Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1522710
MD5:	d8029e1465ce1c847c658c71f7711bde
SHA1:	4b1a68c52bf2b22c359d6e321177789c1cc622c7
SHA256:	1c16b204dd52d4d3fab6113f20a43c29ff74db2746798b88bfd8f4214ac95cc5
Tags:	exeuser-jstrosch
Infos:

Detection

Gandcrab

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gandcrab

AI detected suspicious sample

Found Tor onion address

Machine Learning detection for dropped file

Machine Learning detection for sample

Uses nslookup.exe to query domains

AV process strings found (often used to terminate AV products)

Checks for available system drives (often done to infect USB drives)

Contains functionality to detect virtual machines (SLDT)

Contains functionality to dynamically determine API calls

Contains functionality to enumerate device drivers

Contains functionality to query CPU information (cpuid)

Creates a process in suspended mode (likely to inject code)

Detected non-DNS traffic on DNS port

Detected potential crypto function

Drops PE files

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found large amount of non-executed APIs

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: CurrentVersion Autorun Keys Modification

Too many similar processes found

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 3488 cmdline: "C:\Users\user\Desktop\file.exe" MD5: D8029E1465CE1C847C658C71F7711BDE)

nslookup.exe (PID: 5388 cmdline: nslookup nomoreransom.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 5672 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 2760 cmdline: nslookup emsisoft.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 1644 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 5464 cmdline: nslookup gandcrab.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 332 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 5488 cmdline: nslookup nomoreransom.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 1824 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 4996 cmdline: nslookup emsisoft.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 6072 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 5704 cmdline: nslookup gandcrab.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 504 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 7020 cmdline: nslookup nomoreransom.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 6500 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 6532 cmdline: nslookup emsisoft.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 4452 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 4080 cmdline: nslookup gandcrab.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 6812 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 7040 cmdline: nslookup nomoreransom.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 4200 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 1936 cmdline: nslookup emsisoft.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 2360 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 5728 cmdline: nslookup gandcrab.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 6680 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 932 cmdline: nslookup nomoreransom.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 4568 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 7048 cmdline: nslookup emsisoft.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 7140 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 4808 cmdline: nslookup gandcrab.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 5212 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 3184 cmdline: nslookup nomoreransom.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 332 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 1824 cmdline: nslookup emsisoft.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 1444 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 4528 cmdline: nslookup gandcrab.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 5924 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 6936 cmdline: nslookup nomoreransom.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 1060 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 6036 cmdline: nslookup emsisoft.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 5960 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 2616 cmdline: nslookup gandcrab.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 636 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 6120 cmdline: nslookup nomoreransom.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 1092 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 6860 cmdline: nslookup emsisoft.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 7120 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 5396 cmdline: nslookup gandcrab.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 5636 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 2548 cmdline: nslookup nomoreransom.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 1076 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 6012 cmdline: nslookup emsisoft.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 1564 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 6072 cmdline: nslookup gandcrab.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 4900 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 4248 cmdline: nslookup nomoreransom.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 504 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 4700 cmdline: nslookup emsisoft.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 5032 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 5960 cmdline: nslookup gandcrab.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 4128 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 2824 cmdline: nslookup nomoreransom.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 6812 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 1036 cmdline: nslookup emsisoft.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 6476 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 3572 cmdline: nslookup gandcrab.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 5256 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 5508 cmdline: nslookup nomoreransom.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 5324 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

nslookup.exe (PID: 5812 cmdline: nslookup emsisoft.bit dns1.soprodns.ru MD5: 9D2EB13476B126CB61B12CDD03C7DCA6)

conhost.exe (PID: 3800 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

ubrrkv.exe (PID: 5604 cmdline: "C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe" MD5: 05AE50BF6E638FAC969303A04BF8CCE6)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Gandcrab	GandCrab was a Ransomware-as-a-Service (RaaS) emerged in January 28, 2018, managed by a criminal organization known to be confident and vocal, while running a rapidly evolving ransomware campaign. Through their aggressive, albeit unusual, marketing strategies and constant recruitment of affiliates, they were able to globally distribute a high volume of their malware.In a surprising announcement on May 31, 2019, the GandCrabs operators posted on a dark web forum, announced the end of a little more than a year of ransomware operations, citing staggering profit figures. However, If theres one thing that sets these threat actors apart from other groups, it is that they are unpredictable; so there is always the possibility that they might re-surface in one form or another.	Pinchy Spider	http://asec.ahnlab.com/1145 http://www.secureworks.com/research/threat-profiles/gold-garden http://www.vmray.com/cyber-security-blog/gandcrab-ransomware-evolution-analysis/ https://asec.ahnlab.com/en/41450/ https://blog.intel471.com/2020/03/31/revil-ransomware-as-a-service-an-analysis-of-a-ransomware-affiliate-operation/	https://malpedia.caad.fkie.fraunhofer.de/details/win.gandcrab

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
file.exe	JoeSecurity_Gandcrab	Yara detected Gandcrab	Joe Security
file.exe	Gandcrab	Gandcrab Payload	kevoreilly	0xf70c:$string1: GDCB-DECRYPT.txt 0xf77a:$string1: GDCB-DECRYPT.txt 0xf460:$string3: action=result&e_files=%d&e_size=%I64u&e_time=%d&

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	Gandcrab	Gandcrab Payload	kevoreilly	0xf70c:$string1: GDCB-DECRYPT.txt 0xf77a:$string1: GDCB-DECRYPT.txt 0xf460:$string3: action=result&e_files=%d&e_size=%I64u&e_time=%d&

Memory Dumps

Source	Rule	Description	Author	Strings
Process Memory Space: file.exe PID: 3488	JoeSecurity_Gandcrab	Yara detected Gandcrab	Joe Security
Process Memory Space: ubrrkv.exe PID: 5604	JoeSecurity_Gandcrab	Yara detected Gandcrab	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
0.0.file.exe.400000.0.unpack	Gandcrab	Gandcrab Payload	kevoreilly	0xf70c:$string1: GDCB-DECRYPT.txt 0xf77a:$string1: GDCB-DECRYPT.txt 0xf460:$string3: action=result&e_files=%d&e_size=%I64u&e_time=%d&
31.2.ubrrkv.exe.400000.0.unpack	Gandcrab	Gandcrab Payload	kevoreilly	0xf70c:$string1: GDCB-DECRYPT.txt 0xf77a:$string1: GDCB-DECRYPT.txt 0xf460:$string3: action=result&e_files=%d&e_size=%I64u&e_time=%d&
31.0.ubrrkv.exe.400000.0.unpack	Gandcrab	Gandcrab Payload	kevoreilly	0xf70c:$string1: GDCB-DECRYPT.txt 0xf77a:$string1: GDCB-DECRYPT.txt 0xf460:$string3: action=result&e_files=%d&e_size=%I64u&e_time=%d&
0.2.file.exe.400000.0.unpack	Gandcrab	Gandcrab Payload	kevoreilly	0xf70c:$string1: GDCB-DECRYPT.txt 0xf77a:$string1: GDCB-DECRYPT.txt 0xf460:$string3: action=result&e_files=%d&e_size=%I64u&e_time=%d&

Sigma Signatures

System Summary

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: "C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe", EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\file.exe, ProcessId: 3488, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\vpfihnjmqea

