16BBFCCE695029162DB49FCF22
SHA-256:	E16BAA228AB77485F38B335510270943AB54DF755BF72987AC229D819BB85401
SHA-512:	5C29B738C8132352291FC778B50E7E1EB4F31199A506019D7A39A71517F2AE0C7DB94302CF66901AF7B0F8EAC8519B355233DD295458E521FDE49948962693D0
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI4000.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	212992
Entropy (8bit):	6.513409725320959
Encrypted:	false
SSDEEP:	3072:xspAtOdmXwCGjtYNKbYO2gjpcm8rRuqpjCL42loHUvU0yGxr5GqM2a8:jtOdiRQYpgjpjew5DHyGxcqo8
MD5:	0C8921BBCC37C6EFD34FAF44CF3B0CB5
SHA1:	DCFA71246157EDCD09EECAF9D4C5E360B24B3E49
SHA-256:	FD622CF73EA951A6DE631063ABA856487D77745DD1500ADCA61902B8DDE56FE1
SHA-512:	ED55443E20D40CCA90596F0A0542FA5AB83FE0270399ADFAAFD172987FB813DFD44EC0DA0A58C096AF3641003F830341FE259AD5BCE9823F238AE63B7E11E108
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: EwpsQzeky5.msi, Detection: malicious, Browse Filename: EwpsQzeky5.msi, Detection: malicious, Browse Filename: CH2emxsgb7.msi, Detection: malicious, Browse Filename: MJhe4xWsnR.msi, Detection: malicious, Browse Filename: CH2emxsgb7.msi, Detection: malicious, Browse Filename: MJhe4xWsnR.msi, Detection: malicious, Browse Filename: Bp4LoSXw83.lnk, Detection: malicious, Browse Filename: 510286.msi, Detection: malicious, Browse Filename: 33abb.msi, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$............p...p...p.......p.....p..../.p.......p...q.%.p.......p.....p.....p.Rich..p.........................PE..L...Y..e...........!.....h..........K................................................]....@.........................P...]............P.......................`.....................................p...@...............t............................text....f.......h.................. ..`.rdata...............l..............@..@.data....5..........................@....rsrc........P......................@..@.reloc...)...`...*..................@..B........................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\SourceHash{A4B71BFF-7E39-497F-811D-B224EDF412D9}

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.7683399222402267
Encrypted:	false
SSDEEP:	12:JSbX72Fj8YSAGiLIlHVRpY5h/7777777777777777777777777vDHFKZfrMY5nYP:JLSQI5eAZDMYnF
MD5:	F97D198C3422AE6D027043223B797374
SHA1:	85B7A464922A9BA89FA4616B91F8C5F010E95279
SHA-256:	7C291A53977A67AE73663A62B5DAEE5E5B1C8163F4C6C96D9CA17CD4640EF6E0
SHA-512:	28FF20DD1722D94664E9DFE7C9CEB2634E92D809B1E038428B7557B6003F0578D1B4EA7218A52B884770289E17376D4A10D2617F2FE81DE4048DE2DE1C3B3607
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\inprogressinstallinfo.ipi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.2091789635150096
Encrypted:	false
SSDEEP:	48:qMmQuqPveFXJfT5Z8t3ddS+ubFrk2ddSBJkrLYp:8Qa3Tv8t/Ta28qJiYp
MD5:	F4AD78B0551ED1ABC91A3452A9A94840
SHA1:	03BA31E31078EDCC39DCBC39B0952D346C928506
SHA-256:	9DB7B829736CADFDBF4ED063E6C07A53EF84B66B768AFF83765C3E472153438C
SHA-512:	913919C28D2A5125851C65F5CCC1FC311423B2F3E17E61BF7042E6E12E8E4846B5AC086E4D1BEFFA698B36CC35CA2BB7F835DEA97B11447A1539388F8487C341
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	455581
Entropy (8bit):	5.381755087807609
Encrypted:	false
SSDEEP:	3072:CpI1rhwukl2UFY+ikDR9KjVWHq+BqLBOhajc9ijF2JtsxcBS1J3BM0Aa+iVbweb5:DKboSBu
MD5:	EDB7AB6398CF3BB8A9AFC8299361111D
SHA1:	16165A4390115579F4019FB95B05B85B6A886104
SHA-256:	58D87BA465B8CF5CEBE3CFE0FAF3221DEC9CDC0FCAD82FA1B999ED4AD54B016E
SHA-512:	2A029CFB1916EC8EA9039346C6A61C2B58987B7EFABD3612B5BE0AFC57907CE995AEC03E13E4DFF8CEE89D1ACAE47DF9D3F89EF2A693C1FDDFDBF37E721F4513
Malicious:	false
Preview:	.To learn about increasing the verbosity of the NGen log files please see http://go.microsoft.com/fwlink/?linkid=210113..05/07/2022 07:40:26.485 [3724]: Command line: D:\wd\compilerTemp\BMT.ijbjbjy2.cay\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe executeQueuedItems /nologo ..05/07/2022 07:40:26.516 [3724]: Executing command from offline queue: install "System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil" /NoDependencies /queue:1..05/07/2022 07:40:26.547 [3724]: Executing command from offline queue: install "System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil" /NoDependencies /queue:3..05/07/2022 07:40:26.547 [3724]: Exclusion list entry found for System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil; it will not be installed..05/07/2022 07:40:26.547 [

C:\Windows\SystemTemp\~DF60CB8EE2A0627B6D.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.0698499475558139
Encrypted:	false
SSDEEP:	6:2/9LG7iVCnLG7iVrKOzPLHKOUBQMfrMYJ7Zu8kqVky6lf1:2F0i8n0itFzDHFKZfrMY5n2d
MD5:	39715F6375FFE6306CC14D94BD33D0E0
SHA1:	A9078B7BE946822001F982D1BBE1F6D407AECA52
SHA-256:	B27BEEFB2A660EFF595AFA5229A169E2804E7D950987324856EB8216FDD2892A
SHA-512:	70D13A1B754537ACC0F86497AA6FE8FDC04FD318BCC4EECB48159E40AA7B6A29A6C99216B95CD80EEA642E39D9AA20870C42CFAFAC291B2D7AB5E1D67CEFA32B
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SystemTemp\~DF6B3FA32A3F368F13.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	81920
Entropy (8bit):	0.1033723639876206
Encrypted:	false
SSDEEP:	24:yg8dAYVMJfAebfddipV7JWddipVguVJWwGolrkg9SXPw+F41:QA4MrfddSBJWddS+ubFrkIX1
MD5:	C33183BE26A5F6CF880AF0E43FD4CBD4
SHA1:	6DD497970D1759666A904BB606BC4FB1FAE468BA
SHA-256:	022ADC4559308B217E626F0FA3C9CB3A6E77CC77AD13A0FDF01169E995C18016
SHA-512:	20554E5E2D64638848FF3985F3AB7878AA710B62CB27642B0BA1B1A7B7EB1BD5D9B369A79AFFE2A16CB6BBE18AD4AA628582ADD8AB2BF51E7744DB68F20A3704
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

\Device\ConDrv

Download File

Process:	C:\Windows\SysWOW64\expand.exe
File Type:	ASCII text, with very long lines (858), with CRLF, CR, LF line terminators, with overstriking
Category:	dropped
Size (bytes):	1059
Entropy (8bit):	3.5899925710561873
Encrypted:	false
SSDEEP:	12:zK/0HtBFNEiQDdXXXXXXXXXXXXXXXXeDYJQn:zKcNDlQDdXXXXXXXXXXXXXXXXeDYJQn
MD5:	0F44F9CCC15A5635E8C2A8DAAA943F8E
SHA1:	2AC171BF454C303A9935F2F901B911938BC9FA92
SHA-256:	1E15FBA400DE4805B24315FFCA4CA417D8C2391301A1FB0A85797183F53F58DD
SHA-512:	4872625252895AB5DB1DEB5884B82FF3AFBFFE99A88602BCCD177E2FAD7DED8C464D91C1A8331B09BEFCCE23826B519DE3313F456B4F25B7DFBB68B965D70B0F
Malicious:	false
Preview:	Microsoft (R) File Expansion Utility..Copyright (c) Microsoft Corporation. All rights reserved.....Adding files\install.exe to Extraction Queue....Expanding Files ......Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files..........................Progress: 0 out of 1 files.........................

Static File Info

General

File type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Microsoft Edge 131.0.2903.112, Subject: Microsoft Edge, Author: Microsoft Corporation, Keywords: Installer, Template: Intel;1033, Revision Number: {D351D4BA-601A-46F9-B65D-B792D968A912}, Create Time/Date: Thu Jan 11 14:59:44 2024, Last Saved Time/Date: Thu Jan 11 14:59:44 2024, Number of Pages: 200, Number of Words: 12, Name of Creating Application: MSI Wrapper (11.0.53.0), Security: 2
Entropy (8bit):	5.850792642727805
TrID:	Generic OLE2 / Multistream Compound File (8008/1) 100.00%
File name:	install.msi
File size:	2'064'384 bytes
MD5:	872cb99a4886350aa57b1c40bba29b1c
SHA1:	03925fdc09e06c16bbfcce695029162db49fcf22
SHA256:	e16baa228ab77485f38b335510270943ab54df755bf72987ac229d819bb85401
SHA512:	5c29b738c8132352291fc778b50e7e1eb4f31199a506019d7a39a71517f2ae0c7db94302cf66901af7b0f8eac8519b355233dd295458e521fde49948962693d0
SSDEEP:	24576:Wt9cpVDhf6x7VZTi1RldQkwadtGaxft3UbV7mqppdq:ZpRhSxHTi1zmkltRt3UB7me
TLSH:	B4A589C13785C127E85B09314E67C7999759FDA0AE30B08737A0FB6E5B3AAD39E24701
File Content Preview:	........................>......................................................................................................................................................................................................................................

File Icon


Icon Hash:	bdb5fdd8b3b39b1f

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 9, 2025 13:45:08.704271078 CET	49743	443	192.168.2.24	193.32.177.34
Jan 9, 2025 13:45:08.704370022 CET	443	49743	193.32.177.34	192.168.2.24
Jan 9, 2025 13:45:08.704462051 CET	49743	443	192.168.2.24	193.32.177.34
Jan 9, 2025 13:45:08.705332994 CET	49743	443	192.168.2.24	193.32.177.34
Jan 9, 2025 13:45:08.705363989 CET	443	49743	193.32.177.34	192.168.2.24
Jan 9, 2025 13:45:08.705429077 CET	443	49743	193.32.177.34	192.168.2.24
Jan 9, 2025 13:45:08.724035025 CET	60494	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:08.728996992 CET	53	60494	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:08.729091883 CET	60494	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:08.729166985 CET	60494	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:08.733979940 CET	53	60494	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:09.196826935 CET	53	60494	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:09.196966887 CET	60494	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:09.202002048 CET	53	60494	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:09.202085018 CET	60494	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:09.215081930 CET	62821	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:09.219996929 CET	53	62821	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:09.220067978 CET	62821	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:09.220156908 CET	62821	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:09.224941015 CET	53	62821	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:09.686343908 CET	53	62821	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:09.686635971 CET	62821	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:09.691700935 CET	53	62821	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:09.691756010 CET	62821	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:09.722728014 CET	53805	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:09.727684021 CET	53	53805	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:09.727782965 CET	53805	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:09.727832079 CET	53805	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:09.732624054 CET	53	53805	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:10.178913116 CET	53	53805	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:10.184967041 CET	53805	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:10.190000057 CET	53	53805	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:10.192707062 CET	53805	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:10.246500015 CET	54522	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:10.251532078 CET	53	54522	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:10.251616955 CET	54522	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:10.251662016 CET	54522	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:10.256535053 CET	53	54522	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:10.699840069 CET	53	54522	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:10.700126886 CET	54522	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:10.705549002 CET	53	54522	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:10.705616951 CET	54522	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:10.707787037 CET	54961	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:10.712728024 CET	53	54961	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:10.712805033 CET	54961	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:10.712862968 CET	54961	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:10.717717886 CET	53	54961	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:11.174108028 CET	53	54961	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:11.174454927 CET	54961	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:11.179512978 CET	53	54961	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:11.179601908 CET	54961	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:11.193157911 CET	62652	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:11.198023081 CET	53	62652	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:11.198201895 CET	62652	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:11.199229002 CET	62652	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:11.204003096 CET	53	62652	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:11.646610975 CET	53	62652	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:11.646739960 CET	62652	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:11.651864052 CET	53	62652	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:11.651916027 CET	62652	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:11.664226055 CET	65104	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:11.669199944 CET	53	65104	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:11.669269085 CET	65104	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:11.669367075 CET	65104	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:11.674150944 CET	53	65104	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:12.158986092 CET	53	65104	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:12.159496069 CET	65104	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:12.164637089 CET	53	65104	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:12.164716005 CET	65104	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:12.217009068 CET	59921	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:12.221834898 CET	53	59921	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:12.221904993 CET	59921	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:12.221951962 CET	59921	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:12.226701021 CET	53	59921	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:12.698817015 CET	53	59921	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:12.699029922 CET	59921	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:12.704375029 CET	53	59921	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:12.704448938 CET	59921	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:12.716677904 CET	52587	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:12.721611977 CET	53	52587	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:12.721719027 CET	52587	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:12.721806049 CET	52587	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:12.726710081 CET	53	52587	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:13.181252956 CET	53	52587	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:13.181477070 CET	52587	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:13.187021971 CET	53	52587	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:13.187089920 CET	52587	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:13.238547087 CET	57942	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:13.243540049 CET	53	57942	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:13.243657112 CET	57942	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:13.243700027 CET	57942	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:13.248579025 CET	53	57942	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:13.715909004 CET	53	57942	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:13.716157913 CET	57942	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:13.721232891 CET	53	57942	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:13.721288919 CET	57942	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:13.724720001 CET	62948	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:13.729581118 CET	53	62948	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:13.729672909 CET	62948	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:13.729775906 CET	62948	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:13.734522104 CET	53	62948	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:14.199167967 CET	53	62948	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:14.213906050 CET	62948	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:14.219158888 CET	53	62948	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:14.219211102 CET	62948	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:14.290498018 CET	61672	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:14.295367002 CET	53	61672	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:14.295423031 CET	61672	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:14.295471907 CET	61672	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:14.300365925 CET	53	61672	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:14.756175041 CET	53	61672	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:14.756387949 CET	61672	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:14.761399031 CET	53	61672	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:14.761466026 CET	61672	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:14.773782015 CET	56758	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:14.778626919 CET	53	56758	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:14.778748989 CET	56758	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:14.778748989 CET	56758	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:14.783591986 CET	53	56758	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:15.240633965 CET	53	56758	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:15.240838051 CET	56758	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:15.245907068 CET	53	56758	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:15.245954037 CET	56758	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:15.316251040 CET	57293	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:15.321142912 CET	53	57293	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:15.321244955 CET	57293	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:15.321285963 CET	57293	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:15.326183081 CET	53	57293	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:15.795192957 CET	53	57293	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:15.795456886 CET	57293	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:15.801306009 CET	53	57293	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:15.801393986 CET	57293	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:15.803535938 CET	55458	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:15.809011936 CET	53	55458	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:15.809088945 CET	55458	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:15.809139013 CET	55458	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:15.815177917 CET	53	55458	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:16.266978025 CET	53	55458	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:16.267163992 CET	55458	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:16.272265911 CET	53	55458	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:16.272331953 CET	55458	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:16.295177937 CET	53284	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:16.301008940 CET	53	53284	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:16.301095009 CET	53284	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:16.301139116 CET	53284	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:16.306421995 CET	53	53284	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:16.757101059 CET	53	53284	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:16.757272005 CET	53284	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:16.762382984 CET	53	53284	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:16.762451887 CET	53284	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:16.779243946 CET	56667	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:16.784181118 CET	53	56667	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:16.784298897 CET	56667	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:16.784341097 CET	56667	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:16.789170980 CET	53	56667	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:17.233314037 CET	53	56667	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:17.233606100 CET	56667	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:17.238643885 CET	53	56667	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:17.238708019 CET	56667	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:17.242131948 CET	55665	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:17.246938944 CET	53	55665	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:17.247045994 CET	55665	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:17.247078896 CET	55665	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:17.251863956 CET	53	55665	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:17.725900888 CET	53	55665	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:17.726174116 CET	55665	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:17.731339931 CET	53	55665	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:17.731412888 CET	55665	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:17.744012117 CET	57281	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:17.748969078 CET	53	57281	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:17.749054909 CET	57281	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:17.749079943 CET	57281	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:17.754003048 CET	53	57281	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:18.280015945 CET	53	57281	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:18.280258894 CET	57281	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:18.286183119 CET	53	57281	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:18.286248922 CET	57281	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:18.338531971 CET	61241	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:18.343496084 CET	53	61241	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:18.343592882 CET	61241	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:18.343838930 CET	61241	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:18.348578930 CET	53	61241	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:18.823102951 CET	53	61241	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:18.823285103 CET	61241	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:18.828490019 CET	53	61241	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:18.828560114 CET	61241	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:18.850918055 CET	58141	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:18.855869055 CET	53	58141	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:18.855952978 CET	58141	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:18.855981112 CET	58141	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:18.860759020 CET	53	58141	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:19.313457966 CET	53	58141	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:19.313679934 CET	58141	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:19.318839073 CET	53	58141	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:19.318958044 CET	58141	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:19.351027966 CET	57759	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:19.355937004 CET	53	57759	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:19.356173038 CET	57759	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:19.356173038 CET	57759	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:19.361264944 CET	53	57759	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:19.820935011 CET	53	57759	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:19.821106911 CET	57759	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:19.827435017 CET	53	57759	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:19.827657938 CET	57759	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:19.849122047 CET	57423	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:19.855372906 CET	53	57423	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:19.855452061 CET	57423	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:19.855494976 CET	57423	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:19.860419035 CET	53	57423	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:20.314428091 CET	53	57423	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:20.314702988 CET	57423	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:20.319770098 CET	53	57423	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:20.319854021 CET	57423	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:20.322149992 CET	56108	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:20.326947927 CET	53	56108	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:20.327018023 CET	56108	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:20.327053070 CET	56108	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:20.331773043 CET	53	56108	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:20.789303064 CET	53	56108	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:20.789606094 CET	56108	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:20.794733047 CET	53	56108	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:20.794796944 CET	56108	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:20.832901001 CET	55958	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:20.837768078 CET	53	55958	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:20.837852955 CET	55958	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:20.837897062 CET	55958	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:20.842694998 CET	53	55958	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:21.293540001 CET	53	55958	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:21.293762922 CET	55958	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:21.298794985 CET	53	55958	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:21.298860073 CET	55958	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:21.356586933 CET	59368	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:21.361471891 CET	53	59368	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:21.361561060 CET	59368	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:21.361603975 CET	59368	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:21.366427898 CET	53	59368	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:21.830296993 CET	53	59368	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:21.830688000 CET	59368	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:21.835764885 CET	53	59368	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:21.835870981 CET	59368	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:21.872836113 CET	60498	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:21.877621889 CET	53	60498	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:21.877727032 CET	60498	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:21.877791882 CET	60498	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:21.882519007 CET	53	60498	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:22.342233896 CET	53	60498	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:22.342639923 CET	60498	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:22.347671032 CET	53	60498	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:22.347752094 CET	60498	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:22.409488916 CET	50052	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:22.414289951 CET	53	50052	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:22.414381981 CET	50052	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:22.414421082 CET	50052	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:22.419181108 CET	53	50052	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:22.869381905 CET	53	50052	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:22.869566917 CET	50052	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:22.875370026 CET	53	50052	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:22.875430107 CET	50052	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:22.877645016 CET	55281	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:22.882900000 CET	53	55281	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:22.883104086 CET	55281	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:22.883105040 CET	55281	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:22.887990952 CET	53	55281	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.356900930 CET	53	55281	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.357104063 CET	55281	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.362091064 CET	53	55281	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.362292051 CET	55281	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.443324089 CET	49562	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.448208094 CET	53	49562	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.448401928 CET	49562	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.448401928 CET	49562	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.453324080 CET	53	49562	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.907682896 CET	53	49562	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.907875061 CET	49562	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.912911892 CET	53	49562	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.912981033 CET	49562	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.956877947 CET	61793	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.961779118 CET	53	61793	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.961848021 CET	61793	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.961889029 CET	61793	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.966612101 CET	53	61793	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:24.429311037 CET	53	61793	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:24.429550886 CET	61793	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:24.434592962 CET	53	61793	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:24.434670925 CET	61793	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:24.476322889 CET	52376	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:24.481204033 CET	53	52376	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:24.481276989 CET	52376	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:24.481298923 CET	52376	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:24.486074924 CET	53	52376	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:24.931003094 CET	53	52376	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:24.931296110 CET	52376	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:24.936336994 CET	53	52376	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:24.936408997 CET	52376	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:24.938757896 CET	59534	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:24.943623066 CET	53	59534	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:24.943698883 CET	59534	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:24.943759918 CET	59534	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:24.948527098 CET	53	59534	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:25.414484978 CET	53	59534	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:25.421725035 CET	59534	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:25.427100897 CET	53	59534	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:25.427179098 CET	59534	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:25.487997055 CET	55431	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:25.493083954 CET	53	55431	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:25.493174076 CET	55431	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:25.493237019 CET	55431	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:25.498065948 CET	53	55431	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:25.952877045 CET	53	55431	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:25.953320980 CET	55431	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:25.959291935 CET	53	55431	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:25.959363937 CET	55431	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:25.972575903 CET	49978	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:25.977552891 CET	53	49978	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:25.977621078 CET	49978	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:25.977641106 CET	49978	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:25.982511997 CET	53	49978	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:26.430483103 CET	53	49978	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:26.430679083 CET	49978	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:26.435770988 CET	53	49978	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:26.435949087 CET	49978	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:26.457252979 CET	60464	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:26.462205887 CET	53	60464	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:26.462281942 CET	60464	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:26.462322950 CET	60464	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:26.467170000 CET	53	60464	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:26.940593004 CET	53	60464	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:26.942266941 CET	60464	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:26.947904110 CET	53	60464	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:26.947993994 CET	60464	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:27.037889004 CET	57352	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:27.042747974 CET	53	57352	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:27.042834997 CET	57352	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:27.044362068 CET	57352	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:27.049161911 CET	53	57352	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:27.501074076 CET	53	57352	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:27.501199007 CET	57352	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:27.506191015 CET	53	57352	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:27.506248951 CET	57352	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:27.517632961 CET	56081	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:27.522463083 CET	53	56081	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:27.522540092 CET	56081	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:27.522572041 CET	56081	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:27.527324915 CET	53	56081	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:27.999876022 CET	53	56081	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:28.000258923 CET	56081	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.005263090 CET	53	56081	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:28.005326033 CET	56081	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.066056967 CET	50038	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.070857048 CET	53	50038	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:28.070955038 CET	50038	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.070995092 CET	50038	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.075783968 CET	53	50038	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:28.531125069 CET	53	50038	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:28.531732082 CET	50038	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.536868095 CET	53	50038	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:28.536961079 CET	50038	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.548850060 CET	62899	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.553957939 CET	53	62899	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:28.554054022 CET	62899	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.554070950 CET	62899	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.558940887 CET	53	62899	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:29.024830103 CET	53	62899	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:29.025099993 CET	62899	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.032526016 CET	53	62899	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:29.032612085 CET	62899	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.033056021 CET	49620	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.037957907 CET	53	49620	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:29.038033962 CET	49620	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.038079023 CET	49620	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.042830944 CET	53	49620	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:29.488961935 CET	53	49620	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:29.489353895 CET	49620	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.494605064 CET	53	49620	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:29.494759083 CET	49620	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.736689091 CET	55212	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.741561890 CET	53	55212	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:29.741652012 CET	55212	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.744436026 CET	55212	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.749203920 CET	53	55212	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:30.243072987 CET	53	55212	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:30.243319035 CET	55212	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:30.248455048 CET	53	55212	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:30.248513937 CET	55212	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:30.251013994 CET	58198	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:30.255908966 CET	53	58198	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:30.255980968 CET	58198	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:30.256026983 CET	58198	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:30.260848999 CET	53	58198	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:30.702152014 CET	53	58198	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:30.702765942 CET	58198	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:30.707854986 CET	53	58198	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:30.707917929 CET	58198	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:30.753237009 CET	53191	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:30.758145094 CET	53	53191	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:30.758222103 CET	53191	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:30.758275032 CET	53191	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:30.763125896 CET	53	53191	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:31.210283995 CET	53	53191	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:31.210542917 CET	53191	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:31.215635061 CET	53	53191	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:31.215702057 CET	53191	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:31.289089918 CET	56222	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:31.293955088 CET	53	56222	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:31.294047117 CET	56222	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:31.294086933 CET	56222	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:31.298872948 CET	53	56222	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:31.770895004 CET	53	56222	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:31.771166086 CET	56222	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:31.776916027 CET	53	56222	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:31.776985884 CET	56222	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:31.779441118 CET	50831	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:31.785136938 CET	53	50831	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:31.785206079 CET	50831	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:31.785233974 CET	50831	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:31.790437937 CET	53	50831	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:32.253177881 CET	53	50831	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:32.253509045 CET	50831	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:32.258944035 CET	53	50831	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:32.259017944 CET	50831	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:32.261451960 CET	54121	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:32.266848087 CET	53	54121	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:32.266928911 CET	54121	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:32.267000914 CET	54121	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:32.272077084 CET	53	54121	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:32.725204945 CET	53	54121	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:32.725439072 CET	54121	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:32.730556965 CET	53	54121	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:32.730618954 CET	54121	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:32.742698908 CET	51485	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:32.747525930 CET	53	51485	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:32.747587919 CET	51485	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:32.747623920 CET	51485	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:32.752441883 CET	53	51485	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:33.197856903 CET	53	51485	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:33.198007107 CET	51485	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:33.204652071 CET	53	51485	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:33.204734087 CET	51485	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:33.252340078 CET	58536	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:33.258858919 CET	53	58536	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:33.258915901 CET	58536	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:33.258949041 CET	58536	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:33.265276909 CET	53	58536	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:33.727051973 CET	53	58536	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:33.727174044 CET	58536	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:33.732247114 CET	53	58536	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:33.732294083 CET	58536	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:33.779735088 CET	55698	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:33.784588099 CET	53	55698	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:33.784642935 CET	55698	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:33.784714937 CET	55698	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:33.789700985 CET	53	55698	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:34.229477882 CET	53	55698	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:34.230518103 CET	55698	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:34.236649990 CET	53	55698	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:34.239343882 CET	55698	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:34.271121025 CET	56943	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:34.276042938 CET	53	56943	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:34.276107073 CET	56943	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:34.276128054 CET	56943	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:34.282428026 CET	53	56943	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:34.745884895 CET	53	56943	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:34.747956991 CET	56943	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:34.753048897 CET	53	56943	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:34.753104925 CET	56943	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:34.771348953 CET	60114	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:34.776325941 CET	53	60114	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:34.776410103 CET	60114	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:34.776524067 CET	60114	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:34.781342983 CET	53	60114	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:35.243524075 CET	53	60114	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:35.259167910 CET	60114	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:35.264301062 CET	53	60114	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:35.264388084 CET	60114	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:35.342185974 CET	59616	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:35.347148895 CET	53	59616	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:35.347227097 CET	59616	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:35.348742962 CET	59616	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:35.353547096 CET	53	59616	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:35.815222979 CET	53	59616	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:35.815434933 CET	59616	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:35.820427895 CET	53	59616	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:35.820480108 CET	59616	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:35.823594093 CET	65138	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:35.828430891 CET	53	65138	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:35.828490973 CET	65138	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:35.828824043 CET	65138	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:35.833667994 CET	53	65138	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:36.285218000 CET	53	65138	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:36.285440922 CET	65138	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:36.290852070 CET	53	65138	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:36.290903091 CET	65138	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:36.333662987 CET	65077	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:36.338476896 CET	53	65077	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:36.338551044 CET	65077	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:36.338598013 CET	65077	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:36.343373060 CET	53	65077	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:36.806472063 CET	53	65077	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:36.806742907 CET	65077	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:36.812128067 CET	53	65077	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:36.812252998 CET	65077	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:36.814274073 CET	51014	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:36.820822954 CET	53	51014	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:36.820887089 CET	51014	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:36.820916891 CET	51014	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:36.825691938 CET	53	51014	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:37.274341106 CET	53	51014	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:37.274678946 CET	51014	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:37.279712915 CET	53	51014	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:37.279880047 CET	51014	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:37.311258078 CET	52806	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:37.316049099 CET	53	52806	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:37.316124916 CET	52806	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:37.316173077 CET	52806	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:37.320941925 CET	53	52806	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:37.773068905 CET	53	52806	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:37.797164917 CET	52806	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:37.802194118 CET	53	52806	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:37.802246094 CET	52806	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:37.824376106 CET	59614	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:37.829811096 CET	53	59614	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:37.829906940 CET	59614	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:37.835746050 CET	59614	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:37.840640068 CET	53	59614	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:38.305705070 CET	53	59614	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:38.324214935 CET	59614	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.329322100 CET	53	59614	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:38.329375029 CET	59614	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.428627014 CET	57943	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.433485985 CET	53	57943	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:38.433556080 CET	57943	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.433651924 CET	57943	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.438393116 CET	53	57943	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:38.915988922 CET	53	57943	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:38.916214943 CET	57943	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.921665907 CET	53	57943	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:38.921729088 CET	57943	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.968882084 CET	60955	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.973711014 CET	53	60955	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:38.973793030 CET	60955	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.973855972 CET	60955	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.978965044 CET	53	60955	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:39.435482025 CET	53	60955	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:39.435838938 CET	60955	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:39.441538095 CET	53	60955	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:39.441615105 CET	60955	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:39.642951012 CET	51598	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:39.648695946 CET	53	51598	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:39.648799896 CET	51598	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:39.648863077 CET	51598	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:39.653867006 CET	53	51598	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:40.098766088 CET	53	51598	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:40.098917961 CET	51598	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:40.105715036 CET	53	51598	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:40.105798006 CET	51598	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:40.127475977 CET	63103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:40.133552074 CET	53	63103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:40.133651018 CET	63103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:40.133706093 CET	63103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:40.138613939 CET	53	63103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:40.590872049 CET	53	63103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:40.596484900 CET	63103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:40.601569891 CET	53	63103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:40.601654053 CET	63103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:40.646168947 CET	61022	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:40.651073933 CET	53	61022	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:40.651158094 CET	61022	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:40.674817085 CET	61022	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:40.679807901 CET	53	61022	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:41.129159927 CET	53	61022	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:41.129331112 CET	61022	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.134329081 CET	53	61022	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:41.134418011 CET	61022	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.182694912 CET	60082	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.187510967 CET	53	60082	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:41.187586069 CET	60082	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.187621117 CET	60082	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.197877884 CET	53	60082	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:41.640921116 CET	53	60082	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:41.641387939 CET	60082	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.646290064 CET	53	60082	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:41.646359921 CET	60082	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.704571962 CET	62637	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.709494114 CET	53	62637	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:41.709681988 CET	62637	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.709743977 CET	62637	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.714543104 CET	53	62637	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.157295942 CET	53	62637	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.157490015 CET	62637	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.162529945 CET	53	62637	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.162600040 CET	62637	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.165147066 CET	58459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.170037031 CET	53	58459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.170188904 CET	58459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.170188904 CET	58459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.174988985 CET	53	58459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.634644985 CET	53	58459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.634841919 CET	58459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.639841080 CET	53	58459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.639902115 CET	58459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.764765024 CET	56964	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.769603014 CET	53	56964	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.769701004 CET	56964	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.769741058 CET	56964	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.774543047 CET	53	56964	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:43.294955969 CET	53	56964	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:43.341581106 CET	56964	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:43.346811056 CET	53	56964	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:43.346935034 CET	56964	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:43.349389076 CET	56503	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:43.354163885 CET	53	56503	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:43.354270935 CET	56503	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:43.355041981 CET	56503	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:43.359823942 CET	53	56503	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:43.865544081 CET	53	56503	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:43.865667105 CET	56503	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:43.870665073 CET	53	56503	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:43.870713949 CET	56503	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:43.926054955 CET	52586	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:43.930911064 CET	53	52586	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:43.930979967 CET	52586	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:43.931025028 CET	52586	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:43.935796022 CET	53	52586	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:44.382798910 CET	53	52586	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:44.396038055 CET	52586	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:44.402324915 CET	53	52586	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:44.402401924 CET	52586	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:44.425849915 CET	64967	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:44.430680037 CET	53	64967	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:44.430773020 CET	64967	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:44.431009054 CET	64967	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:44.436306953 CET	53	64967	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:44.885303974 CET	53	64967	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:44.885428905 CET	64967	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:44.890615940 CET	53	64967	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:44.890678883 CET	64967	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:44.938704967 CET	62131	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:44.943567991 CET	53	62131	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:44.943640947 CET	62131	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:44.943700075 CET	62131	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:44.948628902 CET	53	62131	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:45.401606083 CET	53	62131	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:45.401952982 CET	62131	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:45.407054901 CET	53	62131	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:45.407130003 CET	62131	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:45.409893036 CET	54326	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:45.414705038 CET	53	54326	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:45.414777040 CET	54326	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:45.414812088 CET	54326	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:45.419570923 CET	53	54326	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:45.873780012 CET	53	54326	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:45.874948978 CET	54326	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:45.882982969 CET	53	54326	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:45.883133888 CET	54326	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:45.895262957 CET	52808	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:45.903158903 CET	53	52808	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:45.903247118 CET	52808	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:45.903875113 CET	52808	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:45.911719084 CET	53	52808	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:46.361212015 CET	53	52808	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:46.361561060 CET	52808	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:46.366832018 CET	53	52808	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:46.366895914 CET	52808	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:46.413153887 CET	56872	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:46.418101072 CET	53	56872	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:46.418191910 CET	56872	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:46.418191910 CET	56872	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:46.423068047 CET	53	56872	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:46.943492889 CET	53	56872	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:46.943713903 CET	56872	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:46.949198961 CET	53	56872	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:46.949281931 CET	56872	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:46.951863050 CET	53041	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:46.956779003 CET	53	53041	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:46.956876040 CET	53041	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:46.956916094 CET	53041	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:46.961782932 CET	53	53041	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:47.436228037 CET	53	53041	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:47.436441898 CET	53041	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:47.441426992 CET	53	53041	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:47.441518068 CET	53041	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:47.475236893 CET	58113	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:47.480581045 CET	53	58113	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:47.480683088 CET	58113	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:47.480751038 CET	58113	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:47.486152887 CET	53	58113	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:47.950026989 CET	53	58113	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:47.950192928 CET	58113	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:47.955593109 CET	53	58113	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:47.955652952 CET	58113	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:47.987662077 CET	51019	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:47.992520094 CET	53	51019	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:47.992599010 CET	51019	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:47.992635965 CET	51019	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:47.997421026 CET	53	51019	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:48.462778091 CET	53	51019	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:48.516182899 CET	51019	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:48.534554958 CET	51019	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:48.539601088 CET	53	51019	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:48.539659977 CET	51019	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:48.765197039 CET	56162	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:48.770140886 CET	53	56162	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:48.770215034 CET	56162	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:48.770262957 CET	56162	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:48.775233030 CET	53	56162	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:49.226197004 CET	53	56162	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:49.227793932 CET	56162	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.233222961 CET	53	56162	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:49.233279943 CET	56162	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.302891016 CET	54806	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.308247089 CET	53	54806	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:49.308311939 CET	54806	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.308352947 CET	54806	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.313085079 CET	53	54806	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:49.756622076 CET	53	54806	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:49.756834030 CET	54806	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.761998892 CET	53	54806	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:49.762068987 CET	54806	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.775357008 CET	52676	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.780245066 CET	53	52676	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:49.780332088 CET	52676	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.780374050 CET	52676	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.785284042 CET	53	52676	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:50.243141890 CET	53	52676	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:50.243459940 CET	52676	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:50.248609066 CET	53	52676	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:50.248688936 CET	52676	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:50.251394033 CET	64919	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:50.256536961 CET	53	64919	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:50.256618977 CET	64919	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:50.256661892 CET	64919	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:50.261522055 CET	53	64919	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:50.708545923 CET	53	64919	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:50.708770037 CET	64919	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:50.713963032 CET	53	64919	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:50.714030027 CET	64919	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:50.761936903 CET	63439	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:50.766884089 CET	53	63439	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:50.766969919 CET	63439	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:50.767010927 CET	63439	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:50.771903038 CET	53	63439	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:51.223184109 CET	53	63439	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:51.223505974 CET	63439	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:51.228732109 CET	53	63439	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:51.228816032 CET	63439	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:51.233319998 CET	62518	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:51.238231897 CET	53	62518	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:51.238316059 CET	62518	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:51.238360882 CET	62518	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:51.243277073 CET	53	62518	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:51.713457108 CET	53	62518	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:51.713752031 CET	62518	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:51.718858004 CET	53	62518	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:51.718921900 CET	62518	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:51.753993988 CET	61256	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:51.758796930 CET	53	61256	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:51.758882046 CET	61256	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:51.758927107 CET	61256	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:51.763727903 CET	53	61256	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:52.210191011 CET	53	61256	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:52.210330963 CET	61256	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:52.215477943 CET	53	61256	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:52.215538979 CET	61256	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:52.228777885 CET	55817	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:52.233804941 CET	53	55817	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:52.234026909 CET	55817	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:52.234028101 CET	55817	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:52.239017010 CET	53	