Joe Sandbox Cloud Basic Analysis Report
Edit tour

Linux Analysis Report
sync.superh.elf

Overview

General Information

Sample name:sync.superh.elf
Analysis ID:1642582
MD5:457ecbf5eeb500c6bdc29f289c2ec02f
SHA1:cd6b73251a60c743e6ff908f7320367d20cafe48
SHA256:0c88b99fa2e68cdf5321670d16caa9d904ac22070c34c03e519b174e7f2cc5c4
Tags:elfuser-abuse_ch
Infos:

Detection

Score:64
Range:0 - 100

Signatures

Multi AV Scanner detection for submitted file
Suricata IDS alerts for network traffic
Performs DNS TXT record lookups
Sample deletes itself
Detected TCP or UDP traffic on non-standard ports
ELF contains segments with high entropy indicating compressed/encrypted content
Sample has stripped symbol table
Sleeps for long times indicative of sandbox evasion
Tries to resolve domain names, but no domain seems valid (expired dropper behavior)
Uses the "uname" system call to query kernel version information (possible evasion)

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious

General Information

Joe Sandbox version:42.0.0 Malachite
Analysis ID:1642582
Start date and time:2025-03-19 08:12:18 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 31s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:sync.superh.elf
Detection:MAL
Classification:mal64.evad.linELF@0/0@80/0

Runtime Messages

Command:/tmp/sync.superh.elf
PID:5510
Exit Code:1
Exit Code Info:
Killed:False
Standard Output:
sync
Standard Error:

Process Tree

  • system is lnxubuntu20
  • cleanup

Yara Signatures

⊘No yara matches

Suricata Signatures

TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
2025-03-19T08:13:17.304810+010020135141A Network Trojan was detected192.168.2.14503041.0.0.153UDP

Joe Sandbox Signatures

  • • AV Detection
  • • Networking
  • • System Summary
  • • Hooking and other Techniques for Hiding and Protection
  • • Malware Analysis System Evasion
  • • HIPS / PFW / Operating System Protection Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Source: sync.superh.elfReversingLabs: Detection: 47%

Networking

barindex
Source: Network trafficSuricata IDS: 2013514 - Severity 1 - ET MALWARE Potential DNS Command and Control via TXT queries : 192.168.2.14:50304 -> 1.0.0.1:53
Source: global trafficTCP traffic: 192.168.2.14:48616 -> 185.194.205.79:61005
Source: unknownDNS traffic detected: query: dnsresolve.socialgains.cf replaycode: Name error (3)
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: unknownTCP traffic detected without corresponding DNS query: 185.194.205.79
Source: global trafficDNS traffic detected: DNS query: dnsresolve.socialgains.cf
Source: ELF static info symbol of initial sample.symtab present: no
Source: classification engineClassification label: mal64.evad.linELF@0/0@80/0

Hooking and other Techniques for Hiding and Protection

barindex
Source: /tmp/sync.superh.elf (PID: 5510)File: /tmp/sync.superh.elfJump to behavior
Source: sync.superh.elfSubmission file: segment LOAD with 7.0013 entropy (max. 8.0)
Source: /tmp/sync.superh.elf (PID: 5515)Sleeps longer then 60s: 60.0sJump to behavior
Source: /tmp/sync.superh.elf (PID: 5515)Sleeps longer then 60s: 60.0sJump to behavior
Source: /tmp/sync.superh.elf (PID: 5510)Queries kernel information via 'uname': Jump to behavior
Source: sync.superh.elf, 5510.1.00007fff88159000.00007fff8817a000.rw-.sdmpBinary or memory string: /usr/bin/qemu-sh4
Source: sync.superh.elf, 5510.1.000055670bb23000.000055670bb86000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/sh4
Source: sync.superh.elf, 5510.1.00007fff88159000.00007fff8817a000.rw-.sdmpBinary or memory string: x86_64/usr/bin/qemu-sh4/tmp/sync.superh.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/sync.superh.elf
Source: sync.superh.elf, 5510.1.000055670bb23000.000055670bb86000.rw-.sdmpBinary or memory string: gU5!/etc/qemu-binfmt/sh4

HIPS / PFW / Operating System Protection Evasion

barindex
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf
Source: TrafficDNS traffic detected: queries for: dnsresolve.socialgains.cf

Mitre Att&ck Matrix

ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath Interception1
Virtualization/Sandbox Evasion		OS Credential Dumping11
Security Software Discovery		Remote ServicesData from Local System1
Non-Standard Port		Exfiltration Over Other Network MediumAbuse Accessibility Features
CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization Scripts1
Obfuscated Files or Information		LSASS Memory1
Virtualization/Sandbox Evasion		Remote Desktop ProtocolData from Removable Media1
Non-Application Layer Protocol		Exfiltration Over BluetoothNetwork Denial of Service
Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)1
File Deletion		Security Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive1
Application Layer Protocol		Automated ExfiltrationData Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Number of created Files
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1642582 Sample: sync.superh.elf Startdate: 19/03/2025 Architecture: LINUX Score: 64 15 dnsresolve.socialgains.cf 2->15 17 185.194.205.79, 48616, 48618, 48620 HTSENSEFR France 2->17 19 Suricata IDS alerts for network traffic 2->19 21 Multi AV Scanner detection for submitted file 2->21 8 sync.superh.elf 2->8         started        signatures3 23 Performs DNS TXT record lookups 15->23 process4 signatures5 25 Sample deletes itself 8->25 11 sync.superh.elf 8->11         started        process6 process7 13 sync.superh.elf 11->13         started       

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
sync.superh.elf47%ReversingLabsLinux.Backdoor.Gafgyt