Suricata Signatures

ET MALWARE Observed GandCrab Domain (gandcrab .bit)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-30T15:48:39.331285+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54584	1.1.1.1	53	UDP
2024-09-30T15:48:39.342455+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54585	1.1.1.1	53	UDP
2024-09-30T15:48:39.363765+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54586	1.1.1.1	53	UDP
2024-09-30T15:48:39.379641+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54587	1.1.1.1	53	UDP
2024-09-30T15:48:40.553741+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54599	1.1.1.1	53	UDP
2024-09-30T15:48:40.570428+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54600	1.1.1.1	53	UDP
2024-09-30T15:48:40.586086+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54601	1.1.1.1	53	UDP
2024-09-30T15:48:40.601178+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54602	1.1.1.1	53	UDP
2024-09-30T15:48:41.446562+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54614	1.1.1.1	53	UDP
2024-09-30T15:48:41.462282+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54615	1.1.1.1	53	UDP
2024-09-30T15:48:41.479460+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54616	1.1.1.1	53	UDP
2024-09-30T15:48:41.511836+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54617	1.1.1.1	53	UDP
2024-09-30T15:48:42.261885+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54629	1.1.1.1	53	UDP
2024-09-30T15:48:42.276929+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54630	1.1.1.1	53	UDP
2024-09-30T15:48:42.288038+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54631	1.1.1.1	53	UDP
2024-09-30T15:48:42.305063+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54632	1.1.1.1	53	UDP
2024-09-30T15:48:43.779486+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53135	1.1.1.1	53	UDP
2024-09-30T15:48:43.788996+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53136	1.1.1.1	53	UDP
2024-09-30T15:48:43.804473+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53137	1.1.1.1	53	UDP
2024-09-30T15:48:43.813812+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53138	1.1.1.1	53	UDP
2024-09-30T15:48:44.587989+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53150	1.1.1.1	53	UDP
2024-09-30T15:48:44.596830+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53151	1.1.1.1	53	UDP
2024-09-30T15:48:44.613352+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53152	1.1.1.1	53	UDP
2024-09-30T15:48:44.636481+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53153	1.1.1.1	53	UDP
2024-09-30T15:48:45.776240+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53165	1.1.1.1	53	UDP
2024-09-30T15:48:45.801623+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53166	1.1.1.1	53	UDP
2024-09-30T15:48:45.813184+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53167	1.1.1.1	53	UDP
2024-09-30T15:48:45.828849+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53168	1.1.1.1	53	UDP
2024-09-30T15:48:46.653141+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55401	1.1.1.1	53	UDP
2024-09-30T15:48:46.663772+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55402	1.1.1.1	53	UDP
2024-09-30T15:48:46.675773+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55403	1.1.1.1	53	UDP
2024-09-30T15:48:46.687800+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55404	1.1.1.1	53	UDP
2024-09-30T15:48:47.572440+0200	2026737	1	A Network Trojan was detected	192.168.2.8	50594	1.1.1.1	53	UDP
2024-09-30T15:48:47.583226+0200	2026737	1	A Network Trojan was detected	192.168.2.8	50595	1.1.1.1	53	UDP
2024-09-30T15:48:47.593879+0200	2026737	1	A Network Trojan was detected	192.168.2.8	50596	1.1.1.1	53	UDP
2024-09-30T15:48:47.614434+0200	2026737	1	A Network Trojan was detected	192.168.2.8	50597	1.1.1.1	53	UDP
2024-09-30T15:48:48.686085+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53141	1.1.1.1	53	UDP
2024-09-30T15:48:48.695243+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53142	1.1.1.1	53	UDP
2024-09-30T15:48:48.703152+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53143	1.1.1.1	53	UDP
2024-09-30T15:48:48.711328+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53144	1.1.1.1	53	UDP
2024-09-30T15:48:49.572791+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54695	1.1.1.1	53	UDP
2024-09-30T15:48:49.583433+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54696	1.1.1.1	53	UDP
2024-09-30T15:48:49.593242+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54697	1.1.1.1	53	UDP
2024-09-30T15:48:49.603752+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54698	1.1.1.1	53	UDP
2024-09-30T15:48:50.853983+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54710	1.1.1.1	53	UDP
2024-09-30T15:48:50.862191+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54711	1.1.1.1	53	UDP
2024-09-30T15:48:50.877430+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54712	1.1.1.1	53	UDP
2024-09-30T15:48:50.884906+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54713	1.1.1.1	53	UDP
2024-09-30T15:48:52.536350+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54725	1.1.1.1	53	UDP
2024-09-30T15:48:52.544877+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54726	1.1.1.1	53	UDP
2024-09-30T15:48:52.553378+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54727	1.1.1.1	53	UDP
2024-09-30T15:48:52.561536+0200	2026737	1	A Network Trojan was detected	192.168.2.8	54728	1.1.1.1	53	UDP
2024-09-30T15:48:53.658134+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56475	1.1.1.1	53	UDP
2024-09-30T15:48:53.666900+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56476	1.1.1.1	53	UDP
2024-09-30T15:48:53.674836+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56477	1.1.1.1	53	UDP
2024-09-30T15:48:53.683366+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56478	1.1.1.1	53	UDP
2024-09-30T15:48:54.855835+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56490	1.1.1.1	53	UDP
2024-09-30T15:48:54.875877+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56491	1.1.1.1	53	UDP
2024-09-30T15:48:54.883381+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56492	1.1.1.1	53	UDP
2024-09-30T15:48:54.892194+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56493	1.1.1.1	53	UDP
2024-09-30T15:48:55.761652+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56505	1.1.1.1	53	UDP
2024-09-30T15:48:55.778372+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56506	1.1.1.1	53	UDP
2024-09-30T15:48:55.802220+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56507	1.1.1.1	53	UDP
2024-09-30T15:48:55.812929+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56508	1.1.1.1	53	UDP
2024-09-30T15:48:56.513859+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56520	1.1.1.1	53	UDP
2024-09-30T15:48:56.543223+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56521	1.1.1.1	53	UDP
2024-09-30T15:48:56.551217+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56522	1.1.1.1	53	UDP
2024-09-30T15:48:56.561502+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56523	1.1.1.1	53	UDP
2024-09-30T15:48:57.187032+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56535	1.1.1.1	53	UDP
2024-09-30T15:48:57.207881+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56536	1.1.1.1	53	UDP
2024-09-30T15:48:57.219837+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56537	1.1.1.1	53	UDP
2024-09-30T15:48:57.229329+0200	2026737	1	A Network Trojan was detected	192.168.2.8	56538	1.1.1.1	53	UDP
2024-09-30T15:48:58.046542+0200	2026737	1	A Network Trojan was detected	192.168.2.8	51195	1.1.1.1	53	UDP
2024-09-30T15:48:58.056493+0200	2026737	1	A Network Trojan was detected	192.168.2.8	51196	1.1.1.1	53	UDP
2024-09-30T15:48:58.067908+0200	2026737	1	A Network Trojan was detected	192.168.2.8	51197	1.1.1.1	53	UDP
2024-09-30T15:48:58.076767+0200	2026737	1	A Network Trojan was detected	192.168.2.8	51198	1.1.1.1	53	UDP
2024-09-30T15:48:58.808735+0200	2026737	1	A Network Trojan was detected	192.168.2.8	51210	1.1.1.1	53	UDP
2024-09-30T15:48:58.824267+0200	2026737	1	A Network Trojan was detected	192.168.2.8	51211	1.1.1.1	53	UDP
2024-09-30T15:48:58.839510+0200	2026737	1	A Network Trojan was detected	192.168.2.8	51212	1.1.1.1	53	UDP
2024-09-30T15:48:58.853491+0200	2026737	1	A Network Trojan was detected	192.168.2.8	51213	1.1.1.1	53	UDP
2024-09-30T15:48:59.489585+0200	2026737	1	A Network Trojan was detected	192.168.2.8	51225	1.1.1.1	53	UDP
2024-09-30T15:48:59.498521+0200	2026737	1	A Network Trojan was detected	192.168.2.8	51226	1.1.1.1	53	UDP
2024-09-30T15:48:59.508351+0200	2026737	1	A Network Trojan was detected	192.168.2.8	51227	1.1.1.1	53	UDP
2024-09-30T15:48:59.516959+0200	2026737	1	A Network Trojan was detected	192.168.2.8	51228	1.1.1.1	53	UDP
2024-09-30T15:49:00.151398+0200	2026737	1	A Network Trojan was detected	192.168.2.8	51240	1.1.1.1	53	UDP
2024-09-30T15:49:00.159474+0200	2026737	1	A Network Trojan was detected	192.168.2.8	51241	1.1.1.1	53	UDP
2024-09-30T15:49:00.168024+0200	2026737	1	A Network Trojan was detected	192.168.2.8	51242	1.1.1.1	53	UDP
2024-09-30T15:49:00.178902+0200	2026737	1	A Network Trojan was detected	192.168.2.8	51243	1.1.1.1	53	UDP
2024-09-30T15:49:01.043905+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61725	1.1.1.1	53	UDP
2024-09-30T15:49:01.064660+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61726	1.1.1.1	53	UDP
2024-09-30T15:49:01.090015+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61727	1.1.1.1	53	UDP
2024-09-30T15:49:01.098693+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61728	1.1.1.1	53	UDP
2024-09-30T15:49:01.972475+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61740	1.1.1.1	53	UDP
2024-09-30T15:49:01.983578+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61741	1.1.1.1	53	UDP
2024-09-30T15:49:02.011014+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61743	1.1.1.1	53	UDP
2024-09-30T15:49:03.199207+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52923	1.1.1.1	53	UDP
2024-09-30T15:49:03.207389+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52924	1.1.1.1	53	UDP
2024-09-30T15:49:03.228355+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52926	1.1.1.1	53	UDP
2024-09-30T15:49:03.841722+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52938	1.1.1.1	53	UDP
2024-09-30T15:49:03.852802+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52939	1.1.1.1	53	UDP
2024-09-30T15:49:03.864663+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52940	1.1.1.1	53	UDP
2024-09-30T15:49:03.872528+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52941	1.1.1.1	53	UDP
2024-09-30T15:49:04.528124+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52953	1.1.1.1	53	UDP
2024-09-30T15:49:04.537181+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52954	1.1.1.1	53	UDP
2024-09-30T15:49:04.545740+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52955	1.1.1.1	53	UDP
2024-09-30T15:49:04.565206+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52956	1.1.1.1	53	UDP
2024-09-30T15:49:05.197095+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52969	1.1.1.1	53	UDP
2024-09-30T15:49:05.204823+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52970	1.1.1.1	53	UDP
2024-09-30T15:49:05.213720+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52971	1.1.1.1	53	UDP
2024-09-30T15:49:05.880785+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52983	1.1.1.1	53	UDP
2024-09-30T15:49:05.897952+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52984	1.1.1.1	53	UDP
2024-09-30T15:49:05.907004+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52985	1.1.1.1	53	UDP
2024-09-30T15:49:05.924306+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52986	1.1.1.1	53	UDP
2024-09-30T15:49:06.564378+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52998	1.1.1.1	53	UDP
2024-09-30T15:49:06.572980+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52999	1.1.1.1	53	UDP
2024-09-30T15:49:06.581346+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53000	1.1.1.1	53	UDP
2024-09-30T15:49:06.589718+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53001	1.1.1.1	53	UDP
2024-09-30T15:49:07.236362+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53013	1.1.1.1	53	UDP
2024-09-30T15:49:07.257106+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53014	1.1.1.1	53	UDP
2024-09-30T15:49:07.269733+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53015	1.1.1.1	53	UDP
2024-09-30T15:49:07.289432+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53016	1.1.1.1	53	UDP
2024-09-30T15:49:07.960222+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52183	1.1.1.1	53	UDP
2024-09-30T15:49:07.972166+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52184	1.1.1.1	53	UDP
2024-09-30T15:49:07.979766+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52185	1.1.1.1	53	UDP
2024-09-30T15:49:07.991905+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52186	1.1.1.1	53	UDP
2024-09-30T15:49:08.647580+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52198	1.1.1.1	53	UDP
2024-09-30T15:49:08.656028+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52199	1.1.1.1	53	UDP
2024-09-30T15:49:08.665158+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52200	1.1.1.1	53	UDP
2024-09-30T15:49:08.674711+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52201	1.1.1.1	53	UDP
2024-09-30T15:49:09.625919+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52213	1.1.1.1	53	UDP
2024-09-30T15:49:09.645888+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52214	1.1.1.1	53	UDP
2024-09-30T15:49:09.655446+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52215	1.1.1.1	53	UDP
2024-09-30T15:49:09.665982+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52216	1.1.1.1	53	UDP
2024-09-30T15:49:10.292907+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52228	1.1.1.1	53	UDP
2024-09-30T15:49:10.304341+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52229	1.1.1.1	53	UDP
2024-09-30T15:49:10.313690+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52230	1.1.1.1	53	UDP
2024-09-30T15:49:10.321718+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52231	1.1.1.1	53	UDP
2024-09-30T15:49:10.916591+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52243	1.1.1.1	53	UDP
2024-09-30T15:49:10.925035+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52244	1.1.1.1	53	UDP
2024-09-30T15:49:10.933287+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52245	1.1.1.1	53	UDP
2024-09-30T15:49:10.941077+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52246	1.1.1.1	53	UDP
2024-09-30T15:49:12.012434+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52258	1.1.1.1	53	UDP
2024-09-30T15:49:12.020576+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52259	1.1.1.1	53	UDP
2024-09-30T15:49:12.030606+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52260	1.1.1.1	53	UDP
2024-09-30T15:49:12.047391+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52261	1.1.1.1	53	UDP
2024-09-30T15:49:12.758881+0200	2026737	1	A Network Trojan was detected	192.168.2.8	50905	1.1.1.1	53	UDP
2024-09-30T15:49:12.766651+0200	2026737	1	A Network Trojan was detected	192.168.2.8	50906	1.1.1.1	53	UDP
2024-09-30T15:49:12.786674+0200	2026737	1	A Network Trojan was detected	192.168.2.8	50907	1.1.1.1	53	UDP
2024-09-30T15:49:13.419803+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62812	1.1.1.1	53	UDP
2024-09-30T15:49:13.432935+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62813	1.1.1.1	53	UDP
2024-09-30T15:49:13.441842+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62814	1.1.1.1	53	UDP
2024-09-30T15:49:13.456226+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62815	1.1.1.1	53	UDP
2024-09-30T15:49:14.043053+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62827	1.1.1.1	53	UDP
2024-09-30T15:49:14.051371+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62828	1.1.1.1	53	UDP
2024-09-30T15:49:14.067587+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62830	1.1.1.1	53	UDP
2024-09-30T15:49:14.934650+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62844	1.1.1.1	53	UDP
2024-09-30T15:49:14.948449+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62845	1.1.1.1	53	UDP
2024-09-30T15:49:15.580121+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62857	1.1.1.1	53	UDP
2024-09-30T15:49:15.588328+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62858	1.1.1.1	53	UDP
2024-09-30T15:49:15.595950+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62859	1.1.1.1	53	UDP
2024-09-30T15:49:15.604754+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62860	1.1.1.1	53	UDP
2024-09-30T15:49:16.207488+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62872	1.1.1.1	53	UDP
2024-09-30T15:49:16.215328+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62873	1.1.1.1	53	UDP
2024-09-30T15:49:16.224969+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62874	1.1.1.1	53	UDP
2024-09-30T15:49:16.235095+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62875	1.1.1.1	53	UDP
2024-09-30T15:49:16.868113+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62888	1.1.1.1	53	UDP
2024-09-30T15:49:16.875574+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62889	1.1.1.1	53	UDP
2024-09-30T15:49:16.882774+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62890	1.1.1.1	53	UDP
2024-09-30T15:49:17.549553+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62903	1.1.1.1	53	UDP
2024-09-30T15:49:17.559095+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62904	1.1.1.1	53	UDP
2024-09-30T15:49:17.567450+0200	2026737	1	A Network Trojan was detected	192.168.2.8	62905	1.1.1.1	53	UDP
2024-09-30T15:49:18.262705+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63750	1.1.1.1	53	UDP
2024-09-30T15:49:18.273814+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63751	1.1.1.1	53	UDP
2024-09-30T15:49:18.285773+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63752	1.1.1.1	53	UDP
2024-09-30T15:49:18.296285+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63753	1.1.1.1	53	UDP
2024-09-30T15:49:18.941388+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63765	1.1.1.1	53	UDP
2024-09-30T15:49:18.950901+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63766	1.1.1.1	53	UDP
2024-09-30T15:49:18.959869+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63767	1.1.1.1	53	UDP
2024-09-30T15:49:18.967819+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63768	1.1.1.1	53	UDP
2024-09-30T15:49:20.018607+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63781	1.1.1.1	53	UDP
2024-09-30T15:49:20.040424+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63782	1.1.1.1	53	UDP
2024-09-30T15:49:20.049153+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63783	1.1.1.1	53	UDP
2024-09-30T15:49:20.926598+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63796	1.1.1.1	53	UDP
2024-09-30T15:49:20.933759+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63797	1.1.1.1	53	UDP
2024-09-30T15:49:20.942497+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63798	1.1.1.1	53	UDP
2024-09-30T15:49:21.550260+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63810	1.1.1.1	53	UDP
2024-09-30T15:49:21.557995+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63811	1.1.1.1	53	UDP
2024-09-30T15:49:21.566761+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63812	1.1.1.1	53	UDP
2024-09-30T15:49:21.575505+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63813	1.1.1.1	53	UDP
2024-09-30T15:49:22.188403+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63826	1.1.1.1	53	UDP
2024-09-30T15:49:22.207372+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63828	1.1.1.1	53	UDP
2024-09-30T15:49:23.234592+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55286	1.1.1.1	53	UDP
2024-09-30T15:49:23.253689+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55288	1.1.1.1	53	UDP
2024-09-30T15:49:23.270549+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55289	1.1.1.1	53	UDP
2024-09-30T15:49:23.873334+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55301	1.1.1.1	53	UDP
2024-09-30T15:49:23.886047+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55302	1.1.1.1	53	UDP
2024-09-30T15:49:23.894740+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55303	1.1.1.1	53	UDP
2024-09-30T15:49:23.902683+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55304	1.1.1.1	53	UDP
2024-09-30T15:49:24.531338+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55316	1.1.1.1	53	UDP
2024-09-30T15:49:24.539474+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55317	1.1.1.1	53	UDP
2024-09-30T15:49:24.548159+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55318	1.1.1.1	53	UDP
2024-09-30T15:49:25.147256+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55332	1.1.1.1	53	UDP
2024-09-30T15:49:25.154693+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55333	1.1.1.1	53	UDP
2024-09-30T15:49:25.939184+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55348	1.1.1.1	53	UDP
2024-09-30T15:49:25.947792+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55349	1.1.1.1	53	UDP
2024-09-30T15:49:25.956206+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55350	1.1.1.1	53	UDP
2024-09-30T15:49:26.574118+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55362	1.1.1.1	53	UDP
2024-09-30T15:49:26.584655+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55363	1.1.1.1	53	UDP
2024-09-30T15:49:26.599831+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55365	1.1.1.1	53	UDP
2024-09-30T15:49:27.181220+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55377	1.1.1.1	53	UDP
2024-09-30T15:49:27.191905+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55378	1.1.1.1	53	UDP
2024-09-30T15:49:27.203917+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55379	1.1.1.1	53	UDP
2024-09-30T15:49:27.212809+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55380	1.1.1.1	53	UDP
2024-09-30T15:49:28.083932+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61700	1.1.1.1	53	UDP
2024-09-30T15:49:28.091104+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61701	1.1.1.1	53	UDP
2024-09-30T15:49:28.640274+0200	2026737	1	A Network Trojan was detected	192.168.2.8	49717	1.1.1.1	53	TCP
2024-09-30T15:49:29.219639+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61715	1.1.1.1	53	UDP
2024-09-30T15:49:29.227118+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61716	1.1.1.1	53	UDP
2024-09-30T15:49:29.246721+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61718	1.1.1.1	53	UDP
2024-09-30T15:49:29.877680+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61731	1.1.1.1	53	UDP
2024-09-30T15:49:29.886102+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61732	1.1.1.1	53	UDP
2024-09-30T15:49:29.893876+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61733	1.1.1.1	53	UDP
2024-09-30T15:49:30.480656+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61745	1.1.1.1	53	UDP
2024-09-30T15:49:30.491980+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61746	1.1.1.1	53	UDP
2024-09-30T15:49:30.503797+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61747	1.1.1.1	53	UDP
2024-09-30T15:49:30.512214+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61748	1.1.1.1	53	UDP
2024-09-30T15:49:31.625048+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61760	1.1.1.1	53	UDP
2024-09-30T15:49:31.632462+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61761	1.1.1.1	53	UDP
2024-09-30T15:49:31.640142+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61762	1.1.1.1	53	UDP
2024-09-30T15:49:31.648485+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61763	1.1.1.1	53	UDP
2024-09-30T15:49:32.833182+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61021	1.1.1.1	53	UDP
2024-09-30T15:49:32.876587+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61024	1.1.1.1	53	UDP
2024-09-30T15:49:33.461970+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61036	1.1.1.1	53	UDP
2024-09-30T15:49:33.469908+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61037	1.1.1.1	53	UDP
2024-09-30T15:49:33.477687+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61038	1.1.1.1	53	UDP
2024-09-30T15:49:34.013806+0200	2026737	1	A Network Trojan was detected	192.168.2.8	49720	1.1.1.1	53	TCP
2024-09-30T15:49:34.014055+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61039	1.1.1.1	53	UDP
2024-09-30T15:49:34.602401+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61051	1.1.1.1	53	UDP
2024-09-30T15:49:34.648775+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61052	1.1.1.1	53	UDP
2024-09-30T15:49:34.666094+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61054	1.1.1.1	53	UDP
2024-09-30T15:49:35.258581+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61066	1.1.1.1	53	UDP
2024-09-30T15:49:35.266193+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61067	1.1.1.1	53	UDP
2024-09-30T15:49:36.155295+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61082	1.1.1.1	53	UDP
2024-09-30T15:49:36.164961+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61083	1.1.1.1	53	UDP
2024-09-30T15:49:36.764370+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61096	1.1.1.1	53	UDP
2024-09-30T15:49:36.772200+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61097	1.1.1.1	53	UDP
2024-09-30T15:49:36.779502+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61098	1.1.1.1	53	UDP
2024-09-30T15:49:36.786918+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61099	1.1.1.1	53	UDP
2024-09-30T15:49:37.367165+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61111	1.1.1.1	53	UDP
2024-09-30T15:49:37.375424+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61112	1.1.1.1	53	UDP
2024-09-30T15:49:37.383705+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61113	1.1.1.1	53	UDP
2024-09-30T15:49:37.393458+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61114	1.1.1.1	53	UDP
2024-09-30T15:49:38.169601+0200	2026737	1	A Network Trojan was detected	192.168.2.8	57870	1.1.1.1	53	UDP
2024-09-30T15:49:38.191532+0200	2026737	1	A Network Trojan was detected	192.168.2.8	57872	1.1.1.1	53	UDP
2024-09-30T15:49:38.212281+0200	2026737	1	A Network Trojan was detected	192.168.2.8	57873	1.1.1.1	53	UDP
2024-09-30T15:49:39.041746+0200	2026737	1	A Network Trojan was detected	192.168.2.8	57885	1.1.1.1	53	UDP
2024-09-30T15:49:39.050321+0200	2026737	1	A Network Trojan was detected	192.168.2.8	57886	1.1.1.1	53	UDP
2024-09-30T15:49:39.688374+0200	2026737	1	A Network Trojan was detected	192.168.2.8	57901	1.1.1.1	53	UDP
2024-09-30T15:49:39.706109+0200	2026737	1	A Network Trojan was detected	192.168.2.8	57903	1.1.1.1	53	UDP
2024-09-30T15:49:40.289665+0200	2026737	1	A Network Trojan was detected	192.168.2.8	57915	1.1.1.1	53	UDP
2024-09-30T15:49:40.943630+0200	2026737	1	A Network Trojan was detected	192.168.2.8	57931	1.1.1.1	53	UDP
2024-09-30T15:49:40.953023+0200	2026737	1	A Network Trojan was detected	192.168.2.8	57932	1.1.1.1	53	UDP
2024-09-30T15:49:40.960509+0200	2026737	1	A Network Trojan was detected	192.168.2.8	57933	1.1.1.1	53	UDP
2024-09-30T15:49:42.084071+0200	2026737	1	A Network Trojan was detected	192.168.2.8	57946	1.1.1.1	53	UDP
2024-09-30T15:49:42.092212+0200	2026737	1	A Network Trojan was detected	192.168.2.8	57947	1.1.1.1	53	UDP
2024-09-30T15:49:42.101236+0200	2026737	1	A Network Trojan was detected	192.168.2.8	57948	1.1.1.1	53	UDP
2024-09-30T15:49:42.873021+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52392	1.1.1.1	53	UDP
2024-09-30T15:49:42.883079+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52393	1.1.1.1	53	UDP
2024-09-30T15:49:42.898560+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52395	1.1.1.1	53	UDP
2024-09-30T15:49:43.495140+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52407	1.1.1.1	53	UDP
2024-09-30T15:49:43.503542+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52408	1.1.1.1	53	UDP
2024-09-30T15:49:43.511728+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52409	1.1.1.1	53	UDP
2024-09-30T15:49:44.128601+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52423	1.1.1.1	53	UDP
2024-09-30T15:49:44.148468+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52425	1.1.1.1	53	UDP
2024-09-30T15:49:45.386355+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52454	1.1.1.1	53	UDP
2024-09-30T15:49:46.012700+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52467	1.1.1.1	53	UDP
2024-09-30T15:49:46.021162+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52468	1.1.1.1	53	UDP
2024-09-30T15:49:46.028741+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52469	1.1.1.1	53	UDP
2024-09-30T15:49:46.036854+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52470	1.1.1.1	53	UDP
2024-09-30T15:49:46.636939+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52482	1.1.1.1	53	UDP
2024-09-30T15:49:46.649506+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52483	1.1.1.1	53	UDP
2024-09-30T15:49:46.657172+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52484	1.1.1.1	53	UDP
2024-09-30T15:49:46.672723+0200	2026737	1	A Network Trojan was detected	192.168.2.8	52485	1.1.1.1	53	UDP
2024-09-30T15:49:47.682943+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63461	1.1.1.1	53	UDP
2024-09-30T15:49:47.693836+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63462	1.1.1.1	53	UDP
2024-09-30T15:49:47.713806+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63464	1.1.1.1	53	UDP
2024-09-30T15:49:48.313844+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63476	1.1.1.1	53	UDP
2024-09-30T15:49:48.960961+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63492	1.1.1.1	53	UDP
2024-09-30T15:49:49.600136+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63507	1.1.1.1	53	UDP
2024-09-30T15:49:50.525255+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63521	1.1.1.1	53	UDP
2024-09-30T15:49:50.542135+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63523	1.1.1.1	53	UDP
2024-09-30T15:49:50.551439+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63524	1.1.1.1	53	UDP
2024-09-30T15:49:51.489498+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63537	1.1.1.1	53	UDP
2024-09-30T15:49:51.507936+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63539	1.1.1.1	53	UDP
2024-09-30T15:49:52.138617+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63551	1.1.1.1	53	UDP
2024-09-30T15:49:52.158574+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63553	1.1.1.1	53	UDP
2024-09-30T15:49:53.185645+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63571	1.1.1.1	53	UDP
2024-09-30T15:49:53.193677+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63572	1.1.1.1	53	UDP
2024-09-30T15:49:53.201965+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63573	1.1.1.1	53	UDP
2024-09-30T15:49:53.795650+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63585	1.1.1.1	53	UDP
2024-09-30T15:49:53.819197+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63586	1.1.1.1	53	UDP
2024-09-30T15:49:53.828052+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63587	1.1.1.1	53	UDP
2024-09-30T15:49:53.837427+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63588	1.1.1.1	53	UDP
2024-09-30T15:49:54.493693+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63601	1.1.1.1	53	UDP
2024-09-30T15:49:54.504130+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63602	1.1.1.1	53	UDP
2024-09-30T15:49:55.497061+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63617	1.1.1.1	53	UDP
2024-09-30T15:49:56.270386+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63630	1.1.1.1	53	UDP
2024-09-30T15:49:56.280034+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63631	1.1.1.1	53	UDP
2024-09-30T15:49:56.297682+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63633	1.1.1.1	53	UDP
2024-09-30T15:49:56.929043+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63646	1.1.1.1	53	UDP
2024-09-30T15:49:56.937369+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63647	1.1.1.1	53	UDP
2024-09-30T15:49:57.559429+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63660	1.1.1.1	53	UDP
2024-09-30T15:49:57.569623+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63661	1.1.1.1	53	UDP
2024-09-30T15:49:57.586386+0200	2026737	1	A Network Trojan was detected	192.168.2.8	63663	1.1.1.1	53	UDP
2024-09-30T15:49:58.228664+0200	2026737	1	A Network Trojan was detected	192.168.2.8	49750	1.1.1.1	53	UDP
2024-09-30T15:49:58.237019+0200	2026737	1	A Network Trojan was detected	192.168.2.8	49751	1.1.1.1	53	UDP
2024-09-30T15:49:58.262274+0200	2026737	1	A Network Trojan was detected	192.168.2.8	49753	1.1.1.1	53	UDP
2024-09-30T15:49:59.147409+0200	2026737	1	A Network Trojan was detected	192.168.2.8	49766	1.1.1.1	53	UDP
2024-09-30T15:49:59.800697+0200	2026737	1	A Network Trojan was detected	192.168.2.8	49782	1.1.1.1	53	UDP
2024-09-30T15:50:00.456089+0200	2026737	1	A Network Trojan was detected	192.168.2.8	49796	1.1.1.1	53	UDP
2024-09-30T15:50:01.146877+0200	2026737	1	A Network Trojan was detected	192.168.2.8	49810	1.1.1.1	53	UDP
2024-09-30T15:50:02.056562+0200	2026737	1	A Network Trojan was detected	192.168.2.8	49825	1.1.1.1	53	UDP
2024-09-30T15:50:02.089133+0200	2026737	1	A Network Trojan was detected	192.168.2.8	49828	1.1.1.1	53	UDP
2024-09-30T15:50:04.703674+0200	2026737	1	A Network Trojan was detected	192.168.2.8	65281	1.1.1.1	53	UDP
2024-09-30T15:50:05.927893+0200	2026737	1	A Network Trojan was detected	192.168.2.8	65310	1.1.1.1	53	UDP
2024-09-30T15:50:06.549974+0200	2026737	1	A Network Trojan was detected	192.168.2.8	65325	1.1.1.1	53	UDP
2024-09-30T15:50:06.559438+0200	2026737	1	A Network Trojan was detected	192.168.2.8	65326	1.1.1.1	53	UDP
2024-09-30T15:50:07.184305+0200	2026737	1	A Network Trojan was detected	192.168.2.8	65341	1.1.1.1	53	UDP
2024-09-30T15:50:07.983791+0200	2026737	1	A Network Trojan was detected	192.168.2.8	65344	1.1.1.1	53	UDP
2024-09-30T15:50:10.503335+0200	2026737	1	A Network Trojan was detected	192.168.2.8	65376	1.1.1.1	53	UDP
2024-09-30T15:50:11.660372+0200	2026737	1	A Network Trojan was detected	192.168.2.8	65405	1.1.1.1	53	UDP
2024-09-30T15:50:11.668993+0200	2026737	1	A Network Trojan was detected	192.168.2.8	65406	1.1.1.1	53	UDP
2024-09-30T15:50:11.677403+0200	2026737	1	A Network Trojan was detected	192.168.2.8	65407	1.1.1.1	53	UDP
2024-09-30T15:50:12.279931+0200	2026737	1	A Network Trojan was detected	192.168.2.8	65421	1.1.1.1	53	UDP
2024-09-30T15:50:17.820554+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55284	1.1.1.1	53	UDP
2024-09-30T15:50:18.941856+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55313	1.1.1.1	53	UDP
2024-09-30T15:50:22.525580+0200	2026737	1	A Network Trojan was detected	192.168.2.8	55403	1.1.1.1	53	UDP
2024-09-30T15:50:27.580875+0200	2026737	1	A Network Trojan was detected	192.168.2.8	61918	1.1.1.1	53	UDP
2024-09-30T15:50:31.438340+0200	2026737	1	A Network Trojan was detected	192.168.2.8	53582	1.1.1.1	53	UDP
2024-09-30T15:50:34.181758+0200	2026737	1	A Network Trojan was detected	192.168.2.8	59056	1.1.1.1	53	UDP