55817	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:52.698646069 CET	53	55817	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:52.698899984 CET	55817	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:52.703937054 CET	53	55817	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:52.704010010 CET	55817	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:52.715976000 CET	61585	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:52.720917940 CET	53	61585	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:52.721039057 CET	61585	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:52.721080065 CET	61585	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:52.725891113 CET	53	61585	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:53.177371979 CET	53	61585	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:53.177571058 CET	61585	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:53.182686090 CET	53	61585	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:53.182780981 CET	61585	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:53.194744110 CET	52000	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:53.199609995 CET	53	52000	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:53.199692011 CET	52000	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:53.199738979 CET	52000	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:53.204596996 CET	53	52000	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:53.651545048 CET	53	52000	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:53.651859999 CET	52000	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:53.657010078 CET	53	52000	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:53.657088041 CET	52000	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:53.659673929 CET	55497	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:53.664640903 CET	53	55497	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:53.664737940 CET	55497	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:53.664772987 CET	55497	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:53.669620037 CET	53	55497	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:54.156934977 CET	53	55497	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:54.157751083 CET	55497	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:54.162892103 CET	53	55497	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:54.162972927 CET	55497	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:54.166676044 CET	51147	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:54.171643972 CET	53	51147	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:54.171724081 CET	51147	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:54.171762943 CET	51147	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:54.176574945 CET	53	51147	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:54.630853891 CET	53	51147	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:54.631064892 CET	51147	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:54.636039019 CET	53	51147	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:54.636130095 CET	51147	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:54.700758934 CET	56399	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:54.705614090 CET	53	56399	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:54.705766916 CET	56399	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:54.705766916 CET	56399	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:54.710846901 CET	53	56399	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:55.154957056 CET	53	56399	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:55.155356884 CET	56399	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:55.160495996 CET	53	56399	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:55.160598993 CET	56399	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:55.163726091 CET	58300	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:55.168622971 CET	53	58300	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:55.168725014 CET	58300	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:55.168749094 CET	58300	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:55.173615932 CET	53	58300	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:55.617949963 CET	53	58300	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:55.618151903 CET	58300	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:55.624228001 CET	53	58300	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:55.624317884 CET	58300	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:55.635766029 CET	62784	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:55.640649080 CET	53	62784	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:55.640724897 CET	62784	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:55.640741110 CET	62784	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:55.645587921 CET	53	62784	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:56.132478952 CET	53	62784	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:56.141047955 CET	62784	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:56.146019936 CET	53	62784	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:56.146112919 CET	62784	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:56.233191013 CET	62290	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:56.238125086 CET	53	62290	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:56.238219023 CET	62290	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:56.238293886 CET	62290	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:56.243026972 CET	53	62290	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:56.706382036 CET	53	62290	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:56.706540108 CET	62290	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:56.711474895 CET	53	62290	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:56.711517096 CET	62290	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:56.714728117 CET	62863	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:56.719568014 CET	53	62863	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:56.719640017 CET	62863	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:56.719769955 CET	62863	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:56.724554062 CET	53	62863	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:57.191234112 CET	53	62863	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:57.234782934 CET	62863	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.305146933 CET	62863	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.310266018 CET	53	62863	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:57.310309887 CET	62863	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.376643896 CET	52158	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.381580114 CET	53	52158	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:57.381647110 CET	52158	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.381979942 CET	52158	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.386805058 CET	53	52158	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:57.829658031 CET	53	52158	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:57.830575943 CET	52158	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.835927010 CET	53	52158	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:57.836122990 CET	52158	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.852977991 CET	52636	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.857837915 CET	53	52636	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:57.857927084 CET	52636	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.857991934 CET	52636	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.862792015 CET	53	52636	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:58.320657969 CET	53	52636	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:58.320806026 CET	52636	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:58.325948000 CET	53	52636	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:58.326021910 CET	52636	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:58.359256983 CET	58148	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:58.365436077 CET	53	58148	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:58.365531921 CET	58148	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:58.365576982 CET	58148	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:58.370413065 CET	53	58148	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:58.835417986 CET	53	58148	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:58.835558891 CET	58148	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:58.840794086 CET	53	58148	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:58.840965986 CET	58148	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:58.843821049 CET	61072	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:58.848809958 CET	53	61072	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:58.848892927 CET	61072	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:58.848932028 CET	61072	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:58.853710890 CET	53	61072	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:59.295442104 CET	53	61072	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:59.295736074 CET	61072	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:59.300797939 CET	53	61072	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:59.300868034 CET	61072	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:59.315192938 CET	64062	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:59.320688963 CET	53	64062	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:59.320760012 CET	64062	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:59.320796967 CET	64062	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:59.325597048 CET	53	64062	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:59.775445938 CET	53	64062	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:59.779649019 CET	64062	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:59.784806013 CET	53	64062	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:59.784890890 CET	64062	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:59.788038015 CET	57462	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:59.792944908 CET	53	57462	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:59.793023109 CET	57462	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:59.793065071 CET	57462	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:59.797903061 CET	53	57462	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:00.245063066 CET	53	57462	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:00.245266914 CET	57462	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:00.250444889 CET	53	57462	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:00.250519991 CET	57462	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:00.263156891 CET	62612	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:00.268155098 CET	53	62612	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:00.268241882 CET	62612	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:00.268280029 CET	62612	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:00.273152113 CET	53	62612	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:00.721983910 CET	53	62612	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:00.722259045 CET	62612	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:00.727473021 CET	53	62612	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:00.727545977 CET	62612	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:00.757932901 CET	58137	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:00.762847900 CET	53	58137	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:00.762929916 CET	58137	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:00.763058901 CET	58137	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:00.767889023 CET	53	58137	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.230326891 CET	53	58137	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.230614901 CET	58137	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.236087084 CET	53	58137	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.236169100 CET	58137	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.341857910 CET	63976	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.346751928 CET	53	63976	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.346812963 CET	63976	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.346854925 CET	63976	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.351600885 CET	53	63976	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.796369076 CET	53	63976	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.796557903 CET	63976	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.801780939 CET	53	63976	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.801843882 CET	63976	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.804394960 CET	59508	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.809300900 CET	53	59508	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.809381962 CET	59508	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.809422016 CET	59508	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.814313889 CET	53	59508	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:02.260344028 CET	53	59508	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:02.260554075 CET	59508	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:02.265610933 CET	53	59508	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:02.265682936 CET	59508	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:02.271233082 CET	50035	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:02.276072025 CET	53	50035	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:02.276226044 CET	50035	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:02.276226044 CET	50035	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:02.281032085 CET	53	50035	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:02.725341082 CET	53	50035	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:02.725575924 CET	50035	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:02.730706930 CET	53	50035	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:02.730845928 CET	50035	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:02.779983044 CET	56390	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:02.784847975 CET	53	56390	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:02.784935951 CET	56390	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:02.784976006 CET	56390	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:02.789797068 CET	53	56390	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:03.243655920 CET	53	56390	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:03.243834972 CET	56390	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.248878956 CET	53	56390	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:03.248934031 CET	56390	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.310142994 CET	50135	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.314971924 CET	53	50135	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:03.315052986 CET	50135	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.315088987 CET	50135	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.319900990 CET	53	50135	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:03.771641016 CET	53	50135	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:03.771950960 CET	50135	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.777070045 CET	53	50135	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:03.777167082 CET	50135	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.822820902 CET	54695	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.828090906 CET	53	54695	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:03.828239918 CET	54695	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.828404903 CET	54695	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.833288908 CET	53	54695	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:04.306333065 CET	53	54695	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:04.306648970 CET	54695	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:04.311651945 CET	53	54695	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:04.311741114 CET	54695	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:04.332623005 CET	58158	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:04.337629080 CET	53	58158	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:04.337738991 CET	58158	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:04.337796926 CET	58158	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:04.342597008 CET	53	58158	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:04.825418949 CET	53	58158	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:04.825634956 CET	58158	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:04.830703974 CET	53	58158	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:04.830770016 CET	58158	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:04.915540934 CET	51528	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:04.920733929 CET	53	51528	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:04.921015024 CET	51528	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:04.921015978 CET	51528	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:04.926294088 CET	53	51528	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:05.380884886 CET	53	51528	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:05.381141901 CET	51528	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.386195898 CET	53	51528	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:05.386271000 CET	51528	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.388497114 CET	65068	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.393371105 CET	53	65068	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:05.393685102 CET	65068	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.393686056 CET	65068	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.398664951 CET	53	65068	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:05.871831894 CET	53	65068	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:05.872142076 CET	65068	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.877219915 CET	53	65068	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:05.877304077 CET	65068	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.960390091 CET	61652	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.965322971 CET	53	61652	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:05.965459108 CET	61652	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.965503931 CET	61652	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.970346928 CET	53	61652	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:06.436171055 CET	53	61652	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:06.436927080 CET	61652	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:06.442030907 CET	53	61652	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:06.444333076 CET	61652	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:06.465084076 CET	65402	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:06.470536947 CET	53	65402	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:06.472815990 CET	65402	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:06.472815990 CET	65402	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:06.477933884 CET	53	65402	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:06.936557055 CET	53	65402	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:06.936885118 CET	65402	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:06.942128897 CET	53	65402	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:06.944720030 CET	65402	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:06.964026928 CET	51181	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:06.969206095 CET	53	51181	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:06.969638109 CET	51181	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:06.969701052 CET	51181	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:06.974859953 CET	53	51181	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:07.446614027 CET	53	51181	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:07.446799994 CET	51181	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:07.451963902 CET	53	51181	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:07.452028990 CET	51181	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:07.483828068 CET	59807	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:07.488980055 CET	53	59807	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:07.489061117 CET	59807	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:07.496179104 CET	59807	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:07.501256943 CET	53	59807	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:07.947832108 CET	53	59807	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:07.979537010 CET	59807	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:07.984795094 CET	53	59807	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:07.984860897 CET	59807	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:08.025947094 CET	52484	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:08.031143904 CET	53	52484	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:08.031394958 CET	52484	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:08.031521082 CET	52484	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:08.036580086 CET	53	52484	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:08.504466057 CET	53	52484	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:08.504677057 CET	52484	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:08.509839058 CET	53	52484	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:08.510015011 CET	52484	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:08.522053957 CET	62892	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:08.526968956 CET	53	62892	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:08.527153969 CET	62892	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:08.527204037 CET	62892	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:08.532067060 CET	53	62892	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:08.990341902 CET	53	62892	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:08.990477085 CET	62892	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:08.995553970 CET	53	62892	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:08.995727062 CET	62892	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:09.021267891 CET	64011	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:09.026139975 CET	53	64011	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:09.026213884 CET	64011	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:09.026261091 CET	64011	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:09.031136990 CET	53	64011	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:09.473956108 CET	53	64011	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:09.474162102 CET	64011	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:09.479196072 CET	53	64011	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:09.479265928 CET	64011	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:09.530663013 CET	52441	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:09.535576105 CET	53	52441	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:09.535664082 CET	52441	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:09.535726070 CET	52441	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:09.540527105 CET	53	52441	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:09.992693901 CET	53	52441	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:09.992872000 CET	52441	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:09.998089075 CET	53	52441	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:09.998259068 CET	52441	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.117254019 CET	55820	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.122374058 CET	53	55820	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:10.122447968 CET	55820	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.122499943 CET	55820	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.127392054 CET	53	55820	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:10.572240114 CET	53	55820	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:10.577538967 CET	55820	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.582959890 CET	53	55820	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:10.583035946 CET	55820	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.652276039 CET	59816	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.657206059 CET	53	59816	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:10.657299995 CET	59816	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.658078909 CET	59816	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.663022995 CET	53	59816	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:11.105999947 CET	53	59816	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:11.106128931 CET	59816	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:11.111469984 CET	53	59816	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:11.111538887 CET	59816	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:11.144146919 CET	55723	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:11.149302959 CET	53	55723	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:11.149507999 CET	55723	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:11.149507999 CET	55723	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:11.154690981 CET	53	55723	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:11.612281084 CET	53	55723	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:11.612601042 CET	55723	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:11.617782116 CET	53	55723	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:11.617861986 CET	55723	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:11.662353992 CET	54900	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:11.667370081 CET	53	54900	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:11.667604923 CET	54900	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:11.667606115 CET	54900	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:11.672884941 CET	53	54900	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.132970095 CET	53	54900	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.133296013 CET	54900	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.138479948 CET	53	54900	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.138564110 CET	54900	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.150525093 CET	62944	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.155431986 CET	53	62944	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.155524015 CET	62944	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.155560017 CET	62944	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.160402060 CET	53	62944	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.632915974 CET	53	62944	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.633203030 CET	62944	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.638467073 CET	53	62944	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.638552904 CET	62944	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.757700920 CET	56683	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.762811899 CET	53	56683	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.762906075 CET	56683	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.762948036 CET	56683	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.767920017 CET	53	56683	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:13.228216887 CET	53	56683	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:13.260593891 CET	56683	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:13.266064882 CET	53	56683	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:13.266132116 CET	56683	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:13.284152985 CET	51027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:13.289422035 CET	53	51027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:13.289575100 CET	51027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:13.289608002 CET	51027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:13.294689894 CET	53	51027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:13.746704102 CET	53	51027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:13.746982098 CET	51027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:13.752224922 CET	53	51027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:13.752306938 CET	51027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:13.773704052 CET	63334	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:13.778553009 CET	53	63334	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:13.778645992 CET	63334	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:13.778657913 CET	63334	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:13.783514023 CET	53	63334	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:14.227082014 CET	53	63334	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:14.227212906 CET	63334	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:14.232577085 CET	53	63334	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:14.232629061 CET	63334	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:14.245702028 CET	51870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:14.250690937 CET	53	51870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:14.250754118 CET	51870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:14.250799894 CET	51870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:14.256037951 CET	53	51870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:14.728724957 CET	53	51870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:14.735929012 CET	51870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:14.740978956 CET	53	51870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:14.741091013 CET	51870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:14.819124937 CET	49371	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:14.824214935 CET	53	49371	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:14.824342012 CET	49371	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:14.826045990 CET	49371	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:14.831296921 CET	53	49371	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:15.272157907 CET	53	49371	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:15.272515059 CET	49371	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:15.277678013 CET	53	49371	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:15.277879953 CET	49371	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:15.307951927 CET	64759	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:15.312772036 CET	53	64759	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:15.312860012 CET	64759	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:15.312896013 CET	64759	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:15.317709923 CET	53	64759	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:15.771441936 CET	53	64759	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:15.813417912 CET	64759	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:15.829245090 CET	64759	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:15.834453106 CET	53	64759	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:15.834559917 CET	64759	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:15.870064020 CET	51007	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:15.875067949 CET	53	51007	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:15.875190020 CET	51007	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:15.880434036 CET	51007	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:15.885448933 CET	53	51007	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:16.320735931 CET	53	51007	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:16.326170921 CET	51007	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:16.331604004 CET	53	51007	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:16.331660032 CET	51007	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:16.379548073 CET	57717	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:16.385026932 CET	53	57717	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:16.385092020 CET	57717	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:16.385200977 CET	57717	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:16.390573025 CET	53	57717	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:16.833728075 CET	53	57717	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:16.833904028 CET	57717	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:16.839418888 CET	53	57717	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:16.839529991 CET	57717	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:16.878937960 CET	58207	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:16.884085894 CET	53	58207	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:16.884172916 CET	58207	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:16.884193897 CET	58207	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:16.889287949 CET	53	58207	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:17.330235004 CET	53	58207	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:17.330473900 CET	58207	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:17.336028099 CET	53	58207	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:17.336107969 CET	58207	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:17.338262081 CET	50224	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:17.343111992 CET	53	50224	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:17.343205929 CET	50224	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:17.343245983 CET	50224	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:17.348057032 CET	53	50224	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:17.808887005 CET	53	50224	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:17.809257984 CET	50224	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:17.814335108 CET	53	50224	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:17.814409971 CET	50224	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:17.827485085 CET	64560	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:17.832354069 CET	53	64560	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:17.832550049 CET	64560	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:17.832550049 CET	64560	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:17.837505102 CET	53	64560	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:18.284432888 CET	53	64560	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:18.285090923 CET	64560	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:18.290208101 CET	53	64560	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:18.290682077 CET	64560	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:18.373713970 CET	63716	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:18.378591061 CET	53	63716	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:18.378660917 CET	63716	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:18.378810883 CET	63716	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:18.383826971 CET	53	63716	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:18.852404118 CET	53	63716	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:18.870909929 CET	63716	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:18.876010895 CET	53	63716	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:18.876120090 CET	63716	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.149087906 CET	59176	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.153904915 CET	53	59176	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:19.153980017 CET	59176	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.154021978 CET	59176	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.158850908 CET	53	59176	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:19.603465080 CET	53	59176	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:19.603738070 CET	59176	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.608850956 CET	53	59176	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:19.608917952 CET	59176	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.649504900 CET	61070	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.654427052 CET	53	61070	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:19.654490948 CET	61070	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.654551029 CET	61070	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.659353018 CET	53	61070	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:20.135173082 CET	53	61070	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:20.136931896 CET	61070	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:20.142731905 CET	53	61070	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:20.147494078 CET	61070	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:20.147927999 CET	60385	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:20.153233051 CET	53	60385	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:20.153528929 CET	60385	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:20.153574944 CET	60385	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:20.158340931 CET	53	60385	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:20.629873991 CET	53	60385	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:20.630090952 CET	60385	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:20.635212898 CET	53	60385	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:20.635272980 CET	60385	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:20.690861940 CET	53835	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:20.695743084 CET	53	53835	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:20.698116064 CET	53835	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:20.698190928 CET	53835	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:20.702960014 CET	53	53835	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:21.147460938 CET	53	53835	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:21.147805929 CET	53835	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:21.154792070 CET	53	53835	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:21.154850960 CET	53835	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:21.159709930 CET	54115	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:21.166646004 CET	53	54115	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:21.166713953 CET	54115	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:21.166753054 CET	54115	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:21.172928095 CET	53	54115	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:21.637932062 CET	53	54115	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:21.646821976 CET	54115	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:21.652368069 CET	53	54115	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:21.652458906 CET	54115	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:21.717669010 CET	64914	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:21.722522020 CET	53	64914	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:21.722759008 CET	64914	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:21.723010063 CET	64914	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:21.727869034 CET	53	64914	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:22.189294100 CET	53	64914	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:22.189552069 CET	64914	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:22.194631100 CET	53	64914	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:22.194688082 CET	64914	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:22.197316885 CET	55749	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:22.202120066 CET	53	55749	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:22.202178955 CET	55749	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:22.202208996 CET	55749	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:22.206968069 CET	53	55749	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:22.667876959 CET	53	55749	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:22.668154955 CET	55749	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:22.673232079 CET	53	55749	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:22.673290968 CET	55749	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:22.692037106 CET	61338	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:22.696970940 CET	53	61338	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:22.697045088 CET	61338	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:22.697163105 CET	61338	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:22.701931953 CET	53	61338	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:23.157429934 CET	53	61338	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:23.159229040 CET	61338	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.164273977 CET	53	61338	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:23.166906118 CET	61338	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.263062000 CET	52015	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.267909050 CET	53	52015	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:23.270725965 CET	52015	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.270771027 CET	52015	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.278918982 CET	53	52015	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:23.718741894 CET	53	52015	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:23.719630003 CET	52015	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.724786997 CET	53	52015	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:23.727488995 CET	52015	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.731125116 CET	53990	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.735919952 CET	53	53990	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:23.736699104 CET	53990	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.736730099 CET	53990	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.741467953 CET	53	53990	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:24.208237886 CET	53	53990	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:24.209696054 CET	53990	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.214752913 CET	53	53990	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:24.214813948 CET	53990	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.286701918 CET	64656	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.291687012 CET	53	64656	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:24.291801929 CET	64656	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.292186975 CET	64656	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.297003984 CET	53	64656	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:24.742579937 CET	53	64656	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:24.742865086 CET	64656	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.747967005 CET	53	64656	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:24.748156071 CET	64656	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.832283974 CET	50340	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.837140083 CET	53	50340	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:24.837217093 CET	50340	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.837281942 CET	50340	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.842066050 CET	53	50340	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:25.287734985 CET	53	50340	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:25.287981987 CET	50340	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:25.292984962 CET	53	50340	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:25.293025017 CET	50340	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:25.314008951 CET	49584	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:25.318875074 CET	53	49584	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:25.318937063 CET	49584	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:25.319020033 CET	49584	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:25.324045897 CET	53	49584	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:25.794549942 CET	53	49584	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:25.794821978 CET	49584	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:25.800039053 CET	53	49584	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:25.800108910 CET	49584	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:25.812035084 CET	50072	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:25.816931009 CET	53	50072	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:25.817049026 CET	50072	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:25.817076921 CET	50072	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:25.821949959 CET	53	50072	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:26.279205084 CET	53	50072	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:26.279388905 CET	50072	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:26.284509897 CET	53	50072	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:26.284585953 CET	50072	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:26.331962109 CET	52005	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:26.336831093 CET	53	52005	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:26.336899996 CET	52005	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:26.336954117 CET	52005	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:26.341739893 CET	53	52005	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:26.789731026 CET	53	52005	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:26.806128025 CET	52005	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:26.811431885 CET	53	52005	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:26.811727047 CET	52005	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:26.848191023 CET	64204	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:26.853358030 CET	53	64204	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:26.856724024 CET	64204	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:26.868864059 CET	64204	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:26.873802900 CET	53	64204	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:27.326545000 CET	53	64204	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:27.358807087 CET	64204	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:27.363884926 CET	53	64204	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:27.363961935 CET	64204	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:27.398566961 CET	59413	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:27.403398037 CET	53	59413	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:27.403460026 CET	59413	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:27.403588057 CET	59413	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:27.408365011 CET	53	59413	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:27.870759964 CET	53	59413	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:27.870978117 CET	59413	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:27.876368046 CET	53	59413	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:27.880657911 CET	59413	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:27.888317108 CET	53911	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:27.893300056 CET	53	53911	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:27.896720886 CET	53911	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:27.896770954 CET	53911	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:27.901674986 CET	53	53911	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:28.346931934 CET	53	53911	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:28.347105980 CET	53911	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:28.352303028 CET	53	53911	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:28.352375031 CET	53911	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:28.374411106 CET	64980	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:28.379414082 CET	53	64980	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:28.380244017 CET	64980	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:28.383546114 CET	64980	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:28.388478994 CET	53	64980	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:28.831146955 CET	53	64980	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:28.831327915 CET	64980	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:28.838717937 CET	53	64980	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:28.838784933 CET	64980	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:28.841567993 CET	63071	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:28.848716021 CET	53	63071	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:28.848778963 CET	63071	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:28.848870039 CET	63071	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:28.855921030 CET	53	63071	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:29.321284056 CET	53	63071	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:29.328524113 CET	63071	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:29.333677053 CET	53	63071	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:29.333729029 CET	63071	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:29.487102032 CET	55814	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:29.492100000 CET	53	55814	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:29.492176056 CET	55814	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:29.493514061 CET	55814	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:29.498395920 CET	53	55814	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:29.953977108 CET	53	55814	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:29.956981897 CET	55814	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:29.962106943 CET	53	55814	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:29.964724064 CET	55814	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:29.965673923 CET	60377	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:29.970519066 CET	53	60377	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:29.972718000 CET	60377	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:29.972754955 CET	60377	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:29.977765083 CET	53	60377	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:30.421365976 CET	53	60377	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:30.422383070 CET	60377	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:30.427445889 CET	53	60377	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:30.427508116 CET	60377	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:30.519731045 CET	50524	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:30.524893999 CET	53	50524	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:30.524971008 CET	50524	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:30.525034904 CET	50524	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:30.529844999 CET	53	50524	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:30.996783018 CET	53	50524	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:31.000983953 CET	50524	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.006429911 CET	53	50524	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:31.008809090 CET	50524	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.009115934 CET	61160	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.014029026 CET	53	61160	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:31.016697884 CET	61160	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.016742945 CET	61160	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.021598101 CET	53	61160	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:31.466907024 CET	53	61160	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:31.467089891 CET	61160	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.472796917 CET	53	61160	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:31.472932100 CET	61160	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.475836039 CET	57111	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.480654955 CET	53	57111	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:31.480743885 CET	57111	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.480796099 CET	57111	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.485574007 CET	53	57111	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:31.938684940 CET	53	57111	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:31.938945055 CET	57111	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.944055080 CET	53	57111	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:31.944111109 CET	57111	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.973833084 CET	54867	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.978732109 CET	53	54867	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:31.979440928 CET	54867	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.980024099 CET	54867	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.984894037 CET	53	54867	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:32.436510086 CET	53	54867	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:32.436635017 CET	54867	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:32.441576004 CET	53	54867	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:32.441647053 CET	54867	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:32.490593910 CET	54392	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:32.495590925 CET	53	54392	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:32.495677948 CET	54392	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:32.497447968 CET	54392	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:32.502343893 CET	53	54392	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:32.943620920 CET	53	54392	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:32.943775892 CET	54392	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:32.948865891 CET	53	54392	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:32.948999882 CET	54392	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:32.951370955 CET	58914	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:32.956394911 CET	53	58914	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:32.956648111 CET	58914	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:32.956649065 CET	58914	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:32.961581945 CET	53	58914	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:33.408277988 CET	53	58914	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:33.419719934 CET	58914	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:33.424911976 CET	53	58914	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:33.425086021 CET	58914	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:33.474175930 CET	52354	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:33.479186058 CET	53	52354	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:33.479413033 CET	52354	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:33.479485035 CET	52354	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:33.484273911 CET	53	52354	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:33.954411030 CET	53	52354	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:33.955507040 CET	52354	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:33.960488081 CET	53	52354	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:33.960568905 CET	52354	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:34.021177053 CET	64969	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:34.026122093 CET	53	64969	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:34.028752089 CET	64969	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:34.028844118 CET	64969	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:34.033690929 CET	53	64969	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:34.478455067 CET	53	64969	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:34.478591919 CET	64969	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:34.483592987 CET	53	64969	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:34.483639956 CET	64969	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:34.499577045 CET	51556	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:34.504405022 CET	53	51556	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:34.504466057 CET	51556	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:34.504548073 CET	51556	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:34.509318113 CET	53	51556	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:34.965190887 CET	53	51556	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:34.965768099 CET	51556	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:34.970858097 CET	53	51556	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:34.970937014 CET	51556	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:34.996315002 CET	49627	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:35.001379013 CET	53	49627	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:35.001480103 CET	49627	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:35.002824068 CET	49627	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:35.007548094 CET	53	49627	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:35.463004112 CET	53	49627	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:35.464904070 CET	49627	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:35.470006943 CET	53	49627	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:35.470956087 CET	49627	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:35.553841114 CET	51232	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:35.558769941 CET	53	51232	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:35.559370995 CET	51232	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:35.559493065 CET	51232	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:35.564407110 CET	53	51232	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:36.003758907 CET	53	51232	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:36.003952026 CET	51232	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:36.009088993 CET	53	51232	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:36.012715101 CET	51232	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:36.016143084 CET	51747	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:36.020992041 CET	53	51747	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:36.024734974 CET	51747	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:36.024884939 CET	51747	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:36.029740095 CET	53	51747	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:36.473249912 CET	53	51747	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:36.473706961 CET	51747	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:36.478699923 CET	53	51747	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:36.478739977 CET	51747	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:36.547393084 CET	50475	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:36.552222967 CET	53	50475	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:36.552282095 CET	50475	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:36.552350998 CET	50475	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:36.557133913 CET	53	50475	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.001276016 CET	53	50475	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.001552105 CET	50475	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.006570101 CET	53	50475	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.006652117 CET	50475	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.036381960 CET	52814	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.041239977 CET	53	52814	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.041336060 CET	52814	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.041364908 CET	52814	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.046185970 CET	53	52814	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.495675087 CET	53	52814	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.496890068 CET	52814	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.501912117 CET	53	52814	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.503278017 CET	52814	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.756599903 CET	49415	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.761523008 CET	53	49415	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.762681961 CET	49415	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.764672995 CET	49415	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.769440889 CET	53	49415	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:38.236217022 CET	53	49415	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:38.236455917 CET	49415	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:38.241575003 CET	53	49415	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:38.241628885 CET	49415	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:38.244343996 CET	57939	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:38.249209881 CET	53	57939	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:38.249277115 CET	57939	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:38.249337912 CET	57939	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:38.254153013 CET	53	57939	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:38.716202021 CET	53	57939	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:38.716479063 CET	57939	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:38.721565962 CET	53	57939	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:38.721642971 CET	57939	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:38.803534985 CET	58393	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:38.808365107 CET	53	58393	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:38.808552980 CET	58393	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:38.808552980 CET	58393	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:38.813385010 CET	53	58393	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:39.267537117 CET	53	58393	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:39.267726898 CET	58393	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:39.273603916 CET	53	58393	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:39.274995089 CET	58393	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:39.295233965 CET	60761	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:39.300098896 CET	53	60761	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:39.300223112 CET	60761	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:39.300223112 CET	60761	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:39.305062056 CET	53	60761	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:39.760121107 CET	53	60761	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:39.760904074 CET	60761	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:39.766037941 CET	53	60761	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:39.766256094 CET	60761	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:39.773071051 CET	58723	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:39.777844906 CET	53	58723	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:39.780772924 CET	58723	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:39.781483889 CET	58723	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:39.786222935 CET	53	58723	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:40.242151976 CET	53	58723	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:40.242281914 CET	58723	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:40.247416019 CET	53	58723	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:40.247468948 CET	58723	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:40.260447025 CET	51425	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:40.265324116 CET	53	51425	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:40.265386105 CET	51425	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:40.265425920 CET	51425	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:40.270172119 CET	53	51425	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:40.733359098 CET	53	51425	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:40.733617067 CET	51425	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:40.738723993 CET	53	51425	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:40.738784075 CET	51425	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:40.772499084 CET	51442	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:40.779391050 CET	53	51442	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:40.779452085 CET	51442	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:40.779493093 CET	51442	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:40.784286976 CET	53	51442	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:41.248538971 CET	53	51442	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:41.249262094 CET	51442	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:41.256042957 CET	53	51442	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:41.256649971 CET	51442	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:41.284998894 CET	50561	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:41.289952993 CET	53	50561	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:41.290070057 CET	50561	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:41.290070057 CET	50561	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:41.294874907 CET	53	50561	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:41.738097906 CET	53	50561	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:41.740874052 CET	50561	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:41.745908976 CET	53	50561	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:41.748749971 CET	50561	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:41.775502920 CET	65244	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:41.780366898 CET	53	65244	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:41.780745983 CET	65244	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:41.780745983 CET	65244	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:41.785583973 CET	53	65244	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:42.241086960 CET	53	65244	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:42.241211891 CET	65244	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:42.248337030 CET	53	65244	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:42.248399019 CET	65244	53	192.168.2.24	1.1.1.1