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

NameIPActiveMaliciousAntivirus DetectionReputation
dnsresolve.socialgains.cf
unknown
unknownfalse
    		high

    World Map of Contacted IPs

    • No. of IPs < 25%
    • 25% < No. of IPs < 50%
    • 50% < No. of IPs < 75%
    • 75% < No. of IPs

    Public IPs

    IPDomainCountryFlagASNASN NameMalicious
    185.194.205.79
    		unknownFrance
    		204145HTSENSEFRfalse

    Joe Sandbox View / Context

    IPs

    MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
    185.194.205.79sync.arm7.elfGet hashmaliciousUnknownBrowse
      sync.arm5.elfGet hashmaliciousUnknownBrowse
        sync.arm4.elfGet hashmaliciousUnknownBrowse
          sync.x86_64.elfGet hashmaliciousUnknownBrowse
            sync.sh4.elfGet hashmaliciousUnknownBrowse
              sync.superh.elfGet hashmaliciousUnknownBrowse
                sync.x86.elfGet hashmaliciousUnknownBrowse
                  sync.superh.elfGet hashmaliciousUnknownBrowse
                    sync.mipsel.elfGet hashmaliciousUnknownBrowse
                      sync.arm5.elfGet hashmaliciousUnknownBrowse

                        Domains

                        ⊘No context

                        ASNs

                        MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                        HTSENSEFRsync.arm7.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79
                        sync.arm5.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79
                        sync.arm4.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79
                        sync.x86_64.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79
                        sync.sh4.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79
                        sync.superh.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79
                        sync.x86.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79
                        sync.superh.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79
                        sync.mipsel.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79
                        sync.arm5.elfGet hashmaliciousUnknownBrowse
                        • 185.194.205.79

                        JA3 Fingerprints

                        ⊘No context

                        Dropped Files

                        ⊘No context

                        Created / dropped Files

                        ⊘No created / dropped files found

                        Static File Info

                        General

                        File type:ELF 32-bit LSB executable, Renesas SH, version 1 (SYSV), statically linked, stripped
                        Entropy (8bit):6.945354151962893
                        TrID:
                        • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                        File name:sync.superh.elf
                        File size:52'704 bytes
                        MD5:457ecbf5eeb500c6bdc29f289c2ec02f
                        SHA1:cd6b73251a60c743e6ff908f7320367d20cafe48
                        SHA256:0c88b99fa2e68cdf5321670d16caa9d904ac22070c34c03e519b174e7f2cc5c4
                        SHA512:38774e24d85dadba164340004dcfb27c51b1793fb49076f8b554bde539b262925709850038e1d25faef7e07f354dfd1b24d3d7133263614ec82bac196ef22247
                        SSDEEP:1536:rC/P9I1IgKngSfHgungxIFh88rIn1KE6w2u3xaCiYWbs:e9I1IgKngSfHgungxIFvIncEV3xaPbs
                        TLSH:48338DA38C245E88C464E4F274709BBFE753E90496975FCA2562C66AD487ECCF0463F4
                        File Content Preview:.ELF..............*.......@.4...P.......4. ...(...............@...@...........................A...A.................Q.td............................././"O.n........#.*@........#.*@L....o&O.n...l..............................././.../.a"O.!...n...a.b("...q.

                        Static ELF Info

                        ELF header

                        Class:ELF32
                        Data:2's complement, little endian
                        Version:1 (current)
                        Machine:<unknown>
                        Version Number:0x1
                        Type:EXEC (Executable file)
                        OS/ABI:UNIX - System V
                        ABI Version:0
                        Entry Point Address:0x4001a0
                        Flags:0x9
                        ELF Header Size:52
                        Program Header Offset:52
                        Program Header Size:32
                        Number of Program Headers:3
                        Section Header Offset:52304
                        Section Header Size:40
                        Number of Section Headers:10
                        Header String Table Index:9

                        Sections

                        NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                        NULL0x00x00x00x00x0000
                        .initPROGBITS0x4000940x940x300x00x6AX004
                        .textPROGBITS0x4000e00xe00xac600x00x6AX0032
                        .finiPROGBITS0x40ad400xad400x240x00x6AX004
                        .rodataPROGBITS0x40ad640xad640x1ab40x00x2A004
                        .ctorsPROGBITS0x41c81c0xc81c0x80x00x3WA004
                        .dtorsPROGBITS0x41c8240xc8240x80x00x3WA004
                        .dataPROGBITS0x41c8300xc8300x3e00x00x3WA004
                        .bssNOBITS0x41cc100xcc100xa2fc0x00x3WA004
                        .shstrtabSTRTAB0x00xcc100x3e0x00x0001

                        Program Segments

                        TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                        LOAD0x00x4000000x4000000xc8180xc8187.00130x5R E0x10000.init .text .fini .rodata
                        LOAD0xc81c0x41c81c0x41c81c0x3f40xa6f03.58610x6RW 0x10000.ctors .dtors .data .bss
                        GNU_STACK0x00x00x00x00x00.00000x7RWE0x4

                        Network Behavior

                        Download Network PCAP: filtered – full

                        Suricata IDS Alerts

                        TimestampSIDSignatureSeveritySource IPSource PortDest IPDest PortProtocol
                        2025-03-19T08:13:17.304810+01002013514ET MALWARE Potential DNS Command and Control via TXT queries1192.168.2.14503041.0.0.153UDP