ETPRO MALWARE GandCrab DNS Lookup 1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-30T15:48:38.760971+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54574	1.1.1.1	53	UDP
2024-09-30T15:48:38.777505+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54575	1.1.1.1	53	UDP
2024-09-30T15:48:38.799469+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54576	1.1.1.1	53	UDP
2024-09-30T15:48:38.810993+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54577	1.1.1.1	53	UDP
2024-09-30T15:48:39.607213+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54589	1.1.1.1	53	UDP
2024-09-30T15:48:39.618695+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54590	1.1.1.1	53	UDP
2024-09-30T15:48:39.639480+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54591	1.1.1.1	53	UDP
2024-09-30T15:48:39.648745+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54592	1.1.1.1	53	UDP
2024-09-30T15:48:40.871580+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54604	1.1.1.1	53	UDP
2024-09-30T15:48:40.887546+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54605	1.1.1.1	53	UDP
2024-09-30T15:48:40.899023+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54606	1.1.1.1	53	UDP
2024-09-30T15:48:40.910449+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54607	1.1.1.1	53	UDP
2024-09-30T15:48:41.741938+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54619	1.1.1.1	53	UDP
2024-09-30T15:48:41.758805+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54620	1.1.1.1	53	UDP
2024-09-30T15:48:41.767193+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54621	1.1.1.1	53	UDP
2024-09-30T15:48:41.775544+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54622	1.1.1.1	53	UDP
2024-09-30T15:48:42.528926+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54634	1.1.1.1	53	UDP
2024-09-30T15:48:42.545504+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54635	1.1.1.1	53	UDP
2024-09-30T15:48:42.552912+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54636	1.1.1.1	53	UDP
2024-09-30T15:48:42.569207+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54637	1.1.1.1	53	UDP
2024-09-30T15:48:44.045820+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53140	1.1.1.1	53	UDP
2024-09-30T15:48:44.070385+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53141	1.1.1.1	53	UDP
2024-09-30T15:48:44.079099+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53142	1.1.1.1	53	UDP
2024-09-30T15:48:44.088745+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53143	1.1.1.1	53	UDP
2024-09-30T15:48:44.869494+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53155	1.1.1.1	53	UDP
2024-09-30T15:48:44.878020+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53156	1.1.1.1	53	UDP
2024-09-30T15:48:44.890748+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53157	1.1.1.1	53	UDP
2024-09-30T15:48:44.898598+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53158	1.1.1.1	53	UDP
2024-09-30T15:48:46.132887+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53170	1.1.1.1	53	UDP
2024-09-30T15:48:46.149927+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53171	1.1.1.1	53	UDP
2024-09-30T15:48:46.160572+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53172	1.1.1.1	53	UDP
2024-09-30T15:48:46.168350+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53173	1.1.1.1	53	UDP
2024-09-30T15:48:46.929881+0200	2829498	1	A Network Trojan was detected	192.168.2.8	50373	1.1.1.1	53	UDP
2024-09-30T15:48:46.941805+0200	2829498	1	A Network Trojan was detected	192.168.2.8	50374	1.1.1.1	53	UDP
2024-09-30T15:48:46.953844+0200	2829498	1	A Network Trojan was detected	192.168.2.8	50375	1.1.1.1	53	UDP
2024-09-30T15:48:46.964741+0200	2829498	1	A Network Trojan was detected	192.168.2.8	50376	1.1.1.1	53	UDP
2024-09-30T15:48:48.016885+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53131	1.1.1.1	53	UDP
2024-09-30T15:48:48.026715+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53132	1.1.1.1	53	UDP
2024-09-30T15:48:48.035604+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53133	1.1.1.1	53	UDP
2024-09-30T15:48:48.043510+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53134	1.1.1.1	53	UDP
2024-09-30T15:48:48.986549+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54685	1.1.1.1	53	UDP
2024-09-30T15:48:48.994474+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54686	1.1.1.1	53	UDP
2024-09-30T15:48:49.003164+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54687	1.1.1.1	53	UDP
2024-09-30T15:48:49.019772+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54688	1.1.1.1	53	UDP
2024-09-30T15:48:50.015824+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54700	1.1.1.1	53	UDP
2024-09-30T15:48:50.024549+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54701	1.1.1.1	53	UDP
2024-09-30T15:48:50.033472+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54702	1.1.1.1	53	UDP
2024-09-30T15:48:50.057625+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54703	1.1.1.1	53	UDP
2024-09-30T15:48:52.061925+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54715	1.1.1.1	53	UDP
2024-09-30T15:48:52.079439+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54716	1.1.1.1	53	UDP
2024-09-30T15:48:52.088626+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54717	1.1.1.1	53	UDP
2024-09-30T15:48:52.108655+0200	2829498	1	A Network Trojan was detected	192.168.2.8	54718	1.1.1.1	53	UDP
2024-09-30T15:48:53.182488+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56465	1.1.1.1	53	UDP
2024-09-30T15:48:53.203779+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56466	1.1.1.1	53	UDP
2024-09-30T15:48:53.213758+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56467	1.1.1.1	53	UDP
2024-09-30T15:48:53.221533+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56468	1.1.1.1	53	UDP
2024-09-30T15:48:53.872062+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56480	1.1.1.1	53	UDP
2024-09-30T15:48:53.880002+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56481	1.1.1.1	53	UDP
2024-09-30T15:48:53.897341+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56482	1.1.1.1	53	UDP
2024-09-30T15:48:53.905698+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56483	1.1.1.1	53	UDP
2024-09-30T15:48:55.071971+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56495	1.1.1.1	53	UDP
2024-09-30T15:48:55.095299+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56496	1.1.1.1	53	UDP
2024-09-30T15:48:55.120239+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56497	1.1.1.1	53	UDP
2024-09-30T15:48:55.130806+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56498	1.1.1.1	53	UDP
2024-09-30T15:48:56.011748+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56510	1.1.1.1	53	UDP
2024-09-30T15:48:56.026908+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56511	1.1.1.1	53	UDP
2024-09-30T15:48:56.042944+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56512	1.1.1.1	53	UDP
2024-09-30T15:48:56.052328+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56513	1.1.1.1	53	UDP
2024-09-30T15:48:56.746593+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56525	1.1.1.1	53	UDP
2024-09-30T15:48:56.754612+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56526	1.1.1.1	53	UDP
2024-09-30T15:48:56.767140+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56527	1.1.1.1	53	UDP
2024-09-30T15:48:56.776751+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56528	1.1.1.1	53	UDP
2024-09-30T15:48:57.423702+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56540	1.1.1.1	53	UDP
2024-09-30T15:48:57.434138+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56541	1.1.1.1	53	UDP
2024-09-30T15:48:57.441926+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56542	1.1.1.1	53	UDP
2024-09-30T15:48:57.450076+0200	2829498	1	A Network Trojan was detected	192.168.2.8	56543	1.1.1.1	53	UDP
2024-09-30T15:48:58.297423+0200	2829498	1	A Network Trojan was detected	192.168.2.8	51200	1.1.1.1	53	UDP
2024-09-30T15:48:58.318876+0200	2829498	1	A Network Trojan was detected	192.168.2.8	51201	1.1.1.1	53	UDP
2024-09-30T15:48:58.334110+0200	2829498	1	A Network Trojan was detected	192.168.2.8	51202	1.1.1.1	53	UDP
2024-09-30T15:48:58.341916+0200	2829498	1	A Network Trojan was detected	192.168.2.8	51203	1.1.1.1	53	UDP
2024-09-30T15:48:59.032321+0200	2829498	1	A Network Trojan was detected	192.168.2.8	51215	1.1.1.1	53	UDP
2024-09-30T15:48:59.042273+0200	2829498	1	A Network Trojan was detected	192.168.2.8	51216	1.1.1.1	53	UDP
2024-09-30T15:48:59.052708+0200	2829498	1	A Network Trojan was detected	192.168.2.8	51217	1.1.1.1	53	UDP
2024-09-30T15:48:59.060981+0200	2829498	1	A Network Trojan was detected	192.168.2.8	51218	1.1.1.1	53	UDP
2024-09-30T15:48:59.706432+0200	2829498	1	A Network Trojan was detected	192.168.2.8	51230	1.1.1.1	53	UDP
2024-09-30T15:48:59.722939+0200	2829498	1	A Network Trojan was detected	192.168.2.8	51231	1.1.1.1	53	UDP
2024-09-30T15:48:59.735623+0200	2829498	1	A Network Trojan was detected	192.168.2.8	51232	1.1.1.1	53	UDP
2024-09-30T15:48:59.743722+0200	2829498	1	A Network Trojan was detected	192.168.2.8	51233	1.1.1.1	53	UDP
2024-09-30T15:49:00.568133+0200	2829498	1	A Network Trojan was detected	192.168.2.8	51245	1.1.1.1	53	UDP
2024-09-30T15:49:00.576185+0200	2829498	1	A Network Trojan was detected	192.168.2.8	51246	1.1.1.1	53	UDP
2024-09-30T15:49:00.591376+0200	2829498	1	A Network Trojan was detected	192.168.2.8	51247	1.1.1.1	53	UDP
2024-09-30T15:49:00.602014+0200	2829498	1	A Network Trojan was detected	192.168.2.8	51248	1.1.1.1	53	UDP
2024-09-30T15:49:01.295123+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61730	1.1.1.1	53	UDP
2024-09-30T15:49:01.303600+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61731	1.1.1.1	53	UDP
2024-09-30T15:49:01.314474+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61732	1.1.1.1	53	UDP
2024-09-30T15:49:01.324850+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61733	1.1.1.1	53	UDP
2024-09-30T15:49:02.576426+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61745	1.1.1.1	53	UDP
2024-09-30T15:49:02.593975+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61746	1.1.1.1	53	UDP
2024-09-30T15:49:02.611274+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61747	1.1.1.1	53	UDP
2024-09-30T15:49:02.626752+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61748	1.1.1.1	53	UDP
2024-09-30T15:49:03.414071+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52928	1.1.1.1	53	UDP
2024-09-30T15:49:03.422327+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52929	1.1.1.1	53	UDP
2024-09-30T15:49:03.432588+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52930	1.1.1.1	53	UDP
2024-09-30T15:49:03.440665+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52931	1.1.1.1	53	UDP
2024-09-30T15:49:04.059784+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52943	1.1.1.1	53	UDP
2024-09-30T15:49:04.070411+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52944	1.1.1.1	53	UDP
2024-09-30T15:49:04.082021+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52945	1.1.1.1	53	UDP
2024-09-30T15:49:04.093806+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52946	1.1.1.1	53	UDP
2024-09-30T15:49:04.760625+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52958	1.1.1.1	53	UDP
2024-09-30T15:49:04.772470+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52959	1.1.1.1	53	UDP
2024-09-30T15:49:04.788147+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52960	1.1.1.1	53	UDP
2024-09-30T15:49:04.803402+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52961	1.1.1.1	53	UDP
2024-09-30T15:49:05.424345+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52973	1.1.1.1	53	UDP
2024-09-30T15:49:05.432584+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52974	1.1.1.1	53	UDP
2024-09-30T15:49:05.441404+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52975	1.1.1.1	53	UDP
2024-09-30T15:49:05.459922+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52976	1.1.1.1	53	UDP
2024-09-30T15:49:06.106237+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52988	1.1.1.1	53	UDP
2024-09-30T15:49:06.113782+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52989	1.1.1.1	53	UDP
2024-09-30T15:49:06.789836+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53004	1.1.1.1	53	UDP
2024-09-30T15:49:06.801816+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53005	1.1.1.1	53	UDP
2024-09-30T15:49:06.813810+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53006	1.1.1.1	53	UDP
2024-09-30T15:49:07.483732+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53018	1.1.1.1	53	UDP
2024-09-30T15:49:07.492153+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53019	1.1.1.1	53	UDP
2024-09-30T15:49:07.501811+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53020	1.1.1.1	53	UDP
2024-09-30T15:49:07.509987+0200	2829498	1	A Network Trojan was detected	192.168.2.8	53021	1.1.1.1	53	UDP
2024-09-30T15:49:08.188056+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52188	1.1.1.1	53	UDP
2024-09-30T15:49:08.199466+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52189	1.1.1.1	53	UDP
2024-09-30T15:49:08.207173+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52190	1.1.1.1	53	UDP
2024-09-30T15:49:08.215861+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52191	1.1.1.1	53	UDP
2024-09-30T15:49:09.181552+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52203	1.1.1.1	53	UDP
2024-09-30T15:49:09.192139+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52204	1.1.1.1	53	UDP
2024-09-30T15:49:09.200015+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52205	1.1.1.1	53	UDP
2024-09-30T15:49:09.208223+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52206	1.1.1.1	53	UDP
2024-09-30T15:49:09.854807+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52218	1.1.1.1	53	UDP
2024-09-30T15:49:09.892623+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52220	1.1.1.1	53	UDP
2024-09-30T15:49:09.902433+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52221	1.1.1.1	53	UDP
2024-09-30T15:49:10.522748+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52234	1.1.1.1	53	UDP
2024-09-30T15:49:10.530014+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52235	1.1.1.1	53	UDP
2024-09-30T15:49:10.538068+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52236	1.1.1.1	53	UDP
2024-09-30T15:49:11.121250+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52248	1.1.1.1	53	UDP
2024-09-30T15:49:11.128840+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52249	1.1.1.1	53	UDP
2024-09-30T15:49:11.137045+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52250	1.1.1.1	53	UDP
2024-09-30T15:49:11.145002+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52251	1.1.1.1	53	UDP
2024-09-30T15:49:12.227575+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52263	1.1.1.1	53	UDP
2024-09-30T15:49:12.235395+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52264	1.1.1.1	53	UDP
2024-09-30T15:49:12.243745+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52265	1.1.1.1	53	UDP
2024-09-30T15:49:12.250887+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52266	1.1.1.1	53	UDP
2024-09-30T15:49:12.989113+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62803	1.1.1.1	53	UDP
2024-09-30T15:49:12.998203+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62804	1.1.1.1	53	UDP
2024-09-30T15:49:13.014718+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62805	1.1.1.1	53	UDP
2024-09-30T15:49:13.633748+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62817	1.1.1.1	53	UDP
2024-09-30T15:49:13.648358+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62818	1.1.1.1	53	UDP
2024-09-30T15:49:13.656536+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62819	1.1.1.1	53	UDP
2024-09-30T15:49:13.664317+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62820	1.1.1.1	53	UDP
2024-09-30T15:49:14.289079+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62832	1.1.1.1	53	UDP
2024-09-30T15:49:14.297273+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62833	1.1.1.1	53	UDP
2024-09-30T15:49:14.304882+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62834	1.1.1.1	53	UDP
2024-09-30T15:49:14.312886+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62835	1.1.1.1	53	UDP
2024-09-30T15:49:15.141972+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62847	1.1.1.1	53	UDP
2024-09-30T15:49:15.152792+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62848	1.1.1.1	53	UDP
2024-09-30T15:49:15.163331+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62849	1.1.1.1	53	UDP
2024-09-30T15:49:15.172054+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62850	1.1.1.1	53	UDP
2024-09-30T15:49:15.777295+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62862	1.1.1.1	53	UDP
2024-09-30T15:49:15.785701+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62863	1.1.1.1	53	UDP
2024-09-30T15:49:15.801682+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62864	1.1.1.1	53	UDP
2024-09-30T15:49:15.811607+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62865	1.1.1.1	53	UDP
2024-09-30T15:49:16.414951+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62877	1.1.1.1	53	UDP
2024-09-30T15:49:16.423080+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62878	1.1.1.1	53	UDP
2024-09-30T15:49:16.433456+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62879	1.1.1.1	53	UDP
2024-09-30T15:49:16.441167+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62880	1.1.1.1	53	UDP
2024-09-30T15:49:17.073294+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62892	1.1.1.1	53	UDP
2024-09-30T15:49:17.090295+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62894	1.1.1.1	53	UDP
2024-09-30T15:49:17.107079+0200	2829498	1	A Network Trojan was detected	192.168.2.8	62895	1.1.1.1	53	UDP
2024-09-30T15:49:17.803977+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63740	1.1.1.1	53	UDP
2024-09-30T15:49:17.812716+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63741	1.1.1.1	53	UDP
2024-09-30T15:49:17.821246+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63742	1.1.1.1	53	UDP
2024-09-30T15:49:17.829564+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63743	1.1.1.1	53	UDP
2024-09-30T15:49:18.522614+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63755	1.1.1.1	53	UDP
2024-09-30T15:49:18.538559+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63756	1.1.1.1	53	UDP
2024-09-30T15:49:18.547188+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63757	1.1.1.1	53	UDP
2024-09-30T15:49:18.555647+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63758	1.1.1.1	53	UDP
2024-09-30T15:49:19.148305+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63770	1.1.1.1	53	UDP
2024-09-30T15:49:19.155979+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63771	1.1.1.1	53	UDP
2024-09-30T15:49:19.164426+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63772	1.1.1.1	53	UDP
2024-09-30T15:49:19.172403+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63773	1.1.1.1	53	UDP
2024-09-30T15:49:20.236986+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63785	1.1.1.1	53	UDP
2024-09-30T15:49:20.253612+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63786	1.1.1.1	53	UDP
2024-09-30T15:49:20.262400+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63787	1.1.1.1	53	UDP
2024-09-30T15:49:21.130543+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63801	1.1.1.1	53	UDP
2024-09-30T15:49:21.759263+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63815	1.1.1.1	53	UDP
2024-09-30T15:49:21.783470+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63818	1.1.1.1	53	UDP
2024-09-30T15:49:22.412277+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63830	1.1.1.1	53	UDP
2024-09-30T15:49:22.419381+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63831	1.1.1.1	53	UDP
2024-09-30T15:49:22.427025+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63832	1.1.1.1	53	UDP
2024-09-30T15:49:22.434902+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63833	1.1.1.1	53	UDP
2024-09-30T15:49:23.457366+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55291	1.1.1.1	53	UDP
2024-09-30T15:49:23.466226+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55292	1.1.1.1	53	UDP
2024-09-30T15:49:23.476272+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55293	1.1.1.1	53	UDP
2024-09-30T15:49:24.097551+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55307	1.1.1.1	53	UDP
2024-09-30T15:49:24.117102+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55309	1.1.1.1	53	UDP
2024-09-30T15:49:24.741391+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55321	1.1.1.1	53	UDP
2024-09-30T15:49:24.759010+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55323	1.1.1.1	53	UDP
2024-09-30T15:49:24.767283+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55324	1.1.1.1	53	UDP
2024-09-30T15:49:25.350198+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55337	1.1.1.1	53	UDP
2024-09-30T15:49:25.358591+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55338	1.1.1.1	53	UDP
2024-09-30T15:49:25.367932+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55339	1.1.1.1	53	UDP
2024-09-30T15:49:25.375889+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55340	1.1.1.1	53	UDP
2024-09-30T15:49:26.134727+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55352	1.1.1.1	53	UDP
2024-09-30T15:49:26.142552+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55353	1.1.1.1	53	UDP
2024-09-30T15:49:26.151048+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55354	1.1.1.1	53	UDP
2024-09-30T15:49:26.777336+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55367	1.1.1.1	53	UDP
2024-09-30T15:49:26.802766+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55370	1.1.1.1	53	UDP
2024-09-30T15:49:27.411317+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55383	1.1.1.1	53	UDP
2024-09-30T15:49:27.419870+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55384	1.1.1.1	53	UDP
2024-09-30T15:49:27.427693+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55385	1.1.1.1	53	UDP
2024-09-30T15:49:28.808019+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61705	1.1.1.1	53	UDP
2024-09-30T15:49:28.817040+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61706	1.1.1.1	53	UDP
2024-09-30T15:49:28.824471+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61707	1.1.1.1	53	UDP
2024-09-30T15:49:28.831993+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61708	1.1.1.1	53	UDP
2024-09-30T15:49:29.455561+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61723	1.1.1.1	53	UDP
2024-09-30T15:49:30.087753+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61737	1.1.1.1	53	UDP
2024-09-30T15:49:30.095561+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61738	1.1.1.1	53	UDP
2024-09-30T15:49:30.717648+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61750	1.1.1.1	53	UDP
2024-09-30T15:49:30.726414+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61751	1.1.1.1	53	UDP
2024-09-30T15:49:30.742218+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61752	1.1.1.1	53	UDP
2024-09-30T15:49:30.750407+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61753	1.1.1.1	53	UDP
2024-09-30T15:49:31.835477+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61765	1.1.1.1	53	UDP
2024-09-30T15:49:32.307901+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61767	1.1.1.1	53	UDP
2024-09-30T15:49:32.316061+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61768	1.1.1.1	53	UDP
2024-09-30T15:49:33.072266+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61027	1.1.1.1	53	UDP
2024-09-30T15:49:33.080098+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61028	1.1.1.1	53	UDP
2024-09-30T15:49:33.087180+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61029	1.1.1.1	53	UDP
2024-09-30T15:49:34.206665+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61042	1.1.1.1	53	UDP
2024-09-30T15:49:34.214331+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61043	1.1.1.1	53	UDP
2024-09-30T15:49:34.222086+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61044	1.1.1.1	53	UDP
2024-09-30T15:49:34.853621+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61056	1.1.1.1	53	UDP
2024-09-30T15:49:34.879597+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61059	1.1.1.1	53	UDP
2024-09-30T15:49:35.471975+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61071	1.1.1.1	53	UDP
2024-09-30T15:49:35.487866+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61073	1.1.1.1	53	UDP
2024-09-30T15:49:35.496684+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61074	1.1.1.1	53	UDP
2024-09-30T15:49:36.358573+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61087	1.1.1.1	53	UDP
2024-09-30T15:49:36.371329+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61088	1.1.1.1	53	UDP
2024-09-30T15:49:36.962585+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61101	1.1.1.1	53	UDP
2024-09-30T15:49:36.970662+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61102	1.1.1.1	53	UDP
2024-09-30T15:49:37.582518+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61116	1.1.1.1	53	UDP
2024-09-30T15:49:37.599352+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61118	1.1.1.1	53	UDP
2024-09-30T15:49:37.607851+0200	2829498	1	A Network Trojan was detected	192.168.2.8	61119	1.1.1.1	53	UDP
2024-09-30T15:49:38.404867+0200	2829498	1	A Network Trojan was detected	192.168.2.8	57875	1.1.1.1	53	UDP
2024-09-30T15:49:38.466325+0200	2829498	1	A Network Trojan was detected	192.168.2.8	57876	1.1.1.1	53	UDP
2024-09-30T15:49:38.480500+0200	2829498	1	A Network Trojan was detected	192.168.2.8	57877	1.1.1.1	53	UDP
2024-09-30T15:49:39.265955+0200	2829498	1	A Network Trojan was detected	192.168.2.8	57892	1.1.1.1	53	UDP
2024-09-30T15:49:39.273501+0200	2829498	1	A Network Trojan was detected	192.168.2.8	57893	1.1.1.1	53	UDP
2024-09-30T15:49:39.885270+0200	2829498	1	A Network Trojan was detected	192.168.2.8	57905	1.1.1.1	53	UDP
2024-09-30T15:49:39.893573+0200	2829498	1	A Network Trojan was detected	192.168.2.8	57906	1.1.1.1	53	UDP
2024-09-30T15:49:39.903055+0200	2829498	1	A Network Trojan was detected	192.168.2.8	57907	1.1.1.1	53	UDP
2024-09-30T15:49:39.910643+0200	2829498	1	A Network Trojan was detected	192.168.2.8	57908	1.1.1.1	53	UDP
2024-09-30T15:49:40.496194+0200	2829498	1	A Network Trojan was detected	192.168.2.8	57920	1.1.1.1	53	UDP
2024-09-30T15:49:40.525386+0200	2829498	1	A Network Trojan was detected	192.168.2.8	57923	1.1.1.1	53	UDP
2024-09-30T15:49:41.660545+0200	2829498	1	A Network Trojan was detected	192.168.2.8	57936	1.1.1.1	53	UDP
2024-09-30T15:49:41.669889+0200	2829498	1	A Network Trojan was detected	192.168.2.8	57937	1.1.1.1	53	UDP
2024-09-30T15:49:42.273885+0200	2829498	1	A Network Trojan was detected	192.168.2.8	57950	1.1.1.1	53	UDP
2024-09-30T15:49:42.290932+0200	2829498	1	A Network Trojan was detected	192.168.2.8	57952	1.1.1.1	53	UDP
2024-09-30T15:49:43.073523+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52397	1.1.1.1	53	UDP
2024-09-30T15:49:43.082056+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52398	1.1.1.1	53	UDP
2024-09-30T15:49:43.704092+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52412	1.1.1.1	53	UDP
2024-09-30T15:49:43.712444+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52413	1.1.1.1	53	UDP
2024-09-30T15:49:43.720664+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52414	1.1.1.1	53	UDP
2024-09-30T15:49:44.322827+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52427	1.1.1.1	53	UDP
2024-09-30T15:49:44.331071+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52428	1.1.1.1	53	UDP
2024-09-30T15:49:44.939470+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52442	1.1.1.1	53	UDP
2024-09-30T15:49:44.956817+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52444	1.1.1.1	53	UDP
2024-09-30T15:49:44.964335+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52445	1.1.1.1	53	UDP
2024-09-30T15:49:45.615192+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52460	1.1.1.1	53	UDP
2024-09-30T15:49:46.226845+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52472	1.1.1.1	53	UDP
2024-09-30T15:49:47.213113+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52488	1.1.1.1	53	UDP
2024-09-30T15:49:47.233957+0200	2829498	1	A Network Trojan was detected	192.168.2.8	52490	1.1.1.1	53	UDP
2024-09-30T15:49:47.890062+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63466	1.1.1.1	53	UDP
2024-09-30T15:49:48.528116+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63481	1.1.1.1	53	UDP
2024-09-30T15:49:48.537898+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63482	1.1.1.1	53	UDP
2024-09-30T15:49:48.555866+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63484	1.1.1.1	53	UDP
2024-09-30T15:49:49.173342+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63497	1.1.1.1	53	UDP
2024-09-30T15:49:49.180766+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63498	1.1.1.1	53	UDP
2024-09-30T15:49:50.113733+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63514	1.1.1.1	53	UDP
2024-09-30T15:49:51.690100+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63541	1.1.1.1	53	UDP
2024-09-30T15:49:51.714050+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63543	1.1.1.1	53	UDP
2024-09-30T15:49:52.373830+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63557	1.1.1.1	53	UDP
2024-09-30T15:49:52.390071+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63558	1.1.1.1	53	UDP
2024-09-30T15:49:52.400182+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63559	1.1.1.1	53	UDP
2024-09-30T15:49:53.387479+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63575	1.1.1.1	53	UDP
2024-09-30T15:49:53.399860+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63576	1.1.1.1	53	UDP
2024-09-30T15:49:53.407466+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63577	1.1.1.1	53	UDP
2024-09-30T15:49:53.415524+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63578	1.1.1.1	53	UDP
2024-09-30T15:49:54.043426+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63593	1.1.1.1	53	UDP
2024-09-30T15:49:55.055772+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63606	1.1.1.1	53	UDP
2024-09-30T15:49:55.855895+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63622	1.1.1.1	53	UDP
2024-09-30T15:49:55.864321+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63623	1.1.1.1	53	UDP
2024-09-30T15:49:56.486599+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63635	1.1.1.1	53	UDP
2024-09-30T15:49:56.496545+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63636	1.1.1.1	53	UDP
2024-09-30T15:49:56.513291+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63638	1.1.1.1	53	UDP
2024-09-30T15:49:57.121200+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63650	1.1.1.1	53	UDP
2024-09-30T15:49:57.129569+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63651	1.1.1.1	53	UDP
2024-09-30T15:49:57.144587+0200	2829498	1	A Network Trojan was detected	192.168.2.8	63653	1.1.1.1	53	UDP
2024-09-30T15:49:57.819588+0200	2829498	1	A Network Trojan was detected	192.168.2.8	49741	1.1.1.1	53	UDP
2024-09-30T15:49:57.828896+0200	2829498	1	A Network Trojan was detected	192.168.2.8	49742	1.1.1.1	53	UDP
2024-09-30T15:49:59.367252+0200	2829498	1	A Network Trojan was detected	192.168.2.8	49771	1.1.1.1	53	UDP
2024-09-30T15:50:00.675913+0200	2829498	1	A Network Trojan was detected	192.168.2.8	49802	1.1.1.1	53	UDP
2024-09-30T15:50:00.684154+0200	2829498	1	A Network Trojan was detected	192.168.2.8	49803	1.1.1.1	53	UDP
2024-09-30T15:50:01.634608+0200	2829498	1	A Network Trojan was detected	192.168.2.8	49815	1.1.1.1	53	UDP
2024-09-30T15:50:01.651775+0200	2829498	1	A Network Trojan was detected	192.168.2.8	49817	1.1.1.1	53	UDP
2024-09-30T15:50:02.296365+0200	2829498	1	A Network Trojan was detected	192.168.2.8	49833	1.1.1.1	53	UDP
2024-09-30T15:50:05.510579+0200	2829498	1	A Network Trojan was detected	192.168.2.8	65301	1.1.1.1	53	UDP
2024-09-30T15:50:07.397198+0200	2829498	1	A Network Trojan was detected	192.168.2.8	65344	1.1.1.1	53	UDP
2024-09-30T15:50:09.515256+0200	2829498	1	A Network Trojan was detected	192.168.2.8	65349	1.1.1.1	53	UDP
2024-09-30T15:50:09.526161+0200	2829498	1	A Network Trojan was detected	192.168.2.8	65350	1.1.1.1	53	UDP
2024-09-30T15:50:11.274459+0200	2829498	1	A Network Trojan was detected	192.168.2.8	65394	1.1.1.1	53	UDP
2024-09-30T15:50:13.122780+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55567	1.1.1.1	53	UDP
2024-09-30T15:50:13.134072+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55568	1.1.1.1	53	UDP
2024-09-30T15:50:13.728005+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55585	1.1.1.1	53	UDP
2024-09-30T15:50:20.406251+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55348	1.1.1.1	53	UDP
2024-09-30T15:50:21.586030+0200	2829498	1	A Network Trojan was detected	192.168.2.8	55378	1.1.1.1	53	UDP