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 9, 2025 13:45:08.688895941 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:08.701138020 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:08.705929041 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:08.715135098 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:08.715631008 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:08.722507000 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:09.197670937 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:09.207237959 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:09.207808971 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:09.214761019 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:09.687325954 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:09.714629889 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:09.715327024 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:09.722362041 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:10.185439110 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:10.198019028 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:10.200001001 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:10.208892107 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:10.209470987 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:10.219156981 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:10.219760895 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:10.228981972 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:10.229525089 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:10.238729954 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:10.239132881 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:10.246113062 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:10.700584888 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:10.707401991 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:11.180614948 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:11.187410116 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:11.647375107 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:11.656699896 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:11.657227993 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:11.663918972 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:12.159931898 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:12.177109957 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:12.177897930 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:12.185112000 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:12.185735941 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:12.209203959 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:12.209775925 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:12.216561079 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:12.699529886 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:12.708772898 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:12.709281921 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:12.716281891 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:13.182060003 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:13.191370964 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:13.191931009 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:13.201165915 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:13.201827049 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:13.211093903 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:13.211668015 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:13.220988035 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:13.221388102 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:13.230927944 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:13.231452942 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:13.238291979 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:13.717437029 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:13.724216938 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:14.214432001 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:14.223654985 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:14.224225998 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:14.233511925 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:14.234211922 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:14.263295889 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:14.263901949 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:14.282586098 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:14.283212900 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:14.290183067 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:14.756901979 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:14.766170979 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:14.766591072 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:14.773370981 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:15.241319895 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:15.249993086 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:15.250360012 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:15.276144028 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:15.276809931 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:15.288009882 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:15.288434982 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:15.308585882 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:15.309037924 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:15.315906048 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:15.795851946 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:15.803203106 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:16.267633915 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:16.276736975 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:16.277201891 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:16.285993099 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:16.286480904 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:16.294769049 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:16.757771969 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:16.771554947 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:16.772104025 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:16.778920889 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:17.234298944 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:17.241343021 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:17.726543903 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:17.736054897 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:17.736721039 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:17.743630886 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:18.280709982 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:18.290719986 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:18.291215897 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:18.300723076 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:18.301070929 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:18.320779085 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:18.321445942 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:18.330668926 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:18.331326962 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:18.338108063 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:18.823808908 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:18.842351913 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:18.843534946 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:18.850502014 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:19.314184904 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:19.331736088 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:19.332477093 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:19.341660023 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:19.342267990 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:19.350500107 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:19.821546078 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:19.830785036 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:19.831281900 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:19.840668917 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:19.841037035 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:19.848671913 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:20.315068960 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:20.321799994 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:20.790148973 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:20.801270962 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:20.801745892 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:20.824913979 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:20.825653076 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:20.832523108 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:21.295834064 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:21.312541962 CET	58259	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:21.316020012 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:21.317207098 CET	57588	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:21.319506884 CET	53	58259	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:21.333956003 CET	53	57588	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:21.334517002 CET	57588	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:21.349051952 CET	53	57588	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:21.349432945 CET	57588	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:21.356214046 CET	53	57588	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:21.831103086 CET	57588	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:21.848511934 CET	53	57588	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:21.848969936 CET	57588	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:21.865231037 CET	53	57588	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:21.865712881 CET	57588	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:21.872302055 CET	53	57588	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:22.343040943 CET	57588	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:22.352297068 CET	53	57588	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:22.353056908 CET	57588	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:22.361927986 CET	53	57588	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:22.362359047 CET	57588	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:22.372581005 CET	53	57588	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:22.372946978 CET	57588	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:22.385085106 CET	53	57588	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:22.385744095 CET	57588	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:22.401768923 CET	53	57588	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:22.402328968 CET	57588	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:22.409006119 CET	53	57588	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:22.870057106 CET	57588	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:22.877207041 CET	53	57588	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.357553959 CET	57588	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.371181965 CET	53	57588	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.371902943 CET	57588	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.381119013 CET	53	57588	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.385304928 CET	57588	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.397394896 CET	53	57588	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.397983074 CET	57588	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.422058105 CET	57588	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.422292948 CET	53	57588	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.422991991 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.428863049 CET	53	57588	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.435914993 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.436331034 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.442924976 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.908313036 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.930639029 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.931150913 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.939615011 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.940031052 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.949048042 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:23.949400902 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:23.956455946 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:24.430093050 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:24.452095032 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:24.452883005 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:24.468478918 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:24.469192982 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:24.475888014 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:24.931720018 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:24.938431978 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:25.421572924 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:25.430977106 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:25.437705994 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:25.453685999 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:25.459498882 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:25.480084896 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:25.480678082 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:25.487592936 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:25.953659058 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:25.965111971 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:25.965560913 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:25.972243071 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:26.431230068 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:26.440125942 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:26.440676928 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:26.449665070 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:26.450021982 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:26.456893921 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:26.948704004 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:26.972976923 CET	56027	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:26.974972010 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:26.979799032 CET	53	56027	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:26.980125904 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:26.988631964 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:26.993737936 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:27.003051996 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:27.007293940 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:27.017754078 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:27.023909092 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:27.030793905 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:27.501923084 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:27.510209084 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:27.510682106 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:27.517174959 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:28.000598907 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.013706923 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:28.014134884 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.022478104 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:28.022818089 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.031200886 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:28.031689882 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.039964914 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:28.040350914 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.049482107 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:28.049876928 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.058417082 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:28.058912039 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.065639019 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:28.532510996 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.541093111 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:28.541731119 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:28.548427105 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:29.025772095 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.032541990 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:29.489888906 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.501912117 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:29.502506971 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.517915964 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:29.543068886 CET	55139	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.549820900 CET	53	55139	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:29.625844002 CET	59472	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.639270067 CET	53	59472	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:29.639657021 CET	59472	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.655813932 CET	53	59472	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:29.661207914 CET	59472	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.669986010 CET	53	59472	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:29.692512035 CET	59472	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.702163935 CET	53	59472	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:29.713884115 CET	59472	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.722737074 CET	53	59472	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:29.725514889 CET	59472	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:29.732290983 CET	53	59472	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:30.243760109 CET	59472	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:30.250595093 CET	53	59472	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:30.702933073 CET	59472	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:30.718791008 CET	59472	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:30.722131968 CET	53	59472	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:30.723006010 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:30.725678921 CET	53	59472	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:30.736346960 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:30.736917973 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:30.745512009 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:30.746009111 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:30.752773046 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:31.210993052 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:31.232650995 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:31.233237982 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:31.242347956 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:31.245203018 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:31.261859894 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:31.262489080 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:31.280997038 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:31.281687975 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:31.288614035 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:31.771523952 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:31.779093027 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:32.253971100 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:32.261060953 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:32.725843906 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:32.734899998 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:32.735415936 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:32.742300034 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:33.198491096 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:33.212774992 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:33.213371038 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:33.231754065 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:33.232292891 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:33.243117094 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:33.243629932 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:33.252006054 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:33.727652073 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:33.737160921 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:33.737638950 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:33.754806995 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:33.755304098 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:33.770736933 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:33.771301985 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:33.779396057 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:34.230263948 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:34.246323109 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:34.246959925 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:34.263420105 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:34.264121056 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:34.270803928 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:34.748677969 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:34.761869907 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:34.763559103 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:34.770600080 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:35.277103901 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:35.297365904 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:35.305156946 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:35.314213037 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:35.334341049 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:35.340934992 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:35.816585064 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:35.823246002 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:36.288147926 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:36.302628040 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:36.303168058 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:36.314790964 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:36.316204071 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:36.326384068 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:36.326848030 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:36.333321095 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:36.807224989 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:36.813896894 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:37.275146008 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:37.293884039 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:37.294492006 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:37.303600073 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:37.304229975 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:37.310934067 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:37.796998978 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:37.803853035 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:38.323410988 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.332528114 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:38.346529007 CET	57459	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.353214979 CET	53	57459	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:38.361723900 CET	61021	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.382108927 CET	53	61021	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:38.395545959 CET	61021	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.418642044 CET	53	61021	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:38.419837952 CET	61021	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.427774906 CET	53	61021	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:38.916804075 CET	61021	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.934092045 CET	53	61021	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:38.934758902 CET	61021	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.951692104 CET	53	61021	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:38.952347040 CET	61021	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.961148024 CET	53	61021	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:38.961714983 CET	61021	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:38.968415976 CET	53	61021	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:39.436211109 CET	61021	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:39.453779936 CET	61021	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:39.592725039 CET	53	61021	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:39.593569040 CET	60558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:39.595355034 CET	53	61021	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:39.610353947 CET	60558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:39.616108894 CET	53	60558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:39.616847038 CET	60584	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:39.616955042 CET	53	60558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:39.626526117 CET	53	60584	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:39.627171040 CET	60584	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:39.635404110 CET	53	60584	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:39.635907888 CET	60584	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:39.642589092 CET	53	60584	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:40.099478006 CET	60584	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:40.119363070 CET	53	60584	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:40.120229006 CET	60584	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:40.127131939 CET	53	60584	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:40.603019953 CET	60584	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:40.618897915 CET	53	60584	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:40.628751993 CET	60584	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:40.635385036 CET	53	60584	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:41.129829884 CET	60584	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.138226032 CET	53	60584	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:41.138742924 CET	60584	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.156682968 CET	53	60584	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:41.156725883 CET	60584	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.157495975 CET	55226	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.163373947 CET	53	60584	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:41.175244093 CET	53	55226	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:41.175734997 CET	55226	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.182385921 CET	53	55226	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:41.641828060 CET	55226	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.664809942 CET	53	55226	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:41.665498972 CET	55226	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.676793098 CET	53	55226	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:41.678529978 CET	55226	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.687041044 CET	53	55226	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:41.687565088 CET	55226	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.696150064 CET	53	55226	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:41.696898937 CET	55226	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:41.703999043 CET	53	55226	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.158030987 CET	55226	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.164767027 CET	53	55226	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.635392904 CET	55226	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.657080889 CET	55226	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.659466982 CET	53	55226	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.660060883 CET	56378	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.664091110 CET	53	55226	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.668617010 CET	53	56378	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.669012070 CET	56378	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.688859940 CET	56378	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.690639019 CET	53	56378	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.691206932 CET	63500	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.695734978 CET	53	56378	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.700496912 CET	53	63500	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.700886011 CET	63500	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.719527960 CET	63500	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.719690084 CET	53	63500	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.720467091 CET	54765	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.726568937 CET	53	63500	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.729309082 CET	53	54765	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.729851007 CET	54765	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.738359928 CET	53	54765	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.738919020 CET	54765	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.747493982 CET	53	54765	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.747859001 CET	54765	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.757124901 CET	53	54765	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:42.757524967 CET	54765	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:42.764329910 CET	53	54765	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:43.342024088 CET	54765	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:43.348726988 CET	53	54765	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:43.866225004 CET	54765	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:43.877175093 CET	53	54765	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:43.877727032 CET	54765	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:43.887120008 CET	53	54765	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:43.887540102 CET	54765	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:43.897588968 CET	53	54765	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:43.897986889 CET	54765	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:43.906965017 CET	53	54765	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:43.907449961 CET	54765	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:43.918241978 CET	53	54765	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:43.918952942 CET	54765	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:43.925599098 CET	53	54765	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:44.399985075 CET	54765	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:44.407788992 CET	53	54765	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:44.425548077 CET	54765	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:44.441163063 CET	53	54765	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:44.886271000 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:44.902363062 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:44.903026104 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:44.911828995 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:44.912245035 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:44.930799007 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:44.931449890 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:44.938285112 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:45.402514935 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:45.409555912 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:45.880826950 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:45.890954018 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:46.361975908 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:46.371294022 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:46.372015953 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:46.385077953 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:46.386112928 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:46.395042896 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:46.395539045 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:46.404954910 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:46.405494928 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:46.412658930 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:46.944241047 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:46.951487064 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:47.437151909 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:47.447797060 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:47.448661089 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:47.457298040 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:47.458210945 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:47.467225075 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:47.467911959 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:47.474742889 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:47.950680971 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:47.966279030 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:47.967102051 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:47.979712009 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:47.980259895 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:47.987267017 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:48.535126925 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:48.546490908 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:48.605293036 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:48.624370098 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:48.628005028 CET	51054	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:48.635092974 CET	53	51054	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:48.671943903 CET	58760	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:48.681382895 CET	53	58760	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:48.686690092 CET	58760	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:48.705483913 CET	58760	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:48.708100080 CET	53	58760	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:48.708758116 CET	60000	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:48.712321997 CET	53	58760	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:48.724694967 CET	53	60000	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:48.725128889 CET	60000	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:48.738250017 CET	53	60000	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:48.738651037 CET	60000	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:48.757646084 CET	53	60000	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:48.758143902 CET	60000	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:48.764935970 CET	53	60000	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:49.228447914 CET	60000	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.250929117 CET	60000	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.251101971 CET	53	60000	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:49.252207994 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.257896900 CET	53	60000	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:49.267272949 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:49.267746925 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.276911020 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:49.277575016 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.286216021 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:49.286647081 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.295397043 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:49.295958996 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.302560091 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:49.757328987 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.767755032 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:49.768277884 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:49.774936914 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:50.243944883 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:50.251070976 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:50.709264994 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:50.718821049 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:50.719688892 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:50.728605986 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:50.728970051 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:50.737931013 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:50.738356113 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:50.754156113 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:50.754565001 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:50.761492014 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:51.225862980 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:51.232963085 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:51.714121103 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:51.734124899 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:51.734599113 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:51.746469021 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:51.747061968 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:51.753664970 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:52.210968971 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:52.221045017 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:52.221875906 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:52.228334904 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:52.699274063 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:52.708148003 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:52.708534956 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:52.715522051 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:53.178122044 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:53.186964989 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:53.187463045 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:53.194293976 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:53.652326107 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:53.659116030 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:54.158602953 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:54.166096926 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:54.631742001 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:54.653189898 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:54.653933048 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:54.667241096 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:54.667790890 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:54.677196026 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:54.677953005 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:54.692624092 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:54.693422079 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:54.700233936 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:55.156117916 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:55.163351059 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:55.618685007 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:55.627913952 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:55.628465891 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:55.635421991 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:56.158207893 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:56.167155981 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:56.168210030 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:56.177175045 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:56.196665049 CET	65301	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:56.197379112 CET	62357	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:56.203344107 CET	53	65301	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:56.216181040 CET	53	62357	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:56.217052937 CET	62357	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:56.225843906 CET	53	62357	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:56.226336956 CET	62357	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:56.232778072 CET	53	62357	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:56.707268953 CET	62357	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:56.714035988 CET	53	62357	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:57.305696964 CET	62357	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.315152884 CET	53	62357	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:57.315809011 CET	62357	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.327009916 CET	53	62357	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:57.328069925 CET	62357	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.345067024 CET	62357	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.347377062 CET	53	62357	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:57.348300934 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.351766109 CET	53	62357	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:57.357209921 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:57.357877970 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.367244005 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:57.368470907 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.375262976 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:57.830673933 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.839804888 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:57.840384960 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:57.847538948 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:58.321316004 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:58.341895103 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:58.342452049 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:58.351444006 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:58.351850033 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:58.358841896 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:58.836230993 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:58.843364954 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:59.296159983 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:59.307254076 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:59.307811022 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:59.314802885 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:45:59.779519081 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:45:59.786101103 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:00.245742083 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:00.255470037 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:00.256021976 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:00.262744904 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:00.722721100 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:00.732264042 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:00.732727051 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:00.750283957 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:00.750924110 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:00.757452011 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.231218100 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.251090050 CET	57103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.252827883 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.253653049 CET	50929	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.258038998 CET	53	57103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.262703896 CET	53	50929	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.263226032 CET	50929	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.281806946 CET	50929	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.282146931 CET	53	50929	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.282864094 CET	60039	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.288347960 CET	53	50929	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.299181938 CET	53	60039	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.299685001 CET	60039	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.308284044 CET	53	60039	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.308680058 CET	60039	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.321809053 CET	53	60039	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.322397947 CET	60039	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.334676027 CET	53	60039	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.335094929 CET	60039	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.341558933 CET	53	60039	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:01.797108889 CET	60039	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:01.804034948 CET	53	60039	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:02.261008978 CET	60039	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:02.267476082 CET	53	60039	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:02.725975990 CET	60039	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:02.747484922 CET	53	60039	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:02.747978926 CET	60039	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:02.763818979 CET	53	60039	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:02.764380932 CET	60039	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:02.772670984 CET	53	60039	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:02.773142099 CET	60039	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:02.779649973 CET	53	60039	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:03.244447947 CET	60039	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.266310930 CET	60039	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.267973900 CET	53	60039	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:03.268625021 CET	58324	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.273057938 CET	53	60039	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:03.283987999 CET	53	58324	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:03.284459114 CET	58324	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.302638054 CET	53	58324	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:03.303086042 CET	58324	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.309814930 CET	53	58324	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:03.772453070 CET	58324	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.781183958 CET	53	58324	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:03.781954050 CET	58324	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.797811985 CET	53	58324	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:03.798523903 CET	58324	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.813580036 CET	53	58324	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:03.814565897 CET	58324	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:03.822350025 CET	53	58324	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:04.307251930 CET	58324	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:04.324681044 CET	53	58324	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:04.325448036 CET	58324	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:04.332216978 CET	53	58324	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:04.826165915 CET	58324	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:04.835537910 CET	53	58324	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:04.836069107 CET	58324	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:04.850271940 CET	53	58324	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:04.850893974 CET	58324	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:04.867609978 CET	53	58324	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:04.883923054 CET	58324	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:04.897922039 CET	53	58324	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:04.898380041 CET	58324	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:04.907229900 CET	53	58324	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:04.907674074 CET	58324	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:04.915070057 CET	53	58324	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:05.381552935 CET	58324	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.388179064 CET	53	58324	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:05.872486115 CET	58324	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.891299963 CET	58324	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.893862009 CET	53	58324	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:05.894531965 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.898001909 CET	53	58324	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:05.905936003 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:05.906460047 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.915733099 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:05.916109085 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.925349951 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:05.927639961 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.937422037 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:05.937958002 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.952862024 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:05.953258991 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:05.960050106 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:06.437387943 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:06.451829910 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:06.453191042 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:06.461195946 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:06.937273979 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:06.946227074 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:06.946696043 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:06.955806017 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:06.956526995 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:06.963583946 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:07.447272062 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:07.465677977 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:07.466257095 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:07.475656986 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:07.476169109 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:07.483428001 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:07.980210066 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:07.996181965 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:07.997256994 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:08.007095098 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:08.008275986 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:08.017745972 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:08.018413067 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:08.025213957 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:08.505125046 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:08.514420986 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:08.514991999 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:08.521739006 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:08.991034985 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:09.013057947 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:09.013711929 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:09.020853043 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:09.474716902 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:09.487557888 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:09.488100052 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:09.504909992 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:09.505403996 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:09.522967100 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:09.523408890 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:09.530334949 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:09.993395090 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.016653061 CET	62895	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.017489910 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:10.018594980 CET	53527	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.023835897 CET	53	62895	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:10.027467966 CET	53	53527	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:10.028213978 CET	53527	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.047998905 CET	53527	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.053961039 CET	53	53527	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:10.054727077 CET	53	53527	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:10.055268049 CET	56078	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.067917109 CET	53	56078	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:10.072377920 CET	56078	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.085028887 CET	53	56078	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:10.085469007 CET	56078	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.099997997 CET	53	56078	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:10.100656033 CET	56078	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.109265089 CET	53	56078	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:10.109713078 CET	56078	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.116902113 CET	53	56078	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:10.582535028 CET	56078	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.596729994 CET	53	56078	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:10.614701986 CET	56078	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.621890068 CET	53	56078	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:10.631608963 CET	53199	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.640908003 CET	53	53199	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:10.644655943 CET	53199	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:10.651743889 CET	53	53199	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:11.106872082 CET	53199	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:11.116556883 CET	53	53199	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:11.117172003 CET	53199	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:11.135879993 CET	53	53199	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:11.136430979 CET	53199	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:11.143697023 CET	53	53199	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:11.612986088 CET	53199	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:11.632143021 CET	53	53199	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:11.632778883 CET	53199	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:11.643428087 CET	53	53199	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:11.644083023 CET	53199	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:11.654587030 CET	53	53199	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:11.655090094 CET	53199	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:11.661919117 CET	53	53199	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.133668900 CET	53199	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.143044949 CET	53	53199	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.143616915 CET	53199	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.150193930 CET	53	53199	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.633668900 CET	53199	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.656718016 CET	53	53199	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.657916069 CET	53199	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.672725916 CET	53	53199	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.673464060 CET	53199	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.684096098 CET	53	53199	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.684674025 CET	53199	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.704273939 CET	53199	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.705257893 CET	53	53199	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.705975056 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.711503029 CET	53	53199	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.715300083 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.715785027 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.725146055 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.725678921 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.749816895 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:12.750571966 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:12.757380009 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:13.261156082 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:13.274910927 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:13.275444984 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:13.282454014 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:13.747556925 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:13.756370068 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:13.756936073 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:13.765978098 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:13.766832113 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:13.773323059 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:14.227895975 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:14.237417936 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:14.238038063 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:14.245343924 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:14.740561008 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:14.761377096 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:14.764684916 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:14.775510073 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:14.802602053 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:14.809468985 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:15.272989988 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:15.283561945 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:15.284218073 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:15.300359011 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:15.300976038 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:15.307549000 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:15.830001116 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:15.838888884 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:15.839848042 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:15.860496998 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:15.862595081 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:15.869513035 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:16.326617956 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:16.337011099 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:16.338721037 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:16.351406097 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:16.352267981 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:16.361277103 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:16.361939907 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:16.371644974 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:16.372358084 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:16.378977060 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:16.834489107 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:16.856128931 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:16.856667995 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:16.871365070 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:16.871850967 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:16.878604889 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:17.331005096 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:17.337649107 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:17.809688091 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:17.818968058 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:17.819478035 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:17.827173948 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:18.285698891 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:18.302378893 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:18.303211927 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:18.312043905 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:18.313293934 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:18.329535007 CET	60353	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:18.332415104 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:18.333089113 CET	53103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:18.336173058 CET	53	60353	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:18.345865965 CET	53	53103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:18.346316099 CET	53103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:18.354696035 CET	53	53103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:18.355140924 CET	53103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:18.366002083 CET	53	53103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:18.366624117 CET	53103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:18.373317957 CET	53	53103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:18.874531984 CET	53103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:18.883116007 CET	53	53103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:18.894474983 CET	53103	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:18.901279926 CET	53	53103	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:19.019989014 CET	52509	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.036823034 CET	53	52509	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:19.048687935 CET	52509	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.055588961 CET	53	52509	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:19.060126066 CET	53749	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.080172062 CET	53749	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.086843967 CET	53	53749	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:19.086869955 CET	53	53749	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:19.093944073 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.102576017 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:19.110405922 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.119558096 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:19.120230913 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.126820087 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:19.604212999 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.613677025 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:19.614379883 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.625181913 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:19.625869036 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.635390043 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:19.635795116 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:19.643099070 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:20.137420893 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:20.147418976 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:20.630774021 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:20.641947031 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:20.642437935 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:20.666743994 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:20.667392015 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:20.683109999 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:20.683670044 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:20.690315962 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:21.150165081 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:21.159168005 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:21.646770000 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:21.668945074 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:21.673418999 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:21.680033922 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:22.189971924 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:22.196993113 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:22.668628931 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:22.684299946 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:22.684755087 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:22.691742897 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:23.159725904 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.168996096 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:23.171289921 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.188936949 CET	50080	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.196229935 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:23.196247101 CET	53	50080	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:23.197052956 CET	55244	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.214642048 CET	53	55244	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:23.216519117 CET	55244	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.226571083 CET	53	55244	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:23.228490114 CET	55244	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.241362095 CET	53	55244	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:23.244282961 CET	55244	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.253149033 CET	53	55244	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:23.253717899 CET	55244	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.260346889 CET	53	55244	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:23.720558882 CET	55244	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:23.727605104 CET	53	55244	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:24.216051102 CET	55244	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.227730036 CET	53	55244	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:24.233170033 CET	55244	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.241828918 CET	53	55244	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:24.248563051 CET	55244	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.269285917 CET	53	55244	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:24.275424957 CET	55244	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.282131910 CET	53	55244	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:24.743279934 CET	55244	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.768121004 CET	55244	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.768429041 CET	53	55244	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:24.769129038 CET	51068	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.774725914 CET	53	55244	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:24.785084963 CET	53	51068	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:24.785602093 CET	51068	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.802562952 CET	53	51068	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:24.803050995 CET	51068	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.816078901 CET	53	51068	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:24.825278044 CET	51068	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:24.831949949 CET	53	51068	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:25.288530111 CET	51068	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:25.306236982 CET	53	51068	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:25.306988001 CET	51068	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:25.313561916 CET	53	51068	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:25.795207024 CET	51068	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:25.804245949 CET	53	51068	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:25.804747105 CET	51068	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:25.811669111 CET	53	51068	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:26.280096054 CET	51068	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:26.294954062 CET	53	51068	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:26.295809031 CET	51068	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:26.314012051 CET	51068	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:26.314126015 CET	53	51068	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:26.315073013 CET	62813	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:26.320528984 CET	53	51068	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:26.324217081 CET	53	62813	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:26.324758053 CET	62813	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:26.331598997 CET	53	62813	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:26.806521893 CET	62813	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:26.815648079 CET	53	62813	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:26.827569008 CET	62813	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:26.834711075 CET	53	62813	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:27.359374046 CET	62813	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:27.371452093 CET	53	62813	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:27.380723000 CET	62813	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:27.381930113 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:27.387651920 CET	53	62813	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:27.390470982 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:27.391573906 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:27.398011923 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:27.871517897 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:27.880579948 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:27.881071091 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:27.887964964 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:28.347884893 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:28.366127014 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:28.367203951 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:28.373810053 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:28.832043886 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:28.841150045 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:29.329133034 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:29.337743044 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:29.339186907 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:29.348129988 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:29.350097895 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:29.358942986 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:29.363529921 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:29.373610973 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:29.374192953 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:29.398752928 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:29.412877083 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:29.422380924 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:29.478049994 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:29.485850096 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:29.957279921 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:29.965285063 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:30.422329903 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:30.431426048 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:30.434086084 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:30.445270061 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:30.445836067 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:30.457170963 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:30.458101988 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:30.472821951 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:30.473675966 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:30.483921051 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:30.484642029 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:30.498181105 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:30.498920918 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:30.511845112 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:30.512428999 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:30.519154072 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:31.001326084 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.008771896 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:31.468662977 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.475390911 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:31.940668106 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.949476957 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:31.950303078 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.964502096 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:31.965143919 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:31.971797943 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:32.441061020 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:32.456212997 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:32.460838079 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:32.471357107 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:32.473105907 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:32.482330084 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:32.483330011 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:32.490035057 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:32.944205999 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:32.950921059 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:33.420234919 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:33.438023090 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:33.456655979 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:33.463342905 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:33.956675053 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:33.971752882 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:33.976650000 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:33.985856056 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:33.989145041 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:33.997419119 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:34.001049042 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:34.009838104 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:34.013046980 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:34.019510984 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:34.479291916 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:34.492016077 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:34.492661953 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:34.499195099 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:34.971430063 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:34.982455969 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:34.986968040 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:34.993891001 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:35.468660116 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:35.477655888 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:35.478444099 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:35.488742113 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:35.494759083 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:35.512924910 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:35.517261982 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:35.529164076 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:35.532654047 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:35.544012070 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:35.544608116 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:35.553462029 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:36.006418943 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:36.013449907 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:36.475076914 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:36.495614052 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:36.496783018 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:36.514482975 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:36.515485048 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:36.528682947 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:36.529635906 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:36.539412975 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:36.540411949 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:36.546932936 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.002227068 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.012837887 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.013439894 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.028765917 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.029428005 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.035981894 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.500658035 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.509203911 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.513268948 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.525654078 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.536097050 CET	53870	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.537134886 CET	50289	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.542696953 CET	53	53870	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.545520067 CET	53	50289	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.579957008 CET	50289	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.583161116 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.586678028 CET	53	50289	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.603358030 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.620671988 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.631656885 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.652688026 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.679481030 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.732675076 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.745584011 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:37.749577999 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:37.756196976 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:38.237020016 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:38.243858099 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:38.717026949 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:38.725836039 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:38.726650000 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:38.746463060 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:38.747299910 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:38.755593061 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:38.756181955 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:38.767129898 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:38.767606974 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:38.778450966 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:38.778985023 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:38.795777082 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:38.796392918 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:38.803065062 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:39.268671036 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:39.285451889 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:39.288320065 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:39.294899940 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:39.764669895 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:39.771290064 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:40.242724895 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:40.252110958 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:40.252983093 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:40.259710073 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:40.734252930 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:40.743258953 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:40.743951082 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:40.753309965 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:40.753848076 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:40.764235973 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:40.764823914 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:40.772149086 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:41.249278069 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:41.262923956 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:41.263537884 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:41.275955915 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:41.276596069 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:41.284507990 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:41.743361950 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:41.752058983 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:41.752675056 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:41.761261940 CET	53	51558	1.1.1.1	192.168.2.24
Jan 9, 2025 13:46:41.764990091 CET	51558	53	192.168.2.24	1.1.1.1
Jan 9, 2025 13:46:41.771704912 CET	53	51558	1.1.1.1	192.168.2.24