                        Network Port Distribution

                        • Total Packets: 144
                        • • 61005 undefined
                        • • 53 (DNS)
                        TimestampSource PortDest PortSource IPDest IP
                        Mar 19, 2025 08:13:06.565867901 CET4861661005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:06.570621014 CET6100548616185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:06.570753098 CET4861661005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:06.570836067 CET4861661005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:06.575484037 CET6100548616185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:08.334378958 CET6100548616185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:08.334817886 CET4861661005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:08.334870100 CET4861661005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:08.339499950 CET6100548616185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:14.490314960 CET4861861005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:14.495277882 CET6100548618185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:14.495388031 CET4861861005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:14.495436907 CET4861861005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:14.500109911 CET6100548618185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:16.302328110 CET6100548618185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:16.302568913 CET4861861005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:16.307260036 CET6100548618185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:22.431072950 CET4862061005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:22.435981035 CET6100548620185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:22.436088085 CET4862061005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:22.436088085 CET4862061005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:22.441078901 CET6100548620185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:24.244592905 CET6100548620185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:24.245047092 CET4862061005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:24.249793053 CET6100548620185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:30.387773991 CET4862261005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:30.392504930 CET6100548622185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:30.392698050 CET4862261005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:30.392698050 CET4862261005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:30.397351980 CET6100548622185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:32.230360031 CET6100548622185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:32.230556011 CET4862261005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:32.235218048 CET6100548622185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:38.447900057 CET4862461005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:38.452810049 CET6100548624185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:38.452864885 CET4862461005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:38.452894926 CET4862461005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:38.457556009 CET6100548624185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:38.457606077 CET4862461005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:38.462284088 CET6100548624185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:40.245436907 CET6100548624185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:40.245862007 CET4862461005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:40.250602961 CET6100548624185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:46.348155022 CET4862661005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:46.353005886 CET6100548626185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:46.353693008 CET4862661005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:46.353698015 CET4862661005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:46.358411074 CET6100548626185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:48.116879940 CET6100548626185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:48.117166042 CET4862661005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:48.124445915 CET6100548626185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:54.321849108 CET4862861005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:54.326843023 CET6100548628185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:54.326953888 CET4862861005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:54.327716112 CET4862861005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:54.332453966 CET6100548628185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:56.119604111 CET6100548628185.194.205.79192.168.2.14
                        Mar 19, 2025 08:13:56.119976997 CET4862861005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:13:56.124804974 CET6100548628185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:02.431240082 CET4863061005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:02.436180115 CET6100548630185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:02.436353922 CET4863061005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:02.436355114 CET4863061005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:02.441066027 CET6100548630185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:04.243261099 CET6100548630185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:04.243680000 CET4863061005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:04.248379946 CET6100548630185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:10.633861065 CET4863261005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:10.638782978 CET6100548632185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:10.638865948 CET4863261005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:10.638919115 CET4863261005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:10.643575907 