ETPRO MALWARE GandCrab DNS Lookup 3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-30T15:48:39.057855+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54579	1.1.1.1	53	UDP
2024-09-30T15:48:39.074833+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54580	1.1.1.1	53	UDP
2024-09-30T15:48:39.091227+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54581	1.1.1.1	53	UDP
2024-09-30T15:48:39.100923+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54582	1.1.1.1	53	UDP
2024-09-30T15:48:39.885896+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54594	1.1.1.1	53	UDP
2024-09-30T15:48:39.897427+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54595	1.1.1.1	53	UDP
2024-09-30T15:48:39.906975+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54596	1.1.1.1	53	UDP
2024-09-30T15:48:39.916876+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54597	1.1.1.1	53	UDP
2024-09-30T15:48:41.175173+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54609	1.1.1.1	53	UDP
2024-09-30T15:48:41.191706+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54610	1.1.1.1	53	UDP
2024-09-30T15:48:41.200615+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54611	1.1.1.1	53	UDP
2024-09-30T15:48:41.216787+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54612	1.1.1.1	53	UDP
2024-09-30T15:48:41.995136+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54624	1.1.1.1	53	UDP
2024-09-30T15:48:42.005580+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54625	1.1.1.1	53	UDP
2024-09-30T15:48:42.024179+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54626	1.1.1.1	53	UDP
2024-09-30T15:48:42.033013+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54627	1.1.1.1	53	UDP
2024-09-30T15:48:43.399993+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53130	1.1.1.1	53	UDP
2024-09-30T15:48:43.419559+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53131	1.1.1.1	53	UDP
2024-09-30T15:48:43.429551+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53132	1.1.1.1	53	UDP
2024-09-30T15:48:43.439265+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53133	1.1.1.1	53	UDP
2024-09-30T15:48:44.326871+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53145	1.1.1.1	53	UDP
2024-09-30T15:48:44.336758+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53146	1.1.1.1	53	UDP
2024-09-30T15:48:44.353557+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53147	1.1.1.1	53	UDP
2024-09-30T15:48:44.369908+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53148	1.1.1.1	53	UDP
2024-09-30T15:48:45.167485+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53160	1.1.1.1	53	UDP
2024-09-30T15:48:45.175658+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53161	1.1.1.1	53	UDP
2024-09-30T15:48:45.183097+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53162	1.1.1.1	53	UDP
2024-09-30T15:48:45.193041+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53163	1.1.1.1	53	UDP
2024-09-30T15:48:46.416132+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55396	1.1.1.1	53	UDP
2024-09-30T15:48:46.425403+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55397	1.1.1.1	53	UDP
2024-09-30T15:48:46.433697+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55398	1.1.1.1	53	UDP
2024-09-30T15:48:46.444022+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55399	1.1.1.1	53	UDP
2024-09-30T15:48:47.255864+0200	2829500	1	A Network Trojan was detected	192.168.2.8	50378	1.1.1.1	53	UDP
2024-09-30T15:48:47.264288+0200	2829500	1	A Network Trojan was detected	192.168.2.8	50379	1.1.1.1	53	UDP
2024-09-30T15:48:47.280455+0200	2829500	1	A Network Trojan was detected	192.168.2.8	50380	1.1.1.1	53	UDP
2024-09-30T15:48:47.293257+0200	2829500	1	A Network Trojan was detected	192.168.2.8	50381	1.1.1.1	53	UDP
2024-09-30T15:48:48.305426+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53136	1.1.1.1	53	UDP
2024-09-30T15:48:48.321634+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53137	1.1.1.1	53	UDP
2024-09-30T15:48:48.337902+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53138	1.1.1.1	53	UDP
2024-09-30T15:48:48.349102+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53139	1.1.1.1	53	UDP
2024-09-30T15:48:49.281950+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54690	1.1.1.1	53	UDP
2024-09-30T15:48:49.292014+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54691	1.1.1.1	53	UDP
2024-09-30T15:48:49.309036+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54692	1.1.1.1	53	UDP
2024-09-30T15:48:49.320772+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54693	1.1.1.1	53	UDP
2024-09-30T15:48:50.601794+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54705	1.1.1.1	53	UDP
2024-09-30T15:48:50.609630+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54706	1.1.1.1	53	UDP
2024-09-30T15:48:50.619526+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54707	1.1.1.1	53	UDP
2024-09-30T15:48:50.628901+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54708	1.1.1.1	53	UDP
2024-09-30T15:48:52.297818+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54720	1.1.1.1	53	UDP
2024-09-30T15:48:52.306455+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54721	1.1.1.1	53	UDP
2024-09-30T15:48:52.314269+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54722	1.1.1.1	53	UDP
2024-09-30T15:48:52.324996+0200	2829500	1	A Network Trojan was detected	192.168.2.8	54723	1.1.1.1	53	UDP
2024-09-30T15:48:53.428611+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56470	1.1.1.1	53	UDP
2024-09-30T15:48:53.444100+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56471	1.1.1.1	53	UDP
2024-09-30T15:48:53.452695+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56472	1.1.1.1	53	UDP
2024-09-30T15:48:53.473639+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56473	1.1.1.1	53	UDP
2024-09-30T15:48:54.096486+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56485	1.1.1.1	53	UDP
2024-09-30T15:48:54.647601+0200	2829500	1	A Network Trojan was detected	192.168.2.8	49714	1.1.1.1	53	TCP
2024-09-30T15:48:54.647875+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56486	1.1.1.1	53	UDP
2024-09-30T15:48:54.657633+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56487	1.1.1.1	53	UDP
2024-09-30T15:48:54.679918+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56488	1.1.1.1	53	UDP
2024-09-30T15:48:55.430891+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56500	1.1.1.1	53	UDP
2024-09-30T15:48:55.454129+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56501	1.1.1.1	53	UDP
2024-09-30T15:48:55.472955+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56502	1.1.1.1	53	UDP
2024-09-30T15:48:55.486828+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56503	1.1.1.1	53	UDP
2024-09-30T15:48:56.278030+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56515	1.1.1.1	53	UDP
2024-09-30T15:48:56.288931+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56516	1.1.1.1	53	UDP
2024-09-30T15:48:56.297401+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56517	1.1.1.1	53	UDP
2024-09-30T15:48:56.306395+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56518	1.1.1.1	53	UDP
2024-09-30T15:48:56.966504+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56530	1.1.1.1	53	UDP
2024-09-30T15:48:56.974465+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56531	1.1.1.1	53	UDP
2024-09-30T15:48:56.985830+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56532	1.1.1.1	53	UDP
2024-09-30T15:48:56.998432+0200	2829500	1	A Network Trojan was detected	192.168.2.8	56533	1.1.1.1	53	UDP
2024-09-30T15:48:57.826139+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51190	1.1.1.1	53	UDP
2024-09-30T15:48:57.834090+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51191	1.1.1.1	53	UDP
2024-09-30T15:48:57.843641+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51192	1.1.1.1	53	UDP
2024-09-30T15:48:57.852973+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51193	1.1.1.1	53	UDP
2024-09-30T15:48:58.529798+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51205	1.1.1.1	53	UDP
2024-09-30T15:48:58.542071+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51206	1.1.1.1	53	UDP
2024-09-30T15:48:58.613954+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51207	1.1.1.1	53	UDP
2024-09-30T15:48:58.623875+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51208	1.1.1.1	53	UDP
2024-09-30T15:48:59.246508+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51220	1.1.1.1	53	UDP
2024-09-30T15:48:59.258247+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51221	1.1.1.1	53	UDP
2024-09-30T15:48:59.268888+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51222	1.1.1.1	53	UDP
2024-09-30T15:48:59.277055+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51223	1.1.1.1	53	UDP
2024-09-30T15:48:59.921033+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51235	1.1.1.1	53	UDP
2024-09-30T15:48:59.941629+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51236	1.1.1.1	53	UDP
2024-09-30T15:48:59.957083+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51237	1.1.1.1	53	UDP
2024-09-30T15:48:59.964992+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51238	1.1.1.1	53	UDP
2024-09-30T15:49:00.789552+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51250	1.1.1.1	53	UDP
2024-09-30T15:49:00.805572+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51251	1.1.1.1	53	UDP
2024-09-30T15:49:00.814008+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51252	1.1.1.1	53	UDP
2024-09-30T15:49:00.822490+0200	2829500	1	A Network Trojan was detected	192.168.2.8	51253	1.1.1.1	53	UDP
2024-09-30T15:49:01.712688+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61735	1.1.1.1	53	UDP
2024-09-30T15:49:01.721823+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61736	1.1.1.1	53	UDP
2024-09-30T15:49:01.733241+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61737	1.1.1.1	53	UDP
2024-09-30T15:49:01.745714+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61738	1.1.1.1	53	UDP
2024-09-30T15:49:02.974680+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52918	1.1.1.1	53	UDP
2024-09-30T15:49:02.981862+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52919	1.1.1.1	53	UDP
2024-09-30T15:49:03.003827+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52920	1.1.1.1	53	UDP
2024-09-30T15:49:03.013214+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52921	1.1.1.1	53	UDP
2024-09-30T15:49:03.618403+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52933	1.1.1.1	53	UDP
2024-09-30T15:49:03.626247+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52934	1.1.1.1	53	UDP
2024-09-30T15:49:03.641792+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52935	1.1.1.1	53	UDP
2024-09-30T15:49:03.666044+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52936	1.1.1.1	53	UDP
2024-09-30T15:49:04.283193+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52948	1.1.1.1	53	UDP
2024-09-30T15:49:04.291270+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52949	1.1.1.1	53	UDP
2024-09-30T15:49:04.301652+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52950	1.1.1.1	53	UDP
2024-09-30T15:49:04.317949+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52951	1.1.1.1	53	UDP
2024-09-30T15:49:04.979937+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52963	1.1.1.1	53	UDP
2024-09-30T15:49:04.987644+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52964	1.1.1.1	53	UDP
2024-09-30T15:49:04.998151+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52965	1.1.1.1	53	UDP
2024-09-30T15:49:05.006349+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52966	1.1.1.1	53	UDP
2024-09-30T15:49:05.652269+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52978	1.1.1.1	53	UDP
2024-09-30T15:49:05.670691+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52980	1.1.1.1	53	UDP
2024-09-30T15:49:05.681598+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52981	1.1.1.1	53	UDP
2024-09-30T15:49:06.306125+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52993	1.1.1.1	53	UDP
2024-09-30T15:49:06.322882+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52994	1.1.1.1	53	UDP
2024-09-30T15:49:06.333659+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52995	1.1.1.1	53	UDP
2024-09-30T15:49:06.341897+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52996	1.1.1.1	53	UDP
2024-09-30T15:49:07.016133+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53008	1.1.1.1	53	UDP
2024-09-30T15:49:07.030201+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53009	1.1.1.1	53	UDP
2024-09-30T15:49:07.038260+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53010	1.1.1.1	53	UDP
2024-09-30T15:49:07.046443+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53011	1.1.1.1	53	UDP
2024-09-30T15:49:07.754824+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52178	1.1.1.1	53	UDP
2024-09-30T15:49:07.765743+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52179	1.1.1.1	53	UDP
2024-09-30T15:49:07.776329+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52180	1.1.1.1	53	UDP
2024-09-30T15:49:07.785847+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52181	1.1.1.1	53	UDP
2024-09-30T15:49:08.403602+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52193	1.1.1.1	53	UDP
2024-09-30T15:49:08.419713+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52195	1.1.1.1	53	UDP
2024-09-30T15:49:08.428298+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52196	1.1.1.1	53	UDP
2024-09-30T15:49:09.389320+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52208	1.1.1.1	53	UDP
2024-09-30T15:49:09.398490+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52209	1.1.1.1	53	UDP
2024-09-30T15:49:09.406547+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52210	1.1.1.1	53	UDP
2024-09-30T15:49:09.416423+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52211	1.1.1.1	53	UDP
2024-09-30T15:49:10.085323+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52223	1.1.1.1	53	UDP
2024-09-30T15:49:10.093078+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52224	1.1.1.1	53	UDP
2024-09-30T15:49:10.103827+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52225	1.1.1.1	53	UDP
2024-09-30T15:49:10.119964+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52226	1.1.1.1	53	UDP
2024-09-30T15:49:10.709529+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52238	1.1.1.1	53	UDP
2024-09-30T15:49:10.717029+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52239	1.1.1.1	53	UDP
2024-09-30T15:49:10.725688+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52240	1.1.1.1	53	UDP
2024-09-30T15:49:10.733811+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52241	1.1.1.1	53	UDP
2024-09-30T15:49:11.803515+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52253	1.1.1.1	53	UDP
2024-09-30T15:49:11.811118+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52254	1.1.1.1	53	UDP
2024-09-30T15:49:11.820967+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52255	1.1.1.1	53	UDP
2024-09-30T15:49:12.485827+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52268	1.1.1.1	53	UDP
2024-09-30T15:49:12.496192+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52269	1.1.1.1	53	UDP
2024-09-30T15:49:12.504449+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52270	1.1.1.1	53	UDP
2024-09-30T15:49:12.513731+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52271	1.1.1.1	53	UDP
2024-09-30T15:49:13.199128+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62807	1.1.1.1	53	UDP
2024-09-30T15:49:13.207151+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62808	1.1.1.1	53	UDP
2024-09-30T15:49:13.215726+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62809	1.1.1.1	53	UDP
2024-09-30T15:49:13.223653+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62810	1.1.1.1	53	UDP
2024-09-30T15:49:13.836687+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62822	1.1.1.1	53	UDP
2024-09-30T15:49:13.844512+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62823	1.1.1.1	53	UDP
2024-09-30T15:49:13.852699+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62824	1.1.1.1	53	UDP
2024-09-30T15:49:13.860946+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62825	1.1.1.1	53	UDP
2024-09-30T15:49:14.711806+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62837	1.1.1.1	53	UDP
2024-09-30T15:49:14.728831+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62838	1.1.1.1	53	UDP
2024-09-30T15:49:14.744940+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62840	1.1.1.1	53	UDP
2024-09-30T15:49:15.355790+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62852	1.1.1.1	53	UDP
2024-09-30T15:49:15.365293+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62853	1.1.1.1	53	UDP
2024-09-30T15:49:15.374090+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62854	1.1.1.1	53	UDP
2024-09-30T15:49:15.383761+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62855	1.1.1.1	53	UDP
2024-09-30T15:49:15.995643+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62867	1.1.1.1	53	UDP
2024-09-30T15:49:16.003855+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62868	1.1.1.1	53	UDP
2024-09-30T15:49:16.011715+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62869	1.1.1.1	53	UDP
2024-09-30T15:49:16.645360+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62883	1.1.1.1	53	UDP
2024-09-30T15:49:16.661086+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62884	1.1.1.1	53	UDP
2024-09-30T15:49:16.670863+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62885	1.1.1.1	53	UDP
2024-09-30T15:49:17.303390+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62897	1.1.1.1	53	UDP
2024-09-30T15:49:17.311696+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62898	1.1.1.1	53	UDP
2024-09-30T15:49:17.319684+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62899	1.1.1.1	53	UDP
2024-09-30T15:49:17.335866+0200	2829500	1	A Network Trojan was detected	192.168.2.8	62900	1.1.1.1	53	UDP
2024-09-30T15:49:18.031800+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63745	1.1.1.1	53	UDP
2024-09-30T15:49:18.039484+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63746	1.1.1.1	53	UDP
2024-09-30T15:49:18.048963+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63747	1.1.1.1	53	UDP
2024-09-30T15:49:18.058254+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63748	1.1.1.1	53	UDP
2024-09-30T15:49:18.733830+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63760	1.1.1.1	53	UDP
2024-09-30T15:49:18.743259+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63761	1.1.1.1	53	UDP
2024-09-30T15:49:18.750495+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63762	1.1.1.1	53	UDP
2024-09-30T15:49:18.757929+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63763	1.1.1.1	53	UDP
2024-09-30T15:49:19.351584+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63775	1.1.1.1	53	UDP
2024-09-30T15:49:19.368180+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63777	1.1.1.1	53	UDP
2024-09-30T15:49:19.377215+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63778	1.1.1.1	53	UDP
2024-09-30T15:49:20.694500+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63790	1.1.1.1	53	UDP
2024-09-30T15:49:20.715200+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63791	1.1.1.1	53	UDP
2024-09-30T15:49:20.724633+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63792	1.1.1.1	53	UDP
2024-09-30T15:49:21.323853+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63805	1.1.1.1	53	UDP
2024-09-30T15:49:21.351404+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63808	1.1.1.1	53	UDP
2024-09-30T15:49:21.968656+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63820	1.1.1.1	53	UDP
2024-09-30T15:49:21.977551+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63821	1.1.1.1	53	UDP
2024-09-30T15:49:21.986081+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63822	1.1.1.1	53	UDP
2024-09-30T15:49:22.781848+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55281	1.1.1.1	53	UDP
2024-09-30T15:49:22.792072+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55282	1.1.1.1	53	UDP
2024-09-30T15:49:22.801836+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55283	1.1.1.1	53	UDP
2024-09-30T15:49:22.813738+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55284	1.1.1.1	53	UDP
2024-09-30T15:49:23.668301+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55296	1.1.1.1	53	UDP
2024-09-30T15:49:23.679202+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55297	1.1.1.1	53	UDP
2024-09-30T15:49:23.687658+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55298	1.1.1.1	53	UDP
2024-09-30T15:49:23.696971+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55299	1.1.1.1	53	UDP
2024-09-30T15:49:24.291559+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55311	1.1.1.1	53	UDP
2024-09-30T15:49:24.308371+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55313	1.1.1.1	53	UDP
2024-09-30T15:49:24.316370+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55314	1.1.1.1	53	UDP
2024-09-30T15:49:24.945356+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55326	1.1.1.1	53	UDP
2024-09-30T15:49:24.960591+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55328	1.1.1.1	53	UDP
2024-09-30T15:49:24.968108+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55329	1.1.1.1	53	UDP
2024-09-30T15:49:25.728211+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55342	1.1.1.1	53	UDP
2024-09-30T15:49:26.360722+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55357	1.1.1.1	53	UDP
2024-09-30T15:49:26.367805+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55358	1.1.1.1	53	UDP
2024-09-30T15:49:26.375787+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55359	1.1.1.1	53	UDP
2024-09-30T15:49:26.383673+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55360	1.1.1.1	53	UDP
2024-09-30T15:49:26.994411+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55374	1.1.1.1	53	UDP
2024-09-30T15:49:27.617138+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55387	1.1.1.1	53	UDP
2024-09-30T15:49:27.625139+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55388	1.1.1.1	53	UDP
2024-09-30T15:49:27.633187+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55389	1.1.1.1	53	UDP
2024-09-30T15:49:27.640667+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55390	1.1.1.1	53	UDP
2024-09-30T15:49:29.011742+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61710	1.1.1.1	53	UDP
2024-09-30T15:49:29.019456+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61711	1.1.1.1	53	UDP
2024-09-30T15:49:29.035079+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61713	1.1.1.1	53	UDP
2024-09-30T15:49:29.668617+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61726	1.1.1.1	53	UDP
2024-09-30T15:49:29.678463+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61727	1.1.1.1	53	UDP
2024-09-30T15:49:30.284532+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61741	1.1.1.1	53	UDP
2024-09-30T15:49:30.299615+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61743	1.1.1.1	53	UDP
2024-09-30T15:49:31.421635+0200	2829500	1	A Network Trojan was detected	192.168.2.8	49718	1.1.1.1	53	TCP
2024-09-30T15:49:31.431703+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61757	1.1.1.1	53	UDP
2024-09-30T15:49:31.441746+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61758	1.1.1.1	53	UDP
2024-09-30T15:49:32.521870+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61771	1.1.1.1	53	UDP
2024-09-30T15:49:32.537555+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61773	1.1.1.1	53	UDP
2024-09-30T15:49:33.260594+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61031	1.1.1.1	53	UDP
2024-09-30T15:49:33.269308+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61032	1.1.1.1	53	UDP
2024-09-30T15:49:33.277840+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61033	1.1.1.1	53	UDP
2024-09-30T15:49:33.289003+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61034	1.1.1.1	53	UDP
2024-09-30T15:49:34.403413+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61046	1.1.1.1	53	UDP
2024-09-30T15:49:34.410632+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61047	1.1.1.1	53	UDP
2024-09-30T15:49:34.419094+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61048	1.1.1.1	53	UDP
2024-09-30T15:49:34.430244+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61049	1.1.1.1	53	UDP
2024-09-30T15:49:35.068827+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61062	1.1.1.1	53	UDP
2024-09-30T15:49:35.076376+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61063	1.1.1.1	53	UDP
2024-09-30T15:49:35.084705+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61064	1.1.1.1	53	UDP
2024-09-30T15:49:35.743660+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61076	1.1.1.1	53	UDP
2024-09-30T15:49:35.827266+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61079	1.1.1.1	53	UDP
2024-09-30T15:49:36.568999+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61093	1.1.1.1	53	UDP
2024-09-30T15:49:37.164040+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61106	1.1.1.1	53	UDP
2024-09-30T15:49:37.172115+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61107	1.1.1.1	53	UDP
2024-09-30T15:49:37.180080+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61108	1.1.1.1	53	UDP
2024-09-30T15:49:37.188915+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61109	1.1.1.1	53	UDP
2024-09-30T15:49:37.952492+0200	2829500	1	A Network Trojan was detected	192.168.2.8	57865	1.1.1.1	53	UDP
2024-09-30T15:49:37.972109+0200	2829500	1	A Network Trojan was detected	192.168.2.8	57866	1.1.1.1	53	UDP
2024-09-30T15:49:37.980148+0200	2829500	1	A Network Trojan was detected	192.168.2.8	57867	1.1.1.1	53	UDP
2024-09-30T15:49:39.478728+0200	2829500	1	A Network Trojan was detected	192.168.2.8	57898	1.1.1.1	53	UDP
2024-09-30T15:49:40.085240+0200	2829500	1	A Network Trojan was detected	192.168.2.8	57910	1.1.1.1	53	UDP
2024-09-30T15:49:40.100967+0200	2829500	1	A Network Trojan was detected	192.168.2.8	57912	1.1.1.1	53	UDP
2024-09-30T15:49:40.712762+0200	2829500	1	A Network Trojan was detected	192.168.2.8	57926	1.1.1.1	53	UDP
2024-09-30T15:49:40.728333+0200	2829500	1	A Network Trojan was detected	192.168.2.8	57927	1.1.1.1	53	UDP
2024-09-30T15:49:41.857939+0200	2829500	1	A Network Trojan was detected	192.168.2.8	57940	1.1.1.1	53	UDP
2024-09-30T15:49:41.881831+0200	2829500	1	A Network Trojan was detected	192.168.2.8	57942	1.1.1.1	53	UDP
2024-09-30T15:49:42.499931+0200	2829500	1	A Network Trojan was detected	192.168.2.8	57955	1.1.1.1	53	UDP
2024-09-30T15:49:42.507845+0200	2829500	1	A Network Trojan was detected	192.168.2.8	57956	1.1.1.1	53	UDP
2024-09-30T15:49:42.515649+0200	2829500	1	A Network Trojan was detected	192.168.2.8	57957	1.1.1.1	53	UDP
2024-09-30T15:49:42.525684+0200	2829500	1	A Network Trojan was detected	192.168.2.8	57958	1.1.1.1	53	UDP
2024-09-30T15:49:43.277891+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52402	1.1.1.1	53	UDP
2024-09-30T15:49:43.285656+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52403	1.1.1.1	53	UDP
2024-09-30T15:49:43.293237+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52404	1.1.1.1	53	UDP
2024-09-30T15:49:43.301097+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52405	1.1.1.1	53	UDP
2024-09-30T15:49:43.911669+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52417	1.1.1.1	53	UDP
2024-09-30T15:49:43.930013+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52419	1.1.1.1	53	UDP
2024-09-30T15:49:43.937756+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52420	1.1.1.1	53	UDP
2024-09-30T15:49:44.532366+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52432	1.1.1.1	53	UDP
2024-09-30T15:49:44.540024+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52433	1.1.1.1	53	UDP
2024-09-30T15:49:45.150783+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52447	1.1.1.1	53	UDP
2024-09-30T15:49:45.160203+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52448	1.1.1.1	53	UDP
2024-09-30T15:49:45.172410+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52449	1.1.1.1	53	UDP
2024-09-30T15:49:45.797749+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52462	1.1.1.1	53	UDP
2024-09-30T15:49:45.805328+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52463	1.1.1.1	53	UDP
2024-09-30T15:49:45.813562+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52464	1.1.1.1	53	UDP
2024-09-30T15:49:45.825333+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52465	1.1.1.1	53	UDP
2024-09-30T15:49:46.433148+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52477	1.1.1.1	53	UDP
2024-09-30T15:49:46.442406+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52478	1.1.1.1	53	UDP
2024-09-30T15:49:46.450396+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52479	1.1.1.1	53	UDP
2024-09-30T15:49:46.458915+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52480	1.1.1.1	53	UDP
2024-09-30T15:49:47.421245+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52492	1.1.1.1	53	UDP
2024-09-30T15:49:47.439106+0200	2829500	1	A Network Trojan was detected	192.168.2.8	52494	1.1.1.1	53	UDP
2024-09-30T15:49:48.113808+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63472	1.1.1.1	53	UDP
2024-09-30T15:49:48.121781+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63473	1.1.1.1	53	UDP
2024-09-30T15:49:48.129757+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63474	1.1.1.1	53	UDP
2024-09-30T15:49:48.752523+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63487	1.1.1.1	53	UDP
2024-09-30T15:49:49.377869+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63501	1.1.1.1	53	UDP
2024-09-30T15:49:49.385726+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63502	1.1.1.1	53	UDP
2024-09-30T15:49:49.393078+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63503	1.1.1.1	53	UDP
2024-09-30T15:49:50.312119+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63516	1.1.1.1	53	UDP
2024-09-30T15:49:50.323247+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63517	1.1.1.1	53	UDP
2024-09-30T15:49:50.334816+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63518	1.1.1.1	53	UDP
2024-09-30T15:49:51.269034+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63532	1.1.1.1	53	UDP
2024-09-30T15:49:51.284706+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63534	1.1.1.1	53	UDP
2024-09-30T15:49:51.919281+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63546	1.1.1.1	53	UDP
2024-09-30T15:49:51.929557+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63547	1.1.1.1	53	UDP
2024-09-30T15:49:51.947240+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63549	1.1.1.1	53	UDP
2024-09-30T15:49:52.952786+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63565	1.1.1.1	53	UDP
2024-09-30T15:49:52.961870+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63566	1.1.1.1	53	UDP
2024-09-30T15:49:52.978766+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63568	1.1.1.1	53	UDP
2024-09-30T15:49:53.587006+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63580	1.1.1.1	53	UDP
2024-09-30T15:49:54.288018+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63597	1.1.1.1	53	UDP
2024-09-30T15:49:55.286704+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63611	1.1.1.1	53	UDP
2024-09-30T15:49:56.066296+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63627	1.1.1.1	53	UDP
2024-09-30T15:49:56.074971+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63628	1.1.1.1	53	UDP
2024-09-30T15:49:56.717717+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63642	1.1.1.1	53	UDP
2024-09-30T15:49:56.725830+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63643	1.1.1.1	53	UDP
2024-09-30T15:49:57.329990+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63655	1.1.1.1	53	UDP
2024-09-30T15:49:57.359017+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63657	1.1.1.1	53	UDP
2024-09-30T15:49:57.367817+0200	2829500	1	A Network Trojan was detected	192.168.2.8	63658	1.1.1.1	53	UDP
2024-09-30T15:49:58.034774+0200	2829500	1	A Network Trojan was detected	192.168.2.8	49746	1.1.1.1	53	UDP
2024-09-30T15:49:58.042749+0200	2829500	1	A Network Trojan was detected	192.168.2.8	49747	1.1.1.1	53	UDP
2024-09-30T15:49:58.909360+0200	2829500	1	A Network Trojan was detected	192.168.2.8	49760	1.1.1.1	53	UDP
2024-09-30T15:49:59.575239+0200	2829500	1	A Network Trojan was detected	192.168.2.8	49775	1.1.1.1	53	UDP
2024-09-30T15:50:00.229955+0200	2829500	1	A Network Trojan was detected	192.168.2.8	49791	1.1.1.1	53	UDP
2024-09-30T15:50:00.272198+0200	2829500	1	A Network Trojan was detected	192.168.2.8	49793	1.1.1.1	53	UDP
2024-09-30T15:50:00.877829+0200	2829500	1	A Network Trojan was detected	192.168.2.8	49805	1.1.1.1	53	UDP
2024-09-30T15:50:00.895133+0200	2829500	1	A Network Trojan was detected	192.168.2.8	49807	1.1.1.1	53	UDP
2024-09-30T15:50:01.879040+0200	2829500	1	A Network Trojan was detected	192.168.2.8	49823	1.1.1.1	53	UDP
2024-09-30T15:50:02.495726+0200	2829500	1	A Network Trojan was detected	192.168.2.8	49835	1.1.1.1	53	UDP
2024-09-30T15:50:02.516492+0200	2829500	1	A Network Trojan was detected	192.168.2.8	49837	1.1.1.1	53	UDP
2024-09-30T15:50:03.178151+0200	2829500	1	A Network Trojan was detected	192.168.2.8	65260	1.1.1.1	53	UDP
2024-09-30T15:50:03.791578+0200	2829500	1	A Network Trojan was detected	192.168.2.8	65274	1.1.1.1	53	UDP
2024-09-30T15:50:03.807933+0200	2829500	1	A Network Trojan was detected	192.168.2.8	65276	1.1.1.1	53	UDP
2024-09-30T15:50:03.816106+0200	2829500	1	A Network Trojan was detected	192.168.2.8	65277	1.1.1.1	53	UDP
2024-09-30T15:50:05.121982+0200	2829500	1	A Network Trojan was detected	192.168.2.8	65292	1.1.1.1	53	UDP
2024-09-30T15:50:05.725866+0200	2829500	1	A Network Trojan was detected	192.168.2.8	65304	1.1.1.1	53	UDP
2024-09-30T15:50:05.734156+0200	2829500	1	A Network Trojan was detected	192.168.2.8	65305	1.1.1.1	53	UDP
2024-09-30T15:50:06.372459+0200	2829500	1	A Network Trojan was detected	192.168.2.8	65322	1.1.1.1	53	UDP
2024-09-30T15:50:07.613411+0200	2829500	1	A Network Trojan was detected	192.168.2.8	65349	1.1.1.1	53	UDP
2024-09-30T15:50:07.621362+0200	2829500	1	A Network Trojan was detected	192.168.2.8	65350	1.1.1.1	53	UDP
2024-09-30T15:50:11.490518+0200	2829500	1	A Network Trojan was detected	192.168.2.8	65402	1.1.1.1	53	UDP
2024-09-30T15:50:13.316078+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55573	1.1.1.1	53	UDP
2024-09-30T15:50:15.353726+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55618	1.1.1.1	53	UDP
2024-09-30T15:50:21.774081+0200	2829500	1	A Network Trojan was detected	192.168.2.8	55383	1.1.1.1	53	UDP
2024-09-30T15:50:23.493561+0200	2829500	1	A Network Trojan was detected	192.168.2.8	61836	1.1.1.1	53	UDP
2024-09-30T15:50:29.652400+0200	2829500	1	A Network Trojan was detected	192.168.2.8	53547	1.1.1.1	53	UDP
2024-09-30T15:50:34.020756+0200	2829500	1	A Network Trojan was detected	192.168.2.8	59053	1.1.1.1	53	UDP
2024-09-30T15:50:34.725242+0200	2829500	1	A Network Trojan was detected	192.168.2.8	59066	1.1.1.1	53	UDP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe

Avira: detection malicious, Label: HEUR/AGEN.1317392

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 89%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 98.5% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe

Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00407C60 CryptAcquireContextW,VirtualAlloc,GetModuleHandleA,LoadLibraryA,GetProcAddress,CryptReleaseContext,VirtualFree,CryptReleaseContext,VirtualFree,	0_2_00407C60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00407DB0 CryptAcquireContextW,VirtualAlloc,GetModuleHandleA,LoadLibraryA,GetProcAddress,CryptReleaseContext,VirtualFree,CryptReleaseContext,VirtualFree,	0_2_00407DB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00406000 EnterCriticalSection,CryptAcquireContextW,GetLastError,CryptAcquireContextW,CryptImportKey,CryptGetKeyParam,CryptEncrypt,GetLastError,CryptReleaseContext,LeaveCriticalSection,	0_2_00406000
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	Code function: 31_2_00406000 EnterCriticalSection,CryptAcquireContextW,GetLastError,CryptAcquireContextW,CryptImportKey,CryptGetKeyParam,CryptEncrypt,GetLastError,CryptReleaseContext,LeaveCriticalSection,	31_2_00406000
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	Code function: 31_2_00407C60 CryptAcquireContextW,VirtualAlloc,GetModuleHandleA,LoadLibraryA,GetProcAddress,CryptReleaseContext,VirtualFree,CryptReleaseContext,VirtualFree,	31_2_00407C60
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	Code function: 31_2_00407DB0 CryptAcquireContextW,VirtualAlloc,GetModuleHandleA,LoadLibraryA,GetProcAddress,CryptReleaseContext,VirtualFree,CryptReleaseContext,VirtualFree,	31_2_00407DB0

Source: file.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: C:\Users\user\Desktop\file.exe	File opened: z:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: x:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: v:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: t:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: r:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: p:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: n:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: l:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: j:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: h:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: f:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: b:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: y:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: w:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: u:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: s:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: q:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: o:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: m:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: k:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: i:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: g:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: e:	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: a:	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004064A0 lstrlenW,lstrcatW,FindFirstFileW,lstrcmpW,lstrcmpW,lstrcmpW,lstrcatW,lstrlenW,lstrcmpW,CreateFileW,GetFileSize,VirtualAlloc,ReadFile,lstrlenA,VirtualFree,CloseHandle,lstrcmpW,FindNextFileW,FindClose,	0_2_004064A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004066F0 lstrlenW,lstrcatW,lstrcatW,FindFirstFileW,lstrcmpW,lstrcmpW,lstrcatW,lstrcatW,lstrcatW,FindNextFileW,FindClose,	0_2_004066F0
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	Code function: 31_2_004064A0 lstrlenW,lstrcatW,FindFirstFileW,lstrcmpW,lstrcmpW,lstrcmpW,lstrcatW,lstrlenW,lstrcmpW,CreateFileW,GetFileSize,VirtualAlloc,ReadFile,lstrlenA,VirtualFree,CloseHandle,lstrcmpW,FindNextFileW,FindClose,	31_2_004064A0
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	Code function: 31_2_004066F0 lstrlenW,lstrcatW,lstrcatW,FindFirstFileW,lstrcmpW,lstrcmpW,lstrcatW,lstrcatW,lstrcatW,FindNextFileW,FindClose,	31_2_004066F0

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54601 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54596 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:50375 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54614 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54586 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54577 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54701 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54574 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54615 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54591 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54600 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54617 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54625 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54686 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54612 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54630 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56477 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54622 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54698 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54607 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:51198 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54604 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53171 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54635 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54580 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54584 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53151 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54602 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54599 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54624 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53156 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54626 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:50380 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53137 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54631 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53133 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54579 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54620 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53136 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54706 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54592 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54696 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53131 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54589 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54576 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53141 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56523 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54713 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53173 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54621 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53131 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54575 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53163 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56518 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54720 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56517 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54606 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:51196 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:55399 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54629 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53146 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54590 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:55404 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53135 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:55398 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54585 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:51222 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54703 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54627 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56527 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:61733 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52928 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52944 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:62848 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:62852 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:62853 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:62857 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:62899 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:63755 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:63763 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:63832 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:55348 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:50597 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:61700 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:61733 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56495 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54726 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54637 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56472 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56522 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54582 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:50381 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56468 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54594 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54611 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54716 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54581 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:50373 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54712 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53145 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53152 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:55402 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54634 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53162 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53148 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54610 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54693 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53161 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53133 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54616 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54717 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53138 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53167 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53155 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53153 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53143 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53166 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54697 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54632 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54587 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54718 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:51210 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56475 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:51232 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56478 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52959 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56536 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:51237 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:51226 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53147 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53137 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:50594 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53138 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54710 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56501 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:50595 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56531 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56493 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54687 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:50596 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54721 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54619 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52919 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53008 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54605 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:61743 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56502 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56526 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54708 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53157 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56473 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:55396 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54692 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54597 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53136 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53160 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:61763 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53142 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53142 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56533 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52924 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:51213 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54727 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:55401 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:50376 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53132 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54595 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:61049 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56540 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54609 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:51221 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:51218 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:51242 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54695 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53150 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54723 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52208 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54722 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56521 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52978 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52179 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:55403 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52933 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:51247 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54700 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52209 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52956 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:61067 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53141 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:51228 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:51203 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53143 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:51235 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54691 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:61746 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52923 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52920 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:49714 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53172 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56465 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:50378 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53130 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53170 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56505 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52213 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:57903 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56492 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:51230 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54688 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52240 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56500 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52181 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52980 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52226 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52234 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:62803 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:62845 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:62859 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52931 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:50374 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53015 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56491 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52996 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54702 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54636 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54707 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52943 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:61737 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52939 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:63778 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52241 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:51246 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:51231 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52404 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52999 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52462 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53019 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53134 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:51251 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56471 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56483 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56498 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53158 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56503 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56508 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:61731 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:63796 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56510 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52266 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:63801 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:51233 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56512 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52935 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52235 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:63476 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54711 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53011 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:61727 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52270 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52953 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52986 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52970 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53144 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:51225 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52934 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52973 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52963 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53165 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52983 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52971 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53014 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52954 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56520 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52245 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53140 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:63815 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53132 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54725 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56476 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52960 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56485 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52976 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52993 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52255 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53020 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56486 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53168 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:62808 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52985 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56511 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52186 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54690 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53139 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56488 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:51248 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56466 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52248 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54715 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52214 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56490 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53006 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:62838 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:54728 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56538 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52921 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52251 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:62844 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:61725 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56543 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52246 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53018 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:61741 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56480 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52210 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56528 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56541 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:62809 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:51195 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:62819 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:51206 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52949 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52260 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:63741 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56496 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:61726 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56481 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56513 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52184 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53009 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:63798 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52195 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:63484 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56507 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56532 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:51243 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52981 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52196 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:61745 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:62895 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52951 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:63750 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56487 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:63766 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52199 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52243 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:63503 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56525 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52223 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:55397 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:51208 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52238 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52918 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52239 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52244 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53021 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:62865 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52958 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52950 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52269 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52190 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52965 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56535 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:53010 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:62827 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:63768 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:55298 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52940 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56515 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:62877 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:55318 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56530 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52203 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:51207 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:62890 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:54685 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:63808 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:63761 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:62863 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:51236 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:62874 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:50379 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52205 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:63586 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:63757 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:63660 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52215 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52984 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52218 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52225 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52998 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:62832 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52250 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:51211 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:51245 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:51201 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:54705 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:63762 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:51220 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:63822 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:55314 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:62820 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56542 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:56537 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52258 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:61735 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:63813 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:51216 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:62884 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:65310 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52259 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56516 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52263 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:62860 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:62812 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52938 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:51193 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:51238 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52198 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:55342 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:65322 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52200 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:62850 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:61730 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:62904 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:63773 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56467 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:63775 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:63786 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:55328 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:55316 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52249 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:61747 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:55338 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:55297 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52946 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:61710 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:61746 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:55321 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:53005 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53013 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:56482 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:55324 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:62868 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:51192 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:62823 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:55284 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:62849 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:51253 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:63742 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:55313 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:63771 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:63745 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:65402 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52254 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:61757 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52261 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:51197 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:63787 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:51212 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:51200 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:62830 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:55323 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52974 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:63753 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:62804 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52989 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:61748 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:62879 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:55567 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:62898 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:62813 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:56470 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:61727 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:63812 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:51240 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:61740 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:63770 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:63828 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:55293 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:51241 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:62807 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:55354 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:51217 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52185 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:61741 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52994 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:51250 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:53001 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:52204 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:62854 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:61046 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52268 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:63790 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:51227 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829498 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 1 : 192.168.2.8:62894 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:52926 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:52178 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:55363 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2829500 - Severity 1 - ETPRO MALWARE GandCrab DNS Lookup 3 : 192.168.2.8:51252 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026737 - Severity 1 - ET MALWARE Observed GandCrab Domain (gandcrab .bit) : 192.168.2.8:61745 -> 1.1.1.1:53

Found Tor onion address

Source: file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: 4. Open link in tor browser: http://gdcbghvjyqy7jclk.onion/c09ba58a9869e72e
Source: file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: 1. http://gdcbghvjyqy7jclk.onion.top/c09ba58a9869e72e
Source: file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: 2. http://gdcbghvjyqy7jclk.onion.casa/c09ba58a9869e72e
Source: file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: 3. http://gdcbghvjyqy7jclk.onion.guide/c09ba58a9869e72e
Source: file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: 4. http://gdcbghvjyqy7jclk.onion.rip/c09ba58a9869e72e
Source: file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: 5. http://gdcbghvjyqy7jclk.onion.plus/c09ba58a9869e72e

Uses nslookup.exe to query domains

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior

Source: global traffic	TCP traffic: 192.168.2.8:49715 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.8:49714 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.8:49725 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.8:49724 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.8:49723 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.8:49722 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.8:49721 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.8:49720 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.8:49719 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.8:49718 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.8:49717 -> 1.1.1.1:53

Source: unknown	DNS query: name: ipv4bot.whatismyipaddress.com
Source: unknown	DNS query: name: ipv4bot.whatismyipaddress.com
Source: unknown	DNS query: name: ipv4bot.whatismyipaddress.com

Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: ipv4bot.whatismyipaddress.com
Source: global traffic	DNS traffic detected: DNS query: dns1.soprodns.ru
Source: global traffic	DNS traffic detected: DNS query: 1.1.1.1.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: nomoreransom.bit
Source: global traffic	DNS traffic detected: DNS query: emsisoft.bit
Source: global traffic	DNS traffic detected: DNS query: gandcrab.bit

Source: file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: http://gdcbghvjyqy7jclk.onion.casa/c09ba58a9869e72e
Source: file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: http://gdcbghvjyqy7jclk.onion.guide/c09ba58a9869e72e
Source: file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: http://gdcbghvjyqy7jclk.onion.plus/c09ba58a9869e72e
Source: file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: http://gdcbghvjyqy7jclk.onion.rip/c09ba58a9869e72e
Source: file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: http://gdcbghvjyqy7jclk.onion.top/c09ba58a9869e72e
Source: file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: http://gdcbghvjyqy7jclk.onion/c09ba58a9869e72e
Source: file.exe, 00000000.00000002.2830053630.000000000070B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2830053630.00000000006DC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2830053630.000000000071D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ipv4bot.whatismyipaddress.com/
Source: file.exe, 00000000.00000002.2830053630.00000000006DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ipv4bot.whatismyipaddress.com/S
Source: file.exe, 00000000.00000002.2830053630.00000000006DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ipv4bot.whatismyipaddress.com/U
Source: file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.torproject.org/

Spam, unwanted Advertisements and Ransom Demands

Yara detected Gandcrab

Source: Yara match	File source: file.exe, type: SAMPLE
Source: Yara match	File source: Process Memory Space: file.exe PID: 3488, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ubrrkv.exe PID: 5604, type: MEMORYSTR

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00406000 EnterCriticalSection,CryptAcquireContextW,GetLastError,CryptAcquireContextW,CryptImportKey,CryptGetKeyParam,CryptEncrypt,GetLastError,CryptReleaseContext,LeaveCriticalSection,		0_2_00406000
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	Code function: 31_2_00406000 EnterCriticalSection,CryptAcquireContextW,GetLastError,CryptAcquireContextW,CryptImportKey,CryptGetKeyParam,CryptEncrypt,GetLastError,CryptReleaseContext,LeaveCriticalSection,		31_2_00406000

Source: conhost.exe	Process created: 59
Source: nslookup.exe	Process created: 67

System Summary

Malicious sample detected (through community Yara rule)

Source: file.exe, type: SAMPLE	Matched rule: Gandcrab Payload Author: kevoreilly
Source: 0.0.file.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Gandcrab Payload Author: kevoreilly
Source: 31.2.ubrrkv.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Gandcrab Payload Author: kevoreilly
Source: 31.0.ubrrkv.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Gandcrab Payload Author: kevoreilly
Source: 0.2.file.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Gandcrab Payload Author: kevoreilly
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe, type: DROPPED	Matched rule: Gandcrab Payload Author: kevoreilly

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00407EE0		0_2_00407EE0
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	Code function: 31_2_00407EE0		31_2_00407EE0

Source: file.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe, type: SAMPLE	Matched rule: Gandcrab author = kevoreilly, description = Gandcrab Payload, cape_type = Gandcrab Payload
Source: 0.0.file.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Gandcrab author = kevoreilly, description = Gandcrab Payload, cape_type = Gandcrab Payload
Source: 31.2.ubrrkv.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Gandcrab author = kevoreilly, description = Gandcrab Payload, cape_type = Gandcrab Payload
Source: 31.0.ubrrkv.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Gandcrab author = kevoreilly, description = Gandcrab Payload, cape_type = Gandcrab Payload
Source: 0.2.file.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Gandcrab author = kevoreilly, description = Gandcrab Payload, cape_type = Gandcrab Payload
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe, type: DROPPED	Matched rule: Gandcrab author = kevoreilly, description = Gandcrab Payload, cape_type = Gandcrab Payload

Source: classification engine

Classification label: mal100.rans.troj.evad.winEXE@511/2@2240/0

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1076:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4200:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1824:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4128:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6812:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3800:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4568:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5636:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5212:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6500:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1444:120:WilError_03
Source: C:\Users\user\Desktop\file.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\pc_group=WORKGROUP&ransom_id=c09ba58a9869e72e
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1644:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:332:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:636:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7140:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2360:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5960:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1564:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6072:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5032:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:504:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5672:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4900:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1060:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4452:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5924:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6476:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5324:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5256:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7120:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6680:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1092:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe

ReversingLabs: Detection: 89%

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe "C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru
Source: C:\Windows\SysWOW64\nslookup.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe "C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dnsapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: mswsock.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: napinsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: wshbth.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: nlaapi.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winrnr.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\SysWOW64\nslookup.exe	Section loaded: winnsi.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00407C60 CryptAcquireContextW,VirtualAlloc,GetModuleHandleA,LoadLibraryA,GetProcAddress,CryptReleaseContext,VirtualFree,CryptReleaseContext,VirtualFree,

0_2_00407C60

Source: file.exe	Static PE information: section name: .xObf
Source: ubrrkv.exe.0.dr	Static PE information: section name: .xObf