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 9, 2025 13:45:08.688895941 CET	192.168.2.24	1.1.1.1	0xb599	Standard query (0)	auayomwkewcomwas.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:08.705929041 CET	192.168.2.24	1.1.1.1	0x67fe	Standard query (0)	iyaikmkkowcqemsi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:08.715631008 CET	192.168.2.24	1.1.1.1	0xde38	Standard query (0)	ggicikyqcaiyguee.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:08.729166985 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ggicikyqcaiyguee.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:09.197670937 CET	192.168.2.24	1.1.1.1	0xe6c3	Standard query (0)	oqyaoykomyoygics.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:09.207808971 CET	192.168.2.24	1.1.1.1	0xa1e2	Standard query (0)	eqakguiwiqacqiwg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:09.220156908 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	eqakguiwiqacqiwg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:09.687325954 CET	192.168.2.24	1.1.1.1	0xfc4f	Standard query (0)	wgcaouuqqqwucogy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:09.715327024 CET	192.168.2.24	1.1.1.1	0xc8a6	Standard query (0)	ewacuagosgqmuocm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:09.727832079 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ewacuagosgqmuocm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:10.185439110 CET	192.168.2.24	1.1.1.1	0x9f07	Standard query (0)	wgqyouayikuyuqmk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:10.200001001 CET	192.168.2.24	1.1.1.1	0xb5d3	Standard query (0)	owaaygsacguucaye.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:10.209470987 CET	192.168.2.24	1.1.1.1	0xdab	Standard query (0)	uwgicagyykoommga.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:10.219760895 CET	192.168.2.24	1.1.1.1	0x90cd	Standard query (0)	uiggameqqycugsqw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:10.229525089 CET	192.168.2.24	1.1.1.1	0x91b9	Standard query (0)	goguooqkgysueime.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:10.239132881 CET	192.168.2.24	1.1.1.1	0x55ec	Standard query (0)	keosqeosukqcooco.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:10.251662016 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	keosqeosukqcooco.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:10.700584888 CET	192.168.2.24	1.1.1.1	0xd700	Standard query (0)	maoeeogmuauywsyu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:10.712862968 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	maoeeogmuauywsyu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:11.180614948 CET	192.168.2.24	1.1.1.1	0x6fe2	Standard query (0)	ismqaewykmoiguki.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:11.199229002 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ismqaewykmoiguki.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:11.647375107 CET	192.168.2.24	1.1.1.1	0x59a6	Standard query (0)	wucwykasawokemaw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:11.657227993 CET	192.168.2.24	1.1.1.1	0x1298	Standard query (0)	ukmcqucewskcqygg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:11.669367075 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ukmcqucewskcqygg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:12.159931898 CET	192.168.2.24	1.1.1.1	0x3ee9	Standard query (0)	qqqmeagkkosgcayo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:12.177897930 CET	192.168.2.24	1.1.1.1	0xb413	Standard query (0)	ysawassgkwqygmmq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:12.185735941 CET	192.168.2.24	1.1.1.1	0x3c14	Standard query (0)	osaeyoiqoqawauga.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:12.209775925 CET	192.168.2.24	1.1.1.1	0xe4ae	Standard query (0)	iagisciiyoemgwaa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:12.221951962 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	iagisciiyoemgwaa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:12.699529886 CET	192.168.2.24	1.1.1.1	0x3d1e	Standard query (0)	ymysimqoykwqeqiq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:12.709281921 CET	192.168.2.24	1.1.1.1	0xb2a1	Standard query (0)	ymmcwogyimsuqmcc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:12.721806049 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ymmcwogyimsuqmcc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:13.182060003 CET	192.168.2.24	1.1.1.1	0xe7ec	Standard query (0)	osmoygyawqmmimkq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:13.191931009 CET	192.168.2.24	1.1.1.1	0x8631	Standard query (0)	immyecuqwkiyscys.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:13.201827049 CET	192.168.2.24	1.1.1.1	0xadd0	Standard query (0)	omsqkuiwcwoegooq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:13.211668015 CET	192.168.2.24	1.1.1.1	0xd124	Standard query (0)	ukaiiiyqoooycyqm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:13.221388102 CET	192.168.2.24	1.1.1.1	0xeca8	Standard query (0)	isemauqkwwiumyky.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:13.231452942 CET	192.168.2.24	1.1.1.1	0xef16	Standard query (0)	keguuyioweymiaws.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:13.243700027 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	keguuyioweymiaws.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:13.717437029 CET	192.168.2.24	1.1.1.1	0xbe4d	Standard query (0)	kwaywmaequkqccai.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:13.729775906 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	kwaywmaequkqccai.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:14.214432001 CET	192.168.2.24	1.1.1.1	0x665f	Standard query (0)	yyimcoiwgckeakcm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:14.224225998 CET	192.168.2.24	1.1.1.1	0xad22	Standard query (0)	ekcwemuekgqsimae.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:14.234211922 CET	192.168.2.24	1.1.1.1	0xfa08	Standard query (0)	imigkomgmqgmakqk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:14.263901949 CET	192.168.2.24	1.1.1.1	0x25aa	Standard query (0)	omasqkwqyskcagwi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:14.283212900 CET	192.168.2.24	1.1.1.1	0xd1e4	Standard query (0)	awyomscgweuqmgaw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:14.295471907 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	awyomscgweuqmgaw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:14.756901979 CET	192.168.2.24	1.1.1.1	0x86d1	Standard query (0)	eyoyssauceguqwmk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:14.766591072 CET	192.168.2.24	1.1.1.1	0x3e9b	Standard query (0)	gwwcqeykmseicgaw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:14.778748989 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	gwwcqeykmseicgaw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:15.241319895 CET	192.168.2.24	1.1.1.1	0xcf86	Standard query (0)	qwywqgsmgaoiwsga.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:15.250360012 CET	192.168.2.24	1.1.1.1	0x868c	Standard query (0)	ososwckwcqmmwqcy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:15.276809931 CET	192.168.2.24	1.1.1.1	0xebf5	Standard query (0)	osaymwoggqqycmse.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:15.288434982 CET	192.168.2.24	1.1.1.1	0xa5fc	Standard query (0)	oyewqwkusieeoqey.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:15.309037924 CET	192.168.2.24	1.1.1.1	0x4488	Standard query (0)	ommwaqgaemsmcqwc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:15.321285963 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ommwaqgaemsmcqwc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:15.795851946 CET	192.168.2.24	1.1.1.1	0xacda	Standard query (0)	cauewwukyywyqiei.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:15.809139013 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	cauewwukyywyqiei.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:16.267633915 CET	192.168.2.24	1.1.1.1	0x27c7	Standard query (0)	goeykqccmemkswom.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:16.277201891 CET	192.168.2.24	1.1.1.1	0x5ec5	Standard query (0)	aksuakswwkiimamq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:16.286480904 CET	192.168.2.24	1.1.1.1	0x986	Standard query (0)	isaeicumkcuwqmqq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:16.301139116 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	isaeicumkcuwqmqq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:16.757771969 CET	192.168.2.24	1.1.1.1	0x5229	Standard query (0)	qiswokuokugiooky.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:16.772104025 CET	192.168.2.24	1.1.1.1	0x1bc3	Standard query (0)	qiswcssocuqsaqkq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:16.784341097 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	qiswcssocuqsaqkq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:17.234298944 CET	192.168.2.24	1.1.1.1	0xe014	Standard query (0)	qcyksokwumicscaa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:17.247078896 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	qcyksokwumicscaa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:17.726543903 CET	192.168.2.24	1.1.1.1	0xc23f	Standard query (0)	esiaisyasoaoqwki.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:17.736721039 CET	192.168.2.24	1.1.1.1	0x6e79	Standard query (0)	giqukkwwcwgqcisg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:17.749079943 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	giqukkwwcwgqcisg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:18.280709982 CET	192.168.2.24	1.1.1.1	0xf366	Standard query (0)	ymqaaskiwomkucuy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:18.291215897 CET	192.168.2.24	1.1.1.1	0x7b8c	Standard query (0)	akueuaicusaoieiy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:18.301070929 CET	192.168.2.24	1.1.1.1	0x32ff	Standard query (0)	sauygqecsusickcu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:18.321445942 CET	192.168.2.24	1.1.1.1	0x183a	Standard query (0)	kkwkgmcoawgaoiwg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:18.331326962 CET	192.168.2.24	1.1.1.1	0x976a	Standard query (0)	saumycuogqsqykes.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:18.343838930 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	saumycuogqsqykes.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:18.823808908 CET	192.168.2.24	1.1.1.1	0xfced	Standard query (0)	ukyokaigmmkumgoa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:18.843534946 CET	192.168.2.24	1.1.1.1	0x156d	Standard query (0)	eswweuycwwiiykwo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:18.855981112 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	eswweuycwwiiykwo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:19.314184904 CET	192.168.2.24	1.1.1.1	0xc193	Standard query (0)	uksgyqiqaaiaiesi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:19.332477093 CET	192.168.2.24	1.1.1.1	0x2f6	Standard query (0)	smckcsaioceiyasu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:19.342267990 CET	192.168.2.24	1.1.1.1	0xe730	Standard query (0)	esimsqgcwwwmyoqc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:19.356173038 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	esimsqgcwwwmyoqc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:19.821546078 CET	192.168.2.24	1.1.1.1	0xdce7	Standard query (0)	maiyuocqqiqiiskw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:19.831281900 CET	192.168.2.24	1.1.1.1	0x64f	Standard query (0)	smaaowemwiwggocu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:19.841037035 CET	192.168.2.24	1.1.1.1	0xd099	Standard query (0)	kwuuwgemogmuomwq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:19.855494976 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	kwuuwgemogmuomwq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:20.315068960 CET	192.168.2.24	1.1.1.1	0x5fdc	Standard query (0)	ukicsmiwggcwksam.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:20.327053070 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ukicsmiwggcwksam.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:20.790148973 CET	192.168.2.24	1.1.1.1	0x558c	Standard query (0)	gwamoggwyegsseao.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:20.801745892 CET	192.168.2.24	1.1.1.1	0xcc60	Standard query (0)	immcqsiceooqyaay.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:20.825653076 CET	192.168.2.24	1.1.1.1	0xf313	Standard query (0)	kkcqgowgkcoyokcu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:20.837897062 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	kkcqgowgkcoyokcu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:21.295834064 CET	192.168.2.24	1.1.1.1	0x687c	Standard query (0)	kecgikusmakuksma.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:21.312541962 CET	192.168.2.24	1.1.1.1	0x687c	Standard query (0)	kecgikusmakuksma.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:21.317207098 CET	192.168.2.24	1.1.1.1	0xdc13	Standard query (0)	ymuiggyusggsymoi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:21.334517002 CET	192.168.2.24	1.1.1.1	0x4aad	Standard query (0)	uecouukwkuceyuwg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:21.349432945 CET	192.168.2.24	1.1.1.1	0x6be5	Standard query (0)	eyoaceoookqskqmy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:21.361603975 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	eyoaceoookqskqmy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:21.831103086 CET	192.168.2.24	1.1.1.1	0x68c5	Standard query (0)	awwomgcseeqwkkom.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:21.848969936 CET	192.168.2.24	1.1.1.1	0x7c75	Standard query (0)	keykoekseemyiewq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:21.865712881 CET	192.168.2.24	1.1.1.1	0x31e6	Standard query (0)	ysiwwoeeaaskykaw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:21.877791882 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ysiwwoeeaaskykaw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:22.343040943 CET	192.168.2.24	1.1.1.1	0xc675	Standard query (0)	kwmcuwccqmuecgea.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:22.353056908 CET	192.168.2.24	1.1.1.1	0x7ca8	Standard query (0)	gwyooeiscmwguqms.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:22.362359047 CET	192.168.2.24	1.1.1.1	0x316a	Standard query (0)	wuokiysmiucoucak.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:22.372946978 CET	192.168.2.24	1.1.1.1	0x5ff3	Standard query (0)	wuuiumemmigyyauq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:22.385744095 CET	192.168.2.24	1.1.1.1	0x3462	Standard query (0)	acwomuuukiomgqkm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:22.402328968 CET	192.168.2.24	1.1.1.1	0x25de	Standard query (0)	muwqwgaaymomgwmi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:22.414421082 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	muwqwgaaymomgwmi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:22.870057106 CET	192.168.2.24	1.1.1.1	0x518d	Standard query (0)	omgcoecwsqiuqyug.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:22.883105040 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	omgcoecwsqiuqyug.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.357553959 CET	192.168.2.24	1.1.1.1	0x1d7b	Standard query (0)	kqmsgskwgemyueya.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.371902943 CET	192.168.2.24	1.1.1.1	0xe95d	Standard query (0)	eyiyueewuaqmmwcm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.385304928 CET	192.168.2.24	1.1.1.1	0x48c3	Standard query (0)	gwoyamckoqoaauoq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.397983074 CET	192.168.2.24	1.1.1.1	0xdb0d	Standard query (0)	qwqsoyoqkymakowm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.422058105 CET	192.168.2.24	1.1.1.1	0xdb0d	Standard query (0)	qwqsoyoqkymakowm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.422991991 CET	192.168.2.24	1.1.1.1	0x53ef	Standard query (0)	gcmiymmqgwuquokm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.436331034 CET	192.168.2.24	1.1.1.1	0x9597	Standard query (0)	ymseciekayuweoww.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.448401928 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ymseciekayuweoww.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.908313036 CET	192.168.2.24	1.1.1.1	0xf3c2	Standard query (0)	oyocwswugeiqqyoo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.931150913 CET	192.168.2.24	1.1.1.1	0x2fb0	Standard query (0)	omgooecquoweeomo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.940031052 CET	192.168.2.24	1.1.1.1	0x1182	Standard query (0)	imgeoyougkmmeuec.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.949400902 CET	192.168.2.24	1.1.1.1	0x783d	Standard query (0)	smoswyoekkccyuga.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.961889029 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	smoswyoekkccyuga.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:24.430093050 CET	192.168.2.24	1.1.1.1	0xe0e2	Standard query (0)	suwkomiqcykeyako.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:24.452883005 CET	192.168.2.24	1.1.1.1	0xdb2c	Standard query (0)	smwsugycuuckemue.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:24.469192982 CET	192.168.2.24	1.1.1.1	0xd146	Standard query (0)	qigcqiaomwieqwka.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:24.481298923 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	qigcqiaomwieqwka.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:24.931720018 CET	192.168.2.24	1.1.1.1	0x5e41	Standard query (0)	oekcyqqggaegsesm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:24.943759918 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	oekcyqqggaegsesm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:25.421572924 CET	192.168.2.24	1.1.1.1	0x458a	Standard query (0)	qcoysaaooaiccqyu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:25.437705994 CET	192.168.2.24	1.1.1.1	0x8cdd	Standard query (0)	mismuqiygyeysaoo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:25.459498882 CET	192.168.2.24	1.1.1.1	0x1c07	Standard query (0)	wockoyekyageakcg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:25.480678082 CET	192.168.2.24	1.1.1.1	0x2ce8	Standard query (0)	ososokqeakgguwsq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:25.493237019 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ososokqeakgguwsq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:25.953659058 CET	192.168.2.24	1.1.1.1	0xd1b8	Standard query (0)	wcgqccqcugomywua.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:25.965560913 CET	192.168.2.24	1.1.1.1	0x20b1	Standard query (0)	aqaqgemescmwsqks.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:25.977641106 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	aqaqgemescmwsqks.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:26.431230068 CET	192.168.2.24	1.1.1.1	0xcbfd	Standard query (0)	aqiwocaywcswuwsq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:26.440676928 CET	192.168.2.24	1.1.1.1	0x9549	Standard query (0)	aqgmgoqcoqqkguyk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:26.450021982 CET	192.168.2.24	1.1.1.1	0xf35c	Standard query (0)	oywgqkusocouysua.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:26.462322950 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	oywgqkusocouysua.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:26.948704004 CET	192.168.2.24	1.1.1.1	0x5160	Standard query (0)	uyygagweoagcuqky.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:26.972976923 CET	192.168.2.24	1.1.1.1	0x5160	Standard query (0)	uyygagweoagcuqky.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:26.980125904 CET	192.168.2.24	1.1.1.1	0xcc55	Standard query (0)	muiccguyaeaqwweg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:26.993737936 CET	192.168.2.24	1.1.1.1	0xa2fc	Standard query (0)	qiqueqokwqqgwwci.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:27.007293940 CET	192.168.2.24	1.1.1.1	0xc3e2	Standard query (0)	uygmgoymcwcgkios.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:27.023909092 CET	192.168.2.24	1.1.1.1	0xf581	Standard query (0)	qiyggmguowygeooc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:27.044362068 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	qiyggmguowygeooc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:27.501923084 CET	192.168.2.24	1.1.1.1	0xf15b	Standard query (0)	acacoiqgoimayqwm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:27.510682106 CET	192.168.2.24	1.1.1.1	0xca48	Standard query (0)	smisyqewaummmwoc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:27.522572041 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	smisyqewaummmwoc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.000598907 CET	192.168.2.24	1.1.1.1	0x4361	Standard query (0)	mumuqocoisaucwmq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.014134884 CET	192.168.2.24	1.1.1.1	0x9c00	Standard query (0)	qqoawmqqwqcusmee.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.022818089 CET	192.168.2.24	1.1.1.1	0x69	Standard query (0)	qcygacuamqqugcck.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.031689882 CET	192.168.2.24	1.1.1.1	0xb570	Standard query (0)	kkiigoymgkmoggoq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.040350914 CET	192.168.2.24	1.1.1.1	0x87b8	Standard query (0)	qqmicqemgcgieoau.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.049876928 CET	192.168.2.24	1.1.1.1	0xb42c	Standard query (0)	sagymwuwgeucsmac.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.058912039 CET	192.168.2.24	1.1.1.1	0xa524	Standard query (0)	igmqooiwioymwkcm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.070995092 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	igmqooiwioymwkcm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.532510996 CET	192.168.2.24	1.1.1.1	0xac3e	Standard query (0)	osyqameakgkceeog.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.541731119 CET	192.168.2.24	1.1.1.1	0x867c	Standard query (0)	sgigamoeiwksoecq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.554070950 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	sgigamoeiwksoecq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.025772095 CET	192.168.2.24	1.1.1.1	0xf421	Standard query (0)	keckssemmeoqieqe.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.038079023 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	keckssemmeoqieqe.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.489888906 CET	192.168.2.24	1.1.1.1	0x6e88	Standard query (0)	caysswwugsmkeksw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.502506971 CET	192.168.2.24	1.1.1.1	0x7e81	Standard query (0)	cgiamwsqgcmqgqse.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.543068886 CET	192.168.2.24	1.1.1.1	0x7e81	Standard query (0)	cgiamwsqgcmqgqse.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.625844002 CET	192.168.2.24	1.1.1.1	0x2c5d	Standard query (0)	uyeqwcuyimescesu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.639657021 CET	192.168.2.24	1.1.1.1	0xaf49	Standard query (0)	ekiwqiyewuiqoemo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.661207914 CET	192.168.2.24	1.1.1.1	0x137e	Standard query (0)	oeakuqueisysswcg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.692512035 CET	192.168.2.24	1.1.1.1	0x9323	Standard query (0)	acemcwecgiqcukys.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.713884115 CET	192.168.2.24	1.1.1.1	0xc0f	Standard query (0)	qcwaiaiqiwcakawa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.725514889 CET	192.168.2.24	1.1.1.1	0xc700	Standard query (0)	esyiocqieemagwmo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.744436026 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	esyiocqieemagwmo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:30.243760109 CET	192.168.2.24	1.1.1.1	0xae10	Standard query (0)	kqsakygykwusqams.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:30.256026983 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	kqsakygykwusqams.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:30.702933073 CET	192.168.2.24	1.1.1.1	0x86f7	Standard query (0)	ymygkkggyigeqcqe.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:30.718791008 CET	192.168.2.24	1.1.1.1	0x86f7	Standard query (0)	ymygkkggyigeqcqe.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:30.723006010 CET	192.168.2.24	1.1.1.1	0x7c52	Standard query (0)	qqqkagyoymmosuyo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:30.736917973 CET	192.168.2.24	1.1.1.1	0x6338	Standard query (0)	moiimkscmiswaesw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:30.746009111 CET	192.168.2.24	1.1.1.1	0x5545	Standard query (0)	igkiociagqsacmwa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:30.758275032 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	igkiociagqsacmwa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:31.210993052 CET	192.168.2.24	1.1.1.1	0x14aa	Standard query (0)	ymugwyokyyccykmw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:31.233237982 CET	192.168.2.24	1.1.1.1	0x9908	Standard query (0)	gieksqwccmmqkemm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:31.245203018 CET	192.168.2.24	1.1.1.1	0x7fc7	Standard query (0)	iaueigwgocakgsku.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:31.262489080 CET	192.168.2.24	1.1.1.1	0x9b04	Standard query (0)	sgsasqgwayeckgoy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:31.281687975 CET	192.168.2.24	1.1.1.1	0x1e2d	Standard query (0)	kwogawueykiiumao.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:31.294086933 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	kwogawueykiiumao.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:31.771523952 CET	192.168.2.24	1.1.1.1	0x66a4	Standard query (0)	iagmkeayqmuowswy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:31.785233974 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	iagmkeayqmuowswy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:32.253971100 CET	192.168.2.24	1.1.1.1	0xeb7e	Standard query (0)	yyyagyakeciucagk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:32.267000914 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	yyyagyakeciucagk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:32.725843906 CET	192.168.2.24	1.1.1.1	0x80c6	Standard query (0)	isukyiwyscosaaqc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:32.735415936 CET	192.168.2.24	1.1.1.1	0x541f	Standard query (0)	goicqsmskkygkkka.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:32.747623920 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	goicqsmskkygkkka.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:33.198491096 CET	192.168.2.24	1.1.1.1	0xa199	Standard query (0)	awacwkqgsoomimye.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:33.213371038 CET	192.168.2.24	1.1.1.1	0xdf43	Standard query (0)	iaawaweqwceogamg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:33.232292891 CET	192.168.2.24	1.1.1.1	0xd85a	Standard query (0)	kqueagsoikuyocca.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:33.243629932 CET	192.168.2.24	1.1.1.1	0x2074	Standard query (0)	momoqikcaksewaua.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:33.258949041 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	momoqikcaksewaua.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:33.727652073 CET	192.168.2.24	1.1.1.1	0xded1	Standard query (0)	suagiqkqmkgysmiw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:33.737638950 CET	192.168.2.24	1.1.1.1	0xe7a5	Standard query (0)	gcwequgwyimwymsa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:33.755304098 CET	192.168.2.24	1.1.1.1	0xb37d	Standard query (0)	igywsgwooemqiuss.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:33.771301985 CET	192.168.2.24	1.1.1.1	0x2223	Standard query (0)	wikiagqsmeeaeegy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:33.784714937 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	wikiagqsmeeaeegy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:34.230263948 CET	192.168.2.24	1.1.1.1	0x9413	Standard query (0)	eeoeukoqgiwsumsu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:34.246959925 CET	192.168.2.24	1.1.1.1	0x19d5	Standard query (0)	ygooiessycewaocg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:34.264121056 CET	192.168.2.24	1.1.1.1	0xbcfa	Standard query (0)	qcqgssmagywqcgws.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:34.276128054 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	qcqgssmagywqcgws.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:34.748677969 CET	192.168.2.24	1.1.1.1	0x8c37	Standard query (0)	goiikukwyyauemqc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:34.763559103 CET	192.168.2.24	1.1.1.1	0xf7bb	Standard query (0)	comuwmkimocayeeu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:34.776524067 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	comuwmkimocayeeu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:35.277103901 CET	192.168.2.24	1.1.1.1	0x55	Standard query (0)	isgasoomksiwqcmg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:35.305156946 CET	192.168.2.24	1.1.1.1	0x2acb	Standard query (0)	qigismmgwsiseyuu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:35.334341049 CET	192.168.2.24	1.1.1.1	0x5dfc	Standard query (0)	wuqggcwmoscwykwg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:35.348742962 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	wuqggcwmoscwykwg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:35.816585064 CET	192.168.2.24	1.1.1.1	0x1e05	Standard query (0)	qceawaaswmsuekmu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:35.828824043 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	qceawaaswmsuekmu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:36.288147926 CET	192.168.2.24	1.1.1.1	0xecdc	Standard query (0)	ygucsucmagwqsqcu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:36.303168058 CET	192.168.2.24	1.1.1.1	0xc437	Standard query (0)	giuccqyqokookyue.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:36.316204071 CET	192.168.2.24	1.1.1.1	0x2f45	Standard query (0)	gceesusqmuockkgw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:36.326848030 CET	192.168.2.24	1.1.1.1	0x9ff3	Standard query (0)	ygesoycecmkuwayg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:36.338598013 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ygesoycecmkuwayg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:36.807224989 CET	192.168.2.24	1.1.1.1	0x7f37	Standard query (0)	sasqgsyksiccuuws.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:36.820916891 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	sasqgsyksiccuuws.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:37.275146008 CET	192.168.2.24	1.1.1.1	0x3a77	Standard query (0)	qwggykgwkqoceiuo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:37.294492006 CET	192.168.2.24	1.1.1.1	0x68b7	Standard query (0)	wiguisuayimaukgu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:37.304229975 CET	192.168.2.24	1.1.1.1	0x140e	Standard query (0)	qcwcgegyyieaoqca.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:37.316173077 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	qcwcgegyyieaoqca.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:37.796998978 CET	192.168.2.24	1.1.1.1	0x9f8e	Standard query (0)	gwcyyawigmwceaqi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:37.835746050 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	gwcyyawigmwceaqi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.323410988 CET	192.168.2.24	1.1.1.1	0x5c6	Standard query (0)	mueuwcqsioowsmce.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.346529007 CET	192.168.2.24	1.1.1.1	0x5c6	Standard query (0)	mueuwcqsioowsmce.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.361723900 CET	192.168.2.24	1.1.1.1	0x5be1	Standard query (0)	qiewcykmuuacuoyk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.395545959 CET	192.168.2.24	1.1.1.1	0x9956	Standard query (0)	coayaokeissieqcc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.419837952 CET	192.168.2.24	1.1.1.1	0x84b3	Standard query (0)	oeooiqokqsqcsaig.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.433651924 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	oeooiqokqsqcsaig.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.916804075 CET	192.168.2.24	1.1.1.1	0xee2b	Standard query (0)	masegmsiqgamiugm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.934758902 CET	192.168.2.24	1.1.1.1	0xdce9	Standard query (0)	smwywssyyaciqkae.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.952347040 CET	192.168.2.24	1.1.1.1	0x3d2f	Standard query (0)	aweqoooqomueeiwi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.961714983 CET	192.168.2.24	1.1.1.1	0xc06c	Standard query (0)	akasikewaomyiwqk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.973855972 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	akasikewaomyiwqk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:39.436211109 CET	192.168.2.24	1.1.1.1	0x582d	Standard query (0)	oyyamqygcecqocmq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:39.453779936 CET	192.168.2.24	1.1.1.1	0x582d	Standard query (0)	oyyamqygcecqocmq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:39.593569040 CET	192.168.2.24	1.1.1.1	0xb898	Standard query (0)	qwikoqqgiayyuakq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:39.610353947 CET	192.168.2.24	1.1.1.1	0xb898	Standard query (0)	qwikoqqgiayyuakq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:39.616847038 CET	192.168.2.24	1.1.1.1	0x9291	Standard query (0)	miqcugomwgmygyoq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:39.627171040 CET	192.168.2.24	1.1.1.1	0x92ce	Standard query (0)	wiccyamsgmuqoeoy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:39.635907888 CET	192.168.2.24	1.1.1.1	0xe434	Standard query (0)	ymeiqyyqqyaaygie.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:39.648863077 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ymeiqyyqqyaaygie.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:40.099478006 CET	192.168.2.24	1.1.1.1	0x79b5	Standard query (0)	wiomcwmascsigags.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:40.120229006 CET	192.168.2.24	1.1.1.1	0x7d1f	Standard query (0)	awgyuqqswicwkqcs.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:40.133706093 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	awgyuqqswicwkqcs.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:40.603019953 CET	192.168.2.24	1.1.1.1	0x69b3	Standard query (0)	iacisiamimiiqyeo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:40.628751993 CET	192.168.2.24	1.1.1.1	0xc382	Standard query (0)	wogawoqysgiockwa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:40.674817085 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	wogawoqysgiockwa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.129829884 CET	192.168.2.24	1.1.1.1	0xf543	Standard query (0)	mayykkuyeuiggyws.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.138742924 CET	192.168.2.24	1.1.1.1	0x4f5a	Standard query (0)	cosaygigqegeyewi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.156725883 CET	192.168.2.24	1.1.1.1	0x4f5a	Standard query (0)	cosaygigqegeyewi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.157495975 CET	192.168.2.24	1.1.1.1	0x4087	Standard query (0)	ekqyosgcumkcecmo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.175734997 CET	192.168.2.24	1.1.1.1	0xe295	Standard query (0)	qimmkmaumumswocw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.187621117 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	qimmkmaumumswocw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.641828060 CET	192.168.2.24	1.1.1.1	0x1970	Standard query (0)	acqaagqgmsmeouce.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.665498972 CET	192.168.2.24	1.1.1.1	0x154e	Standard query (0)	awasockiaymagmci.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.678529978 CET	192.168.2.24	1.1.1.1	0x12e1	Standard query (0)	akuyqkmomwqyiyow.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.687565088 CET	192.168.2.24	1.1.1.1	0x549b	Standard query (0)	caceukeeygaaqaec.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.696898937 CET	192.168.2.24	1.1.1.1	0x3c8f	Standard query (0)	qwcaikouwwekssco.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.709743977 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	qwcaikouwwekssco.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.158030987 CET	192.168.2.24	1.1.1.1	0xc426	Standard query (0)	qqioykeogcwkowgq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.170188904 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	qqioykeogcwkowgq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.635392904 CET	192.168.2.24	1.1.1.1	0xc19b	Standard query (0)	igeqissugeuswaus.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.657080889 CET	192.168.2.24	1.1.1.1	0xc19b	Standard query (0)	igeqissugeuswaus.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.660060883 CET	192.168.2.24	1.1.1.1	0xc6df	Standard query (0)	osoawyeyassgycgy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.669012070 CET	192.168.2.24	1.1.1.1	0xe34	Standard query (0)	cuaumuqcoeegomsq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.688859940 CET	192.168.2.24	1.1.1.1	0xe34	Standard query (0)	cuaumuqcoeegomsq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.691206932 CET	192.168.2.24	1.1.1.1	0x23b7	Standard query (0)	oyogquqkmyqwwkuq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.700886011 CET	192.168.2.24	1.1.1.1	0xe37b	Standard query (0)	gwyougsgeaaoiumg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.719527960 CET	192.168.2.24	1.1.1.1	0xe37b	Standard query (0)	gwyougsgeaaoiumg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.720467091 CET	192.168.2.24	1.1.1.1	0xfedb	Standard query (0)	ukeoemaaimqyuais.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.729851007 CET	192.168.2.24	1.1.1.1	0xae0b	Standard query (0)	oewuwcsmaacckewa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.738919020 CET	192.168.2.24	1.1.1.1	0x7507	Standard query (0)	esykokiigsgwcwsa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.747859001 CET	192.168.2.24	1.1.1.1	0xaa1f	Standard query (0)	ekgqymkkqiwogqsy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.757524967 CET	192.168.2.24	1.1.1.1	0xfb78	Standard query (0)	wueossewygqoakoq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.769741058 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	wueossewygqoakoq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:43.342024088 CET	192.168.2.24	1.1.1.1	0x60e	Standard query (0)	isceiesauogasmoo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:43.355041981 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	isceiesauogasmoo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:43.866225004 CET	192.168.2.24	1.1.1.1	0x6703	Standard query (0)	giscmywoiaqmqcmw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:43.877727032 CET	192.168.2.24	1.1.1.1	0x9d74	Standard query (0)	uyqweoyukcewugsu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:43.887540102 CET	192.168.2.24	1.1.1.1	0xaa74	Standard query (0)	imuscegymggagewg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:43.897986889 CET	192.168.2.24	1.1.1.1	0x978f	Standard query (0)	wgesgakysuqaewik.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:43.907449961 CET	192.168.2.24	1.1.1.1	0xb435	Standard query (0)	uwoyyqgiwowysqou.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:43.918952942 CET	192.168.2.24	1.1.1.1	0xa44b	Standard query (0)	syaouwwyoaemeekm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:43.931025028 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	syaouwwyoaemeekm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:44.399985075 CET	192.168.2.24	1.1.1.1	0x413e	Standard query (0)	aoscugususamokuy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:44.425548077 CET	192.168.2.24	1.1.1.1	0x413e	Standard query (0)	aoscugususamokuy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:44.431009054 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	aoscugususamokuy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:44.886271000 CET	192.168.2.24	1.1.1.1	0x8c8c	Standard query (0)	qucyaygweeasqeoy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:44.903026104 CET	192.168.2.24	1.1.1.1	0xd4cb	Standard query (0)	uiwwamyuymycooey.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:44.912245035 CET	192.168.2.24	1.1.1.1	0xf935	Standard query (0)	iygukwyuqwiuoqmi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:44.931449890 CET	192.168.2.24	1.1.1.1	0x5f51	Standard query (0)	koaeaguekwcaousw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:44.943700075 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	koaeaguekwcaousw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:45.402514935 CET	192.168.2.24	1.1.1.1	0x497c	Standard query (0)	skssioqkemoiieaa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:45.414812088 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	skssioqkemoiieaa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:45.880826950 CET	192.168.2.24	1.1.1.1	0x5310	Standard query (0)	yewomygmueegmoqi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:45.903875113 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	yewomygmueegmoqi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:46.361975908 CET	192.168.2.24	1.1.1.1	0xac63	Standard query (0)	kuyoukwwacqkcoyo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:46.372015953 CET	192.168.2.24	1.1.1.1	0xdd28	Standard query (0)	gmcqgmkyguwkskyg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:46.386112928 CET	192.168.2.24	1.1.1.1	0xdec0	Standard query (0)	mygiqcqokowwmgqq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:46.395539045 CET	192.168.2.24	1.1.1.1	0x8b88	Standard query (0)	cymogqmasaiiwmww.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:46.405494928 CET	192.168.2.24	1.1.1.1	0xc79d	Standard query (0)	iykumkamcykgicyi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:46.418191910 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	iykumkamcykgicyi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:46.944241047 CET	192.168.2.24	1.1.1.1	0xcbee	Standard query (0)	cyemcqwkasuimkgs.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:46.956916094 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	cyemcqwkasuimkgs.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:47.437151909 CET	192.168.2.24	1.1.1.1	0xfb09	Standard query (0)	ieqeeiggkuqcomyo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:47.448661089 CET	192.168.2.24	1.1.1.1	0xc3bb	Standard query (0)	ssmkyomikukusksu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:47.458210945 CET	192.168.2.24	1.1.1.1	0x8e7b	Standard query (0)	kimakioiwmawksiw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:47.467911959 CET	192.168.2.24	1.1.1.1	0x1cab	Standard query (0)	qumssmeysccykkyo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:47.480751038 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	qumssmeysccykkyo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:47.950680971 CET	192.168.2.24	1.1.1.1	0x3a25	Standard query (0)	ykuoaucocogcwoky.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:47.967102051 CET	192.168.2.24	1.1.1.1	0x8801	Standard query (0)	semyssioekmosauo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:47.980259895 CET	192.168.2.24	1.1.1.1	0xc29f	Standard query (0)	aiiqyyikowqaygwy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:47.992635965 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	aiiqyyikowqaygwy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.535126925 CET	192.168.2.24	1.1.1.1	0xd0ac	Standard query (0)	kouumoyqiuckkcau.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.605293036 CET	192.168.2.24	1.1.1.1	0x6738	Standard query (0)	qgwkkkyicoqmooqu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.628005028 CET	192.168.2.24	1.1.1.1	0x6738	Standard query (0)	qgwkkkyicoqmooqu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.671943903 CET	192.168.2.24	1.1.1.1	0x646	Standard query (0)	uwwcocucusmeguaw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.686690092 CET	192.168.2.24	1.1.1.1	0x57ad	Standard query (0)	cekggiciueyeyoku.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.705483913 CET	192.168.2.24	1.1.1.1	0x57ad	Standard query (0)	cekggiciueyeyoku.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.708758116 CET	192.168.2.24	1.1.1.1	0x80c6	Standard query (0)	iqqeoamqwiuiyuua.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.725128889 CET	192.168.2.24	1.1.1.1	0x18c5	Standard query (0)	uokqmokseqqakiui.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.738651037 CET	192.168.2.24	1.1.1.1	0x315e	Standard query (0)	cyqqgacqkowwkqqe.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.758143902 CET	192.168.2.24	1.1.1.1	0x21f9	Standard query (0)	cmqqeimyycgqwsgg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.770262957 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	cmqqeimyycgqwsgg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.228447914 CET	192.168.2.24	1.1.1.1	0x6e12	Standard query (0)	wmgeoqqiwqcmimwu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.250929117 CET	192.168.2.24	1.1.1.1	0x6e12	Standard query (0)	wmgeoqqiwqcmimwu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.252207994 CET	192.168.2.24	1.1.1.1	0x82f2	Standard query (0)	quyckaioggawuois.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.267746925 CET	192.168.2.24	1.1.1.1	0xfa42	Standard query (0)	eqciawooemoueyqu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.277575016 CET	192.168.2.24	1.1.1.1	0x5fa6	Standard query (0)	oqoaumkywacmuwwm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.286647081 CET	192.168.2.24	1.1.1.1	0x60b1	Standard query (0)	ewueyekksqksycww.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.295958996 CET	192.168.2.24	1.1.1.1	0xefe5	Standard query (0)	csmasucykosuwouy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.308352947 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	csmasucykosuwouy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.757328987 CET	192.168.2.24	1.1.1.1	0xca37	Standard query (0)	seeogeqwsqmsoaqe.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.768277884 CET	192.168.2.24	1.1.1.1	0x64b6	Standard query (0)	gusmkkaiomeeqaiy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.780374050 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	gusmkkaiomeeqaiy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:50.243944883 CET	192.168.2.24	1.1.1.1	0x5ded	Standard query (0)	msyecoiqeyqeiquy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:50.256661892 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	msyecoiqeyqeiquy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:50.709264994 CET	192.168.2.24	1.1.1.1	0x9e52	Standard query (0)	skawoueawceoywsy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:50.719688892 CET	192.168.2.24	1.1.1.1	0x582a	Standard query (0)	iyuaqococuqcsgii.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:50.728970051 CET	192.168.2.24	1.1.1.1	0x3fb	Standard query (0)	kuyaasckcgacyesi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:50.738356113 CET	192.168.2.24	1.1.1.1	0x67cb	Standard query (0)	aaeqiiecqqumcgky.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:50.754565001 CET	192.168.2.24	1.1.1.1	0x1a8	Standard query (0)	aawiysageawcoyok.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:50.767010927 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	aawiysageawcoyok.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:51.225862980 CET	192.168.2.24	1.1.1.1	0x168	Standard query (0)	yqysoaosqewciiww.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:51.238360882 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	yqysoaosqewciiww.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:51.714121103 CET	192.168.2.24	1.1.1.1	0xf265	Standard query (0)	yessywkwcwmyewqe.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:51.734599113 CET	192.168.2.24	1.1.1.1	0x7c50	Standard query (0)	aueiqscgeicewaoo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:51.747061968 CET	192.168.2.24	1.1.1.1	0xff0	Standard query (0)	uccsgcekiwcyucou.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:51.758927107 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	uccsgcekiwcyucou.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:52.210968971 CET	192.168.2.24	1.1.1.1	0xc5f9	Standard query (0)	aiumyocycyyikiwc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:52.221875906 CET	192.168.2.24	1.1.1.1	0x4297	Standard query (0)	aoqayemwgmsyuimi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:52.234028101 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	aoqayemwgmsyuimi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:52.699274063 CET	192.168.2.24	1.1.1.1	0xc588	Standard query (0)	mmiowgeswucumqae.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:52.708534956 CET	192.168.2.24	1.1.1.1	0x64b7	Standard query (0)	mmiugosumuqmuqoc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:52.721080065 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	mmiugosumuqmuqoc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:53.178122044 CET	192.168.2.24	1.1.1.1	0xecab	Standard query (0)	ecqisawmymscauow.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:53.187463045 CET	192.168.2.24	1.1.1.1	0x5636	Standard query (0)	iyoqqeicqoquiqka.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:53.199738979 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	iyoqqeicqoquiqka.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:53.652326107 CET	192.168.2.24	1.1.1.1	0xf032	Standard query (0)	ecoqwiswmwqokmay.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:53.664772987 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ecoqwiswmwqokmay.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:54.158602953 CET	192.168.2.24	1.1.1.1	0x2c7	Standard query (0)	ceckmwoyqkwgeoqg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:54.171762943 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ceckmwoyqkwgeoqg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:54.631742001 CET	192.168.2.24	1.1.1.1	0x49a9	Standard query (0)	kcoiygiwuyqyaoku.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:54.653933048 CET	192.168.2.24	1.1.1.1	0xad70	Standard query (0)	aaeyckqsgmiqsgew.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:54.667790890 CET	192.168.2.24	1.1.1.1	0xca	Standard query (0)	qgaiosyouwwkgsmm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:54.677953005 CET	192.168.2.24	1.1.1.1	0x77b5	Standard query (0)	ocqseueommkkqcgs.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:54.693422079 CET	192.168.2.24	1.1.1.1	0xbbe	Standard query (0)	owmesaosmycoeceq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:54.705766916 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	owmesaosmycoeceq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:55.156117916 CET	192.168.2.24	1.1.1.1	0x24e9	Standard query (0)	qokauaicweuwscac.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:55.168749094 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	qokauaicweuwscac.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:55.618685007 CET	192.168.2.24	1.1.1.1	0x8d3c	Standard query (0)	sewmmwqeyauowwwo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:55.628465891 CET	192.168.2.24	1.1.1.1	0x1449	Standard query (0)	mmgowiccqoeomagq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:55.640741110 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	mmgowiccqoeomagq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:56.158207893 CET	192.168.2.24	1.1.1.1	0x9258	Standard query (0)	kcwiywyygywkkysk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:56.168210030 CET	192.168.2.24	1.1.1.1	0xd383	Standard query (0)	syiysgiqgqggqkoc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:56.196665049 CET	192.168.2.24	1.1.1.1	0xd383	Standard query (0)	syiysgiqgqggqkoc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:56.197379112 CET	192.168.2.24	1.1.1.1	0x6055	Standard query (0)	ykuasckuceswseig.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:56.217052937 CET	192.168.2.24	1.1.1.1	0xdfc8	Standard query (0)	quugmiumsieaiyys.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:56.226336956 CET	192.168.2.24	1.1.1.1	0xb2a4	Standard query (0)	ikqywgcqaggogqsa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:56.238293886 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ikqywgcqaggogqsa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:56.707268953 CET	192.168.2.24	1.1.1.1	0xf7ef	Standard query (0)	eqyamamqwsseyoig.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:56.719769955 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	eqyamamqwsseyoig.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.305696964 CET	192.168.2.24	1.1.1.1	0x1075	Standard query (0)	seqkawokggwucsui.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.315809011 CET	192.168.2.24	1.1.1.1	0xc428	Standard query (0)	gmqeqkcqackwkgao.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.328069925 CET	192.168.2.24	1.1.1.1	0x148	Standard query (0)	guowewgekuoqacyy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.345067024 CET	192.168.2.24	1.1.1.1	0x148	Standard query (0)	guowewgekuoqacyy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.348300934 CET	192.168.2.24	1.1.1.1	0x65c8	Standard query (0)	aaokyscqeecowaci.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.357877970 CET	192.168.2.24	1.1.1.1	0x30f5	Standard query (0)	ywywwwgwekicgico.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.368470907 CET	192.168.2.24	1.1.1.1	0x8fd3	Standard query (0)	wsisaoaauqwmuomg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.381979942 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	wsisaoaauqwmuomg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.830673933 CET	192.168.2.24	1.1.1.1	0xe413	Standard query (0)	koouumcuucaeakye.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.840384960 CET	192.168.2.24	1.1.1.1	0x22d9	Standard query (0)	okccisioeycusekg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.857991934 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	okccisioeycusekg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:58.321316004 CET	192.168.2.24	1.1.1.1	0xf0bb	Standard query (0)	cymymsciyaiacwgw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:58.342452049 CET	192.168.2.24	1.1.1.1	0x4c18	Standard query (0)	aoyeoimcuuqakckw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:58.351850033 CET	192.168.2.24	1.1.1.1	0x2d6	Standard query (0)	qoaweokuqggaymks.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:58.365576982 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	qoaweokuqggaymks.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:58.836230993 CET	192.168.2.24	1.1.1.1	0xb9aa	Standard query (0)	ewuyacewswkoueqw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:58.848932028 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ewuyacewswkoueqw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:59.296159983 CET	192.168.2.24	1.1.1.1	0xc79c	Standard query (0)	kiuymkmaomciimcc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:59.307811022 CET	192.168.2.24	1.1.1.1	0x243a	Standard query (0)	oqaiyaoqwyeswaiy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:59.320796967 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	oqaiyaoqwyeswaiy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:59.779519081 CET	192.168.2.24	1.1.1.1	0x200	Standard query (0)	koyokggaqsagggym.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:59.793065071 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	koyokggaqsagggym.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:00.245742083 CET	192.168.2.24	1.1.1.1	0x96a8	Standard query (0)	cmsuagygagqceocm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:00.256021976 CET	192.168.2.24	1.1.1.1	0xfaf8	Standard query (0)	uisgoqaoksgqsqyg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:00.268280029 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	uisgoqaoksgqsqyg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:00.722721100 CET	192.168.2.24	1.1.1.1	0xddf6	Standard query (0)	ocgcqsagaakgkcma.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:00.732727051 CET	192.168.2.24	1.1.1.1	0x600d	Standard query (0)	okgigkmiieweagia.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:00.750924110 CET	192.168.2.24	1.1.1.1	0x9afb	Standard query (0)	skiwkmaaeeiqqgee.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:00.763058901 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	skiwkmaaeeiqqgee.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.231218100 CET	192.168.2.24	1.1.1.1	0xa3ab	Standard query (0)	aagokgyaswscyaeu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.251090050 CET	192.168.2.24	1.1.1.1	0xa3ab	Standard query (0)	aagokgyaswscyaeu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.253653049 CET	192.168.2.24	1.1.1.1	0x35c2	Standard query (0)	gmciuwiycsqycggy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.263226032 CET	192.168.2.24	1.1.1.1	0x49f2	Standard query (0)	ggeymcaisciikucq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.281806946 CET	192.168.2.24	1.1.1.1	0x49f2	Standard query (0)	ggeymcaisciikucq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.282864094 CET	192.168.2.24	1.1.1.1	0x6ee7	Standard query (0)	uwskygguegqkasme.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.299685001 CET	192.168.2.24	1.1.1.1	0x59eb	Standard query (0)	cyumiiokkswcoeag.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.308680058 CET	192.168.2.24	1.1.1.1	0xb428	Standard query (0)	oqisqmesaeoegmyc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.322397947 CET	192.168.2.24	1.1.1.1	0x1a19	Standard query (0)	wagasowawsoyycom.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.335094929 CET	192.168.2.24	1.1.1.1	0xe84	Standard query (0)	gaguweiwsgouugqe.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.346854925 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	gaguweiwsgouugqe.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.797108889 CET	192.168.2.24	1.1.1.1	0x88f	Standard query (0)	syyyweaywowycsia.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.809422016 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	syyyweaywowycsia.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:02.261008978 CET	192.168.2.24	1.1.1.1	0x3e88	Standard query (0)	mmoycwqiuykiusuy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:02.276226044 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	mmoycwqiuykiusuy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:02.725975990 CET	192.168.2.24	1.1.1.1	0x7ae1	Standard query (0)	ikoycakqiuuascco.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:02.747978926 CET	192.168.2.24	1.1.1.1	0x5ec3	Standard query (0)	cmuqekokuyuqgige.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:02.764380932 CET	192.168.2.24	1.1.1.1	0x6c81	Standard query (0)	cywoimwmsoamqoem.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:02.773142099 CET	192.168.2.24	1.1.1.1	0x241f	Standard query (0)	skyiqyaeoykwcgiw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:02.784976006 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	skyiqyaeoykwcgiw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.244447947 CET	192.168.2.24	1.1.1.1	0x38b0	Standard query (0)	ssiooaeoaocuyaow.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.266310930 CET	192.168.2.24	1.1.1.1	0x38b0	Standard query (0)	ssiooaeoaocuyaow.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.268625021 CET	192.168.2.24	1.1.1.1	0xb979	Standard query (0)	ywmgykycywqqewqw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.284459114 CET	192.168.2.24	1.1.1.1	0x2c91	Standard query (0)	uosaescwmkiyscay.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.303086042 CET	192.168.2.24	1.1.1.1	0x73d9	Standard query (0)	eigywisgeoiskekg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.315088987 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	eigywisgeoiskekg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.772453070 CET	192.168.2.24	1.1.1.1	0x1b3d	Standard query (0)	msqsoggkkoiokugk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.781954050 CET	192.168.2.24	1.1.1.1	0x5dc2	Standard query (0)	cmaaciimeememwao.