CET6100548632185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:10.643680096 CET4863261005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:10.648344040 CET6100548632185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:12.455272913 CET6100548632185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:12.455614090 CET4863261005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:12.460325956 CET6100548632185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:19.275770903 CET4863461005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:19.280996084 CET6100548634185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:19.281126976 CET4863461005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:19.281142950 CET4863461005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:19.285830975 CET6100548634185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:21.073678970 CET6100548634185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:21.073952913 CET4863461005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:21.081044912 CET6100548634185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:27.191998959 CET4863661005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:27.196798086 CET6100548636185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:27.196892023 CET4863661005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:27.196933031 CET4863661005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:27.201803923 CET6100548636185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:28.993784904 CET6100548636185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:28.994098902 CET4863661005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:28.998802900 CET6100548636185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:35.285090923 CET4863861005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:35.289990902 CET6100548638185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:35.290082932 CET4863861005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:35.290144920 CET4863861005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:35.295214891 CET6100548638185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:37.070569038 CET6100548638185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:37.071001053 CET4863861005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:37.075793028 CET6100548638185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:43.379251003 CET4864061005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:43.384450912 CET6100548640185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:43.384501934 CET4864061005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:43.384521961 CET4864061005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:43.389153957 CET6100548640185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:43.389193058 CET4864061005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:43.394218922 CET6100548640185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:45.163625002 CET6100548640185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:45.163938999 CET4864061005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:45.168699980 CET6100548640185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:51.303980112 CET4864261005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:51.308986902 CET6100548642185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:51.309122086 CET4864261005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:51.309174061 CET4864261005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:51.313891888 CET6100548642185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:53.085304022 CET6100548642185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:53.085728884 CET4864261005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:53.090516090 CET6100548642185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:59.439016104 CET4864461005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:59.443845034 CET6100548644185.194.205.79192.168.2.14
                        Mar 19, 2025 08:14:59.443923950 CET4864461005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:59.443978071 CET4864461005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:14:59.448602915 CET6100548644185.194.205.79192.168.2.14
                        Mar 19, 2025 08:15:01.231482983 CET6100548644185.194.205.79192.168.2.14
                        Mar 19, 2025 08:15:01.231687069 CET4864461005192.168.2.14185.194.205.79
                        Mar 19, 2025 08:15:01.236459970 CET6100548644185.194.205.79192.168.2.14
                        TimestampSource PortDest PortSource IPDest IP
                        Mar 19, 2025 08:13:01.261934042 CET3565153192.168.2.141.0.0.1
                        Mar 19, 2025 08:13:01.399246931 CET53356511.0.0.1192.168.2.14
                        Mar 19, 2025 08:13:02.406697989 CET5232853192.168.2.141.1.1.1
                        Mar 19, 2025 08:13:02.511312008 CET53523281.1.1.1192.168.2.14
                        Mar 19, 2025 08:13:03.514780998 CET5924153192.168.2.148.8.8.8
                        Mar 19, 2025 08:13:03.530081034 CET53592418.8.8.8192.168.2.14
                        Mar 19, 2025 08:13:04.531970978 CET5187553192.168.2.148.8.4.4
                        Mar 19, 2025 08:13:04.547559977 CET53518758.8.4.4192.168.2.14
                        Mar 19, 2025 08:13:05.549437046 CET5140553192.168.2.148.8.4.4
                        Mar 19, 2025 08:13:05.564166069 CET53514058.8.4.4192.168.2.14
                        Mar 19, 2025 08:13:09.337156057 CET5638053192.168.2.141.0.0.1
                        Mar 19, 2025 08:13:09.364381075 CET53563801.0.0.1192.168.2.14
                        Mar 19, 2025 08:13:10.367005110 CET4024653192.168.2.141.1.1.1
                        Mar 19, 2025 08:13:10.391526937 CET53402461.1.1.1192.168.2.14
                        Mar 19, 2025 08:13:11.394927979 CET3749953192.168.2.148.8.4.4
                        Mar 19, 2025 08:13:11.426050901 CET53374998.8.4.4192.168.2.14
                        Mar 19, 2025 08:13:12.429296970 CET5688653192.168.2.141.1.1.1