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00405352 pushfd ; iretd	0_2_00405353
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0041FC23 push edi; retf	0_2_0041FC40
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	Code function: 31_2_00405352 pushfd ; iretd	31_2_00405353
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	Code function: 31_2_0041FC23 push edi; retf	31_2_0041FC40

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe

Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce vpfihnjmqea	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce vpfihnjmqea	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce vpfihnjmqea	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce vpfihnjmqea	Jump to behavior

Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe

Code function: 31_2_0041CCC4 sldt word ptr [eax]

31_2_0041CCC4

Source: C:\Users\user\Desktop\file.exe	Code function: EnumDeviceDrivers,K32EnumDeviceDrivers,VirtualAlloc,K32EnumDeviceDrivers,K32GetDeviceDriverBaseNameW,lstrcmpiW,VirtualFree,VirtualFree,		0_2_00402F50
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	Code function: EnumDeviceDrivers,EnumDeviceDrivers,VirtualAlloc,EnumDeviceDrivers,GetDeviceDriverBaseNameW,lstrcmpiW,VirtualFree,VirtualFree,		31_2_00402F50

Source: C:\Users\user\Desktop\file.exe

Window / User API: threadDelayed 440

Jump to behavior

Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe

API coverage: 1.9 %

Source: C:\Users\user\Desktop\file.exe TID: 5096	Thread sleep count: 440 > 30			Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5096	Thread sleep time: -4400000s >= -30000s			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Last function: Thread delayed
Source: C:\Users\user\Desktop\file.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004064A0 lstrlenW,lstrcatW,FindFirstFileW,lstrcmpW,lstrcmpW,lstrcmpW,lstrcatW,lstrlenW,lstrcmpW,CreateFileW,GetFileSize,VirtualAlloc,ReadFile,lstrlenA,VirtualFree,CloseHandle,lstrcmpW,FindNextFileW,FindClose,	0_2_004064A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004066F0 lstrlenW,lstrcatW,lstrcatW,FindFirstFileW,lstrcmpW,lstrcmpW,lstrcatW,lstrcatW,lstrcatW,FindNextFileW,FindClose,	0_2_004066F0
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	Code function: 31_2_004064A0 lstrlenW,lstrcatW,FindFirstFileW,lstrcmpW,lstrcmpW,lstrcmpW,lstrcatW,lstrlenW,lstrcmpW,CreateFileW,GetFileSize,VirtualAlloc,ReadFile,lstrlenA,VirtualFree,CloseHandle,lstrcmpW,FindNextFileW,FindClose,	31_2_004064A0
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	Code function: 31_2_004066F0 lstrlenW,lstrcatW,lstrcatW,FindFirstFileW,lstrcmpW,lstrcmpW,lstrcatW,lstrcatW,lstrcatW,FindNextFileW,FindClose,	31_2_004066F0

Source: file.exe, 00000000.00000002.2830053630.00000000006F5000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00407C60 CryptAcquireContextW,VirtualAlloc,GetModuleHandleA,LoadLibraryA,GetProcAddress,CryptReleaseContext,VirtualFree,CryptReleaseContext,VirtualFree,

0_2_00407C60

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup gandcrab.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup nomoreransom.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\nslookup.exe nslookup emsisoft.bit dns1.soprodns.ru	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe "C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00408BC0 cpuid

0_2_00408BC0

Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe

Binary or memory string: avgnt.exe

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Replication Through Removable Media	1 Native API	1 Registry Run Keys / Startup Folder	11 Process Injection	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	11 Archive Collected Data	2 Encrypted Channel	Exfiltration Over Other Network Medium	1 Data Encrypted for Impact
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	2 Virtualization/Sandbox Evasion	LSASS Memory	2 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	11 Process Injection	Security Account Manager	1 Application Window Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Obfuscated Files or Information	NTDS	11 Peripheral Device Discovery	Distributed Component Object Model	Input Capture	1 Proxy	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	11 System Network Configuration Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	Steganography	Cached Domain Credentials	1 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	Compile After Delivery	DCSync	43 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	89%	ReversingLabs	Win32.Ransomware.GandCrab
file.exe	100%	Avira	HEUR/AGEN.1317392
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	100%	Avira	HEUR/AGEN.1317392
C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Reputation
emsisoft.bit	unknown	unknown	true	unknown
ipv4bot.whatismyipaddress.com	unknown	unknown	false	unknown
nomoreransom.bit	unknown	unknown	true	unknown
1.1.1.1.in-addr.arpa	unknown	unknown	false	unknown
gandcrab.bit	unknown	unknown	true	unknown
dns1.soprodns.ru	unknown	unknown	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://gdcbghvjyqy7jclk.onion.plus/c09ba58a9869e72e	file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	true	unknown
http://gdcbghvjyqy7jclk.onion.rip/c09ba58a9869e72e	file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	true	unknown
http://gdcbghvjyqy7jclk.onion/c09ba58a9869e72e	file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	true	unknown
http://gdcbghvjyqy7jclk.onion.top/c09ba58a9869e72e	file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	true	unknown
http://gdcbghvjyqy7jclk.onion.guide/c09ba58a9869e72e	file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	true	unknown
http://gdcbghvjyqy7jclk.onion.casa/c09ba58a9869e72e	file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	true	unknown
http://ipv4bot.whatismyipaddress.com/U	file.exe, 00000000.00000002.2830053630.00000000006DC000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.torproject.org/	file.exe, 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmp	false	unknown
http://ipv4bot.whatismyipaddress.com/S	file.exe, 00000000.00000002.2830053630.00000000006DC000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://ipv4bot.whatismyipaddress.com/	file.exe, 00000000.00000002.2830053630.000000000070B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2830053630.00000000006DC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2830053630.000000000071D000.00000004.00000020.00020000.00000000.sdmp	false	unknown

World Map of Contacted IPs

⊘No contacted IP infos

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522710
Start date and time:	2024-09-30 15:47:14 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	75
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.rans.troj.evad.winEXE@511/2@2240/0
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, SIHClient.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Reached maximum number of 1000 Suricata alerts, please consult the 'Suricata Logs'
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtWriteVirtualMemory calls found.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
09:48:38	API Interceptor	442x Sleep call for process: file.exe modified
15:48:34	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce vpfihnjmqea "C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe"
15:48:42	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\RunOnce vpfihnjmqea "C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe"

C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2246122658-3693405117-2476756634-1003\7ec63eecc011967c28496572961d2a7c_9e146be9-c76a-4720-bcdb-53011b87bd06

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	2219
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	9B515CE290886100F8C5F7C3AD0CB6A0
SHA1:	CF57023D314B0BAD4BCC41D552A31EC88FA56395
SHA-256:	186674F8434D142FE3E22F9A51A70FBE1F5161984D6A4B9EDE27B997C28D66EB
SHA-512:	5C7838FAEAC049C90E7AB1CED964CA7ED7F753894FBB7B270D5989631CCB3F40AE50F9579EC691DBB25A996F6ACCD66F2749952D3AEE793A3A83C54CF6BAA90F
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	148992
Entropy (8bit):	6.506603543250002
Encrypted:	false
SSDEEP:	3072:zYHVHd2NCMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdCjRv9OtN:zyOqqDL64vdGREz
MD5:	05AE50BF6E638FAC969303A04BF8CCE6
SHA1:	021844552AFD19CF163A8952E47E7632E72B746C
SHA-256:	F9164F81A4AF240A01FE3E9E90728DDFE1A968E76A01C3DAB334367162EA28F4
SHA-512:	B63FCE6B2C6A687D265A8EE907989C7544449BA0953C5C99F023E5F7AA2F3A919134699B178BBC655C3EB49612C4B9A36BE419B1C819968C19F017AAA1D8ACE6
Malicious:	true
Yara Hits:	Rule: Gandcrab, Description: Gandcrab Payload, Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe, Author: kevoreilly
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This I%.q.m cannot be run in DOS mode....$.......AU@..4...4...4..Ce...4..Ce...4...f...4...4...4...L...4...4/.4...f...4...f...4...f...4..Rich.4..................PE..L...].vZ.............................J............@.......................................@.................................p........@...............................................................................................................text............................... ..`.rdata..............................@....data........ ......................@....CRT.........0......................@..@.rsrc........@......................@..@.reloc.......P......................@..B.xObf........`... ...&..........................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.506605405523016
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	148'992 bytes
MD5:	d8029e1465ce1c847c658c71f7711bde
SHA1:	4b1a68c52bf2b22c359d6e321177789c1cc622c7
SHA256:	1c16b204dd52d4d3fab6113f20a43c29ff74db2746798b88bfd8f4214ac95cc5
SHA512:	4a5fc5264e6b0f9e01d6fa701ed5aeb991ab620b97d3cc0ebd5250841ac71c5f343a01ed35ce6feb6faf5d604e3600c01f87a8cf574469c4dfc6d87e992bfa0b
SSDEEP:	3072:eYHVHd2NCMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdCjRv9OtN:eyOqqDL64vdGREz
TLSH:	23E34E182A88B7D2DD9A6B37D2A278C87C343584568E605FCA531CF538783B57B2361F
File Content Preview:	MZ......................@...............................................!..L.!This rK.I..m cannot be run in DOS mode....$.......AU@..4...4...4..Ce...4..Ce...4...f...4...4...4...L...4...4/..4...f...4...f...4...f...4..Rich.4..................PE..L...].vZ...

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x404af0
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x5A76065D [Sat Feb 3 18:58:37 2018 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	40306b615af659fc1f93cfb121cc38d9

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
call 00007F9A150348FDh
push 00000000h
call 00007F9A150467B3h
cmp eax, CCCCC35Dh
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
push ebp
mov ebp, esp
sub esp, 5Ch
push esi
push 00000044h
lea eax, dword ptr [ebp-58h]
xorps xmm0, xmm0
push 00000000h
push eax
mov esi, ecx
call 00007F9A1503F894h
call 00007F9A1503F8C5h
call 00007F9A1503F8F6h
add esp, 0Ch
mov dword ptr [ebp-18h], eax
mov dword ptr [ebp-1Ch], eax
call 00007F9A1503F91Eh
call 00007F9A1503F94Fh
rcl byte ptr [edi+33E04589h], FFFFFFC0h
mov word ptr [ebp-28h], ax
lea eax, dword ptr [ebp-10h]
push eax
lea eax, dword ptr [ebp-58h]
call 00007F9A1503F973h
call 00007F9A156C84C5h
push 00000000h
push 00000000h
push 00000001h
push 00000000h
push 00000000h
push esi
push 00000000h
call 00007F9A1503F997h
cwde
test eax, eax
jne 00007F9A150233FDh
call 00007F9A1503FA01h
adc byte ptr [esi-75h], bl
in eax, 5Dh
ret
push dword ptr [ebp-10h]
call 00007F9A1503F9B9h
mov bh, FFh
salc
push dword ptr [ebp-0Ch]
call esi
pop esi
mov esp, ebp
pop ebp
ret
int3
int3
int3
int3
int3
int3
int3
push ebp
mov ebp, esp
sub esp, 10h
call 00007F9A1503FCE4h
xor eax, dword ptr [esi]
cmp al, ch
and ecx, ecx
add dword ptr [eax], eax
push ebx
mov ebx, dword ptr [ebp+08h]

Rich Headers

Programming Language:

[ C ] VS2013 build 21005
[IMP] VS2008 SP1 build 30729
[RES] VS2013 build 21005
[LNK] VS2013 build 21005

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x10970	0xb4	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x14000	0x1e0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x8000	0x8000	377956a9071c57a4cf7c9f1511ebf397	False	0.515167236328125	data	6.565343124868175	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x9000	0x9000	0x8600	5442a332f783e5a8968d509c76763175	False	0.45848880597014924	data	6.1322099086141595	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.data	0x12000	0x1000	0xc00	7b5ea28de8c0fb53a564ba90a83a4241	False	0.25390625	data	3.450195070880191	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.CRT	0x13000	0x1000	0x200	7342984af91ceb03bf2b2e325c013cba	False	0.03125	data	0.06116285224115448	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x14000	0x1000	0x200	f1b801d7cee918c8de20c6e09bf27838	False	0.52734375	data	4.710061382693063	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x15000	0x1000	0xc00	d2a70550489de356a2cd6bfc40711204	False	0.008138020833333334	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
.xObf	0x16000	0x11ef7	0x12000	60c00037bad1f3545d26f8c003d74df1	False	0.4076063368055556	data	6.206786924630495	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x14060	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
KERNEL32.dll	SetFilePointer, GetFileAttributesW, ReadFile, GetLastError, MoveFileW, lstrcpyW, SetFileAttributesW, CreateMutexW, GetDriveTypeW, VerSetConditionMask, WaitForSingleObject, GetTickCount, InitializeCriticalSection, OpenProcess, GetSystemDirectoryW, TerminateThread, Sleep, TerminateProcess, VerifyVersionInfoW, WaitForMultipleObjects, DeleteCriticalSection, ExpandEnvironmentStringsW, lstrlenW, SetHandleInformation, lstrcatA, MultiByteToWideChar, CreatePipe, lstrcmpiA, Process32NextW, CreateToolhelp32Snapshot, LeaveCriticalSection, EnterCriticalSection, FindFirstFileW, lstrcmpW, FindClose, FindNextFileW, GetNativeSystemInfo, GetComputerNameW, GetDiskFreeSpaceW, GetWindowsDirectoryW, GetVolumeInformationW, LoadLibraryA, lstrcmpiW, VirtualFree, CreateThread, CloseHandle, lstrcatW, CreateFileMappingW, ExitThread, CreateFileW, GetModuleFileNameW, WriteFile, GetModuleHandleW, UnmapViewOfFile, MapViewOfFile, GetFileSize, GetEnvironmentVariableW, lstrcpyA, GetModuleHandleA, VirtualAlloc, Process32FirstW, GetTempPathW, GetProcAddress, GetProcessHeap, HeapFree, HeapAlloc, lstrlenA, CreateProcessW, ExitProcess, IsProcessorFeaturePresent
USER32.dll	wsprintfW, TranslateMessage, RegisterClassExW, LoadIconW, SetWindowLongW, EndPaint, BeginPaint, LoadCursorW, GetMessageW, ShowWindow, CreateWindowExW, SendMessageW, DispatchMessageW, DefWindowProcW, UpdateWindow, GetForegroundWindow, DestroyWindow
GDI32.dll	TextOutW
ADVAPI32.dll	CryptExportKey, AllocateAndInitializeSid, RegSetValueExW, RegCreateKeyExW, RegCloseKey, CryptAcquireContextW, CryptGetKeyParam, CryptReleaseContext, CryptImportKey, CryptEncrypt, CryptGenKey, CryptDestroyKey, GetUserNameW, RegQueryValueExW, RegOpenKeyExW, FreeSid
SHELL32.dll	SHGetSpecialFolderPathW, ShellExecuteExW, ShellExecuteW
CRYPT32.dll	CryptStringToBinaryA, CryptBinaryToStringA
WININET.dll	InternetCloseHandle, HttpAddRequestHeadersW, HttpSendRequestW, InternetConnectW, HttpOpenRequestW, InternetOpenW, InternetReadFile
PSAPI.DLL	EnumDeviceDrivers, GetDeviceDriverBaseNameW