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.798523903 CET	192.168.2.24	1.1.1.1	0x83ba	Standard query (0)	uigkauqkumywguig.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.814565897 CET	192.168.2.24	1.1.1.1	0x458f	Standard query (0)	wggygeoisauouuoc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.828404903 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	wggygeoisauouuoc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:04.307251930 CET	192.168.2.24	1.1.1.1	0x2fe2	Standard query (0)	okoykokgycygucya.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:04.325448036 CET	192.168.2.24	1.1.1.1	0x159e	Standard query (0)	ewaoowewmsomgaiw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:04.337796926 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ewaoowewmsomgaiw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:04.826165915 CET	192.168.2.24	1.1.1.1	0x5da5	Standard query (0)	ieiegkokewkqmkwe.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:04.836069107 CET	192.168.2.24	1.1.1.1	0xafad	Standard query (0)	gakesieaaickekuo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:04.850893974 CET	192.168.2.24	1.1.1.1	0xab3	Standard query (0)	ecasigiwguqgguyw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:04.883923054 CET	192.168.2.24	1.1.1.1	0xdbee	Standard query (0)	okwswuciummewsui.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:04.898380041 CET	192.168.2.24	1.1.1.1	0x5211	Standard query (0)	ggaqiymaekkywusy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:04.907674074 CET	192.168.2.24	1.1.1.1	0x9bcd	Standard query (0)	ocicimqkgucacyim.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:04.921015978 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ocicimqkgucacyim.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.381552935 CET	192.168.2.24	1.1.1.1	0x8c6b	Standard query (0)	qoyisgoayskswigs.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.393686056 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	qoyisgoayskswigs.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.872486115 CET	192.168.2.24	1.1.1.1	0x340f	Standard query (0)	wsywmuwgsogemomw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.891299963 CET	192.168.2.24	1.1.1.1	0x340f	Standard query (0)	wsywmuwgsogemomw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.894531965 CET	192.168.2.24	1.1.1.1	0x7b55	Standard query (0)	skaeggkkcmoqoywy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.906460047 CET	192.168.2.24	1.1.1.1	0x9aba	Standard query (0)	uowicsywgqmgagyc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.916109085 CET	192.168.2.24	1.1.1.1	0x22f9	Standard query (0)	yqyqgowkwqiggewq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.927639961 CET	192.168.2.24	1.1.1.1	0x3a24	Standard query (0)	aikmggymywuooyqc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.937958002 CET	192.168.2.24	1.1.1.1	0x62de	Standard query (0)	semgkyogsqqwgsmy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.953258991 CET	192.168.2.24	1.1.1.1	0x5d78	Standard query (0)	ucmwywoqciswaguc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.965503931 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ucmwywoqciswaguc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:06.437387943 CET	192.168.2.24	1.1.1.1	0x2b2e	Standard query (0)	qowoagcmkkgqcswk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:06.453191042 CET	192.168.2.24	1.1.1.1	0x98b5	Standard query (0)	mmgusimiaqiweyas.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:06.472815990 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	mmgusimiaqiweyas.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:06.937273979 CET	192.168.2.24	1.1.1.1	0x910c	Standard query (0)	wgssaogcsscmkswu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:06.946696043 CET	192.168.2.24	1.1.1.1	0xab92	Standard query (0)	aoeewogkicikusoc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:06.956526995 CET	192.168.2.24	1.1.1.1	0x1451	Standard query (0)	ikggquqsigykqamc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:06.969701052 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ikggquqsigykqamc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:07.447272062 CET	192.168.2.24	1.1.1.1	0xe02c	Standard query (0)	waaqccyeaeywuoqu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:07.466257095 CET	192.168.2.24	1.1.1.1	0xc24e	Standard query (0)	ecgiqiiieksaooyc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:07.476169109 CET	192.168.2.24	1.1.1.1	0x2dc2	Standard query (0)	iqcogqmwegaqewuu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:07.496179104 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	iqcogqmwegaqewuu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:07.980210066 CET	192.168.2.24	1.1.1.1	0x7c47	Standard query (0)	aiusammkykucyyso.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:07.997256994 CET	192.168.2.24	1.1.1.1	0x36a7	Standard query (0)	qgkswogkcsaeegki.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:08.008275986 CET	192.168.2.24	1.1.1.1	0x8807	Standard query (0)	ywcwqgmikmycwoeu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:08.018413067 CET	192.168.2.24	1.1.1.1	0x610e	Standard query (0)	eiqogaaggeswoges.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:08.031521082 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	eiqogaaggeswoges.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:08.505125046 CET	192.168.2.24	1.1.1.1	0x5525	Standard query (0)	sekqikccsokicgye.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:08.514991999 CET	192.168.2.24	1.1.1.1	0x51b7	Standard query (0)	ssqggwwkkaayqkgk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:08.527204037 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ssqggwwkkaayqkgk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:08.991034985 CET	192.168.2.24	1.1.1.1	0x3cde	Standard query (0)	seiiycgosccmaykm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:09.013711929 CET	192.168.2.24	1.1.1.1	0x90db	Standard query (0)	aosagqwwquakwceq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:09.026261091 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	aosagqwwquakwceq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:09.474716902 CET	192.168.2.24	1.1.1.1	0x310	Standard query (0)	qoiigkweqeiwycuo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:09.488100052 CET	192.168.2.24	1.1.1.1	0x7273	Standard query (0)	oqycmugocqsyuaae.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:09.505403996 CET	192.168.2.24	1.1.1.1	0x7fe8	Standard query (0)	ewwgmiicuyowacum.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:09.523408890 CET	192.168.2.24	1.1.1.1	0xd547	Standard query (0)	mmmoiaecqyuquoya.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:09.535726070 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	mmmoiaecqyuquoya.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:09.993395090 CET	192.168.2.24	1.1.1.1	0x2ea7	Standard query (0)	auscackumyccuyuk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.016653061 CET	192.168.2.24	1.1.1.1	0x2ea7	Standard query (0)	auscackumyccuyuk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.018594980 CET	192.168.2.24	1.1.1.1	0xd140	Standard query (0)	okgquokwaassqyyi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.028213978 CET	192.168.2.24	1.1.1.1	0x4fc7	Standard query (0)	uikciyeoaumwomqo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.047998905 CET	192.168.2.24	1.1.1.1	0x4fc7	Standard query (0)	uikciyeoaumwomqo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.055268049 CET	192.168.2.24	1.1.1.1	0xa1d5	Standard query (0)	gmoguamscceqkamk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.072377920 CET	192.168.2.24	1.1.1.1	0x6338	Standard query (0)	eqgoeemewamgucie.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.085469007 CET	192.168.2.24	1.1.1.1	0x5ed6	Standard query (0)	uoiyoewsiosismow.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.100656033 CET	192.168.2.24	1.1.1.1	0x2a40	Standard query (0)	cekeeosckoouciwe.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.109713078 CET	192.168.2.24	1.1.1.1	0x1c16	Standard query (0)	mycgaaaymgowwicw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.122499943 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	mycgaaaymgowwicw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.582535028 CET	192.168.2.24	1.1.1.1	0xecb5	Standard query (0)	ecgmcmqswickqcgi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.614701986 CET	192.168.2.24	1.1.1.1	0xecb5	Standard query (0)	ecgmcmqswickqcgi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.631608963 CET	192.168.2.24	1.1.1.1	0x3c14	Standard query (0)	guwwqcuqmkmyyyyi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.644655943 CET	192.168.2.24	1.1.1.1	0xe8e3	Standard query (0)	cygmqaagqcuusmiq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.658078909 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	cygmqaagqcuusmiq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:11.106872082 CET	192.168.2.24	1.1.1.1	0xda18	Standard query (0)	wggqoukyeokwgmoy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:11.117172003 CET	192.168.2.24	1.1.1.1	0x7a47	Standard query (0)	okoccmmgswcmakcw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:11.136430979 CET	192.168.2.24	1.1.1.1	0x6e6	Standard query (0)	iesmewkokeqooioo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:11.149507999 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	iesmewkokeqooioo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:11.612986088 CET	192.168.2.24	1.1.1.1	0x533	Standard query (0)	mmiccoqwqmssougs.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:11.632778883 CET	192.168.2.24	1.1.1.1	0xe2dd	Standard query (0)	aoqymkkusuecomsw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:11.644083023 CET	192.168.2.24	1.1.1.1	0xa43	Standard query (0)	mskmgwkuiamqikce.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:11.655090094 CET	192.168.2.24	1.1.1.1	0x3e86	Standard query (0)	waucsgsqqsqkacog.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:11.667606115 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	waucsgsqqsqkacog.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.133668900 CET	192.168.2.24	1.1.1.1	0x7b14	Standard query (0)	yqmqwygosgguwqsu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.143616915 CET	192.168.2.24	1.1.1.1	0xd98d	Standard query (0)	wsicgeayaoueooom.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.155560017 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	wsicgeayaoueooom.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.633668900 CET	192.168.2.24	1.1.1.1	0xec21	Standard query (0)	uwagocmgakuuykiu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.657916069 CET	192.168.2.24	1.1.1.1	0xd114	Standard query (0)	uowkoqwgqqeweume.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.673464060 CET	192.168.2.24	1.1.1.1	0xc58e	Standard query (0)	aakowgaeoeuekqyc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.684674025 CET	192.168.2.24	1.1.1.1	0xacd5	Standard query (0)	skmmaauasaqywsas.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.704273939 CET	192.168.2.24	1.1.1.1	0xacd5	Standard query (0)	skmmaauasaqywsas.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.705975056 CET	192.168.2.24	1.1.1.1	0xb4b4	Standard query (0)	cygeomikesiegqsk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.715785027 CET	192.168.2.24	1.1.1.1	0x8b04	Standard query (0)	okeyuasamkcqqeka.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.725678921 CET	192.168.2.24	1.1.1.1	0xac04	Standard query (0)	qagaeyiqsgakegya.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.750571966 CET	192.168.2.24	1.1.1.1	0xc2bc	Standard query (0)	ucoweesewcwiosgw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.762948036 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ucoweesewcwiosgw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:13.261156082 CET	192.168.2.24	1.1.1.1	0xb33f	Standard query (0)	sskawiyqmweogyqi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:13.275444984 CET	192.168.2.24	1.1.1.1	0xdfe9	Standard query (0)	wgwmaeskqmwumwkk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:13.289608002 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	wgwmaeskqmwumwkk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:13.747556925 CET	192.168.2.24	1.1.1.1	0xaa74	Standard query (0)	quwocusecekwqkaw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:13.756936073 CET	192.168.2.24	1.1.1.1	0x13e1	Standard query (0)	qukyogcwsgswyayo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:13.766832113 CET	192.168.2.24	1.1.1.1	0x15e8	Standard query (0)	uiicikumwwsmaeem.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:13.778657913 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	uiicikumwwsmaeem.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:14.227895975 CET	192.168.2.24	1.1.1.1	0xb930	Standard query (0)	wagyuykcqmqyygkw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:14.238038063 CET	192.168.2.24	1.1.1.1	0x71f	Standard query (0)	uiaqcykmqwcwgmeg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:14.250799894 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	uiaqcykmqwcwgmeg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:14.740561008 CET	192.168.2.24	1.1.1.1	0x4570	Standard query (0)	uoeukcckqmmsuwaa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:14.764684916 CET	192.168.2.24	1.1.1.1	0x7694	Standard query (0)	gugueqckkyuaeqqy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:14.802602053 CET	192.168.2.24	1.1.1.1	0x30b8	Standard query (0)	skqsqowayeqesqqk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:14.826045990 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	skqsqowayeqesqqk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:15.272989988 CET	192.168.2.24	1.1.1.1	0x7ee2	Standard query (0)	kuscomokgkmaommk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:15.284218073 CET	192.168.2.24	1.1.1.1	0x3e52	Standard query (0)	wsmyawqeqguacwas.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:15.300976038 CET	192.168.2.24	1.1.1.1	0xc2e0	Standard query (0)	ikuqcsooiucogaww.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:15.312896013 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ikuqcsooiucogaww.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:15.830001116 CET	192.168.2.24	1.1.1.1	0x5ce5	Standard query (0)	iysmukmcmacuomic.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:15.839848042 CET	192.168.2.24	1.1.1.1	0x652f	Standard query (0)	ecqoqckqoaogcesy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:15.862595081 CET	192.168.2.24	1.1.1.1	0x33fc	Standard query (0)	iesmkwqgmkmksgam.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:15.880434036 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	iesmkwqgmkmksgam.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:16.326617956 CET	192.168.2.24	1.1.1.1	0x43f8	Standard query (0)	guwououoomacaysu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:16.338721037 CET	192.168.2.24	1.1.1.1	0x34c2	Standard query (0)	ucsoeygscgagowqw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:16.352267981 CET	192.168.2.24	1.1.1.1	0x705e	Standard query (0)	ykeuawieaequiyag.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:16.361939907 CET	192.168.2.24	1.1.1.1	0xa78d	Standard query (0)	cskowwiekeqaakki.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:16.372358084 CET	192.168.2.24	1.1.1.1	0x2ce0	Standard query (0)	ecogmmaysgwkmwqm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:16.385200977 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ecogmmaysgwkmwqm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:16.834489107 CET	192.168.2.24	1.1.1.1	0x57f3	Standard query (0)	uwuomysuqkaykwuy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:16.856667995 CET	192.168.2.24	1.1.1.1	0xc97d	Standard query (0)	ikqokmauuissyuce.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:16.871850967 CET	192.168.2.24	1.1.1.1	0x7617	Standard query (0)	oeeoucsuawuqkqoi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:16.884193897 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	oeeoucsuawuqkqoi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:17.331005096 CET	192.168.2.24	1.1.1.1	0x2be8	Standard query (0)	ygquuyekcusgsqqu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:17.343245983 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ygquuyekcusgsqqu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:17.809688091 CET	192.168.2.24	1.1.1.1	0x2743	Standard query (0)	uqsqcgouceqmigcg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:17.819478035 CET	192.168.2.24	1.1.1.1	0xefa	Standard query (0)	kwoesauawkouiecq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:17.832550049 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	kwoesauawkouiecq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.285698891 CET	192.168.2.24	1.1.1.1	0x7fcd	Standard query (0)	yywgmuqggsagcmco.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.303211927 CET	192.168.2.24	1.1.1.1	0xda45	Standard query (0)	imumkckaqyieaasa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.313293934 CET	192.168.2.24	1.1.1.1	0xec06	Standard query (0)	qqkoemcaocsomwow.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.329535007 CET	192.168.2.24	1.1.1.1	0xec06	Standard query (0)	qqkoemcaocsomwow.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.333089113 CET	192.168.2.24	1.1.1.1	0x9fda	Standard query (0)	awsigwcaesugycuk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.346316099 CET	192.168.2.24	1.1.1.1	0x7c51	Standard query (0)	kkqoqmmcwacsqiiu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.355140924 CET	192.168.2.24	1.1.1.1	0xdc99	Standard query (0)	iamowksweuqyssis.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.366624117 CET	192.168.2.24	1.1.1.1	0xd587	Standard query (0)	wicwocqcucgaimwe.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.378810883 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	wicwocqcucgaimwe.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.874531984 CET	192.168.2.24	1.1.1.1	0x1878	Standard query (0)	wiuyuwqiqkkogmoe.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.894474983 CET	192.168.2.24	1.1.1.1	0x1878	Standard query (0)	wiuyuwqiqkkogmoe.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.019989014 CET	192.168.2.24	1.1.1.1	0x9b05	Standard query (0)	ueyeeeegieoukoci.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.048687935 CET	192.168.2.24	1.1.1.1	0x9b05	Standard query (0)	ueyeeeegieoukoci.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.060126066 CET	192.168.2.24	1.1.1.1	0xac1e	Standard query (0)	caysuwggmqimaqwq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.080172062 CET	192.168.2.24	1.1.1.1	0xac1e	Standard query (0)	caysuwggmqimaqwq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.093944073 CET	192.168.2.24	1.1.1.1	0xd747	Standard query (0)	kecsceaqksygeamy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.110405922 CET	192.168.2.24	1.1.1.1	0xb7c	Standard query (0)	oyyagswauqyckoye.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.120230913 CET	192.168.2.24	1.1.1.1	0x6224	Standard query (0)	aciemoayegyggwiq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.154021978 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	aciemoayegyggwiq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.604212999 CET	192.168.2.24	1.1.1.1	0xd6fa	Standard query (0)	micemismikicsccc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.614379883 CET	192.168.2.24	1.1.1.1	0xa5d2	Standard query (0)	kwieueawsewqigey.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.625869036 CET	192.168.2.24	1.1.1.1	0xb542	Standard query (0)	qiwmqykuesscgkac.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.635795116 CET	192.168.2.24	1.1.1.1	0x8df1	Standard query (0)	issaesuceymoyccq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.654551029 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	issaesuceymoyccq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:20.137420893 CET	192.168.2.24	1.1.1.1	0xf241	Standard query (0)	sgowwwmqgkeyukwq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:20.153574944 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	sgowwwmqgkeyukwq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:20.630774021 CET	192.168.2.24	1.1.1.1	0xfc85	Standard query (0)	kewweiikaaysqugi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:20.642437935 CET	192.168.2.24	1.1.1.1	0x9dd8	Standard query (0)	oywkwakwykimigck.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:20.667392015 CET	192.168.2.24	1.1.1.1	0xac5d	Standard query (0)	aqkiemcseioemogk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:20.683670044 CET	192.168.2.24	1.1.1.1	0x4381	Standard query (0)	omoaicgooscecewq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:20.698190928 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	omoaicgooscecewq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:21.150165081 CET	192.168.2.24	1.1.1.1	0xd2ed	Standard query (0)	gcyciogqguooyici.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:21.166753054 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	gcyciogqguooyici.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:21.646770000 CET	192.168.2.24	1.1.1.1	0x64fa	Standard query (0)	qwyikqowekcgesga.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:21.673418999 CET	192.168.2.24	1.1.1.1	0xfdf2	Standard query (0)	moysoauykmieesas.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:21.723010063 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	moysoauykmieesas.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:22.189971924 CET	192.168.2.24	1.1.1.1	0x722e	Standard query (0)	ysmmeamaooogyuwa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:22.202208996 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ysmmeamaooogyuwa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:22.668628931 CET	192.168.2.24	1.1.1.1	0xee88	Standard query (0)	qqggiaeuuaskcisa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:22.684755087 CET	192.168.2.24	1.1.1.1	0x23d0	Standard query (0)	ukwgsimcamwqcqus.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:22.697163105 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ukwgsimcamwqcqus.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.159725904 CET	192.168.2.24	1.1.1.1	0xef	Standard query (0)	makysawqyqkmmkuo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.171289921 CET	192.168.2.24	1.1.1.1	0xbab	Standard query (0)	gwuaqqsyegywuaya.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.188936949 CET	192.168.2.24	1.1.1.1	0xbab	Standard query (0)	gwuaqqsyegywuaya.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.197052956 CET	192.168.2.24	1.1.1.1	0x4bc3	Standard query (0)	smwcqasgeqikoqss.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.216519117 CET	192.168.2.24	1.1.1.1	0x21c0	Standard query (0)	qigaaawumoqgmwck.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.228490114 CET	192.168.2.24	1.1.1.1	0x4074	Standard query (0)	kwkiuumqgigawcek.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.244282961 CET	192.168.2.24	1.1.1.1	0x8dae	Standard query (0)	imcgogsosiogeqgc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.253717899 CET	192.168.2.24	1.1.1.1	0x9307	Standard query (0)	coosumygqywusaaq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.270771027 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	coosumygqywusaaq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.720558882 CET	192.168.2.24	1.1.1.1	0x7411	Standard query (0)	muikisowiqmckiao.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.736730099 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	muikisowiqmckiao.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.216051102 CET	192.168.2.24	1.1.1.1	0xc605	Standard query (0)	eygeqyioakqgwkws.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.233170033 CET	192.168.2.24	1.1.1.1	0x44ff	Standard query (0)	wcagmacwieoosqok.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.248563051 CET	192.168.2.24	1.1.1.1	0xad4f	Standard query (0)	igyccoycggkescsw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.275424957 CET	192.168.2.24	1.1.1.1	0xd0c8	Standard query (0)	uegmseugcsaymygc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.292186975 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	uegmseugcsaymygc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.743279934 CET	192.168.2.24	1.1.1.1	0x71b	Standard query (0)	gcgquesqkuokqoos.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.768121004 CET	192.168.2.24	1.1.1.1	0x71b	Standard query (0)	gcgquesqkuokqoos.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.769129038 CET	192.168.2.24	1.1.1.1	0xc8c5	Standard query (0)	awcmmsyugikucuqg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.785602093 CET	192.168.2.24	1.1.1.1	0xb4c9	Standard query (0)	qqmoakcgiagmaiou.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.803050995 CET	192.168.2.24	1.1.1.1	0x6e0f	Standard query (0)	qcweoeaqygkgoyqw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.825278044 CET	192.168.2.24	1.1.1.1	0x5941	Standard query (0)	kwcqymkoyiusyywg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.837281942 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	kwcqymkoyiusyywg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:25.288530111 CET	192.168.2.24	1.1.1.1	0x5cbb	Standard query (0)	uysuukowkciwgmko.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:25.306988001 CET	192.168.2.24	1.1.1.1	0xf55c	Standard query (0)	yyqmiikqggkgkcke.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:25.319020033 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	yyqmiikqggkgkcke.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:25.795207024 CET	192.168.2.24	1.1.1.1	0xb756	Standard query (0)	cgwgwmsuyaicegcq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:25.804747105 CET	192.168.2.24	1.1.1.1	0x9779	Standard query (0)	oesgsmmsyegwkaii.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:25.817076921 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	oesgsmmsyegwkaii.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:26.280096054 CET	192.168.2.24	1.1.1.1	0xa1be	Standard query (0)	eeimyyskiwmsmwaw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:26.295809031 CET	192.168.2.24	1.1.1.1	0x54e0	Standard query (0)	akqmmimguqeacqki.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:26.314012051 CET	192.168.2.24	1.1.1.1	0x54e0	Standard query (0)	akqmmimguqeacqki.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:26.315073013 CET	192.168.2.24	1.1.1.1	0x1fe9	Standard query (0)	eeuqeoimgoqakquw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:26.324758053 CET	192.168.2.24	1.1.1.1	0xcf6a	Standard query (0)	mookqcgowekwsyme.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:26.336954117 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	mookqcgowekwsyme.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:26.806521893 CET	192.168.2.24	1.1.1.1	0xd0a	Standard query (0)	iaamsmcuweooiums.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:26.827569008 CET	192.168.2.24	1.1.1.1	0x183f	Standard query (0)	qwwkyygoyymumeqa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:26.868864059 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	qwwkyygoyymumeqa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:27.359374046 CET	192.168.2.24	1.1.1.1	0xee07	Standard query (0)	qwmqmwoieykcoums.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:27.380723000 CET	192.168.2.24	1.1.1.1	0xee07	Standard query (0)	qwmqmwoieykcoums.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:27.381930113 CET	192.168.2.24	1.1.1.1	0x4a9	Standard query (0)	aqmmgwoeiissyuay.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:27.391573906 CET	192.168.2.24	1.1.1.1	0x7a9d	Standard query (0)	ukgeakkwimkacgwm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:27.403588057 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ukgeakkwimkacgwm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:27.871517897 CET	192.168.2.24	1.1.1.1	0x285b	Standard query (0)	wcuwikyucakswsgy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:27.881071091 CET	192.168.2.24	1.1.1.1	0x5bd6	Standard query (0)	oyqmksygwiuekomo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:27.896770954 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	oyqmksygwiuekomo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:28.347884893 CET	192.168.2.24	1.1.1.1	0x8bcf	Standard query (0)	gokuyyiawuwwyeqi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:28.367203951 CET	192.168.2.24	1.1.1.1	0x6308	Standard query (0)	qqumaeswmyusisoi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:28.383546114 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	qqumaeswmyusisoi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:28.832043886 CET	192.168.2.24	1.1.1.1	0xe51c	Standard query (0)	ekommiasesmcaysg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:28.848870039 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	ekommiasesmcaysg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:29.329133034 CET	192.168.2.24	1.1.1.1	0xe3d0	Standard query (0)	kwokcgwecseqcsck.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:29.339186907 CET	192.168.2.24	1.1.1.1	0xdf3c	Standard query (0)	cgcukekaacucqesm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:29.350097895 CET	192.168.2.24	1.1.1.1	0x37cb	Standard query (0)	sgiwoemuskksgmem.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:29.363529921 CET	192.168.2.24	1.1.1.1	0x8d4a	Standard query (0)	miyuaaeqyewssisg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:29.374192953 CET	192.168.2.24	1.1.1.1	0x366d	Standard query (0)	awquimmiceucqika.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:29.412877083 CET	192.168.2.24	1.1.1.1	0xbe14	Standard query (0)	qwsgiwukuaoocqgw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:29.478049994 CET	192.168.2.24	1.1.1.1	0x4b13	Standard query (0)	coyikkwmyomyykmo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:29.493514061 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	coyikkwmyomyykmo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:29.957279921 CET	192.168.2.24	1.1.1.1	0x4d7f	Standard query (0)	osyawgmkggwwaise.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:29.972754955 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	osyawgmkggwwaise.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:30.422329903 CET	192.168.2.24	1.1.1.1	0x88fb	Standard query (0)	gcuasoickeyqugwe.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:30.434086084 CET	192.168.2.24	1.1.1.1	0x8a38	Standard query (0)	oscegykuecgmiioq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:30.445836067 CET	192.168.2.24	1.1.1.1	0xdf39	Standard query (0)	camkaaeqmmemkeqo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:30.458101988 CET	192.168.2.24	1.1.1.1	0x62df	Standard query (0)	gwswakimuyyacece.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:30.473675966 CET	192.168.2.24	1.1.1.1	0xc9b8	Standard query (0)	giqagqyuwgskokgg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:30.484642029 CET	192.168.2.24	1.1.1.1	0x814f	Standard query (0)	uqswoygsykiwckyk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:30.498920918 CET	192.168.2.24	1.1.1.1	0x6362	Standard query (0)	wccgukagisyugimy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:30.512428999 CET	192.168.2.24	1.1.1.1	0xad8f	Standard query (0)	qieoqgsomueyeass.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:30.525034904 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	qieoqgsomueyeass.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:31.001326084 CET	192.168.2.24	1.1.1.1	0x7d43	Standard query (0)	uqumusgyyygmiicq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:31.016742945 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	uqumusgyyygmiicq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:31.468662977 CET	192.168.2.24	1.1.1.1	0xa493	Standard query (0)	wuowyewqgeeycsio.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:31.480796099 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	wuowyewqgeeycsio.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:31.940668106 CET	192.168.2.24	1.1.1.1	0x6ec1	Standard query (0)	sgckugycwoyyoeow.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:31.950303078 CET	192.168.2.24	1.1.1.1	0x35f7	Standard query (0)	keyqaymgcyswowqc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:31.965143919 CET	192.168.2.24	1.1.1.1	0xc584	Standard query (0)	yskeokkusmkcyosa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:31.980024099 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	yskeokkusmkcyosa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:32.441061020 CET	192.168.2.24	1.1.1.1	0xff0b	Standard query (0)	ymmoqwiyeomigemu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:32.460838079 CET	192.168.2.24	1.1.1.1	0x1f6	Standard query (0)	iaiyeiseoyssykuu.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:32.473105907 CET	192.168.2.24	1.1.1.1	0x281f	Standard query (0)	gcsgyeomwaaiuwmg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:32.483330011 CET	192.168.2.24	1.1.1.1	0x6689	Standard query (0)	cuccscimmuweokoc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:32.497447968 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	cuccscimmuweokoc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:32.944205999 CET	192.168.2.24	1.1.1.1	0xdd66	Standard query (0)	wigeqewyusckikqk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:32.956649065 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	wigeqewyusckikqk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:33.420234919 CET	192.168.2.24	1.1.1.1	0x2dbd	Standard query (0)	wowsuycqmmumwayq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:33.456655979 CET	192.168.2.24	1.1.1.1	0x2e24	Standard query (0)	keqgamuiascccwou.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:33.479485035 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	keqgamuiascccwou.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:33.956675053 CET	192.168.2.24	1.1.1.1	0x8986	Standard query (0)	awyogsywqmeoaemc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:33.976650000 CET	192.168.2.24	1.1.1.1	0xc687	Standard query (0)	gogceqqcygywqquk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:33.989145041 CET	192.168.2.24	1.1.1.1	0xf393	Standard query (0)	akewqoewkigoyqgk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:34.001049042 CET	192.168.2.24	1.1.1.1	0xeb41	Standard query (0)	smgomgmggmimcecy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:34.013046980 CET	192.168.2.24	1.1.1.1	0xe8cd	Standard query (0)	uqemqeoguyciagkm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:34.028844118 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	uqemqeoguyciagkm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:34.479291916 CET	192.168.2.24	1.1.1.1	0x6afc	Standard query (0)	oekuaqgwaqowmqwa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:34.492661953 CET	192.168.2.24	1.1.1.1	0x14f8	Standard query (0)	sgqwuwmskisykocm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:34.504548073 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	sgqwuwmskisykocm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:34.971430063 CET	192.168.2.24	1.1.1.1	0x15a0	Standard query (0)	kewgquswkewgaweo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:34.986968040 CET	192.168.2.24	1.1.1.1	0x4537	Standard query (0)	eekokuwaauqiuoci.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:35.002824068 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	eekokuwaauqiuoci.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:35.468660116 CET	192.168.2.24	1.1.1.1	0x832a	Standard query (0)	qweaumwmomesioio.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:35.478444099 CET	192.168.2.24	1.1.1.1	0x2227	Standard query (0)	couuuksyuscyykke.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:35.494759083 CET	192.168.2.24	1.1.1.1	0x9d13	Standard query (0)	moygyoakyaoosocs.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:35.517261982 CET	192.168.2.24	1.1.1.1	0x49ab	Standard query (0)	qwikeawwkykgymoi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:35.532654047 CET	192.168.2.24	1.1.1.1	0x98bc	Standard query (0)	aqcyeeuumekyigiq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:35.544608116 CET	192.168.2.24	1.1.1.1	0x8fce	Standard query (0)	mugimcuecsqusuec.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:35.559493065 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	mugimcuecsqusuec.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:36.006418943 CET	192.168.2.24	1.1.1.1	0x58ae	Standard query (0)	suogmuweyqgoqkgk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:36.024884939 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	suogmuweyqgoqkgk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:36.475076914 CET	192.168.2.24	1.1.1.1	0x5344	Standard query (0)	ukgmmiakkgwgssak.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:36.496783018 CET	192.168.2.24	1.1.1.1	0xb703	Standard query (0)	yyuewgegwqqkccay.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:36.515485048 CET	192.168.2.24	1.1.1.1	0x4a6f	Standard query (0)	qqmoqouykmakcwwo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:36.529635906 CET	192.168.2.24	1.1.1.1	0x8097	Standard query (0)	ekucgqkwyqioewgm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:36.540411949 CET	192.168.2.24	1.1.1.1	0x9646	Standard query (0)	cgmocwqyagacokyc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:36.552350998 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	cgmocwqyagacokyc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.002227068 CET	192.168.2.24	1.1.1.1	0xaf93	Standard query (0)	ekuisswoiwwasmug.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.013439894 CET	192.168.2.24	1.1.1.1	0x9b6a	Standard query (0)	mucqakweaoaeqwqg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.029428005 CET	192.168.2.24	1.1.1.1	0x16c8	Standard query (0)	iaqkoyuacqaqiiaa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.041364908 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	iaqkoyuacqaqiiaa.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.500658035 CET	192.168.2.24	1.1.1.1	0x8644	Standard query (0)	ysysqieskmiymcsq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.513268948 CET	192.168.2.24	1.1.1.1	0x89cb	Standard query (0)	ossaysgggqwskqck.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.536097050 CET	192.168.2.24	1.1.1.1	0x89cb	Standard query (0)	ossaysgggqwskqck.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.537134886 CET	192.168.2.24	1.1.1.1	0x7759	Standard query (0)	ygceccuaqcgscgks.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.579957008 CET	192.168.2.24	1.1.1.1	0x7759	Standard query (0)	ygceccuaqcgscgks.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.583161116 CET	192.168.2.24	1.1.1.1	0x4746	Standard query (0)	kkyoeaiisaskwsgi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.620671988 CET	192.168.2.24	1.1.1.1	0xa0a8	Standard query (0)	kkmycqgoqwsgagmm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.652688026 CET	192.168.2.24	1.1.1.1	0x5f49	Standard query (0)	kkqgkiqaiegyuuac.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.732675076 CET	192.168.2.24	1.1.1.1	0xf5b8	Standard query (0)	sgyosccwmusakiag.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.749577999 CET	192.168.2.24	1.1.1.1	0xc8f6	Standard query (0)	esmcwycsgkmmkmie.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.764672995 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	esmcwycsgkmmkmie.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:38.237020016 CET	192.168.2.24	1.1.1.1	0xb8e6	Standard query (0)	eeagssccuuqgoyck.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:38.249337912 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	eeagssccuuqgoyck.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:38.717026949 CET	192.168.2.24	1.1.1.1	0x478c	Standard query (0)	kweqseyaokkowemm.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:38.726650000 CET	192.168.2.24	1.1.1.1	0x2f83	Standard query (0)	omqukiqqqkicumaq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:38.747299910 CET	192.168.2.24	1.1.1.1	0x4a39	Standard query (0)	cgagsqguosagcyko.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:38.756181955 CET	192.168.2.24	1.1.1.1	0x7abc	Standard query (0)	kwuyeysggksaauew.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:38.767606974 CET	192.168.2.24	1.1.1.1	0xbb12	Standard query (0)	yyyocaqgqkgawuoo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:38.778985023 CET	192.168.2.24	1.1.1.1	0x8eea	Standard query (0)	qcyusyquosgecuec.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:38.796392918 CET	192.168.2.24	1.1.1.1	0xbcf4	Standard query (0)	wciikuskwmgwyqqo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:38.808552980 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	wciikuskwmgwyqqo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:39.268671036 CET	192.168.2.24	1.1.1.1	0x680a	Standard query (0)	giekgiaycwsmicgi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:39.288320065 CET	192.168.2.24	1.1.1.1	0x59a3	Standard query (0)	moigwmmwmwaesewy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:39.300223112 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	moigwmmwmwaesewy.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:39.764669895 CET	192.168.2.24	1.1.1.1	0xaee9	Standard query (0)	uyeyicisiasmeaiw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:39.781483889 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	uyeyicisiasmeaiw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:40.242724895 CET	192.168.2.24	1.1.1.1	0xe2c7	Standard query (0)	wikomoakewmgswsg.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:40.252983093 CET	192.168.2.24	1.1.1.1	0x807b	Standard query (0)	eyqewqgswoiwucau.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:40.265425920 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	eyqewqgswoiwucau.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:40.734252930 CET	192.168.2.24	1.1.1.1	0xbad2	Standard query (0)	igsykuymgikayiyw.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:40.743951082 CET	192.168.2.24	1.1.1.1	0x8e63	Standard query (0)	awoiesggoyaqumsc.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:40.753848076 CET	192.168.2.24	1.1.1.1	0xb489	Standard query (0)	akwcugeaamycaqus.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:40.764823914 CET	192.168.2.24	1.1.1.1	0xef64	Standard query (0)	oyigkwsqmiqmyaem.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:40.779493093 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	oyigkwsqmiqmyaem.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:41.249278069 CET	192.168.2.24	1.1.1.1	0x292a	Standard query (0)	qiakkiycwyckaoyk.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:41.263537884 CET	192.168.2.24	1.1.1.1	0x17c3	Standard query (0)	couqoiaioicsmiyi.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:41.276596069 CET	192.168.2.24	1.1.1.1	0xb698	Standard query (0)	goqwgykuuockgkiq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:41.290070057 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	goqwgykuuockgkiq.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:41.743361950 CET	192.168.2.24	1.1.1.1	0xd0af	Standard query (0)	mawieiaeeguckoce.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:41.752675056 CET	192.168.2.24	1.1.1.1	0x6388	Standard query (0)	yyaqueaqcsokisee.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:41.764990091 CET	192.168.2.24	1.1.1.1	0x17a9	Standard query (0)	cassqaqeuciekkeo.xyz	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:41.780745983 CET	192.168.2.24	1.1.1.1	0x1	Standard query (0)	cassqaqeuciekkeo.xyz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 9, 2025 13:45:08.701138020 CET	1.1.1.1	192.168.2.24	0xb599	No error (0)	auayomwkewcomwas.xyz		193.32.177.34	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:08.715135098 CET	1.1.1.1	192.168.2.24	0x67fe	Name error (3)	iyaikmkkowcqemsi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:09.196826935 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ggicikyqcaiyguee.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:09.207237959 CET	1.1.1.1	192.168.2.24	0xe6c3	Name error (3)	oqyaoykomyoygics.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:09.686343908 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	eqakguiwiqacqiwg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:09.714629889 CET	1.1.1.1	192.168.2.24	0xfc4f	Name error (3)	wgcaouuqqqwucogy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:10.178913116 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ewacuagosgqmuocm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:10.198019028 CET	1.1.1.1	192.168.2.24	0x9f07	Name error (3)	wgqyouayikuyuqmk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:10.208892107 CET	1.1.1.1	192.168.2.24	0xb5d3	Name error (3)	owaaygsacguucaye.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:10.219156981 CET	1.1.1.1	192.168.2.24	0xdab	Name error (3)	uwgicagyykoommga.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:10.228981972 CET	1.1.1.1	192.168.2.24	0x90cd	Name error (3)	uiggameqqycugsqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:10.238729954 CET	1.1.1.1	192.168.2.24	0x91b9	Name error (3)	goguooqkgysueime.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:10.699840069 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	keosqeosukqcooco.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:11.174108028 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	maoeeogmuauywsyu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:11.646610975 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ismqaewykmoiguki.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:11.656699896 CET	1.1.1.1	192.168.2.24	0x59a6	Name error (3)	wucwykasawokemaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:12.158986092 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ukmcqucewskcqygg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:12.177109957 CET	1.1.1.1	192.168.2.24	0x3ee9	Name error (3)	qqqmeagkkosgcayo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:12.185112000 CET	1.1.1.1	192.168.2.24	0xb413	Name error (3)	ysawassgkwqygmmq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:12.209203959 CET	1.1.1.1	192.168.2.24	0x3c14	Name error (3)	osaeyoiqoqawauga.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:12.698817015 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	iagisciiyoemgwaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:12.708772898 CET	1.1.1.1	192.168.2.24	0x3d1e	Name error (3)	ymysimqoykwqeqiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:13.181252956 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ymmcwogyimsuqmcc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:13.191370964 CET	1.1.1.1	192.168.2.24	0xe7ec	Name error (3)	osmoygyawqmmimkq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:13.201165915 CET	1.1.1.1	192.168.2.24	0x8631	Name error (3)	immyecuqwkiyscys.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:13.211093903 CET	1.1.1.1	192.168.2.24	0xadd0	Name error (3)	omsqkuiwcwoegooq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:13.220988035 CET	1.1.1.1	192.168.2.24	0xd124	Name error (3)	ukaiiiyqoooycyqm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:13.230927944 CET	1.1.1.1	192.168.2.24	0xeca8	Name error (3)	isemauqkwwiumyky.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:13.715909004 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	keguuyioweymiaws.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:14.199167967 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	kwaywmaequkqccai.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:14.223654985 CET	1.1.1.1	192.168.2.24	0x665f	Name error (3)	yyimcoiwgckeakcm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:14.233511925 CET	1.1.1.1	192.168.2.24	0xad22	Name error (3)	ekcwemuekgqsimae.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:14.263295889 CET	1.1.1.1	192.168.2.24	0xfa08	Name error (3)	imigkomgmqgmakqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:14.282586098 CET	1.1.1.1	192.168.2.24	0x25aa	Name error (3)	omasqkwqyskcagwi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:14.756175041 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	awyomscgweuqmgaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:14.766170979 CET	1.1.1.1	192.168.2.24	0x86d1	Name error (3)	eyoyssauceguqwmk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:15.240633965 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	gwwcqeykmseicgaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:15.249993086 CET	1.1.1.1	192.168.2.24	0xcf86	Name error (3)	qwywqgsmgaoiwsga.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:15.276144028 CET	1.1.1.1	192.168.2.24	0x868c	Name error (3)	ososwckwcqmmwqcy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:15.288009882 CET	1.1.1.1	192.168.2.24	0xebf5	Name error (3)	osaymwoggqqycmse.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:15.308585882 CET	1.1.1.1	192.168.2.24	0xa5fc	Name error (3)	oyewqwkusieeoqey.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:15.795192957 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ommwaqgaemsmcqwc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:16.266978025 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	cauewwukyywyqiei.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:16.276736975 CET	1.1.1.1	192.168.2.24	0x27c7	Name error (3)	goeykqccmemkswom.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:16.285993099 CET	1.1.1.1	192.168.2.24	0x5ec5	Name error (3)	aksuakswwkiimamq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:16.757101059 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	isaeicumkcuwqmqq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:16.771554947 CET	1.1.1.1	192.168.2.24	0x5229	Name error (3)	qiswokuokugiooky.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:17.233314037 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	qiswcssocuqsaqkq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:17.725900888 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	qcyksokwumicscaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:17.736054897 CET	1.1.1.1	192.168.2.24	0xc23f	Name error (3)	esiaisyasoaoqwki.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:18.280015945 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	giqukkwwcwgqcisg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:18.290719986 CET	1.1.1.1	192.168.2.24	0xf366	Name error (3)	ymqaaskiwomkucuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:18.300723076 CET	1.1.1.1	192.168.2.24	0x7b8c	Name error (3)	akueuaicusaoieiy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:18.320779085 CET	1.1.1.1	192.168.2.24	0x32ff	Name error (3)	sauygqecsusickcu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:18.330668926 CET	1.1.1.1	192.168.2.24	0x183a	Name error (3)	kkwkgmcoawgaoiwg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:18.823102951 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	saumycuogqsqykes.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:18.842351913 CET	1.1.1.1	192.168.2.24	0xfced	Name error (3)	ukyokaigmmkumgoa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:19.313457966 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	eswweuycwwiiykwo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:19.331736088 CET	1.1.1.1	192.168.2.24	0xc193	Name error (3)	uksgyqiqaaiaiesi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:19.341660023 CET	1.1.1.1	192.168.2.24	0x2f6	Name error (3)	smckcsaioceiyasu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:19.820935011 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	esimsqgcwwwmyoqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:19.830785036 CET	1.1.1.1	192.168.2.24	0xdce7	Name error (3)	maiyuocqqiqiiskw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:19.840668917 CET	1.1.1.1	192.168.2.24	0x64f	Name error (3)	smaaowemwiwggocu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:20.314428091 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	kwuuwgemogmuomwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:20.789303064 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ukicsmiwggcwksam.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:20.801270962 CET	1.1.1.1	192.168.2.24	0x558c	Name error (3)	gwamoggwyegsseao.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:20.824913979 CET	1.1.1.1	192.168.2.24	0xcc60	Name error (3)	immcqsiceooqyaay.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:21.293540001 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	kkcqgowgkcoyokcu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:21.316020012 CET	1.1.1.1	192.168.2.24	0x687c	Name error (3)	kecgikusmakuksma.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:21.319506884 CET	1.1.1.1	192.168.2.24	0x687c	Name error (3)	kecgikusmakuksma.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:21.333956003 CET	1.1.1.1	192.168.2.24	0xdc13	Name error (3)	ymuiggyusggsymoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:21.349051952 CET	1.1.1.1	192.168.2.24	0x4aad	Name error (3)	uecouukwkuceyuwg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:21.830296993 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	eyoaceoookqskqmy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:21.848511934 CET	1.1.1.1	192.168.2.24	0x68c5	Name error (3)	awwomgcseeqwkkom.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:21.865231037 CET	1.1.1.1	192.168.2.24	0x7c75	Name error (3)	keykoekseemyiewq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:22.342233896 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ysiwwoeeaaskykaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:22.352297068 CET	1.1.1.1	192.168.2.24	0xc675	Name error (3)	kwmcuwccqmuecgea.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:22.361927986 CET	1.1.1.1	192.168.2.24	0x7ca8	Name error (3)	gwyooeiscmwguqms.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:22.372581005 CET	1.1.1.1	192.168.2.24	0x316a	Name error (3)	wuokiysmiucoucak.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:22.385085106 CET	1.1.1.1	192.168.2.24	0x5ff3	Name error (3)	wuuiumemmigyyauq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:22.401768923 CET	1.1.1.1	192.168.2.24	0x3462	Name error (3)	acwomuuukiomgqkm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:22.869381905 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	muwqwgaaymomgwmi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.356900930 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	omgcoecwsqiuqyug.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.371181965 CET	1.1.1.1	192.168.2.24	0x1d7b	Name error (3)	kqmsgskwgemyueya.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.381119013 CET	1.1.1.1	192.168.2.24	0xe95d	Name error (3)	eyiyueewuaqmmwcm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.397394896 CET	1.1.1.1	192.168.2.24	0x48c3	Name error (3)	gwoyamckoqoaauoq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.422292948 CET	1.1.1.1	192.168.2.24	0xdb0d	Name error (3)	qwqsoyoqkymakowm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.428863049 CET	1.1.1.1	192.168.2.24	0xdb0d	Name error (3)	qwqsoyoqkymakowm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.435914993 CET	1.1.1.1	192.168.2.24	0x53ef	Name error (3)	gcmiymmqgwuquokm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.907682896 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ymseciekayuweoww.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.930639029 CET	1.1.1.1	192.168.2.24	0xf3c2	Name error (3)	oyocwswugeiqqyoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.939615011 CET	1.1.1.1	192.168.2.24	0x2fb0	Name error (3)	omgooecquoweeomo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:23.949048042 CET	1.1.1.1	192.168.2.24	0x1182	Name error (3)	imgeoyougkmmeuec.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:24.429311037 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	smoswyoekkccyuga.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:24.452095032 CET	1.1.1.1	192.168.2.24	0xe0e2	Name error (3)	suwkomiqcykeyako.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:24.468478918 CET	1.1.1.1	192.168.2.24	0xdb2c	Name error (3)	smwsugycuuckemue.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:24.931003094 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	qigcqiaomwieqwka.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:25.414484978 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	oekcyqqggaegsesm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:25.430977106 CET	1.1.1.1	192.168.2.24	0x458a	Name error (3)	qcoysaaooaiccqyu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:25.453685999 CET	1.1.1.1	192.168.2.24	0x8cdd	Name error (3)	mismuqiygyeysaoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:25.480084896 CET	1.1.1.1	192.168.2.24	0x1c07	Name error (3)	wockoyekyageakcg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:25.952877045 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ososokqeakgguwsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:25.965111971 CET	1.1.1.1	192.168.2.24	0xd1b8	Name error (3)	wcgqccqcugomywua.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:26.430483103 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	aqaqgemescmwsqks.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:26.440125942 CET	1.1.1.1	192.168.2.24	0xcbfd	Name error (3)	aqiwocaywcswuwsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:26.449665070 CET	1.1.1.1	192.168.2.24	0x9549	Name error (3)	aqgmgoqcoqqkguyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:26.940593004 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	oywgqkusocouysua.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:26.974972010 CET	1.1.1.1	192.168.2.24	0x5160	Name error (3)	uyygagweoagcuqky.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:26.988631964 CET	1.1.1.1	192.168.2.24	0xcc55	Name error (3)	muiccguyaeaqwweg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:27.003051996 CET	1.1.1.1	192.168.2.24	0xa2fc	Name error (3)	qiqueqokwqqgwwci.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:27.017754078 CET	1.1.1.1	192.168.2.24	0xc3e2	Name error (3)	uygmgoymcwcgkios.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:27.501074076 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	qiyggmguowygeooc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:27.510209084 CET	1.1.1.1	192.168.2.24	0xf15b	Name error (3)	acacoiqgoimayqwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:27.999876022 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	smisyqewaummmwoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.013706923 CET	1.1.1.1	192.168.2.24	0x4361	Name error (3)	mumuqocoisaucwmq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.022478104 CET	1.1.1.1	192.168.2.24	0x9c00	Name error (3)	qqoawmqqwqcusmee.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.031200886 CET	1.1.1.1	192.168.2.24	0x69	Name error (3)	qcygacuamqqugcck.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.039964914 CET	1.1.1.1	192.168.2.24	0xb570	Name error (3)	kkiigoymgkmoggoq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.049482107 CET	1.1.1.1	192.168.2.24	0x87b8	Name error (3)	qqmicqemgcgieoau.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.058417082 CET	1.1.1.1	192.168.2.24	0xb42c	Name error (3)	sagymwuwgeucsmac.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.531125069 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	igmqooiwioymwkcm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:28.541093111 CET	1.1.1.1	192.168.2.24	0xac3e	Name error (3)	osyqameakgkceeog.