                        Mar 19, 2025 08:13:12.455908060 CET53568861.1.1.1192.168.2.14
                        Mar 19, 2025 08:13:13.459373951 CET3469253192.168.2.148.8.8.8
                        Mar 19, 2025 08:13:13.487519026 CET53346928.8.8.8192.168.2.14
                        Mar 19, 2025 08:13:17.304810047 CET5030453192.168.2.141.0.0.1
                        Mar 19, 2025 08:13:17.331383944 CET53503041.0.0.1192.168.2.14
                        Mar 19, 2025 08:13:18.333641052 CET3623053192.168.2.148.8.4.4
                        Mar 19, 2025 08:13:18.349069118 CET53362308.8.4.4192.168.2.14
                        Mar 19, 2025 08:13:19.352015972 CET5039953192.168.2.148.8.8.8
                        Mar 19, 2025 08:13:19.380788088 CET53503998.8.8.8192.168.2.14
                        Mar 19, 2025 08:13:20.386142015 CET4453953192.168.2.141.1.1.1
                        Mar 19, 2025 08:13:20.410265923 CET53445391.1.1.1192.168.2.14
                        Mar 19, 2025 08:13:21.413506985 CET4657853192.168.2.148.8.8.8
                        Mar 19, 2025 08:13:21.429187059 CET53465788.8.8.8192.168.2.14
                        Mar 19, 2025 08:13:25.247734070 CET3944853192.168.2.141.0.0.1
                        Mar 19, 2025 08:13:25.273025990 CET53394481.0.0.1192.168.2.14
                        Mar 19, 2025 08:13:26.277775049 CET4875653192.168.2.141.1.1.1
                        Mar 19, 2025 08:13:26.302237034 CET53487561.1.1.1192.168.2.14
                        Mar 19, 2025 08:13:27.306591988 CET5228653192.168.2.148.8.4.4
                        Mar 19, 2025 08:13:27.321697950 CET53522868.8.4.4192.168.2.14
                        Mar 19, 2025 08:13:28.324601889 CET5548553192.168.2.148.8.4.4
                        Mar 19, 2025 08:13:28.353588104 CET53554858.8.4.4192.168.2.14
                        Mar 19, 2025 08:13:29.356425047 CET5020353192.168.2.148.8.8.8
                        Mar 19, 2025 08:13:29.385189056 CET53502038.8.8.8192.168.2.14
                        Mar 19, 2025 08:13:33.233875036 CET4949353192.168.2.141.0.0.1
                        Mar 19, 2025 08:13:33.257985115 CET53494931.0.0.1192.168.2.14
                        Mar 19, 2025 08:13:34.261565924 CET3482853192.168.2.141.1.1.1
                        Mar 19, 2025 08:13:34.381079912 CET53348281.1.1.1192.168.2.14
                        Mar 19, 2025 08:13:35.384535074 CET5006953192.168.2.148.8.4.4
                        Mar 19, 2025 08:13:35.401010990 CET53500698.8.4.4192.168.2.14
                        Mar 19, 2025 08:13:36.403496027 CET6052653192.168.2.141.1.1.1
                        Mar 19, 2025 08:13:36.428443909 CET53605261.1.1.1192.168.2.14
                        Mar 19, 2025 08:13:37.430850029 CET4401153192.168.2.148.8.8.8
                        Mar 19, 2025 08:13:37.446434975 CET53440118.8.8.8192.168.2.14
                        Mar 19, 2025 08:13:41.248084068 CET4553953192.168.2.148.8.4.4
                        Mar 19, 2025 08:13:41.264472961 CET53455398.8.4.4192.168.2.14
                        Mar 19, 2025 08:13:42.268173933 CET5747453192.168.2.148.8.4.4
                        Mar 19, 2025 08:13:42.282987118 CET53574748.8.4.4192.168.2.14
                        Mar 19, 2025 08:13:43.285684109 CET6052553192.168.2.148.8.4.4
                        Mar 19, 2025 08:13:43.300658941 CET53605258.8.4.4192.168.2.14
                        Mar 19, 2025 08:13:44.303527117 CET3864753192.168.2.148.8.8.8
                        Mar 19, 2025 08:13:44.318350077 CET53386478.8.8.8192.168.2.14
                        Mar 19, 2025 08:13:45.321358919 CET5481253192.168.2.141.1.1.1
                        Mar 19, 2025 08:13:45.346120119 CET53548121.1.1.1192.168.2.14
                        Mar 19, 2025 08:13:49.120143890 CET5005353192.168.2.148.8.8.8
                        Mar 19, 2025 08:13:49.148919106 CET53500538.8.8.8192.168.2.14
                        Mar 19, 2025 08:13:50.153002024 CET4654953192.168.2.148.8.4.4
                        Mar 19, 2025 08:13:50.168637991 CET53465498.8.4.4192.168.2.14
                        Mar 19, 2025 08:13:51.171422958 CET4137853192.168.2.148.8.4.4
                        Mar 19, 2025 08:13:51.187069893 CET53413788.8.4.4192.168.2.14
                        Mar 19, 2025 08:13:52.189578056 CET5798753192.168.2.141.1.1.1
                        Mar 19, 2025 08:13:52.291930914 CET53579871.1.1.1192.168.2.14
                        Mar 19, 2025 08:13:53.295037031 CET4440653192.168.2.141.1.1.1
                        Mar 19, 2025 08:13:53.319309950 CET53444061.1.1.1192.168.2.14
                        Mar 19, 2025 08:13:57.123279095 CET4430353192.168.2.141.1.1.1
                        Mar 19, 2025 08:13:57.231543064 CET53443031.1.1.1192.168.2.14
                        Mar 19, 2025 08:13:58.234158993 CET5805153192.168.2.148.8.4.4
                        Mar 19, 2025 08:13:58.263295889 CET53580518.8.4.4192.168.2.14
                        Mar 19, 2025 08:13:59.266575098 CET4675153192.168.2.141.0.0.1
                        Mar 19, 2025 08:13:59.291363955 CET53467511.0.0.1192.168.2.14
                        Mar 19, 2025 08:14:00.295033932 CET4103353192.168.2.141.0.0.1
                        Mar 19, 2025 08:14:00.321089983 CET53410331.0.0.1192.168.2.14
                        Mar 19, 2025 08:14:01.323483944 CET5134553192.168.2.141.0.0.1
                        Mar 19, 2025 08:14:01.429162979 CET53513451.0.0.1192.168.2.14
                        Mar 19, 2025 08:14:05.246419907 CET5820453192.168.2.141.1.1.1
                        Mar 19, 2025 08:14:05.352144957 CET53582041.1.1.1192.168.2.14
                        Mar 19, 2025 08:14:06.355756998 CET4841053192.168.2.148.8.4.4
                        Mar 19, 2025 08:14:06.370618105 CET53484108.8.4.4192.168.2.14
                        Mar 19, 2025 08:14:07.373040915 CET3906453192.168.2.141.0.0.1
                        Mar 19, 2025 08:14:07.491223097 CET53390641.0.0.1192.168.2.14
                        Mar 19, 2025 08:14:08.494172096 CET3283653192.168.2.148.8.8.8
                        Mar 19, 2025 08:14:08.522357941 CET53328368.8.8.8192.168.2.14
                        Mar 19, 2025 08:14:09.525712013 CET4901653192.168.2.141.1.1.1