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-09-30T15:48:38.760971+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54574	1.1.1.1	53	UDP
2024-09-30T15:48:38.777505+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54575	1.1.1.1	53	UDP
2024-09-30T15:48:38.799469+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54576	1.1.1.1	53	UDP
2024-09-30T15:48:38.810993+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54577	1.1.1.1	53	UDP
2024-09-30T15:48:39.057855+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54579	1.1.1.1	53	UDP
2024-09-30T15:48:39.074833+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54580	1.1.1.1	53	UDP
2024-09-30T15:48:39.091227+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54581	1.1.1.1	53	UDP
2024-09-30T15:48:39.100923+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54582	1.1.1.1	53	UDP
2024-09-30T15:48:39.331285+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54584	1.1.1.1	53	UDP
2024-09-30T15:48:39.342455+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54585	1.1.1.1	53	UDP
2024-09-30T15:48:39.363765+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54586	1.1.1.1	53	UDP
2024-09-30T15:48:39.379641+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54587	1.1.1.1	53	UDP
2024-09-30T15:48:39.607213+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54589	1.1.1.1	53	UDP
2024-09-30T15:48:39.618695+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54590	1.1.1.1	53	UDP
2024-09-30T15:48:39.639480+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54591	1.1.1.1	53	UDP
2024-09-30T15:48:39.648745+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54592	1.1.1.1	53	UDP
2024-09-30T15:48:39.885896+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54594	1.1.1.1	53	UDP
2024-09-30T15:48:39.897427+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54595	1.1.1.1	53	UDP
2024-09-30T15:48:39.906975+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54596	1.1.1.1	53	UDP
2024-09-30T15:48:39.916876+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54597	1.1.1.1	53	UDP
2024-09-30T15:48:40.553741+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54599	1.1.1.1	53	UDP
2024-09-30T15:48:40.570428+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54600	1.1.1.1	53	UDP
2024-09-30T15:48:40.586086+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54601	1.1.1.1	53	UDP
2024-09-30T15:48:40.601178+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54602	1.1.1.1	53	UDP
2024-09-30T15:48:40.871580+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54604	1.1.1.1	53	UDP
2024-09-30T15:48:40.887546+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54605	1.1.1.1	53	UDP
2024-09-30T15:48:40.899023+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54606	1.1.1.1	53	UDP
2024-09-30T15:48:40.910449+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54607	1.1.1.1	53	UDP
2024-09-30T15:48:41.175173+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54609	1.1.1.1	53	UDP
2024-09-30T15:48:41.191706+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54610	1.1.1.1	53	UDP
2024-09-30T15:48:41.200615+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54611	1.1.1.1	53	UDP
2024-09-30T15:48:41.216787+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54612	1.1.1.1	53	UDP
2024-09-30T15:48:41.446562+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54614	1.1.1.1	53	UDP
2024-09-30T15:48:41.462282+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54615	1.1.1.1	53	UDP
2024-09-30T15:48:41.479460+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54616	1.1.1.1	53	UDP
2024-09-30T15:48:41.511836+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54617	1.1.1.1	53	UDP
2024-09-30T15:48:41.741938+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54619	1.1.1.1	53	UDP
2024-09-30T15:48:41.758805+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54620	1.1.1.1	53	UDP
2024-09-30T15:48:41.767193+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54621	1.1.1.1	53	UDP
2024-09-30T15:48:41.775544+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54622	1.1.1.1	53	UDP
2024-09-30T15:48:41.995136+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54624	1.1.1.1	53	UDP
2024-09-30T15:48:42.005580+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54625	1.1.1.1	53	UDP
2024-09-30T15:48:42.024179+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54626	1.1.1.1	53	UDP
2024-09-30T15:48:42.033013+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54627	1.1.1.1	53	UDP
2024-09-30T15:48:42.261885+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54629	1.1.1.1	53	UDP
2024-09-30T15:48:42.276929+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54630	1.1.1.1	53	UDP
2024-09-30T15:48:42.288038+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54631	1.1.1.1	53	UDP
2024-09-30T15:48:42.305063+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54632	1.1.1.1	53	UDP
2024-09-30T15:48:42.528926+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54634	1.1.1.1	53	UDP
2024-09-30T15:48:42.545504+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54635	1.1.1.1	53	UDP
2024-09-30T15:48:42.552912+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54636	1.1.1.1	53	UDP
2024-09-30T15:48:42.569207+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54637	1.1.1.1	53	UDP
2024-09-30T15:48:43.399993+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53130	1.1.1.1	53	UDP
2024-09-30T15:48:43.419559+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53131	1.1.1.1	53	UDP
2024-09-30T15:48:43.429551+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53132	1.1.1.1	53	UDP
2024-09-30T15:48:43.439265+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53133	1.1.1.1	53	UDP
2024-09-30T15:48:43.779486+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53135	1.1.1.1	53	UDP
2024-09-30T15:48:43.788996+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53136	1.1.1.1	53	UDP
2024-09-30T15:48:43.804473+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53137	1.1.1.1	53	UDP
2024-09-30T15:48:43.813812+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53138	1.1.1.1	53	UDP
2024-09-30T15:48:44.045820+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53140	1.1.1.1	53	UDP
2024-09-30T15:48:44.070385+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53141	1.1.1.1	53	UDP
2024-09-30T15:48:44.079099+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53142	1.1.1.1	53	UDP
2024-09-30T15:48:44.088745+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53143	1.1.1.1	53	UDP
2024-09-30T15:48:44.326871+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53145	1.1.1.1	53	UDP
2024-09-30T15:48:44.336758+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53146	1.1.1.1	53	UDP
2024-09-30T15:48:44.353557+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53147	1.1.1.1	53	UDP
2024-09-30T15:48:44.369908+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53148	1.1.1.1	53	UDP
2024-09-30T15:48:44.587989+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53150	1.1.1.1	53	UDP
2024-09-30T15:48:44.596830+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53151	1.1.1.1	53	UDP
2024-09-30T15:48:44.613352+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53152	1.1.1.1	53	UDP
2024-09-30T15:48:44.636481+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53153	1.1.1.1	53	UDP
2024-09-30T15:48:44.869494+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53155	1.1.1.1	53	UDP
2024-09-30T15:48:44.878020+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53156	1.1.1.1	53	UDP
2024-09-30T15:48:44.890748+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53157	1.1.1.1	53	UDP
2024-09-30T15:48:44.898598+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53158	1.1.1.1	53	UDP
2024-09-30T15:48:45.167485+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53160	1.1.1.1	53	UDP
2024-09-30T15:48:45.175658+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53161	1.1.1.1	53	UDP
2024-09-30T15:48:45.183097+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53162	1.1.1.1	53	UDP
2024-09-30T15:48:45.193041+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53163	1.1.1.1	53	UDP
2024-09-30T15:48:45.776240+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53165	1.1.1.1	53	UDP
2024-09-30T15:48:45.801623+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53166	1.1.1.1	53	UDP
2024-09-30T15:48:45.813184+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53167	1.1.1.1	53	UDP
2024-09-30T15:48:45.828849+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53168	1.1.1.1	53	UDP
2024-09-30T15:48:46.132887+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53170	1.1.1.1	53	UDP
2024-09-30T15:48:46.149927+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53171	1.1.1.1	53	UDP
2024-09-30T15:48:46.160572+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53172	1.1.1.1	53	UDP
2024-09-30T15:48:46.168350+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53173	1.1.1.1	53	UDP
2024-09-30T15:48:46.416132+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55396	1.1.1.1	53	UDP
2024-09-30T15:48:46.425403+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55397	1.1.1.1	53	UDP
2024-09-30T15:48:46.433697+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55398	1.1.1.1	53	UDP
2024-09-30T15:48:46.444022+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55399	1.1.1.1	53	UDP
2024-09-30T15:48:46.653141+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55401	1.1.1.1	53	UDP
2024-09-30T15:48:46.663772+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55402	1.1.1.1	53	UDP
2024-09-30T15:48:46.675773+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55403	1.1.1.1	53	UDP
2024-09-30T15:48:46.687800+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55404	1.1.1.1	53	UDP
2024-09-30T15:48:46.929881+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	50373	1.1.1.1	53	UDP
2024-09-30T15:48:46.941805+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	50374	1.1.1.1	53	UDP
2024-09-30T15:48:46.953844+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	50375	1.1.1.1	53	UDP
2024-09-30T15:48:46.964741+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	50376	1.1.1.1	53	UDP
2024-09-30T15:48:47.255864+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	50378	1.1.1.1	53	UDP
2024-09-30T15:48:47.264288+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	50379	1.1.1.1	53	UDP
2024-09-30T15:48:47.280455+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	50380	1.1.1.1	53	UDP
2024-09-30T15:48:47.293257+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	50381	1.1.1.1	53	UDP
2024-09-30T15:48:47.572440+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	50594	1.1.1.1	53	UDP
2024-09-30T15:48:47.583226+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	50595	1.1.1.1	53	UDP
2024-09-30T15:48:47.593879+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	50596	1.1.1.1	53	UDP
2024-09-30T15:48:47.614434+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	50597	1.1.1.1	53	UDP
2024-09-30T15:48:48.016885+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53131	1.1.1.1	53	UDP
2024-09-30T15:48:48.026715+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53132	1.1.1.1	53	UDP
2024-09-30T15:48:48.035604+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53133	1.1.1.1	53	UDP
2024-09-30T15:48:48.043510+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53134	1.1.1.1	53	UDP
2024-09-30T15:48:48.305426+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53136	1.1.1.1	53	UDP
2024-09-30T15:48:48.321634+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53137	1.1.1.1	53	UDP
2024-09-30T15:48:48.337902+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53138	1.1.1.1	53	UDP
2024-09-30T15:48:48.349102+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53139	1.1.1.1	53	UDP
2024-09-30T15:48:48.686085+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53141	1.1.1.1	53	UDP
2024-09-30T15:48:48.695243+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53142	1.1.1.1	53	UDP
2024-09-30T15:48:48.703152+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53143	1.1.1.1	53	UDP
2024-09-30T15:48:48.711328+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53144	1.1.1.1	53	UDP
2024-09-30T15:48:48.986549+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54685	1.1.1.1	53	UDP
2024-09-30T15:48:48.994474+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54686	1.1.1.1	53	UDP
2024-09-30T15:48:49.003164+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54687	1.1.1.1	53	UDP
2024-09-30T15:48:49.019772+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54688	1.1.1.1	53	UDP
2024-09-30T15:48:49.281950+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54690	1.1.1.1	53	UDP
2024-09-30T15:48:49.292014+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54691	1.1.1.1	53	UDP
2024-09-30T15:48:49.309036+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54692	1.1.1.1	53	UDP
2024-09-30T15:48:49.320772+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54693	1.1.1.1	53	UDP
2024-09-30T15:48:49.572791+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54695	1.1.1.1	53	UDP
2024-09-30T15:48:49.583433+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54696	1.1.1.1	53	UDP
2024-09-30T15:48:49.593242+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54697	1.1.1.1	53	UDP
2024-09-30T15:48:49.603752+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54698	1.1.1.1	53	UDP
2024-09-30T15:48:50.015824+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54700	1.1.1.1	53	UDP
2024-09-30T15:48:50.024549+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54701	1.1.1.1	53	UDP
2024-09-30T15:48:50.033472+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54702	1.1.1.1	53	UDP
2024-09-30T15:48:50.057625+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54703	1.1.1.1	53	UDP
2024-09-30T15:48:50.601794+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54705	1.1.1.1	53	UDP
2024-09-30T15:48:50.609630+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54706	1.1.1.1	53	UDP
2024-09-30T15:48:50.619526+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54707	1.1.1.1	53	UDP
2024-09-30T15:48:50.628901+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54708	1.1.1.1	53	UDP
2024-09-30T15:48:50.853983+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54710	1.1.1.1	53	UDP
2024-09-30T15:48:50.862191+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54711	1.1.1.1	53	UDP
2024-09-30T15:48:50.877430+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54712	1.1.1.1	53	UDP
2024-09-30T15:48:50.884906+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54713	1.1.1.1	53	UDP
2024-09-30T15:48:52.061925+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54715	1.1.1.1	53	UDP
2024-09-30T15:48:52.079439+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54716	1.1.1.1	53	UDP
2024-09-30T15:48:52.088626+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54717	1.1.1.1	53	UDP
2024-09-30T15:48:52.108655+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	54718	1.1.1.1	53	UDP
2024-09-30T15:48:52.297818+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54720	1.1.1.1	53	UDP
2024-09-30T15:48:52.306455+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54721	1.1.1.1	53	UDP
2024-09-30T15:48:52.314269+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54722	1.1.1.1	53	UDP
2024-09-30T15:48:52.324996+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	54723	1.1.1.1	53	UDP
2024-09-30T15:48:52.536350+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54725	1.1.1.1	53	UDP
2024-09-30T15:48:52.544877+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54726	1.1.1.1	53	UDP
2024-09-30T15:48:52.553378+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54727	1.1.1.1	53	UDP
2024-09-30T15:48:52.561536+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	54728	1.1.1.1	53	UDP
2024-09-30T15:48:53.182488+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56465	1.1.1.1	53	UDP
2024-09-30T15:48:53.203779+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56466	1.1.1.1	53	UDP
2024-09-30T15:48:53.213758+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56467	1.1.1.1	53	UDP
2024-09-30T15:48:53.221533+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56468	1.1.1.1	53	UDP
2024-09-30T15:48:53.428611+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56470	1.1.1.1	53	UDP
2024-09-30T15:48:53.444100+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56471	1.1.1.1	53	UDP
2024-09-30T15:48:53.452695+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56472	1.1.1.1	53	UDP
2024-09-30T15:48:53.473639+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56473	1.1.1.1	53	UDP
2024-09-30T15:48:53.658134+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56475	1.1.1.1	53	UDP
2024-09-30T15:48:53.666900+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56476	1.1.1.1	53	UDP
2024-09-30T15:48:53.674836+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56477	1.1.1.1	53	UDP
2024-09-30T15:48:53.683366+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56478	1.1.1.1	53	UDP
2024-09-30T15:48:53.872062+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56480	1.1.1.1	53	UDP
2024-09-30T15:48:53.880002+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56481	1.1.1.1	53	UDP
2024-09-30T15:48:53.897341+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56482	1.1.1.1	53	UDP
2024-09-30T15:48:53.905698+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56483	1.1.1.1	53	UDP
2024-09-30T15:48:54.096486+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56485	1.1.1.1	53	UDP
2024-09-30T15:48:54.647601+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	49714	1.1.1.1	53	TCP
2024-09-30T15:48:54.647875+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56486	1.1.1.1	53	UDP
2024-09-30T15:48:54.657633+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56487	1.1.1.1	53	UDP
2024-09-30T15:48:54.679918+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56488	1.1.1.1	53	UDP
2024-09-30T15:48:54.855835+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56490	1.1.1.1	53	UDP
2024-09-30T15:48:54.875877+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56491	1.1.1.1	53	UDP
2024-09-30T15:48:54.883381+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56492	1.1.1.1	53	UDP
2024-09-30T15:48:54.892194+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56493	1.1.1.1	53	UDP
2024-09-30T15:48:55.071971+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56495	1.1.1.1	53	UDP
2024-09-30T15:48:55.095299+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56496	1.1.1.1	53	UDP
2024-09-30T15:48:55.120239+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56497	1.1.1.1	53	UDP
2024-09-30T15:48:55.130806+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56498	1.1.1.1	53	UDP
2024-09-30T15:48:55.430891+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56500	1.1.1.1	53	UDP
2024-09-30T15:48:55.454129+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56501	1.1.1.1	53	UDP
2024-09-30T15:48:55.472955+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56502	1.1.1.1	53	UDP
2024-09-30T15:48:55.486828+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56503	1.1.1.1	53	UDP
2024-09-30T15:48:55.761652+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56505	1.1.1.1	53	UDP
2024-09-30T15:48:55.778372+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56506	1.1.1.1	53	UDP
2024-09-30T15:48:55.802220+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56507	1.1.1.1	53	UDP
2024-09-30T15:48:55.812929+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56508	1.1.1.1	53	UDP
2024-09-30T15:48:56.011748+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56510	1.1.1.1	53	UDP
2024-09-30T15:48:56.026908+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56511	1.1.1.1	53	UDP
2024-09-30T15:48:56.042944+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56512	1.1.1.1	53	UDP
2024-09-30T15:48:56.052328+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56513	1.1.1.1	53	UDP
2024-09-30T15:48:56.278030+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56515	1.1.1.1	53	UDP
2024-09-30T15:48:56.288931+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56516	1.1.1.1	53	UDP
2024-09-30T15:48:56.297401+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56517	1.1.1.1	53	UDP
2024-09-30T15:48:56.306395+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56518	1.1.1.1	53	UDP
2024-09-30T15:48:56.513859+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56520	1.1.1.1	53	UDP
2024-09-30T15:48:56.543223+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56521	1.1.1.1	53	UDP
2024-09-30T15:48:56.551217+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56522	1.1.1.1	53	UDP
2024-09-30T15:48:56.561502+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56523	1.1.1.1	53	UDP
2024-09-30T15:48:56.746593+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56525	1.1.1.1	53	UDP
2024-09-30T15:48:56.754612+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56526	1.1.1.1	53	UDP
2024-09-30T15:48:56.767140+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56527	1.1.1.1	53	UDP
2024-09-30T15:48:56.776751+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56528	1.1.1.1	53	UDP
2024-09-30T15:48:56.966504+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56530	1.1.1.1	53	UDP
2024-09-30T15:48:56.974465+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56531	1.1.1.1	53	UDP
2024-09-30T15:48:56.985830+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56532	1.1.1.1	53	UDP
2024-09-30T15:48:56.998432+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	56533	1.1.1.1	53	UDP
2024-09-30T15:48:57.187032+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56535	1.1.1.1	53	UDP
2024-09-30T15:48:57.207881+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56536	1.1.1.1	53	UDP
2024-09-30T15:48:57.219837+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56537	1.1.1.1	53	UDP
2024-09-30T15:48:57.229329+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	56538	1.1.1.1	53	UDP
2024-09-30T15:48:57.423702+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56540	1.1.1.1	53	UDP
2024-09-30T15:48:57.434138+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56541	1.1.1.1	53	UDP
2024-09-30T15:48:57.441926+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56542	1.1.1.1	53	UDP
2024-09-30T15:48:57.450076+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	56543	1.1.1.1	53	UDP
2024-09-30T15:48:57.826139+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51190	1.1.1.1	53	UDP
2024-09-30T15:48:57.834090+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51191	1.1.1.1	53	UDP
2024-09-30T15:48:57.843641+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51192	1.1.1.1	53	UDP
2024-09-30T15:48:57.852973+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51193	1.1.1.1	53	UDP
2024-09-30T15:48:58.046542+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	51195	1.1.1.1	53	UDP
2024-09-30T15:48:58.056493+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	51196	1.1.1.1	53	UDP
2024-09-30T15:48:58.067908+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	51197	1.1.1.1	53	UDP
2024-09-30T15:48:58.076767+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	51198	1.1.1.1	53	UDP
2024-09-30T15:48:58.297423+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	51200	1.1.1.1	53	UDP
2024-09-30T15:48:58.318876+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	51201	1.1.1.1	53	UDP
2024-09-30T15:48:58.334110+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	51202	1.1.1.1	53	UDP
2024-09-30T15:48:58.341916+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	51203	1.1.1.1	53	UDP
2024-09-30T15:48:58.529798+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51205	1.1.1.1	53	UDP
2024-09-30T15:48:58.542071+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51206	1.1.1.1	53	UDP
2024-09-30T15:48:58.613954+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51207	1.1.1.1	53	UDP
2024-09-30T15:48:58.623875+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51208	1.1.1.1	53	UDP
2024-09-30T15:48:58.808735+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	51210	1.1.1.1	53	UDP
2024-09-30T15:48:58.824267+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	51211	1.1.1.1	53	UDP
2024-09-30T15:48:58.839510+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	51212	1.1.1.1	53	UDP
2024-09-30T15:48:58.853491+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	51213	1.1.1.1	53	UDP
2024-09-30T15:48:59.032321+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	51215	1.1.1.1	53	UDP
2024-09-30T15:48:59.042273+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	51216	1.1.1.1	53	UDP
2024-09-30T15:48:59.052708+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	51217	1.1.1.1	53	UDP
2024-09-30T15:48:59.060981+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	51218	1.1.1.1	53	UDP
2024-09-30T15:48:59.246508+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51220	1.1.1.1	53	UDP
2024-09-30T15:48:59.258247+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51221	1.1.1.1	53	UDP
2024-09-30T15:48:59.268888+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51222	1.1.1.1	53	UDP
2024-09-30T15:48:59.277055+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51223	1.1.1.1	53	UDP
2024-09-30T15:48:59.489585+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	51225	1.1.1.1	53	UDP
2024-09-30T15:48:59.498521+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	51226	1.1.1.1	53	UDP
2024-09-30T15:48:59.508351+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	51227	1.1.1.1	53	UDP
2024-09-30T15:48:59.516959+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	51228	1.1.1.1	53	UDP
2024-09-30T15:48:59.706432+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	51230	1.1.1.1	53	UDP
2024-09-30T15:48:59.722939+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	51231	1.1.1.1	53	UDP
2024-09-30T15:48:59.735623+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	51232	1.1.1.1	53	UDP
2024-09-30T15:48:59.743722+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	51233	1.1.1.1	53	UDP
2024-09-30T15:48:59.921033+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51235	1.1.1.1	53	UDP
2024-09-30T15:48:59.941629+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51236	1.1.1.1	53	UDP
2024-09-30T15:48:59.957083+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51237	1.1.1.1	53	UDP
2024-09-30T15:48:59.964992+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51238	1.1.1.1	53	UDP
2024-09-30T15:49:00.151398+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	51240	1.1.1.1	53	UDP
2024-09-30T15:49:00.159474+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	51241	1.1.1.1	53	UDP
2024-09-30T15:49:00.168024+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	51242	1.1.1.1	53	UDP
2024-09-30T15:49:00.178902+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	51243	1.1.1.1	53	UDP
2024-09-30T15:49:00.568133+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	51245	1.1.1.1	53	UDP
2024-09-30T15:49:00.576185+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	51246	1.1.1.1	53	UDP
2024-09-30T15:49:00.591376+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	51247	1.1.1.1	53	UDP
2024-09-30T15:49:00.602014+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	51248	1.1.1.1	53	UDP
2024-09-30T15:49:00.789552+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51250	1.1.1.1	53	UDP
2024-09-30T15:49:00.805572+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51251	1.1.1.1	53	UDP
2024-09-30T15:49:00.814008+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51252	1.1.1.1	53	UDP
2024-09-30T15:49:00.822490+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	51253	1.1.1.1	53	UDP
2024-09-30T15:49:01.043905+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61725	1.1.1.1	53	UDP
2024-09-30T15:49:01.064660+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61726	1.1.1.1	53	UDP
2024-09-30T15:49:01.090015+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61727	1.1.1.1	53	UDP
2024-09-30T15:49:01.098693+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61728	1.1.1.1	53	UDP
2024-09-30T15:49:01.295123+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61730	1.1.1.1	53	UDP
2024-09-30T15:49:01.303600+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61731	1.1.1.1	53	UDP
2024-09-30T15:49:01.314474+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61732	1.1.1.1	53	UDP
2024-09-30T15:49:01.324850+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61733	1.1.1.1	53	UDP
2024-09-30T15:49:01.712688+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61735	1.1.1.1	53	UDP
2024-09-30T15:49:01.721823+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61736	1.1.1.1	53	UDP
2024-09-30T15:49:01.733241+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61737	1.1.1.1	53	UDP
2024-09-30T15:49:01.745714+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61738	1.1.1.1	53	UDP
2024-09-30T15:49:01.972475+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61740	1.1.1.1	53	UDP
2024-09-30T15:49:01.983578+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61741	1.1.1.1	53	UDP
2024-09-30T15:49:02.011014+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61743	1.1.1.1	53	UDP
2024-09-30T15:49:02.576426+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61745	1.1.1.1	53	UDP
2024-09-30T15:49:02.593975+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61746	1.1.1.1	53	UDP
2024-09-30T15:49:02.611274+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61747	1.1.1.1	53	UDP
2024-09-30T15:49:02.626752+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61748	1.1.1.1	53	UDP
2024-09-30T15:49:02.974680+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52918	1.1.1.1	53	UDP
2024-09-30T15:49:02.981862+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52919	1.1.1.1	53	UDP
2024-09-30T15:49:03.003827+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52920	1.1.1.1	53	UDP
2024-09-30T15:49:03.013214+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52921	1.1.1.1	53	UDP
2024-09-30T15:49:03.199207+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52923	1.1.1.1	53	UDP
2024-09-30T15:49:03.207389+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52924	1.1.1.1	53	UDP
2024-09-30T15:49:03.228355+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52926	1.1.1.1	53	UDP
2024-09-30T15:49:03.414071+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52928	1.1.1.1	53	UDP
2024-09-30T15:49:03.422327+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52929	1.1.1.1	53	UDP
2024-09-30T15:49:03.432588+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52930	1.1.1.1	53	UDP
2024-09-30T15:49:03.440665+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52931	1.1.1.1	53	UDP
2024-09-30T15:49:03.618403+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52933	1.1.1.1	53	UDP
2024-09-30T15:49:03.626247+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52934	1.1.1.1	53	UDP
2024-09-30T15:49:03.641792+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52935	1.1.1.1	53	UDP
2024-09-30T15:49:03.666044+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52936	1.1.1.1	53	UDP
2024-09-30T15:49:03.841722+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52938	1.1.1.1	53	UDP
2024-09-30T15:49:03.852802+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52939	1.1.1.1	53	UDP
2024-09-30T15:49:03.864663+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52940	1.1.1.1	53	UDP
2024-09-30T15:49:03.872528+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52941	1.1.1.1	53	UDP
2024-09-30T15:49:04.059784+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52943	1.1.1.1	53	UDP
2024-09-30T15:49:04.070411+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52944	1.1.1.1	53	UDP
2024-09-30T15:49:04.082021+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52945	1.1.1.1	53	UDP
2024-09-30T15:49:04.093806+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52946	1.1.1.1	53	UDP
2024-09-30T15:49:04.283193+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52948	1.1.1.1	53	UDP
2024-09-30T15:49:04.291270+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52949	1.1.1.1	53	UDP
2024-09-30T15:49:04.301652+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52950	1.1.1.1	53	UDP
2024-09-30T15:49:04.317949+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52951	1.1.1.1	53	UDP
2024-09-30T15:49:04.528124+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52953	1.1.1.1	53	UDP
2024-09-30T15:49:04.537181+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52954	1.1.1.1	53	UDP
2024-09-30T15:49:04.545740+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52955	1.1.1.1	53	UDP
2024-09-30T15:49:04.565206+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52956	1.1.1.1	53	UDP
2024-09-30T15:49:04.760625+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52958	1.1.1.1	53	UDP
2024-09-30T15:49:04.772470+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52959	1.1.1.1	53	UDP
2024-09-30T15:49:04.788147+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52960	1.1.1.1	53	UDP
2024-09-30T15:49:04.803402+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52961	1.1.1.1	53	UDP
2024-09-30T15:49:04.979937+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52963	1.1.1.1	53	UDP
2024-09-30T15:49:04.987644+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52964	1.1.1.1	53	UDP
2024-09-30T15:49:04.998151+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52965	1.1.1.1	53	UDP
2024-09-30T15:49:05.006349+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52966	1.1.1.1	53	UDP