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.024830103 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	sgigamoeiwksoecq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.488961935 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	keckssemmeoqieqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.501912117 CET	1.1.1.1	192.168.2.24	0x6e88	Name error (3)	caysswwugsmkeksw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.517915964 CET	1.1.1.1	192.168.2.24	0x7e81	Name error (3)	cgiamwsqgcmqgqse.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.549820900 CET	1.1.1.1	192.168.2.24	0x7e81	Name error (3)	cgiamwsqgcmqgqse.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.639270067 CET	1.1.1.1	192.168.2.24	0x2c5d	Name error (3)	uyeqwcuyimescesu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.655813932 CET	1.1.1.1	192.168.2.24	0xaf49	Name error (3)	ekiwqiyewuiqoemo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.669986010 CET	1.1.1.1	192.168.2.24	0x137e	Name error (3)	oeakuqueisysswcg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.702163935 CET	1.1.1.1	192.168.2.24	0x9323	Name error (3)	acemcwecgiqcukys.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:29.722737074 CET	1.1.1.1	192.168.2.24	0xc0f	Name error (3)	qcwaiaiqiwcakawa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:30.243072987 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	esyiocqieemagwmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:30.702152014 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	kqsakygykwusqams.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:30.722131968 CET	1.1.1.1	192.168.2.24	0x86f7	Name error (3)	ymygkkggyigeqcqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:30.725678921 CET	1.1.1.1	192.168.2.24	0x86f7	Name error (3)	ymygkkggyigeqcqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:30.736346960 CET	1.1.1.1	192.168.2.24	0x7c52	Name error (3)	qqqkagyoymmosuyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:30.745512009 CET	1.1.1.1	192.168.2.24	0x6338	Name error (3)	moiimkscmiswaesw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:31.210283995 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	igkiociagqsacmwa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:31.232650995 CET	1.1.1.1	192.168.2.24	0x14aa	Name error (3)	ymugwyokyyccykmw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:31.242347956 CET	1.1.1.1	192.168.2.24	0x9908	Name error (3)	gieksqwccmmqkemm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:31.261859894 CET	1.1.1.1	192.168.2.24	0x7fc7	Name error (3)	iaueigwgocakgsku.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:31.280997038 CET	1.1.1.1	192.168.2.24	0x9b04	Name error (3)	sgsasqgwayeckgoy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:31.770895004 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	kwogawueykiiumao.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:32.253177881 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	iagmkeayqmuowswy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:32.725204945 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	yyyagyakeciucagk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:32.734899998 CET	1.1.1.1	192.168.2.24	0x80c6	Name error (3)	isukyiwyscosaaqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:33.197856903 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	goicqsmskkygkkka.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:33.212774992 CET	1.1.1.1	192.168.2.24	0xa199	Name error (3)	awacwkqgsoomimye.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:33.231754065 CET	1.1.1.1	192.168.2.24	0xdf43	Name error (3)	iaawaweqwceogamg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:33.243117094 CET	1.1.1.1	192.168.2.24	0xd85a	Name error (3)	kqueagsoikuyocca.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:33.727051973 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	momoqikcaksewaua.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:33.737160921 CET	1.1.1.1	192.168.2.24	0xded1	Name error (3)	suagiqkqmkgysmiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:33.754806995 CET	1.1.1.1	192.168.2.24	0xe7a5	Name error (3)	gcwequgwyimwymsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:33.770736933 CET	1.1.1.1	192.168.2.24	0xb37d	Name error (3)	igywsgwooemqiuss.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:34.229477882 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	wikiagqsmeeaeegy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:34.246323109 CET	1.1.1.1	192.168.2.24	0x9413	Name error (3)	eeoeukoqgiwsumsu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:34.263420105 CET	1.1.1.1	192.168.2.24	0x19d5	Name error (3)	ygooiessycewaocg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:34.745884895 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	qcqgssmagywqcgws.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:34.761869907 CET	1.1.1.1	192.168.2.24	0x8c37	Name error (3)	goiikukwyyauemqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:35.243524075 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	comuwmkimocayeeu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:35.297365904 CET	1.1.1.1	192.168.2.24	0x55	Name error (3)	isgasoomksiwqcmg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:35.314213037 CET	1.1.1.1	192.168.2.24	0x2acb	Name error (3)	qigismmgwsiseyuu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:35.815222979 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	wuqggcwmoscwykwg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:36.285218000 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	qceawaaswmsuekmu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:36.302628040 CET	1.1.1.1	192.168.2.24	0xecdc	Name error (3)	ygucsucmagwqsqcu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:36.314790964 CET	1.1.1.1	192.168.2.24	0xc437	Name error (3)	giuccqyqokookyue.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:36.326384068 CET	1.1.1.1	192.168.2.24	0x2f45	Name error (3)	gceesusqmuockkgw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:36.806472063 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ygesoycecmkuwayg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:37.274341106 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	sasqgsyksiccuuws.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:37.293884039 CET	1.1.1.1	192.168.2.24	0x3a77	Name error (3)	qwggykgwkqoceiuo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:37.303600073 CET	1.1.1.1	192.168.2.24	0x68b7	Name error (3)	wiguisuayimaukgu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:37.773068905 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	qcwcgegyyieaoqca.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.305705070 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	gwcyyawigmwceaqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.332528114 CET	1.1.1.1	192.168.2.24	0x5c6	Name error (3)	mueuwcqsioowsmce.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.353214979 CET	1.1.1.1	192.168.2.24	0x5c6	Name error (3)	mueuwcqsioowsmce.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.382108927 CET	1.1.1.1	192.168.2.24	0x5be1	Name error (3)	qiewcykmuuacuoyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.418642044 CET	1.1.1.1	192.168.2.24	0x9956	Name error (3)	coayaokeissieqcc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.915988922 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	oeooiqokqsqcsaig.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.934092045 CET	1.1.1.1	192.168.2.24	0xee2b	Name error (3)	masegmsiqgamiugm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.951692104 CET	1.1.1.1	192.168.2.24	0xdce9	Name error (3)	smwywssyyaciqkae.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:38.961148024 CET	1.1.1.1	192.168.2.24	0x3d2f	Name error (3)	aweqoooqomueeiwi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:39.435482025 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	akasikewaomyiwqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:39.592725039 CET	1.1.1.1	192.168.2.24	0x582d	Name error (3)	oyyamqygcecqocmq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:39.616108894 CET	1.1.1.1	192.168.2.24	0xb898	Name error (3)	qwikoqqgiayyuakq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:39.616955042 CET	1.1.1.1	192.168.2.24	0xb898	Name error (3)	qwikoqqgiayyuakq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:39.626526117 CET	1.1.1.1	192.168.2.24	0x9291	Name error (3)	miqcugomwgmygyoq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:39.635404110 CET	1.1.1.1	192.168.2.24	0x92ce	Name error (3)	wiccyamsgmuqoeoy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:40.098766088 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ymeiqyyqqyaaygie.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:40.119363070 CET	1.1.1.1	192.168.2.24	0x79b5	Name error (3)	wiomcwmascsigags.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:40.590872049 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	awgyuqqswicwkqcs.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:40.618897915 CET	1.1.1.1	192.168.2.24	0x69b3	Name error (3)	iacisiamimiiqyeo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.129159927 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	wogawoqysgiockwa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.138226032 CET	1.1.1.1	192.168.2.24	0xf543	Name error (3)	mayykkuyeuiggyws.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.156682968 CET	1.1.1.1	192.168.2.24	0x4f5a	Name error (3)	cosaygigqegeyewi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.175244093 CET	1.1.1.1	192.168.2.24	0x4087	Name error (3)	ekqyosgcumkcecmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.640921116 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	qimmkmaumumswocw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.664809942 CET	1.1.1.1	192.168.2.24	0x1970	Name error (3)	acqaagqgmsmeouce.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.676793098 CET	1.1.1.1	192.168.2.24	0x154e	Name error (3)	awasockiaymagmci.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.687041044 CET	1.1.1.1	192.168.2.24	0x12e1	Name error (3)	akuyqkmomwqyiyow.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:41.696150064 CET	1.1.1.1	192.168.2.24	0x549b	Name error (3)	caceukeeygaaqaec.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.157295942 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	qwcaikouwwekssco.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.634644985 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	qqioykeogcwkowgq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.659466982 CET	1.1.1.1	192.168.2.24	0xc19b	Name error (3)	igeqissugeuswaus.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.668617010 CET	1.1.1.1	192.168.2.24	0xc6df	Name error (3)	osoawyeyassgycgy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.690639019 CET	1.1.1.1	192.168.2.24	0xe34	Name error (3)	cuaumuqcoeegomsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.695734978 CET	1.1.1.1	192.168.2.24	0xe34	Name error (3)	cuaumuqcoeegomsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.700496912 CET	1.1.1.1	192.168.2.24	0x23b7	Name error (3)	oyogquqkmyqwwkuq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.719690084 CET	1.1.1.1	192.168.2.24	0xe37b	Name error (3)	gwyougsgeaaoiumg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.729309082 CET	1.1.1.1	192.168.2.24	0xfedb	Name error (3)	ukeoemaaimqyuais.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.738359928 CET	1.1.1.1	192.168.2.24	0xae0b	Name error (3)	oewuwcsmaacckewa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.747493982 CET	1.1.1.1	192.168.2.24	0x7507	Name error (3)	esykokiigsgwcwsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:42.757124901 CET	1.1.1.1	192.168.2.24	0xaa1f	Name error (3)	ekgqymkkqiwogqsy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:43.294955969 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	wueossewygqoakoq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:43.865544081 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	isceiesauogasmoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:43.877175093 CET	1.1.1.1	192.168.2.24	0x6703	Name error (3)	giscmywoiaqmqcmw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:43.887120008 CET	1.1.1.1	192.168.2.24	0x9d74	Name error (3)	uyqweoyukcewugsu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:43.897588968 CET	1.1.1.1	192.168.2.24	0xaa74	Name error (3)	imuscegymggagewg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:43.906965017 CET	1.1.1.1	192.168.2.24	0x978f	Name error (3)	wgesgakysuqaewik.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:43.918241978 CET	1.1.1.1	192.168.2.24	0xb435	Name error (3)	uwoyyqgiwowysqou.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:44.382798910 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	syaouwwyoaemeekm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:44.441163063 CET	1.1.1.1	192.168.2.24	0x413e	Name error (3)	aoscugususamokuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:44.885303974 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	aoscugususamokuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:44.902363062 CET	1.1.1.1	192.168.2.24	0x8c8c	Name error (3)	qucyaygweeasqeoy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:44.911828995 CET	1.1.1.1	192.168.2.24	0xd4cb	Name error (3)	uiwwamyuymycooey.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:44.930799007 CET	1.1.1.1	192.168.2.24	0xf935	Name error (3)	iygukwyuqwiuoqmi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:45.401606083 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	koaeaguekwcaousw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:45.873780012 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	skssioqkemoiieaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:46.361212015 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	yewomygmueegmoqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:46.371294022 CET	1.1.1.1	192.168.2.24	0xac63	Name error (3)	kuyoukwwacqkcoyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:46.385077953 CET	1.1.1.1	192.168.2.24	0xdd28	Name error (3)	gmcqgmkyguwkskyg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:46.395042896 CET	1.1.1.1	192.168.2.24	0xdec0	Name error (3)	mygiqcqokowwmgqq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:46.404954910 CET	1.1.1.1	192.168.2.24	0x8b88	Name error (3)	cymogqmasaiiwmww.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:46.943492889 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	iykumkamcykgicyi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:47.436228037 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	cyemcqwkasuimkgs.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:47.447797060 CET	1.1.1.1	192.168.2.24	0xfb09	Name error (3)	ieqeeiggkuqcomyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:47.457298040 CET	1.1.1.1	192.168.2.24	0xc3bb	Name error (3)	ssmkyomikukusksu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:47.467225075 CET	1.1.1.1	192.168.2.24	0x8e7b	Name error (3)	kimakioiwmawksiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:47.950026989 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	qumssmeysccykkyo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:47.966279030 CET	1.1.1.1	192.168.2.24	0x3a25	Name error (3)	ykuoaucocogcwoky.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:47.979712009 CET	1.1.1.1	192.168.2.24	0x8801	Name error (3)	semyssioekmosauo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.462778091 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	aiiqyyikowqaygwy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.546490908 CET	1.1.1.1	192.168.2.24	0xd0ac	Name error (3)	kouumoyqiuckkcau.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.624370098 CET	1.1.1.1	192.168.2.24	0x6738	Name error (3)	qgwkkkyicoqmooqu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.681382895 CET	1.1.1.1	192.168.2.24	0x646	Name error (3)	uwwcocucusmeguaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.708100080 CET	1.1.1.1	192.168.2.24	0x57ad	Name error (3)	cekggiciueyeyoku.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.724694967 CET	1.1.1.1	192.168.2.24	0x80c6	Name error (3)	iqqeoamqwiuiyuua.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.738250017 CET	1.1.1.1	192.168.2.24	0x18c5	Name error (3)	uokqmokseqqakiui.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:48.757646084 CET	1.1.1.1	192.168.2.24	0x315e	Name error (3)	cyqqgacqkowwkqqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.226197004 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	cmqqeimyycgqwsgg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.251101971 CET	1.1.1.1	192.168.2.24	0x6e12	Name error (3)	wmgeoqqiwqcmimwu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.257896900 CET	1.1.1.1	192.168.2.24	0x6e12	Name error (3)	wmgeoqqiwqcmimwu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.267272949 CET	1.1.1.1	192.168.2.24	0x82f2	Name error (3)	quyckaioggawuois.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.276911020 CET	1.1.1.1	192.168.2.24	0xfa42	Name error (3)	eqciawooemoueyqu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.286216021 CET	1.1.1.1	192.168.2.24	0x5fa6	Name error (3)	oqoaumkywacmuwwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.295397043 CET	1.1.1.1	192.168.2.24	0x60b1	Name error (3)	ewueyekksqksycww.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.756622076 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	csmasucykosuwouy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:49.767755032 CET	1.1.1.1	192.168.2.24	0xca37	Name error (3)	seeogeqwsqmsoaqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:50.243141890 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	gusmkkaiomeeqaiy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:50.708545923 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	msyecoiqeyqeiquy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:50.718821049 CET	1.1.1.1	192.168.2.24	0x9e52	Name error (3)	skawoueawceoywsy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:50.728605986 CET	1.1.1.1	192.168.2.24	0x582a	Name error (3)	iyuaqococuqcsgii.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:50.737931013 CET	1.1.1.1	192.168.2.24	0x3fb	Name error (3)	kuyaasckcgacyesi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:50.754156113 CET	1.1.1.1	192.168.2.24	0x67cb	Name error (3)	aaeqiiecqqumcgky.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:51.223184109 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	aawiysageawcoyok.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:51.713457108 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	yqysoaosqewciiww.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:51.734124899 CET	1.1.1.1	192.168.2.24	0xf265	Name error (3)	yessywkwcwmyewqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:51.746469021 CET	1.1.1.1	192.168.2.24	0x7c50	Name error (3)	aueiqscgeicewaoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:52.210191011 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	uccsgcekiwcyucou.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:52.221045017 CET	1.1.1.1	192.168.2.24	0xc5f9	Name error (3)	aiumyocycyyikiwc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:52.698646069 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	aoqayemwgmsyuimi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:52.708148003 CET	1.1.1.1	192.168.2.24	0xc588	Name error (3)	mmiowgeswucumqae.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:53.177371979 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	mmiugosumuqmuqoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:53.186964989 CET	1.1.1.1	192.168.2.24	0xecab	Name error (3)	ecqisawmymscauow.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:53.651545048 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	iyoqqeicqoquiqka.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:54.156934977 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ecoqwiswmwqokmay.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:54.630853891 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ceckmwoyqkwgeoqg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:54.653189898 CET	1.1.1.1	192.168.2.24	0x49a9	Name error (3)	kcoiygiwuyqyaoku.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:54.667241096 CET	1.1.1.1	192.168.2.24	0xad70	Name error (3)	aaeyckqsgmiqsgew.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:54.677196026 CET	1.1.1.1	192.168.2.24	0xca	Name error (3)	qgaiosyouwwkgsmm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:54.692624092 CET	1.1.1.1	192.168.2.24	0x77b5	Name error (3)	ocqseueommkkqcgs.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:55.154957056 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	owmesaosmycoeceq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:55.617949963 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	qokauaicweuwscac.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:55.627913952 CET	1.1.1.1	192.168.2.24	0x8d3c	Name error (3)	sewmmwqeyauowwwo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:56.132478952 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	mmgowiccqoeomagq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:56.167155981 CET	1.1.1.1	192.168.2.24	0x9258	Name error (3)	kcwiywyygywkkysk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:56.177175045 CET	1.1.1.1	192.168.2.24	0xd383	Name error (3)	syiysgiqgqggqkoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:56.203344107 CET	1.1.1.1	192.168.2.24	0xd383	Name error (3)	syiysgiqgqggqkoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:56.216181040 CET	1.1.1.1	192.168.2.24	0x6055	Name error (3)	ykuasckuceswseig.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:56.225843906 CET	1.1.1.1	192.168.2.24	0xdfc8	Name error (3)	quugmiumsieaiyys.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:56.706382036 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ikqywgcqaggogqsa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.191234112 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	eqyamamqwsseyoig.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.315152884 CET	1.1.1.1	192.168.2.24	0x1075	Name error (3)	seqkawokggwucsui.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.327009916 CET	1.1.1.1	192.168.2.24	0xc428	Name error (3)	gmqeqkcqackwkgao.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.347377062 CET	1.1.1.1	192.168.2.24	0x148	Name error (3)	guowewgekuoqacyy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.351766109 CET	1.1.1.1	192.168.2.24	0x148	Name error (3)	guowewgekuoqacyy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.357209921 CET	1.1.1.1	192.168.2.24	0x65c8	Name error (3)	aaokyscqeecowaci.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.367244005 CET	1.1.1.1	192.168.2.24	0x30f5	Name error (3)	ywywwwgwekicgico.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.829658031 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	wsisaoaauqwmuomg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:57.839804888 CET	1.1.1.1	192.168.2.24	0xe413	Name error (3)	koouumcuucaeakye.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:58.320657969 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	okccisioeycusekg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:58.341895103 CET	1.1.1.1	192.168.2.24	0xf0bb	Name error (3)	cymymsciyaiacwgw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:58.351444006 CET	1.1.1.1	192.168.2.24	0x4c18	Name error (3)	aoyeoimcuuqakckw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:58.835417986 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	qoaweokuqggaymks.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:59.295442104 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ewuyacewswkoueqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:59.307254076 CET	1.1.1.1	192.168.2.24	0xc79c	Name error (3)	kiuymkmaomciimcc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:45:59.775445938 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	oqaiyaoqwyeswaiy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:00.245063066 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	koyokggaqsagggym.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:00.255470037 CET	1.1.1.1	192.168.2.24	0x96a8	Name error (3)	cmsuagygagqceocm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:00.721983910 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	uisgoqaoksgqsqyg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:00.732264042 CET	1.1.1.1	192.168.2.24	0xddf6	Name error (3)	ocgcqsagaakgkcma.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:00.750283957 CET	1.1.1.1	192.168.2.24	0x600d	Name error (3)	okgigkmiieweagia.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.230326891 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	skiwkmaaeeiqqgee.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.252827883 CET	1.1.1.1	192.168.2.24	0xa3ab	Name error (3)	aagokgyaswscyaeu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.258038998 CET	1.1.1.1	192.168.2.24	0xa3ab	Name error (3)	aagokgyaswscyaeu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.262703896 CET	1.1.1.1	192.168.2.24	0x35c2	Name error (3)	gmciuwiycsqycggy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.282146931 CET	1.1.1.1	192.168.2.24	0x49f2	Name error (3)	ggeymcaisciikucq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.299181938 CET	1.1.1.1	192.168.2.24	0x6ee7	Name error (3)	uwskygguegqkasme.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.308284044 CET	1.1.1.1	192.168.2.24	0x59eb	Name error (3)	cyumiiokkswcoeag.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.321809053 CET	1.1.1.1	192.168.2.24	0xb428	Name error (3)	oqisqmesaeoegmyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.334676027 CET	1.1.1.1	192.168.2.24	0x1a19	Name error (3)	wagasowawsoyycom.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:01.796369076 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	gaguweiwsgouugqe.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:02.260344028 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	syyyweaywowycsia.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:02.725341082 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	mmoycwqiuykiusuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:02.747484922 CET	1.1.1.1	192.168.2.24	0x7ae1	Name error (3)	ikoycakqiuuascco.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:02.763818979 CET	1.1.1.1	192.168.2.24	0x5ec3	Name error (3)	cmuqekokuyuqgige.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:02.772670984 CET	1.1.1.1	192.168.2.24	0x6c81	Name error (3)	cywoimwmsoamqoem.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.243655920 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	skyiqyaeoykwcgiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.267973900 CET	1.1.1.1	192.168.2.24	0x38b0	Name error (3)	ssiooaeoaocuyaow.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.283987999 CET	1.1.1.1	192.168.2.24	0xb979	Name error (3)	ywmgykycywqqewqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.302638054 CET	1.1.1.1	192.168.2.24	0x2c91	Name error (3)	uosaescwmkiyscay.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.771641016 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	eigywisgeoiskekg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.781183958 CET	1.1.1.1	192.168.2.24	0x1b3d	Name error (3)	msqsoggkkoiokugk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.797811985 CET	1.1.1.1	192.168.2.24	0x5dc2	Name error (3)	cmaaciimeememwao.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:03.813580036 CET	1.1.1.1	192.168.2.24	0x83ba	Name error (3)	uigkauqkumywguig.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:04.306333065 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	wggygeoisauouuoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:04.324681044 CET	1.1.1.1	192.168.2.24	0x2fe2	Name error (3)	okoykokgycygucya.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:04.825418949 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ewaoowewmsomgaiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:04.835537910 CET	1.1.1.1	192.168.2.24	0x5da5	Name error (3)	ieiegkokewkqmkwe.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:04.850271940 CET	1.1.1.1	192.168.2.24	0xafad	Name error (3)	gakesieaaickekuo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:04.867609978 CET	1.1.1.1	192.168.2.24	0xab3	Name error (3)	ecasigiwguqgguyw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:04.897922039 CET	1.1.1.1	192.168.2.24	0xdbee	Name error (3)	okwswuciummewsui.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:04.907229900 CET	1.1.1.1	192.168.2.24	0x5211	Name error (3)	ggaqiymaekkywusy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.380884886 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ocicimqkgucacyim.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.871831894 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	qoyisgoayskswigs.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.893862009 CET	1.1.1.1	192.168.2.24	0x340f	Name error (3)	wsywmuwgsogemomw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.905936003 CET	1.1.1.1	192.168.2.24	0x7b55	Name error (3)	skaeggkkcmoqoywy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.915733099 CET	1.1.1.1	192.168.2.24	0x9aba	Name error (3)	uowicsywgqmgagyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.925349951 CET	1.1.1.1	192.168.2.24	0x22f9	Name error (3)	yqyqgowkwqiggewq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.937422037 CET	1.1.1.1	192.168.2.24	0x3a24	Name error (3)	aikmggymywuooyqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:05.952862024 CET	1.1.1.1	192.168.2.24	0x62de	Name error (3)	semgkyogsqqwgsmy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:06.436171055 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ucmwywoqciswaguc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:06.451829910 CET	1.1.1.1	192.168.2.24	0x2b2e	Name error (3)	qowoagcmkkgqcswk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:06.936557055 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	mmgusimiaqiweyas.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:06.946227074 CET	1.1.1.1	192.168.2.24	0x910c	Name error (3)	wgssaogcsscmkswu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:06.955806017 CET	1.1.1.1	192.168.2.24	0xab92	Name error (3)	aoeewogkicikusoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:07.446614027 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ikggquqsigykqamc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:07.465677977 CET	1.1.1.1	192.168.2.24	0xe02c	Name error (3)	waaqccyeaeywuoqu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:07.475656986 CET	1.1.1.1	192.168.2.24	0xc24e	Name error (3)	ecgiqiiieksaooyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:07.947832108 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	iqcogqmwegaqewuu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:07.996181965 CET	1.1.1.1	192.168.2.24	0x7c47	Name error (3)	aiusammkykucyyso.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:08.007095098 CET	1.1.1.1	192.168.2.24	0x36a7	Name error (3)	qgkswogkcsaeegki.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:08.017745972 CET	1.1.1.1	192.168.2.24	0x8807	Name error (3)	ywcwqgmikmycwoeu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:08.504466057 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	eiqogaaggeswoges.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:08.514420986 CET	1.1.1.1	192.168.2.24	0x5525	Name error (3)	sekqikccsokicgye.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:08.990341902 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ssqggwwkkaayqkgk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:09.013057947 CET	1.1.1.1	192.168.2.24	0x3cde	Name error (3)	seiiycgosccmaykm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:09.473956108 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	aosagqwwquakwceq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:09.487557888 CET	1.1.1.1	192.168.2.24	0x310	Name error (3)	qoiigkweqeiwycuo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:09.504909992 CET	1.1.1.1	192.168.2.24	0x7273	Name error (3)	oqycmugocqsyuaae.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:09.522967100 CET	1.1.1.1	192.168.2.24	0x7fe8	Name error (3)	ewwgmiicuyowacum.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:09.992693901 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	mmmoiaecqyuquoya.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.017489910 CET	1.1.1.1	192.168.2.24	0x2ea7	Name error (3)	auscackumyccuyuk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.023835897 CET	1.1.1.1	192.168.2.24	0x2ea7	Name error (3)	auscackumyccuyuk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.027467966 CET	1.1.1.1	192.168.2.24	0xd140	Name error (3)	okgquokwaassqyyi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.053961039 CET	1.1.1.1	192.168.2.24	0x4fc7	Name error (3)	uikciyeoaumwomqo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.054727077 CET	1.1.1.1	192.168.2.24	0x4fc7	Name error (3)	uikciyeoaumwomqo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.067917109 CET	1.1.1.1	192.168.2.24	0xa1d5	Name error (3)	gmoguamscceqkamk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.085028887 CET	1.1.1.1	192.168.2.24	0x6338	Name error (3)	eqgoeemewamgucie.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.099997997 CET	1.1.1.1	192.168.2.24	0x5ed6	Name error (3)	uoiyoewsiosismow.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.109265089 CET	1.1.1.1	192.168.2.24	0x2a40	Name error (3)	cekeeosckoouciwe.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.572240114 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	mycgaaaymgowwicw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.596729994 CET	1.1.1.1	192.168.2.24	0xecb5	Name error (3)	ecgmcmqswickqcgi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:10.640908003 CET	1.1.1.1	192.168.2.24	0x3c14	Name error (3)	guwwqcuqmkmyyyyi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:11.105999947 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	cygmqaagqcuusmiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:11.116556883 CET	1.1.1.1	192.168.2.24	0xda18	Name error (3)	wggqoukyeokwgmoy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:11.135879993 CET	1.1.1.1	192.168.2.24	0x7a47	Name error (3)	okoccmmgswcmakcw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:11.612281084 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	iesmewkokeqooioo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:11.632143021 CET	1.1.1.1	192.168.2.24	0x533	Name error (3)	mmiccoqwqmssougs.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:11.643428087 CET	1.1.1.1	192.168.2.24	0xe2dd	Name error (3)	aoqymkkusuecomsw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:11.654587030 CET	1.1.1.1	192.168.2.24	0xa43	Name error (3)	mskmgwkuiamqikce.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.132970095 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	waucsgsqqsqkacog.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.143044949 CET	1.1.1.1	192.168.2.24	0x7b14	Name error (3)	yqmqwygosgguwqsu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.632915974 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	wsicgeayaoueooom.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.656718016 CET	1.1.1.1	192.168.2.24	0xec21	Name error (3)	uwagocmgakuuykiu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.672725916 CET	1.1.1.1	192.168.2.24	0xd114	Name error (3)	uowkoqwgqqeweume.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.684096098 CET	1.1.1.1	192.168.2.24	0xc58e	Name error (3)	aakowgaeoeuekqyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.705257893 CET	1.1.1.1	192.168.2.24	0xacd5	Name error (3)	skmmaauasaqywsas.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.715300083 CET	1.1.1.1	192.168.2.24	0xb4b4	Name error (3)	cygeomikesiegqsk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.725146055 CET	1.1.1.1	192.168.2.24	0x8b04	Name error (3)	okeyuasamkcqqeka.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:12.749816895 CET	1.1.1.1	192.168.2.24	0xac04	Name error (3)	qagaeyiqsgakegya.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:13.228216887 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ucoweesewcwiosgw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:13.274910927 CET	1.1.1.1	192.168.2.24	0xb33f	Name error (3)	sskawiyqmweogyqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:13.746704102 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	wgwmaeskqmwumwkk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:13.756370068 CET	1.1.1.1	192.168.2.24	0xaa74	Name error (3)	quwocusecekwqkaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:13.765978098 CET	1.1.1.1	192.168.2.24	0x13e1	Name error (3)	qukyogcwsgswyayo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:14.227082014 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	uiicikumwwsmaeem.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:14.237417936 CET	1.1.1.1	192.168.2.24	0xb930	Name error (3)	wagyuykcqmqyygkw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:14.728724957 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	uiaqcykmqwcwgmeg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:14.761377096 CET	1.1.1.1	192.168.2.24	0x4570	Name error (3)	uoeukcckqmmsuwaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:14.775510073 CET	1.1.1.1	192.168.2.24	0x7694	Name error (3)	gugueqckkyuaeqqy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:15.272157907 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	skqsqowayeqesqqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:15.283561945 CET	1.1.1.1	192.168.2.24	0x7ee2	Name error (3)	kuscomokgkmaommk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:15.300359011 CET	1.1.1.1	192.168.2.24	0x3e52	Name error (3)	wsmyawqeqguacwas.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:15.771441936 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ikuqcsooiucogaww.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:15.838888884 CET	1.1.1.1	192.168.2.24	0x5ce5	Name error (3)	iysmukmcmacuomic.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:15.860496998 CET	1.1.1.1	192.168.2.24	0x652f	Name error (3)	ecqoqckqoaogcesy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:16.320735931 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	iesmkwqgmkmksgam.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:16.337011099 CET	1.1.1.1	192.168.2.24	0x43f8	Name error (3)	guwououoomacaysu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:16.351406097 CET	1.1.1.1	192.168.2.24	0x34c2	Name error (3)	ucsoeygscgagowqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:16.361277103 CET	1.1.1.1	192.168.2.24	0x705e	Name error (3)	ykeuawieaequiyag.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:16.371644974 CET	1.1.1.1	192.168.2.24	0xa78d	Name error (3)	cskowwiekeqaakki.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:16.833728075 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ecogmmaysgwkmwqm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:16.856128931 CET	1.1.1.1	192.168.2.24	0x57f3	Name error (3)	uwuomysuqkaykwuy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:16.871365070 CET	1.1.1.1	192.168.2.24	0xc97d	Name error (3)	ikqokmauuissyuce.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:17.330235004 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	oeeoucsuawuqkqoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:17.808887005 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ygquuyekcusgsqqu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:17.818968058 CET	1.1.1.1	192.168.2.24	0x2743	Name error (3)	uqsqcgouceqmigcg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.284432888 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	kwoesauawkouiecq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.302378893 CET	1.1.1.1	192.168.2.24	0x7fcd	Name error (3)	yywgmuqggsagcmco.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.312043905 CET	1.1.1.1	192.168.2.24	0xda45	Name error (3)	imumkckaqyieaasa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.332415104 CET	1.1.1.1	192.168.2.24	0xec06	Name error (3)	qqkoemcaocsomwow.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.345865965 CET	1.1.1.1	192.168.2.24	0x9fda	Name error (3)	awsigwcaesugycuk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.354696035 CET	1.1.1.1	192.168.2.24	0x7c51	Name error (3)	kkqoqmmcwacsqiiu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.366002083 CET	1.1.1.1	192.168.2.24	0xdc99	Name error (3)	iamowksweuqyssis.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.852404118 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	wicwocqcucgaimwe.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:18.883116007 CET	1.1.1.1	192.168.2.24	0x1878	Name error (3)	wiuyuwqiqkkogmoe.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.036823034 CET	1.1.1.1	192.168.2.24	0x9b05	Name error (3)	ueyeeeegieoukoci.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.055588961 CET	1.1.1.1	192.168.2.24	0x9b05	Name error (3)	ueyeeeegieoukoci.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.086843967 CET	1.1.1.1	192.168.2.24	0xac1e	Name error (3)	caysuwggmqimaqwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.086869955 CET	1.1.1.1	192.168.2.24	0xac1e	Name error (3)	caysuwggmqimaqwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.102576017 CET	1.1.1.1	192.168.2.24	0xd747	Name error (3)	kecsceaqksygeamy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.119558096 CET	1.1.1.1	192.168.2.24	0xb7c	Name error (3)	oyyagswauqyckoye.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.603465080 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	aciemoayegyggwiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.613677025 CET	1.1.1.1	192.168.2.24	0xd6fa	Name error (3)	micemismikicsccc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.625181913 CET	1.1.1.1	192.168.2.24	0xa5d2	Name error (3)	kwieueawsewqigey.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:19.635390043 CET	1.1.1.1	192.168.2.24	0xb542	Name error (3)	qiwmqykuesscgkac.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:20.135173082 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	issaesuceymoyccq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:20.629873991 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	sgowwwmqgkeyukwq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:20.641947031 CET	1.1.1.1	192.168.2.24	0xfc85	Name error (3)	kewweiikaaysqugi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:20.666743994 CET	1.1.1.1	192.168.2.24	0x9dd8	Name error (3)	oywkwakwykimigck.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:20.683109999 CET	1.1.1.1	192.168.2.24	0xac5d	Name error (3)	aqkiemcseioemogk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:21.147460938 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	omoaicgooscecewq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:21.637932062 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	gcyciogqguooyici.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:21.668945074 CET	1.1.1.1	192.168.2.24	0x64fa	Name error (3)	qwyikqowekcgesga.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:22.189294100 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	moysoauykmieesas.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:22.667876959 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ysmmeamaooogyuwa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:22.684299946 CET	1.1.1.1	192.168.2.24	0xee88	Name error (3)	qqggiaeuuaskcisa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.157429934 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ukwgsimcamwqcqus.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.168996096 CET	1.1.1.1	192.168.2.24	0xef	Name error (3)	makysawqyqkmmkuo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.196229935 CET	1.1.1.1	192.168.2.24	0xbab	Name error (3)	gwuaqqsyegywuaya.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.196247101 CET	1.1.1.1	192.168.2.24	0xbab	Name error (3)	gwuaqqsyegywuaya.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.214642048 CET	1.1.1.1	192.168.2.24	0x4bc3	Name error (3)	smwcqasgeqikoqss.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.226571083 CET	1.1.1.1	192.168.2.24	0x21c0	Name error (3)	qigaaawumoqgmwck.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.241362095 CET	1.1.1.1	192.168.2.24	0x4074	Name error (3)	kwkiuumqgigawcek.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.253149033 CET	1.1.1.1	192.168.2.24	0x8dae	Name error (3)	imcgogsosiogeqgc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:23.718741894 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	coosumygqywusaaq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.208237886 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	muikisowiqmckiao.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.227730036 CET	1.1.1.1	192.168.2.24	0xc605	Name error (3)	eygeqyioakqgwkws.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.241828918 CET	1.1.1.1	192.168.2.24	0x44ff	Name error (3)	wcagmacwieoosqok.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.269285917 CET	1.1.1.1	192.168.2.24	0xad4f	Name error (3)	igyccoycggkescsw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.742579937 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	uegmseugcsaymygc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.768429041 CET	1.1.1.1	192.168.2.24	0x71b	Name error (3)	gcgquesqkuokqoos.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.785084963 CET	1.1.1.1	192.168.2.24	0xc8c5	Name error (3)	awcmmsyugikucuqg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.802562952 CET	1.1.1.1	192.168.2.24	0xb4c9	Name error (3)	qqmoakcgiagmaiou.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:24.816078901 CET	1.1.1.1	192.168.2.24	0x6e0f	Name error (3)	qcweoeaqygkgoyqw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:25.287734985 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	kwcqymkoyiusyywg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:25.306236982 CET	1.1.1.1	192.168.2.24	0x5cbb	Name error (3)	uysuukowkciwgmko.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:25.794549942 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	yyqmiikqggkgkcke.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:25.804245949 CET	1.1.1.1	192.168.2.24	0xb756	Name error (3)	cgwgwmsuyaicegcq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:26.279205084 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	oesgsmmsyegwkaii.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:26.294954062 CET	1.1.1.1	192.168.2.24	0xa1be	Name error (3)	eeimyyskiwmsmwaw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:26.314126015 CET	1.1.1.1	192.168.2.24	0x54e0	Name error (3)	akqmmimguqeacqki.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:26.324217081 CET	1.1.1.1	192.168.2.24	0x1fe9	Name error (3)	eeuqeoimgoqakquw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:26.789731026 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	mookqcgowekwsyme.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:26.815648079 CET	1.1.1.1	192.168.2.24	0xd0a	Name error (3)	iaamsmcuweooiums.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:27.326545000 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	qwwkyygoyymumeqa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:27.371452093 CET	1.1.1.1	192.168.2.24	0xee07	Name error (3)	qwmqmwoieykcoums.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:27.387651920 CET	1.1.1.1	192.168.2.24	0xee07	Name error (3)	qwmqmwoieykcoums.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:27.390470982 CET	1.1.1.1	192.168.2.24	0x4a9	Name error (3)	aqmmgwoeiissyuay.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:27.870759964 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ukgeakkwimkacgwm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:27.880579948 CET	1.1.1.1	192.168.2.24	0x285b	Name error (3)	wcuwikyucakswsgy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:28.346931934 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	oyqmksygwiuekomo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:28.366127014 CET	1.1.1.1	192.168.2.24	0x8bcf	Name error (3)	gokuyyiawuwwyeqi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:28.831146955 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	qqumaeswmyusisoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:29.321284056 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	ekommiasesmcaysg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:29.337743044 CET	1.1.1.1	192.168.2.24	0xe3d0	Name error (3)	kwokcgwecseqcsck.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:29.348129988 CET	1.1.1.1	192.168.2.24	0xdf3c	Name error (3)	cgcukekaacucqesm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:29.358942986 CET	1.1.1.1	192.168.2.24	0x37cb	Name error (3)	sgiwoemuskksgmem.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:29.373610973 CET	1.1.1.1	192.168.2.24	0x8d4a	Name error (3)	miyuaaeqyewssisg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:29.398752928 CET	1.1.1.1	192.168.2.24	0x366d	Name error (3)	awquimmiceucqika.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:29.422380924 CET	1.1.1.1	192.168.2.24	0xbe14	Name error (3)	qwsgiwukuaoocqgw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:29.953977108 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	coyikkwmyomyykmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:30.421365976 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	osyawgmkggwwaise.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:30.431426048 CET	1.1.1.1	192.168.2.24	0x88fb	Name error (3)	gcuasoickeyqugwe.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:30.445270061 CET	1.1.1.1	192.168.2.24	0x8a38	Name error (3)	oscegykuecgmiioq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:30.457170963 CET	1.1.1.1	192.168.2.24	0xdf39	Name error (3)	camkaaeqmmemkeqo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:30.472821951 CET	1.1.1.1	192.168.2.24	0x62df	Name error (3)	gwswakimuyyacece.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:30.483921051 CET	1.1.1.1	192.168.2.24	0xc9b8	Name error (3)	giqagqyuwgskokgg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:30.498181105 CET	1.1.1.1	192.168.2.24	0x814f	Name error (3)	uqswoygsykiwckyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:30.511845112 CET	1.1.1.1	192.168.2.24	0x6362	Name error (3)	wccgukagisyugimy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:30.996783018 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	qieoqgsomueyeass.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:31.466907024 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	uqumusgyyygmiicq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:31.938684940 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	wuowyewqgeeycsio.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:31.949476957 CET	1.1.1.1	192.168.2.24	0x6ec1	Name error (3)	sgckugycwoyyoeow.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:31.964502096 CET	1.1.1.1	192.168.2.24	0x35f7	Name error (3)	keyqaymgcyswowqc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:32.436510086 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	yskeokkusmkcyosa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:32.456212997 CET	1.1.1.1	192.168.2.24	0xff0b	Name error (3)	ymmoqwiyeomigemu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:32.471357107 CET	1.1.1.1	192.168.2.24	0x1f6	Name error (3)	iaiyeiseoyssykuu.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:32.482330084 CET	1.1.1.1	192.168.2.24	0x281f	Name error (3)	gcsgyeomwaaiuwmg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:32.943620920 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	cuccscimmuweokoc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:33.408277988 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	wigeqewyusckikqk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:33.438023090 CET	1.1.1.1	192.168.2.24	0x2dbd	Name error (3)	wowsuycqmmumwayq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:33.954411030 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	keqgamuiascccwou.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:33.971752882 CET	1.1.1.1	192.168.2.24	0x8986	Name error (3)	awyogsywqmeoaemc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:33.985856056 CET	1.1.1.1	192.168.2.24	0xc687	Name error (3)	gogceqqcygywqquk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:33.997419119 CET	1.1.1.1	192.168.2.24	0xf393	Name error (3)	akewqoewkigoyqgk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:34.009838104 CET	1.1.1.1	192.168.2.24	0xeb41	Name error (3)	smgomgmggmimcecy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:34.478455067 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	uqemqeoguyciagkm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:34.492016077 CET	1.1.1.1	192.168.2.24	0x6afc	Name error (3)	oekuaqgwaqowmqwa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:34.965190887 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	sgqwuwmskisykocm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:34.982455969 CET	1.1.1.1	192.168.2.24	0x15a0	Name error (3)	kewgquswkewgaweo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:35.463004112 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	eekokuwaauqiuoci.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:35.477655888 CET	1.1.1.1	192.168.2.24	0x832a	Name error (3)	qweaumwmomesioio.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:35.488742113 CET	1.1.1.1	192.168.2.24	0x2227	Name error (3)	couuuksyuscyykke.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:35.512924910 CET	1.1.1.1	192.168.2.24	0x9d13	Name error (3)	moygyoakyaoosocs.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:35.529164076 CET	1.1.1.1	192.168.2.24	0x49ab	Name error (3)	qwikeawwkykgymoi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:35.544012070 CET	1.1.1.1	192.168.2.24	0x98bc	Name error (3)	aqcyeeuumekyigiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:36.003758907 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	mugimcuecsqusuec.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:36.473249912 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	suogmuweyqgoqkgk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:36.495614052 CET	1.1.1.1	192.168.2.24	0x5344	Name error (3)	ukgmmiakkgwgssak.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:36.514482975 CET	1.1.1.1	192.168.2.24	0xb703	Name error (3)	yyuewgegwqqkccay.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:36.528682947 CET	1.1.1.1	192.168.2.24	0x4a6f	Name error (3)	qqmoqouykmakcwwo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:36.539412975 CET	1.1.1.1	192.168.2.24	0x8097	Name error (3)	ekucgqkwyqioewgm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.001276016 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	cgmocwqyagacokyc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.012837887 CET	1.1.1.1	192.168.2.24	0xaf93	Name error (3)	ekuisswoiwwasmug.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.028765917 CET	1.1.1.1	192.168.2.24	0x9b6a	Name error (3)	mucqakweaoaeqwqg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.495675087 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	iaqkoyuacqaqiiaa.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.509203911 CET	1.1.1.1	192.168.2.24	0x8644	Name error (3)	ysysqieskmiymcsq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.525654078 CET	1.1.1.1	192.168.2.24	0x89cb	Name error (3)	ossaysgggqwskqck.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.545520067 CET	1.1.1.1	192.168.2.24	0x7759	Name error (3)	ygceccuaqcgscgks.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.586678028 CET	1.1.1.1	192.168.2.24	0x7759	Name error (3)	ygceccuaqcgscgks.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.603358030 CET	1.1.1.1	192.168.2.24	0x4746	Name error (3)	kkyoeaiisaskwsgi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.631656885 CET	1.1.1.1	192.168.2.24	0xa0a8	Name error (3)	kkmycqgoqwsgagmm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.679481030 CET	1.1.1.1	192.168.2.24	0x5f49	Name error (3)	kkqgkiqaiegyuuac.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:37.745584011 CET	1.1.1.1	192.168.2.24	0xf5b8	Name error (3)	sgyosccwmusakiag.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:38.236217022 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	esmcwycsgkmmkmie.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:38.716202021 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	eeagssccuuqgoyck.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:38.725836039 CET	1.1.1.1	192.168.2.24	0x478c	Name error (3)	kweqseyaokkowemm.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:38.746463060 CET	1.1.1.1	192.168.2.24	0x2f83	Name error (3)	omqukiqqqkicumaq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:38.755593061 CET	1.1.1.1	192.168.2.24	0x4a39	Name error (3)	cgagsqguosagcyko.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:38.767129898 CET	1.1.1.1	192.168.2.24	0x7abc	Name error (3)	kwuyeysggksaauew.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:38.778450966 CET	1.1.1.1	192.168.2.24	0xbb12	Name error (3)	yyyocaqgqkgawuoo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:38.795777082 CET	1.1.1.1	192.168.2.24	0x8eea	Name error (3)	qcyusyquosgecuec.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:39.267537117 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	wciikuskwmgwyqqo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:39.285451889 CET	1.1.1.1	192.168.2.24	0x680a	Name error (3)	giekgiaycwsmicgi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:39.760121107 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	moigwmmwmwaesewy.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:40.242151976 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	uyeyicisiasmeaiw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:40.252110958 CET	1.1.1.1	192.168.2.24	0xe2c7	Name error (3)	wikomoakewmgswsg.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:40.733359098 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	eyqewqgswoiwucau.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:40.743258953 CET	1.1.1.1	192.168.2.24	0xbad2	Name error (3)	igsykuymgikayiyw.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:40.753309965 CET	1.1.1.1	192.168.2.24	0x8e63	Name error (3)	awoiesggoyaqumsc.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:40.764235973 CET	1.1.1.1	192.168.2.24	0xb489	Name error (3)	akwcugeaamycaqus.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:41.248538971 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	oyigkwsqmiqmyaem.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:41.262923956 CET	1.1.1.1	192.168.2.24	0x292a	Name error (3)	qiakkiycwyckaoyk.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:41.275955915 CET	1.1.1.1	192.168.2.24	0x17c3	Name error (3)	couqoiaioicsmiyi.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:41.738097906 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	goqwgykuuockgkiq.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:41.752058983 CET	1.1.1.1	192.168.2.24	0xd0af	Name error (3)	mawieiaeeguckoce.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:41.761261940 CET	1.1.1.1	192.168.2.24	0x6388	Name error (3)	yyaqueaqcsokisee.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 9, 2025 13:46:42.241086960 CET	1.1.1.1	192.168.2.24	0x1	Name error (3)	cassqaqeuciekkeo.xyz	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