                        Mar 19, 2025 08:14:09.631005049 CET53490161.1.1.1192.168.2.14
                        Mar 19, 2025 08:14:13.458543062 CET5792153192.168.2.141.0.0.1
                        Mar 19, 2025 08:14:14.007332087 CET53579211.0.0.1192.168.2.14
                        Mar 19, 2025 08:14:15.009608984 CET4742853192.168.2.141.1.1.1
                        Mar 19, 2025 08:14:15.129048109 CET53474281.1.1.1192.168.2.14
                        Mar 19, 2025 08:14:16.132345915 CET3471853192.168.2.148.8.4.4
                        Mar 19, 2025 08:14:16.147160053 CET53347188.8.4.4192.168.2.14
                        Mar 19, 2025 08:14:17.149910927 CET3819753192.168.2.148.8.4.4
                        Mar 19, 2025 08:14:17.165260077 CET53381978.8.4.4192.168.2.14
                        Mar 19, 2025 08:14:18.168214083 CET5020453192.168.2.141.1.1.1
                        Mar 19, 2025 08:14:18.273616076 CET53502041.1.1.1192.168.2.14
                        Mar 19, 2025 08:14:22.076874971 CET4608853192.168.2.148.8.8.8
                        Mar 19, 2025 08:14:22.105479956 CET53460888.8.8.8192.168.2.14
                        Mar 19, 2025 08:14:23.108733892 CET3740453192.168.2.141.0.0.1
                        Mar 19, 2025 08:14:23.133491993 CET53374041.0.0.1192.168.2.14
                        Mar 19, 2025 08:14:24.136676073 CET4603053192.168.2.148.8.4.4
                        Mar 19, 2025 08:14:24.151262999 CET53460308.8.4.4192.168.2.14
                        Mar 19, 2025 08:14:25.154377937 CET5112553192.168.2.148.8.8.8
                        Mar 19, 2025 08:14:25.170855999 CET53511258.8.8.8192.168.2.14
                        Mar 19, 2025 08:14:26.174125910 CET3307253192.168.2.148.8.4.4
                        Mar 19, 2025 08:14:26.188925982 CET53330728.8.4.4192.168.2.14
                        Mar 19, 2025 08:14:29.997786045 CET3988153192.168.2.148.8.8.8
                        Mar 19, 2025 08:14:30.014822006 CET53398818.8.8.8192.168.2.14
                        Mar 19, 2025 08:14:31.018522024 CET4524753192.168.2.148.8.4.4
                        Mar 19, 2025 08:14:31.033310890 CET53452478.8.4.4192.168.2.14
                        Mar 19, 2025 08:14:32.037225962 CET5125253192.168.2.148.8.4.4
                        Mar 19, 2025 08:14:32.052558899 CET53512528.8.4.4192.168.2.14
                        Mar 19, 2025 08:14:33.056899071 CET3668553192.168.2.141.0.0.1
                        Mar 19, 2025 08:14:33.175935030 CET53366851.0.0.1192.168.2.14
                        Mar 19, 2025 08:14:34.179338932 CET5318053192.168.2.141.0.0.1
                        Mar 19, 2025 08:14:34.282167912 CET53531801.0.0.1192.168.2.14
                        Mar 19, 2025 08:14:38.075227976 CET5785453192.168.2.141.1.1.1
                        Mar 19, 2025 08:14:38.191618919 CET53578541.1.1.1192.168.2.14
                        Mar 19, 2025 08:14:39.196628094 CET4676753192.168.2.148.8.8.8
                        Mar 19, 2025 08:14:39.211182117 CET53467678.8.8.8192.168.2.14
                        Mar 19, 2025 08:14:40.214912891 CET4499553192.168.2.141.0.0.1
                        Mar 19, 2025 08:14:40.240360975 CET53449951.0.0.1192.168.2.14
                        Mar 19, 2025 08:14:41.243505001 CET3548353192.168.2.141.1.1.1
                        Mar 19, 2025 08:14:41.346697092 CET53354831.1.1.1192.168.2.14
                        Mar 19, 2025 08:14:42.350819111 CET3785853192.168.2.141.1.1.1
                        Mar 19, 2025 08:14:42.376658916 CET53378581.1.1.1192.168.2.14
                        Mar 19, 2025 08:14:46.167004108 CET4241353192.168.2.141.0.0.1
                        Mar 19, 2025 08:14:46.191644907 CET53424131.0.0.1192.168.2.14
                        Mar 19, 2025 08:14:47.194670916 CET4096353192.168.2.148.8.4.4
                        Mar 19, 2025 08:14:47.211662054 CET53409638.8.4.4192.168.2.14
                        Mar 19, 2025 08:14:48.215111017 CET5761953192.168.2.141.0.0.1
                        Mar 19, 2025 08:14:48.239939928 CET53576191.0.0.1192.168.2.14
                        Mar 19, 2025 08:14:49.242561102 CET4044153192.168.2.148.8.8.8
                        Mar 19, 2025 08:14:49.271217108 CET53404418.8.8.8192.168.2.14
                        Mar 19, 2025 08:14:50.274735928 CET4043353192.168.2.148.8.8.8
                        Mar 19, 2025 08:14:50.300851107 CET53404338.8.8.8192.168.2.14
                        Mar 19, 2025 08:14:54.088752985 CET3693453192.168.2.148.8.4.4
                        Mar 19, 2025 08:14:54.120153904 CET53369348.8.4.4192.168.2.14
                        Mar 19, 2025 08:14:55.123289108 CET5223353192.168.2.148.8.8.8
                        Mar 19, 2025 08:14:55.155929089 CET53522338.8.8.8192.168.2.14
                        Mar 19, 2025 08:14:56.159666061 CET4052653192.168.2.141.1.1.1
                        Mar 19, 2025 08:14:56.278177977 CET53405261.1.1.1192.168.2.14
                        Mar 19, 2025 08:14:57.281533003 CET4698853192.168.2.148.8.4.4
                        Mar 19, 2025 08:14:57.296549082 CET53469888.8.4.4192.168.2.14
                        Mar 19, 2025 08:14:58.299441099 CET4551753192.168.2.141.1.1.1
                        Mar 19, 2025 08:14:58.436126947 CET53455171.1.1.1192.168.2.14
                        Mar 19, 2025 08:15:02.234456062 CET5325253192.168.2.141.1.1.1
                        Mar 19, 2025 08:15:02.341361046 CET53532521.1.1.1192.168.2.14
                        Mar 19, 2025 08:15:03.344909906 CET3981153192.168.2.148.8.4.4
                        Mar 19, 2025 08:15:03.360497952 CET53398118.8.4.4192.168.2.14
                        Mar 19, 2025 08:15:04.363401890 CET3531553192.168.2.141.0.0.1
                        Mar 19, 2025 08:15:04.481987953 CET53353151.0.0.1192.168.2.14
                        Mar 19, 2025 08:15:05.485213041 CET3485053192.168.2.148.8.4.4
                        Mar 19, 2025 08:15:05.500140905 CET53348508.8.4.4192.168.2.14
                        Mar 19, 2025 08:15:06.502757072 CET3356053192.168.2.148.8.4.4
                        Mar 19, 2025 08:15:06.528626919 CET53335608.8.4.4192.168.2.14

                        DNS Queries

                        TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                        Mar 19, 2025 08:13:01.261934042 CET192.168.2.141.0.0.10xcf16Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:02.406697989 CET192.168.2.141.1.1.10xcf16Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:03.514780998 CET192.168.2.148.8.8.80xcf16Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:04.531970978 CET192.168.2.148.8.4.40xcf16Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:05.549437046 CET192.168.2.148.8.4.40xcf16Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:09.337156057 CET192.168.2.141.0.0.10xd569Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:10.367005110 CET192.168.2.141.1.1.10xd569Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:11.394927979 CET192.168.2.148.8.4.40xd569Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:12.429296970 CET192.168.2.141.1.1.10xd569Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:13.459373951 CET192.168.2.148.8.8.80xd569Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:17.304810047 CET192.168.2.141.0.0.10xe3c3Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:18.333641052 CET192.168.2.148.8.4.40xe3c3Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:19.352015972 CET192.168.2.148.8.8.80xe3c3Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:20.386142015 CET192.168.2.141.1.1.10xe3c3Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:21.413506985 CET192.168.2.148.8.8.80xe3c3Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:25.247734070 CET192.168.2.141.0.0.10x8a6eStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:26.277775049 CET192.168.2.141.1.1.10x8a6eStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:27.306591988 CET192.168.2.148.8.4.40x8a6eStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:28.324601889 CET192.168.2.148.8.4.40x8a6eStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:29.356425047 CET192.168.2.148.8.8.80x8a6eStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:33.233875036 CET192.168.2.141.0.0.10x3e76Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:34.261565924 CET192.168.2.141.1.1.10x3e76Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:35.384535074 CET192.168.2.148.8.4.40x3e76Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:36.403496027 CET192.168.2.141.1.1.10x3e76Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:37.430850029 CET192.168.2.148.8.8.80x3e76Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:41.248084068 CET192.168.2.148.8.4.40xc7f1Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:42.268173933 CET192.168.2.148.8.4.40xc7f1Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:43.285684109 CET192.168.2.148.8.4.40xc7f1Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:44.303527117 CET192.168.2.148.8.8.80xc7f1Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:45.321358919 CET192.168.2.141.1.1.10xc7f1Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:49.120143890 CET192.168.2.148.8.8.80xa7bcStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:50.153002024 CET192.168.2.148.8.4.40xa7bcStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:51.171422958 CET192.168.2.148.8.4.40xa7bcStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:52.189578056 CET192.168.2.141.1.1.10xa7bcStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:53.295037031 CET192.168.2.141.1.1.10xa7bcStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:57.123279095 CET192.168.2.141.1.1.10x8cfcStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:58.234158993 CET192.168.2.148.8.4.40x8cfcStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:13:59.266575098 CET192.168.2.141.0.0.10x8cfcStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:00.295033932 CET192.168.2.141.0.0.10x8cfcStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:01.323483944 CET192.168.2.141.0.0.10x8cfcStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:05.246419907 CET192.168.2.141.1.1.10x108cStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:06.355756998 CET192.168.2.148.8.4.40x108cStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:07.373040915 CET192.168.2.141.0.0.10x108cStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:08.494172096 CET192.168.2.148.8.8.80x108cStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:09.525712013 CET192.168.2.141.1.1.10x108cStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:13.458543062 CET192.168.2.141.0.0.10xd8d0Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:15.009608984 CET192.168.2.141.1.1.10xd8d0Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:16.132345915 CET192.168.2.148.8.4.40xd8d0Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:17.149910927 CET192.168.2.148.8.4.40xd8d0Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:18.168214083 CET192.168.2.141.1.1.10xd8d0Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:22.076874971 CET192.168.2.148.8.8.80x6e5fStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:23.108733892 CET192.168.2.141.0.0.10x6e5fStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:24.136676073 CET192.168.2.148.8.4.40x6e5fStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:25.154377937 CET192.168.2.148.8.8.80x6e5fStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:26.174125910 CET192.168.2.148.8.4.40x6e5fStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:29.997786045 CET192.168.2.148.8.8.80x2cc4Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:31.018522024 CET192.168.2.148.8.4.40x2cc4Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:32.037225962 CET192.168.2.148.8.4.40x2cc4Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:33.056899071 CET192.168.2.141.0.0.10x2cc4Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:34.179338932 CET192.168.2.141.0.0.10x2cc4Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:38.075227976 CET192.168.2.141.1.1.10x8b86Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:39.196628094 CET192.168.2.148.8.8.80x8b86Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:40.214912891 CET192.168.2.141.0.0.10x8b86Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:41.243505001 CET192.168.2.141.1.1.10x8b86Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:42.350819111 CET192.168.2.141.1.1.10x8b86Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:46.167004108 CET192.168.2.141.0.0.10xe391Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:47.194670916 CET192.168.2.148.8.4.40xe391Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:48.215111017 CET192.168.2.141.0.0.10xe391Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:49.242561102 CET192.168.2.148.8.8.80xe391Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:50.274735928 CET192.168.2.148.8.8.80xe391Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:54.088752985 CET192.168.2.148.8.4.40xfc8dStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:55.123289108 CET192.168.2.148.8.8.80xfc8dStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:56.159666061 CET192.168.2.141.1.1.10xfc8dStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:57.281533003 CET192.168.2.148.8.4.40xfc8dStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:14:58.299441099 CET192.168.2.141.1.1.10xfc8dStandard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:15:02.234456062 CET192.168.2.141.1.1.10x6c26Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:15:03.344909906 CET192.168.2.148.8.4.40x6c26Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:15:04.363401890 CET192.168.2.141.0.0.10x6c26Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:15:05.485213041 CET192.168.2.148.8.4.40x6c26Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false
                        Mar 19, 2025 08:15:06.502757072 CET192.168.2.148.8.4.40x6c26Standard query (0)dnsresolve.socialgains.cf16IN (0x0001)false