auayomwkewcomwas.xyz:443

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.24	49743	193.32.177.34	443	44	C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe

Timestamp	Bytes transferred	Direction	Data
Jan 9, 2025 13:45:08.705332994 CET	130	OUT	GET /api/client_hello HTTP/1.1 Accept: / Connection: close Host: auayomwkewcomwas.xyz:443 User-Agent: cpp-httplib/0.12.1

Target ID:	0
Start time:	07:44:32
Start date:	09/01/2025
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\install.msi"
Imagebase:	0x7ff7fc050000
File size:	176'128 bytes
MD5 hash:	C0D3BDDE74C1EC82F75681D4D5ED44C8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	07:44:33
Start date:	09/01/2025
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\msiexec.exe /V
Imagebase:	0x7ff7fc050000
File size:	176'128 bytes
MD5 hash:	C0D3BDDE74C1EC82F75681D4D5ED44C8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	07:44:33
Start date:	09/01/2025
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\syswow64\MsiExec.exe -Embedding 2003FD93E0ADBEFC1EB843808504AFF5
Imagebase:	0x8a0000
File size:	145'408 bytes
MD5 hash:	FE653E9A818C22D7E744320F65A91C09
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	07:44:34
Start date:	09/01/2025
Path:	C:\Windows\SysWOW64\icacls.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\ICACLS.EXE" "C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\." /SETINTEGRITYLEVEL (CI)(OI)HIGH
Imagebase:	0xe40000
File size:	30'208 bytes
MD5 hash:	DF132308B964322137C3AA6CD2705D24
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	07:44:34
Start date:	09/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6038b0000
File size:	1'040'384 bytes
MD5 hash:	9698384842DA735D80D278A427A229AB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	07:44:34
Start date:	09/01/2025
Path:	C:\Windows\SysWOW64\expand.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\EXPAND.EXE" -R files.cab -F:* files
Imagebase:	0xcd0000
File size:	39'424 bytes
MD5 hash:	63860F134FE4705269CE653A673DBD88
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	07:44:34
Start date:	09/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6038b0000
File size:	1'040'384 bytes
MD5 hash:	9698384842DA735D80D278A427A229AB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	07:45:02
Start date:	09/01/2025
Path:	C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe" /VERYSILENT /VERYSILENT
Imagebase:	0xf30000
File size:	684'188'672 bytes
MD5 hash:	6E3F4D8C1D0D90D8346DFF0051B96D33
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	0.5%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	4.5%
Total number of Nodes:	638
Total number of Limit Nodes:	15

Executed Functions

Function 010E8C86 Relevance: .0, Instructions: 29
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44b1d36404a971d8428428f932fe9aa9f23a8be2fa93117a1f0efb65bc0d36f5
Instruction ID: 9d50b59c9b65457675050dc2c9c911d7938234ab4c545cbbe19b0db1df4c7446
Opcode Fuzzy Hash: 44b1d36404a971d8428428f932fe9aa9f23a8be2fa93117a1f0efb65bc0d36f5
Instruction Fuzzy Hash: 59F0A0726117249FCB26CB8DD509B89B3FDEB46A21F118096E541A7241D7B0DE00C7C0

Function 010E64C9 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 77
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

ext-ms-, xrefs: 010E6534
api-ms-, xrefs: 010E6520

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: api-ms-$ext-ms-
API String ID: 0-537541572
Opcode ID: cc9333f08bb49677caace3f800efb763311823c54a44770c6d855db6550ebf90
Instruction ID: eb6525cdafb05b678c8de2bd50c3fe35242284462d7d8ae6d72c251d52cf908b
Opcode Fuzzy Hash: cc9333f08bb49677caace3f800efb763311823c54a44770c6d855db6550ebf90
Instruction Fuzzy Hash: 7E21C933F01211AFDB328A2BFC4CB5E37E85B217A4F150165F996A7185DA72E900C6E0

Function 010D35DA Relevance: 4.6, APIs: 3, Instructions: 93
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 010D4203

Part of subcall function 010D42F3: std::exception::exception.LIBCONCRT ref: 010D4300

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 010D4CC1
___raise_securityfailure.LIBCMT ref: 010D4D7E

Part of subcall function 010D5EA0: RaiseException.KERNEL32(E06D7363,00000001,00000003,00F39BBC,A75A4E1F,00000000,?,010D4236,00F39BBC,01107148,?,00F39BBC,?,?), ref: 010D5F00

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: ExceptionFeaturePresentProcessorRaise___raise_securityfailurestd::exception::exceptionstd::invalid_argument::invalid_argument
String ID:
API String ID: 1155004847-0
Opcode ID: be8c96f6d513c870b5127f75b56c171e12c27659f651a66ea5474811d5d54e72
Instruction ID: 2f07216330f34a2d09000fecdfe5987a3f256076137ff691004e134270afac29
Opcode Fuzzy Hash: be8c96f6d513c870b5127f75b56c171e12c27659f651a66ea5474811d5d54e72
Instruction Fuzzy Hash: DF31AAB490430AEFD718EF6DFA49689BBB8BF14700F504139E958C7B94E7B09585CB82

Function 010DA4AE Relevance: 3.0, APIs: 2, Instructions: 38
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetLastError.KERNEL32(01107290,0000000C), ref: 010DA4C1
ExitThread.KERNEL32 ref: 010DA4C8

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: ErrorExitLastThread
String ID:
API String ID: 1611280651-0
Opcode ID: 17f3151330928e780431aa1aeaeb649f4fbefa1caa9c70987a01f8ce75c79fff
Instruction ID: e1c4910013cb89369c8a9cd992614b1d581ea25f4ee5808b0b7062b41ff7cb0d
Opcode Fuzzy Hash: 17f3151330928e780431aa1aeaeb649f4fbefa1caa9c70987a01f8ce75c79fff
Instruction Fuzzy Hash: E4F0AF70A40306AFDB19AFB0D80DAAE3BB4EF51310F144199F45697291CF75A980CBA1

Function 010E6590 Relevance: 1.6, APIs: 1, Instructions: 57
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd3620d87465d2a662c4eb6c3e0f82a19498908fd5568ba2f22f1108e5a055c7
Instruction ID: fae0321c78db20ce66ab4085dbe3ff8fe1898a482b68b8c431419b2c46b2a7b1
Opcode Fuzzy Hash: cd3620d87465d2a662c4eb6c3e0f82a19498908fd5568ba2f22f1108e5a055c7
Instruction Fuzzy Hash: 33012837B142166FEB3A8D2EFC4895A37D6BBE8220F148131F954CB14CEE32D4458780

Function 010E57F1 Relevance: 1.5, APIs: 1, Instructions: 32
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,4D88C033,4D88C033,?,010E74AA,00000220,010ED841,4D88C033,?,?,?,?,00000000,00000000,?,010ED841), ref: 010E5823

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 0391bc00bc7787a221076911a63e61205527681666cbc24f9b37cc392bacd1cb
Instruction ID: 5b854721444122a4b3a84969773f1f2d13cda73b6aedbd244ddaa04be25118a1
Opcode Fuzzy Hash: 0391bc00bc7787a221076911a63e61205527681666cbc24f9b37cc392bacd1cb
Instruction Fuzzy Hash: 09E0653D1116215EE6612A6BDF09B9B7EC8DF426B4F0545B1EDD5B60D0DB50C841C2E1

Non-executed Functions

Function 00F542C0 Relevance: 30.5, APIs: 2, Strings: 15, Instructions: 789COMMON

Download Yara Rule

Strings

))[y, xrefs: 00F54BF0
))[y, xrefs: 00F54BFF
))[y, xrefs: 00F54BD0
()[y, xrefs: 00F54E50
y3', xrefs: 00F544FB
J&, xrefs: 00F54625
J&, xrefs: 00F5440C
))[y, xrefs: 00F54EDE
))[y, xrefs: 00F54EA1
))[y, xrefs: 00F54B9C
))[y, xrefs: 00F54BB0
()[y, xrefs: 00F54B60
))[y, xrefs: 00F54EC0
))[y, xrefs: 00F54E8D
I&, xrefs: 00F5461A

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: ()[y$()[y$))[y$))[y$))[y$))[y$))[y$))[y$))[y$))[y$))[y$I&$J&$J&$y3'
API String ID: 0-1521400233
Opcode ID: 49075898919b6cea9aca82e60735643acd879acd86fb32b057667e4dcb173b3b
Instruction ID: 7b1e8b77780073d7b2466d4f91f66f7ec6b81c966ca97d9a3dc34d30adaacae0
Opcode Fuzzy Hash: 49075898919b6cea9aca82e60735643acd879acd86fb32b057667e4dcb173b3b
Instruction Fuzzy Hash: AF525F367046018FCB18CE24949466E77E2AFD5329F344B5EF966C72E4C634ECC9AB81

Function 00F32AB0 Relevance: 30.3, APIs: 1, Strings: 16, Instructions: 547
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

&U_w, xrefs: 00F32B2E
XEq, xrefs: 00F32C20
WEq, xrefs: 00F32C08
k]]D, xrefs: 00F331B9
@3m, xrefs: 00F3308A
k]]D, xrefs: 00F32B6D
XEq, xrefs: 00F32BF9
&U_w, xrefs: 00F32E7C
?3m, xrefs: 00F32D50
@3m, xrefs: 00F33076
H1, xrefs: 00F33005
&U_w, xrefs: 00F32B1A
@3m, xrefs: 00F32E71
@3m, xrefs: 00F32E62
&U_w, xrefs: 00F32DA0
H1, xrefs: 00F32F17

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: &U_w$&U_w$&U_w$&U_w$?3m$@3m$@3m$@3m$@3m$H1$H1$WEq$XEq$XEq$k]]D$k]]D
API String ID: 0-60003245
Opcode ID: 7308b6b26f47c0dd495624f8df96baa333dcc0f4279297c568168fe07afa1407
Instruction ID: e091e483610a37cbd19a111a8b525d5b3e0a38917d71cf60f0c19754c16284d4
Opcode Fuzzy Hash: 7308b6b26f47c0dd495624f8df96baa333dcc0f4279297c568168fe07afa1407
Instruction Fuzzy Hash: A9229279704A018F8778CF28D5D092AB3E2EF993347244A1EE566CB7A4D731EC46DB42

Function 00F52670 Relevance: 29.5, Strings: 23, Instructions: 702COMMON

Download Yara Rule

Strings

x~m, xrefs: 00F52F41
0x`z, xrefs: 00F52A3C
0x`z, xrefs: 00F52E85
0x`z, xrefs: 00F52E60
x~m, xrefs: 00F52DA1
F", xrefs: 00F52780
F", xrefs: 00F52736
0x`z, xrefs: 00F52A50
F", xrefs: 00F5289E
0x`z, xrefs: 00F52A73
0x`z, xrefs: 00F53150
'k}, xrefs: 00F52BDC
x~m, xrefs: 00F52F50
F", xrefs: 00F528F0
x~m, xrefs: 00F52F20
F", xrefs: 00F52CA6
F", xrefs: 00F52CF0
0x`z, xrefs: 00F53175
x~m, xrefs: 00F52D80
x~m, xrefs: 00F52DB0
'k}, xrefs: 00F52B68
0x`z, xrefs: 00F52E4C
0x`z, xrefs: 00F5313C

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: F"$F"$F"$F"$F"$F"$'k}$'k}$0x`z$0x`z$0x`z$0x`z$0x`z$0x`z$0x`z$0x`z$0x`z$x~m$x~m$x~m$x~m$x~m$x~m
API String ID: 0-3762528351
Opcode ID: a4942ef8c64c89bc41e1f83b9999a3868ad61f5b65a7a5e98edabcfcda62dc4a
Instruction ID: 0f60f163001cffbaaff3ca3533718bc94179b9ca6bd6522f65809edee7e3177e
Opcode Fuzzy Hash: a4942ef8c64c89bc41e1f83b9999a3868ad61f5b65a7a5e98edabcfcda62dc4a
Instruction Fuzzy Hash: BB425E367082418F8B598A2894D453E77D25BD6372F784B2DED92CB3D1D631CC89EB42

Function 00F3B580 Relevance: 28.3, APIs: 4, Strings: 12, Instructions: 282
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 00F3B660

Strings

p:6, xrefs: 00F3B7ED
<c, xrefs: 00F3B8E5
p:6, xrefs: 00F3B668
<c, xrefs: 00F3B760
o:6, xrefs: 00F3B7C0
p:6, xrefs: 00F3B800
p:6, xrefs: 00F3B821
o:6, xrefs: 00F3B640
p:6, xrefs: 00F3B670
;c, xrefs: 00F3B700
<c, xrefs: 00F3B751
p:6, xrefs: 00F3B68F

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: ;c$<c$<c$<c$o:6$o:6$p:6$p:6$p:6$p:6$p:6$p:6
API String ID: 4194217158-493277181
Opcode ID: f3caab836787f7e26a29c455d514991989239c8011be6cbe24045475b56a30a9
Instruction ID: ec0c101f0ff95be4a31b9aef08ac3e679ffc1376b1b85608f7af42fdbbd31e8a
Opcode Fuzzy Hash: f3caab836787f7e26a29c455d514991989239c8011be6cbe24045475b56a30a9
Instruction Fuzzy Hash: 37A18B7AF041198B8F18CA3898A10ADB7F2AF84330F284665DA25D73D5D731CD49E751

Function 00F58350 Relevance: 27.2, Strings: 21, Instructions: 938COMMON

Download Yara Rule

Strings

))[y, xrefs: 00F58F80
))[y, xrefs: 00F58F9E
0x`z, xrefs: 00F58700
P K, xrefs: 00F58E82
eiY, xrefs: 00F58C6B
0x`z, xrefs: 00F58616
()[y, xrefs: 00F58F10
eiY, xrefs: 00F58C7C
P K, xrefs: 00F5898A
))[y, xrefs: 00F58F63
0x`z, xrefs: 00F586EC
))[y, xrefs: 00F58F4F
0x`z, xrefs: 00F585CC
))[y, xrefs: 00F58FAD
F", xrefs: 00F58D70
0x`z, xrefs: 00F585E0
F", xrefs: 00F58D21
0x`z, xrefs: 00F58602
0x`z, xrefs: 00F58720
F", xrefs: 00F58B1B
F", xrefs: 00F58B70

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: F"$F"$F"$F"$()[y$))[y$))[y$))[y$))[y$))[y$0x`z$0x`z$0x`z$0x`z$0x`z$0x`z$0x`z$P K$P K$eiY$eiY
API String ID: 0-1752161707
Opcode ID: 86207930a72232e92275161d71f50cee9f440487881a705d311762b26c2ce8bd
Instruction ID: cc997d17a4f3b8dfc9f970b071fa32d6bc6dcc7e99a7e823865931cd4d73900c
Opcode Fuzzy Hash: 86207930a72232e92275161d71f50cee9f440487881a705d311762b26c2ce8bd
Instruction Fuzzy Hash: 2B721836701601CFC728CE38C4D062AB7E2AFD53A17288A5ED966C7795DB30EC4ADB41

Function 00F51730 Relevance: 25.9, Strings: 20, Instructions: 945COMMON

Download Yara Rule

Strings

0x`z, xrefs: 00F51E6C
0x`z, xrefs: 00F51E80
.2^, xrefs: 00F51A8D
x~m, xrefs: 00F525C0
0x`z, xrefs: 00F518E3
0x`z, xrefs: 00F521D0
0x`z, xrefs: 00F521BC
F", xrefs: 00F52044
0x`z, xrefs: 00F51EA3
0x`z, xrefs: 00F52525
.2^, xrefs: 00F5223C
.2^, xrefs: 00F51FA2
0x`z, xrefs: 00F518C0
F", xrefs: 00F52090
0x`z, xrefs: 00F518AC
0x`z, xrefs: 00F52500
x~m, xrefs: 00F525DD
x~m, xrefs: 00F525F0
0x`z, xrefs: 00F521F5
0x`z, xrefs: 00F524EC

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: F"$F"$.2^$.2^$.2^$0x`z$0x`z$0x`z$0x`z$0x`z$0x`z$0x`z$0x`z$0x`z$0x`z$0x`z$0x`z$x~m$x~m$x~m
API String ID: 0-1248896003
Opcode ID: ec5e568a30c3521a8d6621dc3a7f57835d32da5a27e200aec6db00598bda9171
Instruction ID: 2a4accd4ce41cabe88b102fd4acb3449f07c04ca3faec18e748ae2bfc6955a01
Opcode Fuzzy Hash: ec5e568a30c3521a8d6621dc3a7f57835d32da5a27e200aec6db00598bda9171
Instruction Fuzzy Hash: 8E721C36B042018B8B198A2C94D062A77D2BFD5362F644F1DEE56CB3A5D731DC4DEB82

Function 00F3F600 Relevance: 20.6, Strings: 16, Instructions: 642COMMON

Download Yara Rule

Strings

Bf@, xrefs: 00F3F7EB
Bf@, xrefs: 00F3F8C7
Bf@, xrefs: 00F3F76E
Bf@, xrefs: 00F3F830
Bf@, xrefs: 00F3F8DB
Bf@, xrefs: 00F3F744
-F/m, xrefs: 00F3F657
)u, xrefs: 00F3FC5B
Bf@, xrefs: 00F3F7FF
Bf@, xrefs: 00F3F84E
)u, xrefs: 00F3FDD6
)u, xrefs: 00F3FDE0
-F/m, xrefs: 00F3F918
)u, xrefs: 00F3FC50
Bf@, xrefs: 00F3F735
Bf@, xrefs: 00F3F821

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: -F/m$-F/m$Bf@$Bf@$Bf@$Bf@$Bf@$Bf@$Bf@$Bf@$Bf@$Bf@$)u$)u$)u$)u
API String ID: 0-3350445841
Opcode ID: f832eae1cb6cf4f04bd69b94cfa00ff0e342a439116037bcb1651c73154e1424
Instruction ID: 4aba16e6a3da0dbd092e8169e3a09b04b2690f1631185674063a950a375f8816
Opcode Fuzzy Hash: f832eae1cb6cf4f04bd69b94cfa00ff0e342a439116037bcb1651c73154e1424
Instruction Fuzzy Hash: 75321A76E083429FCB18CE28D59062AB7D1ABD4334F14893EF899CB365D635DC4DAB42

Function 00F378D0 Relevance: 19.3, Strings: 15, Instructions: 544COMMON

Download Yara Rule

Strings

a.:S, xrefs: 00F37FF6
.rdata, xrefs: 00F37F5B
>^?P, xrefs: 00F38030
a.:S, xrefs: 00F3800C
>^?P, xrefs: 00F38197
a.:S, xrefs: 00F37C87
=^?P, xrefs: 00F379A8
a.:S, xrefs: 00F37AAA
.pdata, xrefs: 00F38063, 00F38189
>^?P, xrefs: 00F37C7B
4't,, xrefs: 00F37FFB
4't,, xrefs: 00F37A82
>^?P, xrefs: 00F38026
4't,, xrefs: 00F37FF1
4't,, xrefs: 00F380B4

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: .pdata$.rdata$4't,$4't,$4't,$4't,$=^?P$>^?P$>^?P$>^?P$>^?P$a.:S$a.:S$a.:S$a.:S
API String ID: 0-3629621968
Opcode ID: 097cbe006516a176b278a0814718411f4d908c32fea738e1ce439e777393aa59
Instruction ID: 83d0d772dc2322755ce7784c290a30c091c4c7fe564152e7fda186ca2545afb1
Opcode Fuzzy Hash: 097cbe006516a176b278a0814718411f4d908c32fea738e1ce439e777393aa59
Instruction Fuzzy Hash: 92124CB5B1E3058F9A3CAA2C84E47397392AF94330F254719F5A28F3A5D675CC4267C2

Function 00F63DC0 Relevance: 17.7, Strings: 14, Instructions: 197COMMON

Download Yara Rule

Strings

IJM_, xrefs: 00F64018
6V, xrefs: 00F63F68
a\$, xrefs: 00F63FF2
N%qF, xrefs: 00F63F7F
a\$, xrefs: 00F64028
N%qF, xrefs: 00F63F89
IJM_, xrefs: 00F64020
6V, xrefs: 00F63F2A
IJM_, xrefs: 00F63FF7
N%qF, xrefs: 00F63F50
6V, xrefs: 00F63F40
N%qF, xrefs: 00F63F0F
`\$, xrefs: 00F64000
N%qF, xrefs: 00F63F0A

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: IJM_$IJM_$IJM_$N%qF$N%qF$N%qF$N%qF$N%qF$`\$$a\$$a\$$6V$6V$6V
API String ID: 0-240730191
Opcode ID: 83fb914ed4d346050d04898361c9370d6cfe8fc00ea9d0086c477f71a3bbd58a
Instruction ID: f052e8b63e59a54746e6429e49901027a9b5fc7b5c0e0822ea4571a7b39fb3ef
Opcode Fuzzy Hash: 83fb914ed4d346050d04898361c9370d6cfe8fc00ea9d0086c477f71a3bbd58a
Instruction Fuzzy Hash: E161D076B0C3095FC7189E20E5E026B7BD29BC9364F29C52DEC590B389E7729C09DB42

Function 00F420D0 Relevance: 14.3, Strings: 11, Instructions: 592COMMON

Download Yara Rule

Strings

6Be, xrefs: 00F4257C
jBO|, xrefs: 00F427AF
E<<, xrefs: 00F4282B
E<<, xrefs: 00F42817
6Be, xrefs: 00F42678
E<<, xrefs: 00F421E0
hZ4+, xrefs: 00F421D4
6Be, xrefs: 00F4268C
6Be, xrefs: 00F42268
hZ4+, xrefs: 00F428D0
E<<, xrefs: 00F427AA

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: 6Be$6Be$6Be$6Be$E<<$E<<$E<<$E<<$hZ4+$hZ4+$jBO|
API String ID: 0-506301276
Opcode ID: 55be66415c70b0850f143c97b6462da80fa2a3b7fb4cb48510c633df4f821eab
Instruction ID: a0b7190d849110cf5bffb502c6ae7b67787c608ef745872304fcc599350fbb50
Opcode Fuzzy Hash: 55be66415c70b0850f143c97b6462da80fa2a3b7fb4cb48510c633df4f821eab
Instruction Fuzzy Hash: 52122A36B042018B8F6C8E3455A063E7AD29FD9330F65467EFC67877E5D6248C4AEB81

Function 00F4EA50 Relevance: 12.0, Strings: 9, Instructions: 795COMMON

Download Yara Rule

Strings

"dt\, xrefs: 00F4F5B6
bRl_, xrefs: 00F4F22E
"dt\, xrefs: 00F4F068
"dt\, xrefs: 00F4EFA5
"dt\, xrefs: 00F4F09C
bRl_, xrefs: 00F4F1E8
"dt\, xrefs: 00F4EFDC
aRl_, xrefs: 00F4F1E0
"dt\, xrefs: 00F4F5E8

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: "dt\$"dt\$"dt\$"dt\$"dt\$"dt\$aRl_$bRl_$bRl_
API String ID: 0-2481785078
Opcode ID: 39caa3618ece0bd6c94bdd341b00b027292b0c3826a699c6e9ccf95af970ca21
Instruction ID: 5efde2d3d9d6789f98ea10f3ece82181f6c7f4a288f8e60ee89d903ae2af62d7
Opcode Fuzzy Hash: 39caa3618ece0bd6c94bdd341b00b027292b0c3826a699c6e9ccf95af970ca21
Instruction Fuzzy Hash: C2524136B042518BCB2C8A3495E057E7AD36FD5360F294A2EEC6B477D4C6358C49ABC1

Function 00F4D7B0 Relevance: 10.7, Strings: 8, Instructions: 749COMMON

Download Yara Rule

Strings

jw]t, xrefs: 00F4DB30
=, xrefs: 00F4DDD0
kw]t, xrefs: 00F4DA3F
kw]t, xrefs: 00F4DB10
kw]t, xrefs: 00F4DAB0
jw]t, xrefs: 00F4DA70
kw]t, xrefs: 00F4DB00
kw]t, xrefs: 00F4DB70

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: =$jw]t$jw]t$kw]t$kw]t$kw]t$kw]t$kw]t
API String ID: 0-2551943258
Opcode ID: 481ed8509ae93f0106bb7213e359de1cbf4b72d8772a9f09bd46ee01d1a2986e
Instruction ID: de641467dba22a1d3919344f16770f4bc053d3af3c0c363f3a06e9ce2a2a985c
Opcode Fuzzy Hash: 481ed8509ae93f0106bb7213e359de1cbf4b72d8772a9f09bd46ee01d1a2986e
Instruction Fuzzy Hash: 3D426637F041558BCF28CA7895D03ED7FE2AB86330F29425ADC656B385C6754D49EB80

Function 00F31000 Relevance: 9.6, Strings: 7, Instructions: 807COMMON

Download Yara Rule

Strings

j;0}, xrefs: 00F31434
fJfC, xrefs: 00F317F5
\_3:, xrefs: 00F31697
\_3:, xrefs: 00F315D5
j;0}, xrefs: 00F319B3
fJfC, xrefs: 00F313C5
j;0}, xrefs: 00F3152A

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: \_3:$\_3:$fJfC$fJfC$j;0}$j;0}$j;0}
API String ID: 0-2233230251
Opcode ID: 17c814b2cb1128fce17408b753236a85e0898fe4076e9f44c5cd4322bffa55b6
Instruction ID: b64a6893288594c5c2f292df74edfbd71edebeda2c335e89cb27fa5628265a8a
Opcode Fuzzy Hash: 17c814b2cb1128fce17408b753236a85e0898fe4076e9f44c5cd4322bffa55b6
Instruction Fuzzy Hash: 2362A3B9B05244CFCF1CCA68D5A06BDB7F2BF89360F24411AE8179B7A4C6359C81EB51

Function 00F56F60 Relevance: 9.3, Strings: 7, Instructions: 508COMMON

Download Yara Rule

Strings

"f\v, xrefs: 00F572F7
lOm, xrefs: 00F571ED
lOm, xrefs: 00F57538
F", xrefs: 00F575B6
"f\v, xrefs: 00F57240
F", xrefs: 00F57600
lOm, xrefs: 00F5755F

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: F"$F"$"f\v$"f\v$lOm$lOm$lOm
API String ID: 0-117957403
Opcode ID: 6bc6b3571744891017ae5516390d518f311f84ec7058f2491bdc6b63011f578d
Instruction ID: d3924215ce822600aca0cb7f37b2bef060855553d06e0e06e92e7e700e2fce42
Opcode Fuzzy Hash: 6bc6b3571744891017ae5516390d518f311f84ec7058f2491bdc6b63011f578d
Instruction Fuzzy Hash: 9E022F36B093018FCF2C8924A1A463D7AD29FD4365F64865EFE63876D4D631CC49EB82

Function 00F5F270 Relevance: 8.2, Strings: 6, Instructions: 726COMMON

Download Yara Rule

Strings

aRl_, xrefs: 00F5F660
bRl_, xrefs: 00F5F668
8UCR, xrefs: 00F5F311
bRl_, xrefs: 00F5F6AE
9UCR, xrefs: 00F5FBAC
9UCR, xrefs: 00F5F460

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: 8UCR$9UCR$9UCR$aRl_$bRl_$bRl_
API String ID: 0-412298146
Opcode ID: 7adbd54de24995d28e643626ec33d075d8782a385d4d6bcc48569a1945c8284f
Instruction ID: 50d741cf6e7dfe8cf23faf7fc02f23a36418d9408255496aa5e791d74e8b9f76
Opcode Fuzzy Hash: 7adbd54de24995d28e643626ec33d075d8782a385d4d6bcc48569a1945c8284f
Instruction Fuzzy Hash: 284238366042019BCB18CE2898C056EB7D2AFD5321F684A7AED65C73A4D731DD4DEF82

Function 00F31C90 Relevance: 7.9, Strings: 6, Instructions: 357COMMON

Download Yara Rule

Strings

8Qe-, xrefs: 00F31F4B
Js&, xrefs: 00F31DC4
Js&, xrefs: 00F320EE
8Qe-, xrefs: 00F3211B
7Qe-, xrefs: 00F31CE0
8Qe-, xrefs: 00F31D8C

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: 7Qe-$8Qe-$8Qe-$8Qe-$Js&$Js&
API String ID: 0-3315684827
Opcode ID: 4d07485ffdfb3fbe2668ed424d89ea0324fae31b575ed415aa10593d9368d149
Instruction ID: 38b9cb2d4b56209a815fa44ff745be13bf95c3b82c430939dc73bffc589638cd
Opcode Fuzzy Hash: 4d07485ffdfb3fbe2668ed424d89ea0324fae31b575ed415aa10593d9368d149
Instruction Fuzzy Hash: 47D10779B043098F8F2CCEB8D4D05AEB7F2BF983B4F644125D421AB394C6619C45DBA6

Function 00F56A20 Relevance: 7.8, Strings: 6, Instructions: 343COMMON

Download Yara Rule

Strings

F", xrefs: 00F56E28
F", xrefs: 00F56E70
F", xrefs: 00F56D30
>~, xrefs: 00F56C17
>~, xrefs: 00F56C9B
F", xrefs: 00F56CE6

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: F"$F"$F"$F"$ >~$ >~
API String ID: 0-775222780
Opcode ID: 5dc51a284d97fe21087c91a5bf07e4388ea09f74f54644133af13b559484ae67
Instruction ID: 261ef45d64295c0a11e670eb22e54cd92c7740c9e7d0fe51268fe4c4d61822f3
Opcode Fuzzy Hash: 5dc51a284d97fe21087c91a5bf07e4388ea09f74f54644133af13b559484ae67
Instruction Fuzzy Hash: 92C13A3AF041158B8F2C8A3895E05BD76F29B88331778835ADE33E77E5C5249C4E9B91

Function 00F37080 Relevance: 6.6, Strings: 5, Instructions: 314COMMON

Download Yara Rule

Strings

kcL, xrefs: 00F37370
kcL, xrefs: 00F3735C
kcL, xrefs: 00F3722B
kcL, xrefs: 00F37137
jcL, xrefs: 00F37160

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: jcL$kcL$kcL$kcL$kcL
API String ID: 0-1071986128
Opcode ID: 6eddb35b300bf08f1cc81d2d5ca8aa4b0ff138fd21c574a165c23bbe8e69b479
Instruction ID: 6ae1db9dec75638311851ac11cc7ce5b9ab253ffa8ddb5638435bd4aa167171e
Opcode Fuzzy Hash: 6eddb35b300bf08f1cc81d2d5ca8aa4b0ff138fd21c574a165c23bbe8e69b479
Instruction Fuzzy Hash: D1C181B9B08609DFCB28DE68D890AAEBBF1EF48360F244166E811DB350D735DD41EB51

Function 00F60D90 Relevance: 6.3, APIs: 4, Instructions: 313COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00F60DC5

Part of subcall function 00F5AE50: std::_Lockit::_Lockit.LIBCPMT ref: 00F5AEB4

std::_Lockit::~_Lockit.LIBCPMT ref: 00F60E29
std::_Facet_Register.LIBCPMT ref: 00F60E74

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_$Facet_Lockit::~_Register
String ID:
API String ID: 1468630615-0
Opcode ID: df741dcd3131926ec2760ea72983ef42771bc16878cd78e658c54600582c0667
Instruction ID: a9bb5df5d0259944105f80b453f381ad347ade14d89dcec50561d5432a5a910b
Opcode Fuzzy Hash: df741dcd3131926ec2760ea72983ef42771bc16878cd78e658c54600582c0667
Instruction Fuzzy Hash: 64B1E471E012058FCF28CB68D9947AE77F5BB59360F280529E92AEB390DB32DC45DB41

Function 00F43AB0 Relevance: 6.2, APIs: 4, Instructions: 248COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0aaff0c0aa3d4a45df98fec9cb47649e6f12f8ada64c1e9e32928c5454821f2
Instruction ID: bf9e626a2e9d257996d0ef6fe9492672c169bbc834b55f0134f38951831cb0ab
Opcode Fuzzy Hash: f0aaff0c0aa3d4a45df98fec9cb47649e6f12f8ada64c1e9e32928c5454821f2
Instruction Fuzzy Hash: F3916076F041568F8F14CA6498E06BDBBF2EFC9320B284566DD25E7294D331CD45EB81

Function 00F432D0 Relevance: 6.2, APIs: 4, Instructions: 241COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9b1c09eaebda055ccd0f407096823fc27d71dfc9f56b1863b00978c77ecc0e6d
Instruction ID: 408af82e530b5ebe81c0570108b74171bf1e0f06e10693ba1e7616fef3696253
Opcode Fuzzy Hash: 9b1c09eaebda055ccd0f407096823fc27d71dfc9f56b1863b00978c77ecc0e6d
Instruction Fuzzy Hash: A081AE76F041468F8F29CB6898D05BE7BE2AF85330B284526DC22DB395D735CD46EB81

Function 00F54F70 Relevance: 5.7, Strings: 4, Instructions: 725COMMON

Download Yara Rule

Strings

'(%, xrefs: 00F5516B
&(%, xrefs: 00F55160
'(%, xrefs: 00F55236
'(%, xrefs: 00F5569B

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: &(%$'(%$'(%$'(%
API String ID: 0-3705663690
Opcode ID: 7ed197caf2cdaba90ae6a40fc3d7f2fe0f9a360469d4de8819a0721e48bf7e71
Instruction ID: f43460b79ce0a4828f3ac8de712c991be8496a939c79b1ed534e9567e71f2920
Opcode Fuzzy Hash: 7ed197caf2cdaba90ae6a40fc3d7f2fe0f9a360469d4de8819a0721e48bf7e71
Instruction Fuzzy Hash: 4752B236700A01CFC724CE2CD4D0A26B7E2BF897257258A5DE95ACB7A5D631FC49DB80

Function 00F590F0 Relevance: 5.6, Strings: 4, Instructions: 621COMMON

Download Yara Rule

Strings

F", xrefs: 00F598D8
F", xrefs: 00F59310
F", xrefs: 00F592C8
F", xrefs: 00F59920

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: F"$F"$F"$F"
API String ID: 0-3829323254
Opcode ID: a28d304904229e8f6b33b9e460e1b42253be4c9635b4dbfb97f223d9fa038bbc
Instruction ID: 87fed2005ce003be89aaee1a4565d61a9d84d9dc6244930058396e3eb86775d2
Opcode Fuzzy Hash: a28d304904229e8f6b33b9e460e1b42253be4c9635b4dbfb97f223d9fa038bbc
Instruction Fuzzy Hash: 0B223B36B0C211CF8B1C8A28D4D452EB7D6ABC5321F284A5EEDA5C7794C770DC49EB82

Function 00F50020 Relevance: 5.4, Strings: 4, Instructions: 354COMMON

Download Yara Rule

Strings

~]x", xrefs: 00F50132
~]x", xrefs: 00F50154
~]x", xrefs: 00F502F4
~]x", xrefs: 00F502D0

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: ~]x"$~]x"$~]x"$~]x"
API String ID: 0-504127389
Opcode ID: 01fcc0304b978f211ee72dd4f3112d0d1fd7f111d7f40762ffb01d54ef9e963c
Instruction ID: 57dd6f89372f464bc06a49194091588b71f79f7ebd39332669324e8063c82f53
Opcode Fuzzy Hash: 01fcc0304b978f211ee72dd4f3112d0d1fd7f111d7f40762ffb01d54ef9e963c
Instruction Fuzzy Hash: 5BD13736F041558F8F14CA7884D06BEBBF3AFC9321F290156DE15AB398DA308C49DBA1

Function 00F57F90 Relevance: 5.2, Strings: 4, Instructions: 249COMMON

Download Yara Rule

Strings

F", xrefs: 00F58210
F", xrefs: 00F581C3
F", xrefs: 00F58110
F", xrefs: 00F580C3

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: F"$F"$F"$F"
API String ID: 0-3829323254
Opcode ID: d91daeae914a058fad573edd66b3138c0f4641df4b7eb85b433c16b7a1093f1e
Instruction ID: fb429ec2bd1846ddeb8bff1783fc29e1f820deedb052f9856c164532b347b504
Opcode Fuzzy Hash: d91daeae914a058fad573edd66b3138c0f4641df4b7eb85b433c16b7a1093f1e
Instruction Fuzzy Hash: A5814D3670D3408B8B28893855D056E7AD35BC1362F688A6DEDA6C73E5D930CC4FDB92

Function 010DCEAA Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,00000000), ref: 010DCFA2
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,00000000), ref: 010DCFAC
UnhandledExceptionFilter.KERNEL32(010ED519,?,?,?,?,?,00000000), ref: 010DCFB9

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 7c3ed83995954ecbdc7e9280b19164059d68b2c3f58f1f121dbadcea20a17605
Instruction ID: ae13a4bfb85af404ea40f273f68672d7974b1713af97953850ab12fbf5210d57
Opcode Fuzzy Hash: 7c3ed83995954ecbdc7e9280b19164059d68b2c3f58f1f121dbadcea20a17605
Instruction Fuzzy Hash: 5631C175901329ABCB61DF68DD887C8BBB8BF18310F5041EAE41CA6250EB749B858F44

Function 010DA698 Relevance: 4.5, APIs: 3, Instructions: 20COMMONLIBRARYCODE

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,010DA750,?,?,?,?), ref: 010DA6BA
TerminateProcess.KERNEL32(00000000,?,010DA750,?,?,?,?), ref: 010DA6C1
ExitProcess.KERNEL32 ref: 010DA6D3

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: 89ff813a8d77b985845e7762595f9601a96926aa0bc4c38c6e9cf2c75d46e765
Instruction ID: 02a6279f4eb9e9d057b4f25289c63c78bdd2f8e5d5fb3722b767bfec398bc87d
Opcode Fuzzy Hash: 89ff813a8d77b985845e7762595f9601a96926aa0bc4c38c6e9cf2c75d46e765
Instruction Fuzzy Hash: 10E0B631900248EFCF666F59D808A583FB9FB89391F044424F9968A121DBBAE992CB40

Function 00F35AD0 Relevance: 4.4, Strings: 3, Instructions: 647COMMON

Download Yara Rule

Strings

[5k+, xrefs: 00F36435
[5k+, xrefs: 00F35F1F
[5k+, xrefs: 00F363D0

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: [5k+$[5k+$[5k+
API String ID: 0-3770529500
Opcode ID: 5a235629791ab4724b2fdcac4eb0ab37c4d390ab7f985125eb85b9822dddc7a6
Instruction ID: acdd098653485dd06706f77762309e4ac4677ab36c5f9b777952141f76a010b1
Opcode Fuzzy Hash: 5a235629791ab4724b2fdcac4eb0ab37c4d390ab7f985125eb85b9822dddc7a6
Instruction Fuzzy Hash: 97429F75B046098FCF18CA68D890AADB7F1EF89720F694559E811EB3A0D331EC41EB56

Function 00F38250 Relevance: 4.4, Strings: 3, Instructions: 612COMMON

Download Yara Rule

Strings

V/\Q, xrefs: 00F38502
V/\Q, xrefs: 00F388E3
V/\Q, xrefs: 00F3863D

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: V/\Q$V/\Q$V/\Q
API String ID: 0-3177605669
Opcode ID: 5e0b6b952de34b8d679a7088ac017a328d9f2f36b004d5b81ec6a2cd5dc08e26
Instruction ID: 473e85909ebe4152a2b0aaf8faa60fcaed99bd122f2e38dedf2496679f171c0b
Opcode Fuzzy Hash: 5e0b6b952de34b8d679a7088ac017a328d9f2f36b004d5b81ec6a2cd5dc08e26
Instruction Fuzzy Hash: 78328379A046058FCF1CCE68C4A0A7EB7E2BF893A4F25411DF413977A0CA39AC42DB55

Function 00F3C3A0 Relevance: 4.0, Strings: 3, Instructions: 273COMMON

Download Yara Rule

Strings

\HH:, xrefs: 00F3C528
,Gb, xrefs: 00F3C749
,Gb, xrefs: 00F3C6A6

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: ,Gb$,Gb$\HH:
API String ID: 0-1156318405
Opcode ID: ef22b72b09ad6a0e90990dce08d230e2c2a8d2765d45c06f320def148d67b189
Instruction ID: 9b8bf6370382cb552f6c14c86517f370f39e95ff512c64f02e275d0a94f2e12f
Opcode Fuzzy Hash: ef22b72b09ad6a0e90990dce08d230e2c2a8d2765d45c06f320def148d67b189
Instruction Fuzzy Hash: 0FA1CF77B0420A8F8F18CE6CC4E45BD77A3ABD9334F26452AD916A7398C6315C45DF82

Function 00F3BBE0 Relevance: 3.1, Strings: 2, Instructions: 560COMMON

Download Yara Rule

Strings

b<., xrefs: 00F3BD05
b<., xrefs: 00F3BD38

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: b<.$b<.
API String ID: 0-2685065252
Opcode ID: deee4e11734ac9a5e3389de8a84d275ffe1f1535842289612c8b8071fbccf6f8
Instruction ID: d5e26790a8330a7858ca5c5f2753d7915c33cbea037e08b8deea36f8c51e018c
Opcode Fuzzy Hash: deee4e11734ac9a5e3389de8a84d275ffe1f1535842289612c8b8071fbccf6f8
Instruction Fuzzy Hash: 9222F77AF041198FCF1CCA68D8A09BEB7F2AF89330F294119E916A7394D7319C45DB91

Function 00F559A0 Relevance: 3.0, Strings: 2, Instructions: 504COMMON

Download Yara Rule

Strings

gt, xrefs: 00F55C3B
gt, xrefs: 00F55BA0

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: gt$gt
API String ID: 0-1763320481
Opcode ID: a8ec0f594071d932ebbfeaf0fac429ce1596938a2cfbfc23b9d5fb3a46de5cde
Instruction ID: 1bf94741a42fad9ea23439f30b9344beec15325ef89307de967ba4a73abceb5c
Opcode Fuzzy Hash: a8ec0f594071d932ebbfeaf0fac429ce1596938a2cfbfc23b9d5fb3a46de5cde
Instruction Fuzzy Hash: A412F675700A018FCB28CE28C8E0626B7E2BF84725765876DD966CB7E1D734EC49DB81

Function 00F531B0 Relevance: 2.8, Strings: 2, Instructions: 290COMMON

Download Yara Rule

Strings

F", xrefs: 00F534C9
F", xrefs: 00F53520

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: F"$F"
API String ID: 0-96857016
Opcode ID: 50e720705de60352bec9fa35b1cf6b0a0d2c68bc4ccaa3ef8b2c373610c2eeb2
Instruction ID: a587fc83eead0db2d34453c6db2242ecc8c3aed3bec5c71325c13f01debe920a
Opcode Fuzzy Hash: 50e720705de60352bec9fa35b1cf6b0a0d2c68bc4ccaa3ef8b2c373610c2eeb2
Instruction Fuzzy Hash: F0A13736744601CFCB28CE2C959062A77D2AFC53A1F28895DED56C73A1D231DD4EAF82

Function 00F406C0 Relevance: 2.8, Strings: 2, Instructions: 265COMMON

Download Yara Rule

Strings

gc7v, xrefs: 00F407A8
gc7v, xrefs: 00F407F0

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID: gc7v$gc7v
API String ID: 0-3247467937
Opcode ID: 13efdbe079199094bac77b812a1251d487f9a57e8e283bc2e3481508efab0dc3
Instruction ID: 47710350194288af58d232008a5fd020eda767116d93be69b254b7d8ceaa3cd1
Opcode Fuzzy Hash: 13efdbe079199094bac77b812a1251d487f9a57e8e283bc2e3481508efab0dc3
Instruction Fuzzy Hash: D5B1CE75A002158FCF18CF68C594BAEBFF0FB49360F154668ED15AB392CB789845DB90

Function 00F53610 Relevance: .9, Instructions: 895COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4074a6d39ecb4e7cc8212aba3c6508e10080abae3641f94fb602614a482ddbdf
Instruction ID: c7bbad37bf9f8def1089c16083f35894ccc2607f033ba44a9b811a5576cffa38
Opcode Fuzzy Hash: 4074a6d39ecb4e7cc8212aba3c6508e10080abae3641f94fb602614a482ddbdf
Instruction Fuzzy Hash: A1622637E002158FCF28CE6CE4846EDB7F2AB95361F294259DD11AB391D7315E4AAB80

Function 00F32200 Relevance: .6, Instructions: 563COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 71249b9805800b4c743c44b9746ca7f0448053d1a5e6b2a6c3f89cba97676bc8
Instruction ID: 8c99d985f6e50804d03b563dd2c35753a5ff6a59713c263c4cd7eefbb0c1ba21
Opcode Fuzzy Hash: 71249b9805800b4c743c44b9746ca7f0448053d1a5e6b2a6c3f89cba97676bc8
Instruction Fuzzy Hash: 3122C279F04209CF9F58CE68C5809AEB3F2AFC9330F25C555D811AB3A8C635AD859B91

Function 00F3D2F0 Relevance: .6, Instructions: 556COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d8fedbe5a0a86334cedd87285229c9beda4f56355dcac0a47113264328b6545
Instruction ID: 324ef85713007f9338a3a9f3fe931195968f06086f2456a8f4fbfedf57b712b4
Opcode Fuzzy Hash: 3d8fedbe5a0a86334cedd87285229c9beda4f56355dcac0a47113264328b6545
Instruction Fuzzy Hash: F722F236E012198FCF18CF68E9907ADB7F5BF4A330F250269E855AB291D731AC45DB90

Function 00F36760 Relevance: .5, Instructions: 517COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d5d68b1551a888402491f95ba026c898feba91a74c8d23eb72699f3638151c7
Instruction ID: d2dca981ecc3124b0c5d9a9365cc7fb5e9a6a15424bfb921bd78b9a25bb3ee42
Opcode Fuzzy Hash: 2d5d68b1551a888402491f95ba026c898feba91a74c8d23eb72699f3638151c7
Instruction Fuzzy Hash: 78023C3AA08301EBCB288E14D5D463E73E2ABD4338F64C51ED555CB395C672AC85EB83

Function 00F5EA20 Relevance: .5, Instructions: 451COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0f5fc5a7741989fd4a0cc36f4baa1976f375338ef6682fe18975c6343d18187
Instruction ID: 2c1124a6e41c7f1c4fc18f47c202cc7e0549c6ea13acbbb7f94f8237339ab315
Opcode Fuzzy Hash: e0f5fc5a7741989fd4a0cc36f4baa1976f375338ef6682fe18975c6343d18187
Instruction Fuzzy Hash: 6602E37AF012158FCB18CF68D4809AEB7F2BF89320B254655ED25E73A0D734AD46DB80

Function 00F617B0 Relevance: .3, Instructions: 341COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f0f096102ea8acd995cb042d2924535d6bdb6d1aa8cf821ee360dfe6dd9d906
Instruction ID: e0015dcf5ca02f9ba03d81256d8ed17fcb8636501b6d0d3a6ecd5ee3113865bd
Opcode Fuzzy Hash: 8f0f096102ea8acd995cb042d2924535d6bdb6d1aa8cf821ee360dfe6dd9d906
Instruction Fuzzy Hash: 77C1E776F041098F8F1D8AB899E05BE7BE2BFD53A0B2C4519D813D7390C621DD85EB91

Function 00F5C280 Relevance: .3, Instructions: 290COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 586cec09a59a92a45f5cb8570e66128d6f9fd80be2f9474358398bf7202c1890
Instruction ID: 968a995562ae79b03c434ca530517113218fa4086bc1c1323b611b20fa262043
Opcode Fuzzy Hash: 586cec09a59a92a45f5cb8570e66128d6f9fd80be2f9474358398bf7202c1890
Instruction Fuzzy Hash: C7A16E66B043098F8F2CC9B854E45BD76E2AFC4351B288139DD2BD7294D225CD4EFB91

Function 00F42D80 Relevance: .3, Instructions: 274COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 692107e82a6bc6615bbcf9df757cf31953587e1b0953ac725bbd94b8ed2d38e0
Instruction ID: a038f23fbe47f39a825e8cdb6b7ead3d1e93ed6c26d2c8e8584b23ba2605935c
Opcode Fuzzy Hash: 692107e82a6bc6615bbcf9df757cf31953587e1b0953ac725bbd94b8ed2d38e0
Instruction Fuzzy Hash: BAA16E37B0C3549B8B188E28948062A7FD15FD5260F998A7DFCA9CB345D231DD49EB82

Function 00F3CF90 Relevance: .3, Instructions: 258COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7dfd6db14bb9c4b51a622243c31910bc50106714ad144748b9823db54536c266
Instruction ID: eedb64f81552ae3f6af9ce0af8a34def6870a7680db5103b6c853bed2125ba89
Opcode Fuzzy Hash: 7dfd6db14bb9c4b51a622243c31910bc50106714ad144748b9823db54536c266
Instruction Fuzzy Hash: 7D913A77E043558FDB058F28E9802DE7BF2EF86374F5E4259D814AB196C6368C0AD7A0

Function 00F3CC40 Relevance: .2, Instructions: 231COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d5ad24684f876c83387eab39be61a33e6553eb772af8cf899ff69048a69268d
Instruction ID: 596b67f61223700a04f8fc880dc0238fcd1a634bb84684ade85a270453bb58d8
Opcode Fuzzy Hash: 2d5ad24684f876c83387eab39be61a33e6553eb772af8cf899ff69048a69268d
Instruction Fuzzy Hash: 2781E576F00145CF8B18CA68D8805AEB7F5AF893B0F248665E965EB394C734DC42EBD1

Function 00F51080 Relevance: .2, Instructions: 175COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5394023136c74320705ba435bb11f746966ba78399b19e7bc04bd915d178d94b
Instruction ID: 72c1506676704e11534793f192477cc51cb805d872c5be9dbb93d100ac0978ef
Opcode Fuzzy Hash: 5394023136c74320705ba435bb11f746966ba78399b19e7bc04bd915d178d94b
Instruction Fuzzy Hash: F051F832F041419B9A7C8928A4B473F32E5AB94372F24472EDF174B7D9D9126C89B7C2

Function 010D6880 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: 9843076345f76badc1540b0b6415bc2d31a6fb6d5ca8c9ff6de2fd45ec6be6c0
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: 861138F764035247F6848A2DC8B55F6EFD9EBC622072D43FAD2C14B788C623A1499A10

Function 010E8C55 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8002cddf0912a3c4a4c14f9dabde380401963fb4ceedbd51d2a293b40520d5e8
Instruction ID: 235aeec51b04250ae7637b4ad8b3be2c3bb753fb6585a87a66e53114a1db5379
Opcode Fuzzy Hash: 8002cddf0912a3c4a4c14f9dabde380401963fb4ceedbd51d2a293b40520d5e8
Instruction Fuzzy Hash: 3CE08C72912238EFCB14DBDDC908D8AF7ECEB45A00B154497B601D3100C670DE00DBD0

Function 010E9C24 Relevance: 19.6, APIs: 13, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 010E9C68

Part of subcall function 010E9080: _free.LIBCMT ref: 010E909D
Part of subcall function 010E9080: _free.LIBCMT ref: 010E90AF
Part of subcall function 010E9080: _free.LIBCMT ref: 010E90C1
Part of subcall function 010E9080: _free.LIBCMT ref: 010E90D3
Part of subcall function 010E9080: _free.LIBCMT ref: 010E90E5
Part of subcall function 010E9080: _free.LIBCMT ref: 010E90F7
Part of subcall function 010E9080: _free.LIBCMT ref: 010E9109
Part of subcall function 010E9080: _free.LIBCMT ref: 010E911B
Part of subcall function 010E9080: _free.LIBCMT ref: 010E912D
Part of subcall function 010E9080: _free.LIBCMT ref: 010E913F
Part of subcall function 010E9080: _free.LIBCMT ref: 010E9151
Part of subcall function 010E9080: _free.LIBCMT ref: 010E9163
Part of subcall function 010E9080: _free.LIBCMT ref: 010E9175

_free.LIBCMT ref: 010E9C5D

Part of subcall function 010E57B7: HeapFree.KERNEL32(00000000,00000000,?,010DC61B), ref: 010E57CD
Part of subcall function 010E57B7: GetLastError.KERNEL32(?,?,010DC61B), ref: 010E57DF

_free.LIBCMT ref: 010E9C7F
_free.LIBCMT ref: 010E9C94
_free.LIBCMT ref: 010E9C9F
_free.LIBCMT ref: 010E9CC1
_free.LIBCMT ref: 010E9CD4
_free.LIBCMT ref: 010E9CE2
_free.LIBCMT ref: 010E9CED
_free.LIBCMT ref: 010E9D25
_free.LIBCMT ref: 010E9D2C
_free.LIBCMT ref: 010E9D49
_free.LIBCMT ref: 010E9D61

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID:
API String ID: 161543041-0
Opcode ID: f4f2c1a61a8b2f4d5ae96a6312b94f658996519835cd3a8744a94297a66b1f74
Instruction ID: 513bfe62f6931fb922f59f1571c0e73a5b53d6b1d95d489d8ebd61e39ab27ab9
Opcode Fuzzy Hash: f4f2c1a61a8b2f4d5ae96a6312b94f658996519835cd3a8744a94297a66b1f74
Instruction Fuzzy Hash: 84317071604205DFEBA1AA3FED88B9A77E9BF10318F104859E5D9D7190DF71E8A0CB10

Function 00F3B280 Relevance: 19.5, APIs: 2, Strings: 9, Instructions: 201COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 00F3B2E0

Strings

kt, xrefs: 00F3B525
kt, xrefs: 00F3B430
kt, xrefs: 00F3B4D9
kt, xrefs: 00F3B4C7
p:6, xrefs: 00F3B2E8
o:6, xrefs: 00F3B2C0
p:6, xrefs: 00F3B2F0
p:6, xrefs: 00F3B311
jt, xrefs: 00F3B397

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: jt$kt$kt$kt$kt$o:6$p:6$p:6$p:6
API String ID: 4194217158-2976945997
Opcode ID: c71c3cda00fddd1ff3d399423a29893f19f7e0f281b18463928043c41f39ff29
Instruction ID: 2bf226a32af7978bd0167dc1e983cfc05895c7423284420c723e04aacc839968
Opcode Fuzzy Hash: c71c3cda00fddd1ff3d399423a29893f19f7e0f281b18463928043c41f39ff29
Instruction Fuzzy Hash: 7C615C76B04219CF8B28CD38A9A412E77D2AFD1330F348A25D666CB3D5D771DC45A741

Function 00F43E30 Relevance: 14.2, APIs: 2, Strings: 6, Instructions: 196COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 00F43ED5

Strings

i3<i, xrefs: 00F43F50
i3<i, xrefs: 00F44010
i3<i, xrefs: 00F43F88
i3<i, xrefs: 00F43F72
i3<i, xrefs: 00F4404A
i3<i, xrefs: 00F44032

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: _strlen
String ID: i3<i$i3<i$i3<i$i3<i$i3<i$i3<i
API String ID: 4218353326-659083514
Opcode ID: 62543efe7e6eee5cc54e4d5ba4c188d8b2e0338e425f8078bc6284d9eff3a737
Instruction ID: 1f584e4afe527a1367bf63031ac9087382420353282582939fc71635d0d0d8c8
Opcode Fuzzy Hash: 62543efe7e6eee5cc54e4d5ba4c188d8b2e0338e425f8078bc6284d9eff3a737
Instruction Fuzzy Hash: 08517E3AB092458FCA2C4A3850D057E7ED36BD1220F29C71EEE56173D9D6319D4EEB82

Function 010E4834 Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 303COMMONLIBRARYCODE

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 010E4953
CatchIt.LIBVCRUNTIME ref: 010E4AB2
_UnwindNestedFrames.LIBCMT ref: 010E4BB3
CallUnexpected.LIBVCRUNTIME ref: 010E4BCE

Strings

csm, xrefs: 010E48DE
csm, xrefs: 010E4871
csm, xrefs: 010E498A

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: CallCatchFramesNestedUnexpectedUnwindtype_info::operator==
String ID: csm$csm$csm
API String ID: 2332921423-393685449
Opcode ID: 18077ab0a54b95892d89f918c3783a854beba318c49ab4d86fed623f2778c454
Instruction ID: 63baf2c517a87b7e52b466e85ba3750799f1509c30909ccef13bc9cc7cc1af53
Opcode Fuzzy Hash: 18077ab0a54b95892d89f918c3783a854beba318c49ab4d86fed623f2778c454
Instruction Fuzzy Hash: F7B16F71800209EFCF15DFAAC848AAEBBF5FF54310F15419AE994EB212C771DA51CB91

Function 00F5FFD0 Relevance: 10.6, APIs: 1, Strings: 5, Instructions: 146COMMON

Download Yara Rule

APIs

std::ios_base::_Ios_base_dtor.LIBCPMT ref: 00F60017

Strings

.$}, xrefs: 00F600E0
.$}, xrefs: 00F601E2
.$}, xrefs: 00F6007A
.$}, xrefs: 00F60084
-$}, xrefs: 00F60049

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: Ios_base_dtorstd::ios_base::_
String ID: -$}$.$}$.$}$.$}$.$}
API String ID: 323602529-2033471015
Opcode ID: ff8ed02fd285fb0e6406251afe329b235201892d5fe308d1bd5b0a87d479c699
Instruction ID: 059cfe5d2e5c441b3779428d53a5c1fcb7ae79a1e1d0ccb9b51aa26ced3e1905
Opcode Fuzzy Hash: ff8ed02fd285fb0e6406251afe329b235201892d5fe308d1bd5b0a87d479c699
Instruction Fuzzy Hash: CB513D72E04202DFCF28CEA8998076F77A2AB94330F358526D425FF364CA75DC419786

Function 010D66F0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 130COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 010D6727
___except_validate_context_record.LIBVCRUNTIME ref: 010D672F
_ValidateLocalCookies.LIBCMT ref: 010D67B8
__IsNonwritableInCurrentImage.LIBCMT ref: 010D67E3
_ValidateLocalCookies.LIBCMT ref: 010D6838

Strings

csm, xrefs: 010D67CD

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 9dd435210f709d4271c27c4b47ba27eace1a75cc22a23c2efb52890b93417184
Instruction ID: 2a212ef0da2313e81f5e7b871b260d14c190b1a6f95dd0ebee11b3a718efda75
Opcode Fuzzy Hash: 9dd435210f709d4271c27c4b47ba27eace1a75cc22a23c2efb52890b93417184
Instruction Fuzzy Hash: B141D038A00309EFCF11EF69C888A9EBFF1BF44314F148195E9949B391E7329A15CB91

Function 00F624A0 Relevance: 10.6, APIs: 1, Strings: 5, Instructions: 102COMMON

Download Yara Rule

APIs

std::ios_base::_Ios_base_dtor.LIBCPMT ref: 00F624EE

Strings

Auj, xrefs: 00F62507
Auj, xrefs: 00F62553
Auj, xrefs: 00F625AD
@uj, xrefs: 00F62500
Auj, xrefs: 00F625BF

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: Ios_base_dtorstd::ios_base::_
String ID: @uj$Auj$Auj$Auj$Auj
API String ID: 323602529-47643630
Opcode ID: 94b4be0ef68c424e0c62bb3f32f7e46761b476ed0c507ca1398ae43763db5c18
Instruction ID: b68834f880fb14f0794d338b0d9c011f2da0d3def4bf2c70f6e87e776246abc0
Opcode Fuzzy Hash: 94b4be0ef68c424e0c62bb3f32f7e46761b476ed0c507ca1398ae43763db5c18
Instruction Fuzzy Hash: 7131F6B6D006098FCF39CF58DC447ADB6E1AB44360F288626D416AB3A0E735DD41ABD1

Function 00F3B010 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 97COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 00F3B080

Strings

p:6, xrefs: 00F3B090
o:6, xrefs: 00F3B060
p:6, xrefs: 00F3B05A
p:6, xrefs: 00F3B088

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: o:6$p:6$p:6$p:6
API String ID: 4194217158-2112938563
Opcode ID: 23ba303e95107a0b9bf399c6e132db6f4e19f99fc8cccb5adb2629fd4ebcc73f
Instruction ID: 9c7e83f2ed7fae3ce91321b31cfc9b9babaf92fdf702fa1c8d095f0f53281c4c
Opcode Fuzzy Hash: 23ba303e95107a0b9bf399c6e132db6f4e19f99fc8cccb5adb2629fd4ebcc73f
Instruction Fuzzy Hash: DA318FBAA081099BCB1C9628D9E552B77D1EFC0334F148A29F669873E1D332CC48E742

Function 00F3AF10 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 76COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 00F3AF70

Strings

p:6, xrefs: 00F3AF45
o:6, xrefs: 00F3AF50
p:6, xrefs: 00F3AF80
p:6, xrefs: 00F3AF78

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: o:6$p:6$p:6$p:6
API String ID: 4194217158-2112938563
Opcode ID: 7f12a0b50df9913ce985f39a56c685ced2b5da3cbf3d14cf3485cc888a2b1479
Instruction ID: 48ba20b167c9763452423fd8894fdfbc7efddfccef66d84e9cefcf700196d9ae
Opcode Fuzzy Hash: 7f12a0b50df9913ce985f39a56c685ced2b5da3cbf3d14cf3485cc888a2b1479
Instruction Fuzzy Hash: FA2168FEB045549F8A2C8538A8D202AB7D9ABC2374F24456DE6AEC62D5C621CC4DE743

Function 010E9470 Relevance: 10.6, APIs: 7, Instructions: 65COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 010E97D0: _free.LIBCMT ref: 010E97F5

_free.LIBCMT ref: 010E94BE

Part of subcall function 010E57B7: HeapFree.KERNEL32(00000000,00000000,?,010DC61B), ref: 010E57CD
Part of subcall function 010E57B7: GetLastError.KERNEL32(?,?,010DC61B), ref: 010E57DF

_free.LIBCMT ref: 010E94C9
_free.LIBCMT ref: 010E94D4
_free.LIBCMT ref: 010E9528
_free.LIBCMT ref: 010E9533
_free.LIBCMT ref: 010E953E
_free.LIBCMT ref: 010E9549

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 10f89baa2e0e33ddf7736a6c1844a4c53b43da7e62d178f93e44d7a4bdad20d8
Instruction ID: 19d3d902751f6cb6ed0d22427958dfc541e17b2d3c72bde5b272ddb273514a18
Opcode Fuzzy Hash: 10f89baa2e0e33ddf7736a6c1844a4c53b43da7e62d178f93e44d7a4bdad20d8
Instruction Fuzzy Hash: 4D1190B1581B05FED620BBB2CC4DFCB77DDBF21708F400C14A2D9A6450DA35B5188B61

Function 010D5737 Relevance: 9.2, APIs: 6, Instructions: 175COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,00000001,?,00000000,00000000,?,?,?,00000001,9B02ABED,?,4D25AB38,?,?,?), ref: 010D5780
MultiByteToWideChar.KERNEL32(?,00000001,00000000,?,00000000,00000000,?,4D25AB38,?,?,?,?), ref: 010D57EB
LCMapStringEx.KERNEL32(?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,4D25AB38,?,?,?,?), ref: 010D5808
LCMapStringEx.KERNEL32(?,00000000,00000000,00000000,?,?,00000000,00000000,00000000,?,4D25AB38,?,?,?,?), ref: 010D5847
LCMapStringEx.KERNEL32(?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,4D25AB38,?,?,?,?), ref: 010D58A6
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000,?,4D25AB38,?,?,?,?), ref: 010D58C9

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: ByteCharMultiStringWide
String ID:
API String ID: 2829165498-0
Opcode ID: 802225633ec013521004bcf8fec754e3e1b93991d5174860fac4ddad66e72643
Instruction ID: 3785ceb54627f51eabd0767941e3ea8cf2b612d99ff09c94e26de8eed5fb58f1
Opcode Fuzzy Hash: 802225633ec013521004bcf8fec754e3e1b93991d5174860fac4ddad66e72643
Instruction Fuzzy Hash: 2351BB7290031AEFEB214E68DC46FAE3BB9FF40740F254069FE55E6180EB75C8108B60

Function 010E59B8 Relevance: 9.1, APIs: 6, Instructions: 128COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,010DA4D3,01107290,0000000C), ref: 010E59BD
_free.LIBCMT ref: 010E5A1A
_free.LIBCMT ref: 010E5A50
SetLastError.KERNEL32(00000000,00000005,000000FF,?,?,010DA4D3,01107290,0000000C), ref: 010E5A5B
_free.LIBCMT ref: 010E5AC5
_free.LIBCMT ref: 010E5AF9

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: _free$ErrorLast
String ID:
API String ID: 3291180501-0
Opcode ID: a0bcfea739fc2dcecae7baffb315af330c8fae558712fa9b9a2b1e854e5a1002
Instruction ID: 88396c25d73051aaf15e9a037079443347d8b54c5ae91708b1f699b66a8b4921
Opcode Fuzzy Hash: a0bcfea739fc2dcecae7baffb315af330c8fae558712fa9b9a2b1e854e5a1002
Instruction Fuzzy Hash: 1231703DA093176EDA67317B7C8DDAF16C65BA1238F3C0A70F9F1961C4DD51C8008250

Function 010E3F6D Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,010E3F64,010E4746,?,?,?,?,010D61DD,?,?,?,?,?,00000000,00000000), ref: 010E3F7B
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 010E3F89
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 010E3FA2
SetLastError.KERNEL32(00000000,?,010E3F64,010E4746,?,?,?,?,010D61DD,?,?,?,?,?,00000000,00000000), ref: 010E3FF4

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: b8eea70dc15529f5d025d724741e6ae4a93b5d0da51e6d7b58e6485509f71346
Instruction ID: 21670c70b44282c83aaee18edc2c0b892a5b593b0e238bcd48dacde939d4c465
Opcode Fuzzy Hash: b8eea70dc15529f5d025d724741e6ae4a93b5d0da51e6d7b58e6485509f71346
Instruction Fuzzy Hash: 2901D83660D3126EE76E267ABC8995A6FE5FB01374330033EF5E44E0E5EF9148445244

Function 010DA645 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 30libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,?,?,010DA6CF,?,?,010DA750,?,?,?), ref: 010DA65A
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 010DA66D
FreeLibrary.KERNEL32(00000000,?,?,010DA6CF,?,?,010DA750,?,?,?), ref: 010DA690

Strings

mscoree.dll, xrefs: 010DA653
CorExitProcess, xrefs: 010DA665

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 8d9c8e4cfc60e85baf6d29e6715b8c312046f25eb45577ebae98d67f1ca422b9
Instruction ID: 4cd07682728098b3f5a5c94a9af7b2a7dfc39252fb7d86bced08466e33a22a6d
Opcode Fuzzy Hash: 8d9c8e4cfc60e85baf6d29e6715b8c312046f25eb45577ebae98d67f1ca422b9
Instruction Fuzzy Hash: 07F08231A01218FBDB369B55DD0ABDDBEB8EB44792F044064F645A2150CBB58E40DB90

Function 010D3EC7 Relevance: 7.5, APIs: 5, Instructions: 44COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 010D3ECE
std::_Lockit::_Lockit.LIBCPMT ref: 010D3ED9
std::_Lockit::~_Lockit.LIBCPMT ref: 010D3F47

Part of subcall function 010D3DD0: std::locale::_Locimp::_Locimp.LIBCPMT ref: 010D3DE8

std::locale::_Setgloballocale.LIBCPMT ref: 010D3EF4
_Yarn.LIBCPMT ref: 010D3F0A

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3LocimpLocimp::_Lockit::_Lockit::~_SetgloballocaleYarn
String ID:
API String ID: 1088826258-0
Opcode ID: 0ea8c1abdd066a8f5fda53ad50a42d31a75e01965a1a054e811dc6f33748b0de
Instruction ID: 7635e19dd25893a81e830d92dab1abe7925a82008c4610ff51f65bfa05e09db9
Opcode Fuzzy Hash: 0ea8c1abdd066a8f5fda53ad50a42d31a75e01965a1a054e811dc6f33748b0de
Instruction Fuzzy Hash: E901A7B5A013169BDB1AFF24D9446BDBBB1FF94740B14005CD8A15B384CF74AA82CF96

Function 010E938C Relevance: 7.5, APIs: 5, Instructions: 40COMMONLIBRARYCODE

Download Yara Rule

APIs

_free.LIBCMT ref: 010E93A4

Part of subcall function 010E57B7: HeapFree.KERNEL32(00000000,00000000,?,010DC61B), ref: 010E57CD
Part of subcall function 010E57B7: GetLastError.KERNEL32(?,?,010DC61B), ref: 010E57DF

_free.LIBCMT ref: 010E93B6
_free.LIBCMT ref: 010E93C8
_free.LIBCMT ref: 010E93DA
_free.LIBCMT ref: 010E93EC

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 247099f39fc382c59a7d278b33a023fca6019e533e5576ff6514afb304c8f35e
Instruction ID: 9771525b02e040c6797fcbd59cc53f4ea3f0c2b1a1a09ec078e1145ac9b656dd
Opcode Fuzzy Hash: 247099f39fc382c59a7d278b33a023fca6019e533e5576ff6514afb304c8f35e
Instruction Fuzzy Hash: 9DF0A43690D200EF85B4DA2EF8C8C5677DABA103143645C09F9E4D7244C720F8808A14

Function 010E4C59 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,00000000,00000000,?,?,?,?,?,?,010E4B5F,?,?,00000000,00000000,00000000,?), ref: 010E4C7E
CatchIt.LIBVCRUNTIME ref: 010E4D64

Strings

MOC, xrefs: 010E4C90
RCC, xrefs: 010E4C98

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: CatchEncodePointer
String ID: MOC$RCC
API String ID: 1435073870-2084237596
Opcode ID: f856c1b80e291e908d0e465ee184432bb2f4b08f46723b977df97f41b8b67b35
Instruction ID: 3ad34a9c2dbd910ed5acbe4c4125a435fdf107890f876be138a242b668dba072
Opcode Fuzzy Hash: f856c1b80e291e908d0e465ee184432bb2f4b08f46723b977df97f41b8b67b35
Instruction Fuzzy Hash: EE416831900209AFDF16DF99D984AEEBBF5FF48300F194199FA48EB261D3369960DB50

Function 00F5BD80 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 102COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00F5BDB6
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 00F5BE35

Part of subcall function 010D3CEC: _Yarn.LIBCPMT ref: 010D3D0B
Part of subcall function 010D3CEC: _Yarn.LIBCPMT ref: 010D3D2F

std::_Lockit::~_Lockit.LIBCPMT ref: 00F5BEDA

Strings

bad locale name, xrefs: 00F5BE8F

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: std::_$LockitYarn$Locinfo::_Locinfo_ctorLockit::_Lockit::~_
String ID: bad locale name
API String ID: 3683006843-1405518554
Opcode ID: c2c3cd32b51e0ea67ef1ab9eb864bcf0297773780a6abb840c5080d70d6dce4a
Instruction ID: 3fe090f924e548a4ae31c199b3480bd4aef30498052c8b02e1cfc18e6d946478
Opcode Fuzzy Hash: c2c3cd32b51e0ea67ef1ab9eb864bcf0297773780a6abb840c5080d70d6dce4a
Instruction Fuzzy Hash: A14158B1C00A0A9BCB04DF69D885BDEFBF4BF48314F144229E8146BA80D7756958CFE1

Function 010F01CF Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(?,00000000,00000800,?,010F026B,?,?,00000000,?,?,?,010F0129,00000002,FlsGetValue,010FA324,010FA32C), ref: 010F01DC
GetLastError.KERNEL32(?,010F026B,?,?,00000000,?,?,?,010F0129,00000002,FlsGetValue,010FA324,010FA32C,?,?,010E3F8E), ref: 010F01E6
LoadLibraryExW.KERNEL32(?,00000000,00000000), ref: 010F020E

Strings

api-ms-, xrefs: 010F01F3

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: f10c91655e7caa8ed499806c13e06cd2e05222cfb36d890f28bf59d954f91868
Instruction ID: e67430e1f8c13fb2f2154985fff0a38a9576123500e3551cad5bbd032dbeb282
Opcode Fuzzy Hash: f10c91655e7caa8ed499806c13e06cd2e05222cfb36d890f28bf59d954f91868
Instruction Fuzzy Hash: 28E04830A80209B7EF721E55EC0AB593F9ABB00B85F184074FA4CE84D7D7E5D4508694

Function 010E455B Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 010E4622
___AdjustPointer.LIBCMT ref: 010E4645
___AdjustPointer.LIBCMT ref: 010E46E1

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 4848e4f3a5b419aa04dee20766e2304ba85563754adc2ede94a24313790e7373
Instruction ID: 111d1d0fdf90f85f3153aee05106dbdec7ae7ff985a2494df8f6b444c353beb2
Opcode Fuzzy Hash: 4848e4f3a5b419aa04dee20766e2304ba85563754adc2ede94a24313790e7373
Instruction Fuzzy Hash: DF51D672601302DFEB298F5AD848BBAB7E4EF98200F1441ADDAC5C7691D771E890CF91

Function 010E5B0F Relevance: 6.1, APIs: 4, Instructions: 69COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,010DC75C,010E57DD,?,?,010DC61B), ref: 010E5B14
_free.LIBCMT ref: 010E5B71
_free.LIBCMT ref: 010E5BA7
SetLastError.KERNEL32(00000000,00000005,000000FF,?,?,010DC75C,010E57DD,?,?,010DC61B), ref: 010E5BB2

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: ErrorLast_free
String ID:
API String ID: 2283115069-0
Opcode ID: 958ab75d37380c53501dbe55cf1f5ab31146b3727aa7300792c1536f3f1fed1b
Instruction ID: 98c1b40971c05a4dc4ccdd9f2f2ff645587f6906ccd61f315679e5f22dea4861
Opcode Fuzzy Hash: 958ab75d37380c53501dbe55cf1f5ab31146b3727aa7300792c1536f3f1fed1b
Instruction Fuzzy Hash: E611803D7091052EDE57257B6C8CD6A16DAABE1278B380774F5F1962C1DEA1C8004610

Function 00F3ACF0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

Part of subcall function 010D5EA0: RaiseException.KERNEL32(E06D7363,00000001,00000003,00F39BBC,A75A4E1F,00000000,?,010D4236,00F39BBC,01107148,?,00F39BBC,?,?), ref: 010D5F00

___std_exception_copy.LIBVCRUNTIME ref: 00F3ADE8

Strings

bad array new length, xrefs: 00F3AD06

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: ExceptionRaise___std_exception_copy
String ID: bad array new length
API String ID: 3109751735-1242854226
Opcode ID: 51622e8d73cb35641f4f467ef67e2d4735a43a3b2f5670a20095bb8951632b07
Instruction ID: cf8a6af6c42dad0efe777f2007f7dcfde2a2a4f3636a57ae52e86ad7a67f7e01
Opcode Fuzzy Hash: 51622e8d73cb35641f4f467ef67e2d4735a43a3b2f5670a20095bb8951632b07
Instruction Fuzzy Hash: 60312471608309AFC7189F29DC85A5A7BE5AF81720F64C86CF9C8CB381D331DC499B82

Function 010E44C4 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

___except_validate_context_record.LIBVCRUNTIME ref: 010E473B

Strings

csm, xrefs: 010E47CE
csm, xrefs: 010E475D

Memory Dump Source

Source File: 00000009.00000002.13118870820.0000000000F31000.00000020.00000001.01000000.00000006.sdmp, Offset: 00F30000, based on PE: true

Associated: 00000009.00000002.13118851327.0000000000F30000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119018762.00000000010F5000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119041955.0000000001108000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.000000000110B000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119061524.0000000001115000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001119000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 00000009.00000002.13119098264.0000000001195000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f30000_install.jbxd

Similarity

API ID: ___except_validate_context_record
String ID: csm$csm
API String ID: 3493665558-3733052814
Opcode ID: 02b247ce9709d4614ced0212c088c06d1f6d6ec62609ede0e6ecc12ba646dd50
Instruction ID: 6b06e38f7bbd8923007e741a0b7ddfc51ec389a503ea9cf5d29a475e31aa4b83
Opcode Fuzzy Hash: 02b247ce9709d4614ced0212c088c06d1f6d6ec62609ede0e6ecc12ba646dd50
Instruction Fuzzy Hash: 5831C3315002559FCF269F96CD489AE7BE6FF09715F08859AF9C4CA221C372C861DBC1

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by hijacking the binaries used by services. Adversaries may use flaws in the permissions of Windows services to replace the binary that is executed upon service start. These service processes may automatically execute specific binaries as part of their functionality or to perform other actions. If the permissions on the file system directory containing a target binary, or permissions on the binary itself are improperly set, then the target binary may be overwritten with another binary using user-level permissions and executed by the original process. If the original process and thread are running under a higher permissions level, then the replaced binary will also execute under higher-level permissions, which could include SYSTEM.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Process: Process Creation, Service: Service Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report install.msi

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files.cab

C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\7145a5f98f114cfda252a2d82ba16369$dpx$.tmp\053799b4a77b3544aa6ba9cba740d547.tmp

C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\files\install.exe (copy)

C:\Users\user\AppData\Local\Temp\MW-328d9c0d-b985-4def-80ac-cc6c2c7de12c\msiwrapper.ini

C:\Windows\Installer\7b3e2b.msi

C:\Windows\Installer\MSI4000.tmp

C:\Windows\Installer\SourceHash{A4B71BFF-7E39-497F-811D-B224EDF412D9}

C:\Windows\Installer\inprogressinstallinfo.ipi

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log

C:\Windows\SystemTemp\~DF60CB8EE2A0627B6D.TMP

C:\Windows\SystemTemp\~DF6B3FA32A3F368F13.TMP

\Device\ConDrv

Static File Info

General

File Icon

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

Windows Analysis Report
install.msi

Function 010E8C86 Relevance: .0, Instructions: 29
COMMON

Function 010E64C9 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 77
COMMONLIBRARYCODE

Function 010D35DA Relevance: 4.6, APIs: 3, Instructions: 93
COMMONLIBRARYCODE

Function 010DA4AE Relevance: 3.0, APIs: 2, Instructions: 38
threadCOMMON

Function 010E6590 Relevance: 1.6, APIs: 1, Instructions: 57
COMMONLIBRARYCODE

Function 010E57F1 Relevance: 1.5, APIs: 1, Instructions: 32
memoryCOMMON

Function 00F32AB0 Relevance: 30.3, APIs: 1, Strings: 16, Instructions: 547
COMMON

Function 00F3B580 Relevance: 28.3, APIs: 4, Strings: 12, Instructions: 282
COMMON