                        DNS Answers

                        TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                        Mar 19, 2025 08:13:01.399246931 CET1.0.0.1192.168.2.140xcf16Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:02.511312008 CET1.1.1.1192.168.2.140xcf16Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:03.530081034 CET8.8.8.8192.168.2.140xcf16Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:04.547559977 CET8.8.4.4192.168.2.140xcf16Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:05.564166069 CET8.8.4.4192.168.2.140xcf16Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:09.364381075 CET1.0.0.1192.168.2.140xd569Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:10.391526937 CET1.1.1.1192.168.2.140xd569Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:11.426050901 CET8.8.4.4192.168.2.140xd569Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:12.455908060 CET1.1.1.1192.168.2.140xd569Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:13.487519026 CET8.8.8.8192.168.2.140xd569Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:17.331383944 CET1.0.0.1192.168.2.140xe3c3Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:18.349069118 CET8.8.4.4192.168.2.140xe3c3Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:19.380788088 CET8.8.8.8192.168.2.140xe3c3Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:20.410265923 CET1.1.1.1192.168.2.140xe3c3Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:21.429187059 CET8.8.8.8192.168.2.140xe3c3Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:25.273025990 CET1.0.0.1192.168.2.140x8a6eName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:26.302237034 CET1.1.1.1192.168.2.140x8a6eName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:27.321697950 CET8.8.4.4192.168.2.140x8a6eName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:28.353588104 CET8.8.4.4192.168.2.140x8a6eName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:29.385189056 CET8.8.8.8192.168.2.140x8a6eName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:33.257985115 CET1.0.0.1192.168.2.140x3e76Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:34.381079912 CET1.1.1.1192.168.2.140x3e76Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:35.401010990 CET8.8.4.4192.168.2.140x3e76Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:36.428443909 CET1.1.1.1192.168.2.140x3e76Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:37.446434975 CET8.8.8.8192.168.2.140x3e76Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:41.264472961 CET8.8.4.4192.168.2.140xc7f1Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:42.282987118 CET8.8.4.4192.168.2.140xc7f1Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:43.300658941 CET8.8.4.4192.168.2.140xc7f1Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:44.318350077 CET8.8.8.8192.168.2.140xc7f1Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:45.346120119 CET1.1.1.1192.168.2.140xc7f1Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:49.148919106 CET8.8.8.8192.168.2.140xa7bcName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:50.168637991 CET8.8.4.4192.168.2.140xa7bcName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:51.187069893 CET8.8.4.4192.168.2.140xa7bcName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:52.291930914 CET1.1.1.1192.168.2.140xa7bcName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:53.319309950 CET1.1.1.1192.168.2.140xa7bcName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:57.231543064 CET1.1.1.1192.168.2.140x8cfcName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:58.263295889 CET8.8.4.4192.168.2.140x8cfcName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:13:59.291363955 CET1.0.0.1192.168.2.140x8cfcName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:00.321089983 CET1.0.0.1192.168.2.140x8cfcName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:01.429162979 CET1.0.0.1192.168.2.140x8cfcName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:05.352144957 CET1.1.1.1192.168.2.140x108cName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:06.370618105 CET8.8.4.4192.168.2.140x108cName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:07.491223097 CET1.0.0.1192.168.2.140x108cName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:08.522357941 CET8.8.8.8192.168.2.140x108cName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:09.631005049 CET1.1.1.1192.168.2.140x108cName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:14.007332087 CET1.0.0.1192.168.2.140xd8d0Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:15.129048109 CET1.1.1.1192.168.2.140xd8d0Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:16.147160053 CET8.8.4.4192.168.2.140xd8d0Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:17.165260077 CET8.8.4.4192.168.2.140xd8d0Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:18.273616076 CET1.1.1.1192.168.2.140xd8d0Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:22.105479956 CET8.8.8.8192.168.2.140x6e5fName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:23.133491993 CET1.0.0.1192.168.2.140x6e5fName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:24.151262999 CET8.8.4.4192.168.2.140x6e5fName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:25.170855999 CET8.8.8.8192.168.2.140x6e5fName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:26.188925982 CET8.8.4.4192.168.2.140x6e5fName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:30.014822006 CET8.8.8.8192.168.2.140x2cc4Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:31.033310890 CET8.8.4.4192.168.2.140x2cc4Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:32.052558899 CET8.8.4.4192.168.2.140x2cc4Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:33.175935030 CET1.0.0.1192.168.2.140x2cc4Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:34.282167912 CET1.0.0.1192.168.2.140x2cc4Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:38.191618919 CET1.1.1.1192.168.2.140x8b86Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:39.211182117 CET8.8.8.8192.168.2.140x8b86Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:40.240360975 CET1.0.0.1192.168.2.140x8b86Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:41.346697092 CET1.1.1.1192.168.2.140x8b86Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:42.376658916 CET1.1.1.1192.168.2.140x8b86Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:46.191644907 CET1.0.0.1192.168.2.140xe391Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:47.211662054 CET8.8.4.4192.168.2.140xe391Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:48.239939928 CET1.0.0.1192.168.2.140xe391Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:49.271217108 CET8.8.8.8192.168.2.140xe391Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:50.300851107 CET8.8.8.8192.168.2.140xe391Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:54.120153904 CET8.8.4.4192.168.2.140xfc8dName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:55.155929089 CET8.8.8.8192.168.2.140xfc8dName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:56.278177977 CET1.1.1.1192.168.2.140xfc8dName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:57.296549082 CET8.8.4.4192.168.2.140xfc8dName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:14:58.436126947 CET1.1.1.1192.168.2.140xfc8dName error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:15:02.341361046 CET1.1.1.1192.168.2.140x6c26Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:15:03.360497952 CET8.8.4.4192.168.2.140x6c26Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:15:04.481987953 CET1.0.0.1192.168.2.140x6c26Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:15:05.500140905 CET8.8.4.4192.168.2.140x6c26Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false
                        Mar 19, 2025 08:15:06.528626919 CET8.8.4.4192.168.2.140x6c26Name error (3)dnsresolve.socialgains.cfnonenone16IN (0x0001)false

                        System Behavior

                        General

                        Start time (UTC):07:13:00
                        Start date (UTC):19/03/2025
                        Path:/tmp/sync.superh.elf
                        Arguments:/tmp/sync.superh.elf
                        File size:4139976 bytes
                        MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

                        File Activities

                        Process Activities

                        System Activities

                        Network Activities


                        General

                        Start time (UTC):07:13:00
                        Start date (UTC):19/03/2025
                        Path:/tmp/sync.superh.elf
                        Arguments:-
                        File size:4139976 bytes
                        MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

                        Process Activities

                        Network Activities


                        General

                        Start time (UTC):07:13:00
                        Start date (UTC):19/03/2025
                        Path:/tmp/sync.superh.elf
                        Arguments:-
                        File size:4139976 bytes
                        MD5 hash:8943e5f8f8c280467b4472c15ae93ba9

                        Process Activities