2024-09-30T15:49:05.197095+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52969	1.1.1.1	53	UDP
2024-09-30T15:49:05.204823+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52970	1.1.1.1	53	UDP
2024-09-30T15:49:05.213720+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52971	1.1.1.1	53	UDP
2024-09-30T15:49:05.424345+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52973	1.1.1.1	53	UDP
2024-09-30T15:49:05.432584+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52974	1.1.1.1	53	UDP
2024-09-30T15:49:05.441404+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52975	1.1.1.1	53	UDP
2024-09-30T15:49:05.459922+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52976	1.1.1.1	53	UDP
2024-09-30T15:49:05.652269+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52978	1.1.1.1	53	UDP
2024-09-30T15:49:05.670691+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52980	1.1.1.1	53	UDP
2024-09-30T15:49:05.681598+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52981	1.1.1.1	53	UDP
2024-09-30T15:49:05.880785+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52983	1.1.1.1	53	UDP
2024-09-30T15:49:05.897952+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52984	1.1.1.1	53	UDP
2024-09-30T15:49:05.907004+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52985	1.1.1.1	53	UDP
2024-09-30T15:49:05.924306+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52986	1.1.1.1	53	UDP
2024-09-30T15:49:06.106237+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52988	1.1.1.1	53	UDP
2024-09-30T15:49:06.113782+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52989	1.1.1.1	53	UDP
2024-09-30T15:49:06.306125+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52993	1.1.1.1	53	UDP
2024-09-30T15:49:06.322882+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52994	1.1.1.1	53	UDP
2024-09-30T15:49:06.333659+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52995	1.1.1.1	53	UDP
2024-09-30T15:49:06.341897+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52996	1.1.1.1	53	UDP
2024-09-30T15:49:06.564378+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52998	1.1.1.1	53	UDP
2024-09-30T15:49:06.572980+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52999	1.1.1.1	53	UDP
2024-09-30T15:49:06.581346+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53000	1.1.1.1	53	UDP
2024-09-30T15:49:06.589718+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53001	1.1.1.1	53	UDP
2024-09-30T15:49:06.789836+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53004	1.1.1.1	53	UDP
2024-09-30T15:49:06.801816+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53005	1.1.1.1	53	UDP
2024-09-30T15:49:06.813810+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53006	1.1.1.1	53	UDP
2024-09-30T15:49:07.016133+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53008	1.1.1.1	53	UDP
2024-09-30T15:49:07.030201+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53009	1.1.1.1	53	UDP
2024-09-30T15:49:07.038260+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53010	1.1.1.1	53	UDP
2024-09-30T15:49:07.046443+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53011	1.1.1.1	53	UDP
2024-09-30T15:49:07.236362+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53013	1.1.1.1	53	UDP
2024-09-30T15:49:07.257106+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53014	1.1.1.1	53	UDP
2024-09-30T15:49:07.269733+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53015	1.1.1.1	53	UDP
2024-09-30T15:49:07.289432+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53016	1.1.1.1	53	UDP
2024-09-30T15:49:07.483732+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53018	1.1.1.1	53	UDP
2024-09-30T15:49:07.492153+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53019	1.1.1.1	53	UDP
2024-09-30T15:49:07.501811+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53020	1.1.1.1	53	UDP
2024-09-30T15:49:07.509987+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	53021	1.1.1.1	53	UDP
2024-09-30T15:49:07.754824+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52178	1.1.1.1	53	UDP
2024-09-30T15:49:07.765743+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52179	1.1.1.1	53	UDP
2024-09-30T15:49:07.776329+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52180	1.1.1.1	53	UDP
2024-09-30T15:49:07.785847+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52181	1.1.1.1	53	UDP
2024-09-30T15:49:07.960222+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52183	1.1.1.1	53	UDP
2024-09-30T15:49:07.972166+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52184	1.1.1.1	53	UDP
2024-09-30T15:49:07.979766+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52185	1.1.1.1	53	UDP
2024-09-30T15:49:07.991905+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52186	1.1.1.1	53	UDP
2024-09-30T15:49:08.188056+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52188	1.1.1.1	53	UDP
2024-09-30T15:49:08.199466+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52189	1.1.1.1	53	UDP
2024-09-30T15:49:08.207173+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52190	1.1.1.1	53	UDP
2024-09-30T15:49:08.215861+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52191	1.1.1.1	53	UDP
2024-09-30T15:49:08.403602+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52193	1.1.1.1	53	UDP
2024-09-30T15:49:08.419713+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52195	1.1.1.1	53	UDP
2024-09-30T15:49:08.428298+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52196	1.1.1.1	53	UDP
2024-09-30T15:49:08.647580+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52198	1.1.1.1	53	UDP
2024-09-30T15:49:08.656028+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52199	1.1.1.1	53	UDP
2024-09-30T15:49:08.665158+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52200	1.1.1.1	53	UDP
2024-09-30T15:49:08.674711+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52201	1.1.1.1	53	UDP
2024-09-30T15:49:09.181552+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52203	1.1.1.1	53	UDP
2024-09-30T15:49:09.192139+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52204	1.1.1.1	53	UDP
2024-09-30T15:49:09.200015+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52205	1.1.1.1	53	UDP
2024-09-30T15:49:09.208223+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52206	1.1.1.1	53	UDP
2024-09-30T15:49:09.389320+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52208	1.1.1.1	53	UDP
2024-09-30T15:49:09.398490+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52209	1.1.1.1	53	UDP
2024-09-30T15:49:09.406547+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52210	1.1.1.1	53	UDP
2024-09-30T15:49:09.416423+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52211	1.1.1.1	53	UDP
2024-09-30T15:49:09.625919+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52213	1.1.1.1	53	UDP
2024-09-30T15:49:09.645888+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52214	1.1.1.1	53	UDP
2024-09-30T15:49:09.655446+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52215	1.1.1.1	53	UDP
2024-09-30T15:49:09.665982+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52216	1.1.1.1	53	UDP
2024-09-30T15:49:09.854807+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52218	1.1.1.1	53	UDP
2024-09-30T15:49:09.892623+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52220	1.1.1.1	53	UDP
2024-09-30T15:49:09.902433+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52221	1.1.1.1	53	UDP
2024-09-30T15:49:10.085323+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52223	1.1.1.1	53	UDP
2024-09-30T15:49:10.093078+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52224	1.1.1.1	53	UDP
2024-09-30T15:49:10.103827+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52225	1.1.1.1	53	UDP
2024-09-30T15:49:10.119964+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52226	1.1.1.1	53	UDP
2024-09-30T15:49:10.292907+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52228	1.1.1.1	53	UDP
2024-09-30T15:49:10.304341+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52229	1.1.1.1	53	UDP
2024-09-30T15:49:10.313690+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52230	1.1.1.1	53	UDP
2024-09-30T15:49:10.321718+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52231	1.1.1.1	53	UDP
2024-09-30T15:49:10.522748+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52234	1.1.1.1	53	UDP
2024-09-30T15:49:10.530014+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52235	1.1.1.1	53	UDP
2024-09-30T15:49:10.538068+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52236	1.1.1.1	53	UDP
2024-09-30T15:49:10.709529+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52238	1.1.1.1	53	UDP
2024-09-30T15:49:10.717029+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52239	1.1.1.1	53	UDP
2024-09-30T15:49:10.725688+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52240	1.1.1.1	53	UDP
2024-09-30T15:49:10.733811+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52241	1.1.1.1	53	UDP
2024-09-30T15:49:10.916591+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52243	1.1.1.1	53	UDP
2024-09-30T15:49:10.925035+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52244	1.1.1.1	53	UDP
2024-09-30T15:49:10.933287+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52245	1.1.1.1	53	UDP
2024-09-30T15:49:10.941077+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52246	1.1.1.1	53	UDP
2024-09-30T15:49:11.121250+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52248	1.1.1.1	53	UDP
2024-09-30T15:49:11.128840+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52249	1.1.1.1	53	UDP
2024-09-30T15:49:11.137045+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52250	1.1.1.1	53	UDP
2024-09-30T15:49:11.145002+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52251	1.1.1.1	53	UDP
2024-09-30T15:49:11.803515+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52253	1.1.1.1	53	UDP
2024-09-30T15:49:11.811118+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52254	1.1.1.1	53	UDP
2024-09-30T15:49:11.820967+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52255	1.1.1.1	53	UDP
2024-09-30T15:49:12.012434+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52258	1.1.1.1	53	UDP
2024-09-30T15:49:12.020576+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52259	1.1.1.1	53	UDP
2024-09-30T15:49:12.030606+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52260	1.1.1.1	53	UDP
2024-09-30T15:49:12.047391+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52261	1.1.1.1	53	UDP
2024-09-30T15:49:12.227575+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52263	1.1.1.1	53	UDP
2024-09-30T15:49:12.235395+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52264	1.1.1.1	53	UDP
2024-09-30T15:49:12.243745+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52265	1.1.1.1	53	UDP
2024-09-30T15:49:12.250887+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52266	1.1.1.1	53	UDP
2024-09-30T15:49:12.485827+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52268	1.1.1.1	53	UDP
2024-09-30T15:49:12.496192+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52269	1.1.1.1	53	UDP
2024-09-30T15:49:12.504449+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52270	1.1.1.1	53	UDP
2024-09-30T15:49:12.513731+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52271	1.1.1.1	53	UDP
2024-09-30T15:49:12.758881+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	50905	1.1.1.1	53	UDP
2024-09-30T15:49:12.766651+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	50906	1.1.1.1	53	UDP
2024-09-30T15:49:12.786674+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	50907	1.1.1.1	53	UDP
2024-09-30T15:49:12.989113+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62803	1.1.1.1	53	UDP
2024-09-30T15:49:12.998203+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62804	1.1.1.1	53	UDP
2024-09-30T15:49:13.014718+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62805	1.1.1.1	53	UDP
2024-09-30T15:49:13.199128+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62807	1.1.1.1	53	UDP
2024-09-30T15:49:13.207151+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62808	1.1.1.1	53	UDP
2024-09-30T15:49:13.215726+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62809	1.1.1.1	53	UDP
2024-09-30T15:49:13.223653+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62810	1.1.1.1	53	UDP
2024-09-30T15:49:13.419803+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62812	1.1.1.1	53	UDP
2024-09-30T15:49:13.432935+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62813	1.1.1.1	53	UDP
2024-09-30T15:49:13.441842+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62814	1.1.1.1	53	UDP
2024-09-30T15:49:13.456226+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62815	1.1.1.1	53	UDP
2024-09-30T15:49:13.633748+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62817	1.1.1.1	53	UDP
2024-09-30T15:49:13.648358+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62818	1.1.1.1	53	UDP
2024-09-30T15:49:13.656536+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62819	1.1.1.1	53	UDP
2024-09-30T15:49:13.664317+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62820	1.1.1.1	53	UDP
2024-09-30T15:49:13.836687+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62822	1.1.1.1	53	UDP
2024-09-30T15:49:13.844512+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62823	1.1.1.1	53	UDP
2024-09-30T15:49:13.852699+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62824	1.1.1.1	53	UDP
2024-09-30T15:49:13.860946+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62825	1.1.1.1	53	UDP
2024-09-30T15:49:14.043053+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62827	1.1.1.1	53	UDP
2024-09-30T15:49:14.051371+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62828	1.1.1.1	53	UDP
2024-09-30T15:49:14.067587+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62830	1.1.1.1	53	UDP
2024-09-30T15:49:14.289079+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62832	1.1.1.1	53	UDP
2024-09-30T15:49:14.297273+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62833	1.1.1.1	53	UDP
2024-09-30T15:49:14.304882+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62834	1.1.1.1	53	UDP
2024-09-30T15:49:14.312886+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62835	1.1.1.1	53	UDP
2024-09-30T15:49:14.711806+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62837	1.1.1.1	53	UDP
2024-09-30T15:49:14.728831+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62838	1.1.1.1	53	UDP
2024-09-30T15:49:14.744940+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62840	1.1.1.1	53	UDP
2024-09-30T15:49:14.934650+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62844	1.1.1.1	53	UDP
2024-09-30T15:49:14.948449+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62845	1.1.1.1	53	UDP
2024-09-30T15:49:15.141972+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62847	1.1.1.1	53	UDP
2024-09-30T15:49:15.152792+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62848	1.1.1.1	53	UDP
2024-09-30T15:49:15.163331+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62849	1.1.1.1	53	UDP
2024-09-30T15:49:15.172054+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62850	1.1.1.1	53	UDP
2024-09-30T15:49:15.355790+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62852	1.1.1.1	53	UDP
2024-09-30T15:49:15.365293+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62853	1.1.1.1	53	UDP
2024-09-30T15:49:15.374090+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62854	1.1.1.1	53	UDP
2024-09-30T15:49:15.383761+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62855	1.1.1.1	53	UDP
2024-09-30T15:49:15.580121+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62857	1.1.1.1	53	UDP
2024-09-30T15:49:15.588328+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62858	1.1.1.1	53	UDP
2024-09-30T15:49:15.595950+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62859	1.1.1.1	53	UDP
2024-09-30T15:49:15.604754+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62860	1.1.1.1	53	UDP
2024-09-30T15:49:15.777295+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62862	1.1.1.1	53	UDP
2024-09-30T15:49:15.785701+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62863	1.1.1.1	53	UDP
2024-09-30T15:49:15.801682+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62864	1.1.1.1	53	UDP
2024-09-30T15:49:15.811607+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62865	1.1.1.1	53	UDP
2024-09-30T15:49:15.995643+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62867	1.1.1.1	53	UDP
2024-09-30T15:49:16.003855+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62868	1.1.1.1	53	UDP
2024-09-30T15:49:16.011715+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62869	1.1.1.1	53	UDP
2024-09-30T15:49:16.207488+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62872	1.1.1.1	53	UDP
2024-09-30T15:49:16.215328+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62873	1.1.1.1	53	UDP
2024-09-30T15:49:16.224969+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62874	1.1.1.1	53	UDP
2024-09-30T15:49:16.235095+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62875	1.1.1.1	53	UDP
2024-09-30T15:49:16.414951+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62877	1.1.1.1	53	UDP
2024-09-30T15:49:16.423080+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62878	1.1.1.1	53	UDP
2024-09-30T15:49:16.433456+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62879	1.1.1.1	53	UDP
2024-09-30T15:49:16.441167+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62880	1.1.1.1	53	UDP
2024-09-30T15:49:16.645360+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62883	1.1.1.1	53	UDP
2024-09-30T15:49:16.661086+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62884	1.1.1.1	53	UDP
2024-09-30T15:49:16.670863+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62885	1.1.1.1	53	UDP
2024-09-30T15:49:16.868113+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62888	1.1.1.1	53	UDP
2024-09-30T15:49:16.875574+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62889	1.1.1.1	53	UDP
2024-09-30T15:49:16.882774+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62890	1.1.1.1	53	UDP
2024-09-30T15:49:17.073294+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62892	1.1.1.1	53	UDP
2024-09-30T15:49:17.090295+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62894	1.1.1.1	53	UDP
2024-09-30T15:49:17.107079+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	62895	1.1.1.1	53	UDP
2024-09-30T15:49:17.303390+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62897	1.1.1.1	53	UDP
2024-09-30T15:49:17.311696+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62898	1.1.1.1	53	UDP
2024-09-30T15:49:17.319684+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62899	1.1.1.1	53	UDP
2024-09-30T15:49:17.335866+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	62900	1.1.1.1	53	UDP
2024-09-30T15:49:17.549553+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62903	1.1.1.1	53	UDP
2024-09-30T15:49:17.559095+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62904	1.1.1.1	53	UDP
2024-09-30T15:49:17.567450+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	62905	1.1.1.1	53	UDP
2024-09-30T15:49:17.803977+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63740	1.1.1.1	53	UDP
2024-09-30T15:49:17.812716+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63741	1.1.1.1	53	UDP
2024-09-30T15:49:17.821246+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63742	1.1.1.1	53	UDP
2024-09-30T15:49:17.829564+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63743	1.1.1.1	53	UDP
2024-09-30T15:49:18.031800+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63745	1.1.1.1	53	UDP
2024-09-30T15:49:18.039484+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63746	1.1.1.1	53	UDP
2024-09-30T15:49:18.048963+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63747	1.1.1.1	53	UDP
2024-09-30T15:49:18.058254+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63748	1.1.1.1	53	UDP
2024-09-30T15:49:18.262705+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63750	1.1.1.1	53	UDP
2024-09-30T15:49:18.273814+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63751	1.1.1.1	53	UDP
2024-09-30T15:49:18.285773+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63752	1.1.1.1	53	UDP
2024-09-30T15:49:18.296285+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63753	1.1.1.1	53	UDP
2024-09-30T15:49:18.522614+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63755	1.1.1.1	53	UDP
2024-09-30T15:49:18.538559+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63756	1.1.1.1	53	UDP
2024-09-30T15:49:18.547188+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63757	1.1.1.1	53	UDP
2024-09-30T15:49:18.555647+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63758	1.1.1.1	53	UDP
2024-09-30T15:49:18.733830+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63760	1.1.1.1	53	UDP
2024-09-30T15:49:18.743259+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63761	1.1.1.1	53	UDP
2024-09-30T15:49:18.750495+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63762	1.1.1.1	53	UDP
2024-09-30T15:49:18.757929+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63763	1.1.1.1	53	UDP
2024-09-30T15:49:18.941388+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63765	1.1.1.1	53	UDP
2024-09-30T15:49:18.950901+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63766	1.1.1.1	53	UDP
2024-09-30T15:49:18.959869+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63767	1.1.1.1	53	UDP
2024-09-30T15:49:18.967819+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63768	1.1.1.1	53	UDP
2024-09-30T15:49:19.148305+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63770	1.1.1.1	53	UDP
2024-09-30T15:49:19.155979+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63771	1.1.1.1	53	UDP
2024-09-30T15:49:19.164426+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63772	1.1.1.1	53	UDP
2024-09-30T15:49:19.172403+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63773	1.1.1.1	53	UDP
2024-09-30T15:49:19.351584+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63775	1.1.1.1	53	UDP
2024-09-30T15:49:19.368180+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63777	1.1.1.1	53	UDP
2024-09-30T15:49:19.377215+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63778	1.1.1.1	53	UDP
2024-09-30T15:49:20.018607+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63781	1.1.1.1	53	UDP
2024-09-30T15:49:20.040424+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63782	1.1.1.1	53	UDP
2024-09-30T15:49:20.049153+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63783	1.1.1.1	53	UDP
2024-09-30T15:49:20.236986+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63785	1.1.1.1	53	UDP
2024-09-30T15:49:20.253612+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63786	1.1.1.1	53	UDP
2024-09-30T15:49:20.262400+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63787	1.1.1.1	53	UDP
2024-09-30T15:49:20.694500+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63790	1.1.1.1	53	UDP
2024-09-30T15:49:20.715200+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63791	1.1.1.1	53	UDP
2024-09-30T15:49:20.724633+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63792	1.1.1.1	53	UDP
2024-09-30T15:49:20.926598+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63796	1.1.1.1	53	UDP
2024-09-30T15:49:20.933759+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63797	1.1.1.1	53	UDP
2024-09-30T15:49:20.942497+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63798	1.1.1.1	53	UDP
2024-09-30T15:49:21.130543+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63801	1.1.1.1	53	UDP
2024-09-30T15:49:21.323853+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63805	1.1.1.1	53	UDP
2024-09-30T15:49:21.351404+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63808	1.1.1.1	53	UDP
2024-09-30T15:49:21.550260+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63810	1.1.1.1	53	UDP
2024-09-30T15:49:21.557995+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63811	1.1.1.1	53	UDP
2024-09-30T15:49:21.566761+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63812	1.1.1.1	53	UDP
2024-09-30T15:49:21.575505+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63813	1.1.1.1	53	UDP
2024-09-30T15:49:21.759263+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63815	1.1.1.1	53	UDP
2024-09-30T15:49:21.783470+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63818	1.1.1.1	53	UDP
2024-09-30T15:49:21.968656+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63820	1.1.1.1	53	UDP
2024-09-30T15:49:21.977551+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63821	1.1.1.1	53	UDP
2024-09-30T15:49:21.986081+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63822	1.1.1.1	53	UDP
2024-09-30T15:49:22.188403+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63826	1.1.1.1	53	UDP
2024-09-30T15:49:22.207372+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63828	1.1.1.1	53	UDP
2024-09-30T15:49:22.412277+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63830	1.1.1.1	53	UDP
2024-09-30T15:49:22.419381+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63831	1.1.1.1	53	UDP
2024-09-30T15:49:22.427025+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63832	1.1.1.1	53	UDP
2024-09-30T15:49:22.434902+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63833	1.1.1.1	53	UDP
2024-09-30T15:49:22.781848+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55281	1.1.1.1	53	UDP
2024-09-30T15:49:22.792072+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55282	1.1.1.1	53	UDP
2024-09-30T15:49:22.801836+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55283	1.1.1.1	53	UDP
2024-09-30T15:49:22.813738+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55284	1.1.1.1	53	UDP
2024-09-30T15:49:23.234592+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55286	1.1.1.1	53	UDP
2024-09-30T15:49:23.253689+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55288	1.1.1.1	53	UDP
2024-09-30T15:49:23.270549+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55289	1.1.1.1	53	UDP
2024-09-30T15:49:23.457366+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55291	1.1.1.1	53	UDP
2024-09-30T15:49:23.466226+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55292	1.1.1.1	53	UDP
2024-09-30T15:49:23.476272+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55293	1.1.1.1	53	UDP
2024-09-30T15:49:23.668301+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55296	1.1.1.1	53	UDP
2024-09-30T15:49:23.679202+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55297	1.1.1.1	53	UDP
2024-09-30T15:49:23.687658+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55298	1.1.1.1	53	UDP
2024-09-30T15:49:23.696971+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55299	1.1.1.1	53	UDP
2024-09-30T15:49:23.873334+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55301	1.1.1.1	53	UDP
2024-09-30T15:49:23.886047+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55302	1.1.1.1	53	UDP
2024-09-30T15:49:23.894740+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55303	1.1.1.1	53	UDP
2024-09-30T15:49:23.902683+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55304	1.1.1.1	53	UDP
2024-09-30T15:49:24.097551+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55307	1.1.1.1	53	UDP
2024-09-30T15:49:24.117102+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55309	1.1.1.1	53	UDP
2024-09-30T15:49:24.291559+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55311	1.1.1.1	53	UDP
2024-09-30T15:49:24.308371+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55313	1.1.1.1	53	UDP
2024-09-30T15:49:24.316370+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55314	1.1.1.1	53	UDP
2024-09-30T15:49:24.531338+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55316	1.1.1.1	53	UDP
2024-09-30T15:49:24.539474+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55317	1.1.1.1	53	UDP
2024-09-30T15:49:24.548159+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55318	1.1.1.1	53	UDP
2024-09-30T15:49:24.741391+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55321	1.1.1.1	53	UDP
2024-09-30T15:49:24.759010+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55323	1.1.1.1	53	UDP
2024-09-30T15:49:24.767283+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55324	1.1.1.1	53	UDP
2024-09-30T15:49:24.945356+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55326	1.1.1.1	53	UDP
2024-09-30T15:49:24.960591+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55328	1.1.1.1	53	UDP
2024-09-30T15:49:24.968108+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55329	1.1.1.1	53	UDP
2024-09-30T15:49:25.147256+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55332	1.1.1.1	53	UDP
2024-09-30T15:49:25.154693+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55333	1.1.1.1	53	UDP
2024-09-30T15:49:25.350198+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55337	1.1.1.1	53	UDP
2024-09-30T15:49:25.358591+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55338	1.1.1.1	53	UDP
2024-09-30T15:49:25.367932+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55339	1.1.1.1	53	UDP
2024-09-30T15:49:25.375889+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55340	1.1.1.1	53	UDP
2024-09-30T15:49:25.728211+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55342	1.1.1.1	53	UDP
2024-09-30T15:49:25.939184+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55348	1.1.1.1	53	UDP
2024-09-30T15:49:25.947792+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55349	1.1.1.1	53	UDP
2024-09-30T15:49:25.956206+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55350	1.1.1.1	53	UDP
2024-09-30T15:49:26.134727+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55352	1.1.1.1	53	UDP
2024-09-30T15:49:26.142552+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55353	1.1.1.1	53	UDP
2024-09-30T15:49:26.151048+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55354	1.1.1.1	53	UDP
2024-09-30T15:49:26.360722+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55357	1.1.1.1	53	UDP
2024-09-30T15:49:26.367805+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55358	1.1.1.1	53	UDP
2024-09-30T15:49:26.375787+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55359	1.1.1.1	53	UDP
2024-09-30T15:49:26.383673+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55360	1.1.1.1	53	UDP
2024-09-30T15:49:26.574118+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55362	1.1.1.1	53	UDP
2024-09-30T15:49:26.584655+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55363	1.1.1.1	53	UDP
2024-09-30T15:49:26.599831+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55365	1.1.1.1	53	UDP
2024-09-30T15:49:26.777336+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55367	1.1.1.1	53	UDP
2024-09-30T15:49:26.802766+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55370	1.1.1.1	53	UDP
2024-09-30T15:49:26.994411+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55374	1.1.1.1	53	UDP
2024-09-30T15:49:27.181220+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55377	1.1.1.1	53	UDP
2024-09-30T15:49:27.191905+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55378	1.1.1.1	53	UDP
2024-09-30T15:49:27.203917+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55379	1.1.1.1	53	UDP
2024-09-30T15:49:27.212809+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55380	1.1.1.1	53	UDP
2024-09-30T15:49:27.411317+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55383	1.1.1.1	53	UDP
2024-09-30T15:49:27.419870+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55384	1.1.1.1	53	UDP
2024-09-30T15:49:27.427693+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55385	1.1.1.1	53	UDP
2024-09-30T15:49:27.617138+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55387	1.1.1.1	53	UDP
2024-09-30T15:49:27.625139+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55388	1.1.1.1	53	UDP
2024-09-30T15:49:27.633187+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55389	1.1.1.1	53	UDP
2024-09-30T15:49:27.640667+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55390	1.1.1.1	53	UDP
2024-09-30T15:49:28.083932+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61700	1.1.1.1	53	UDP
2024-09-30T15:49:28.091104+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61701	1.1.1.1	53	UDP
2024-09-30T15:49:28.640274+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	49717	1.1.1.1	53	TCP
2024-09-30T15:49:28.808019+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61705	1.1.1.1	53	UDP
2024-09-30T15:49:28.817040+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61706	1.1.1.1	53	UDP
2024-09-30T15:49:28.824471+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61707	1.1.1.1	53	UDP
2024-09-30T15:49:28.831993+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61708	1.1.1.1	53	UDP
2024-09-30T15:49:29.011742+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61710	1.1.1.1	53	UDP
2024-09-30T15:49:29.019456+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61711	1.1.1.1	53	UDP
2024-09-30T15:49:29.035079+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61713	1.1.1.1	53	UDP
2024-09-30T15:49:29.219639+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61715	1.1.1.1	53	UDP
2024-09-30T15:49:29.227118+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61716	1.1.1.1	53	UDP
2024-09-30T15:49:29.246721+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61718	1.1.1.1	53	UDP
2024-09-30T15:49:29.455561+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61723	1.1.1.1	53	UDP
2024-09-30T15:49:29.668617+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61726	1.1.1.1	53	UDP
2024-09-30T15:49:29.678463+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61727	1.1.1.1	53	UDP
2024-09-30T15:49:29.877680+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61731	1.1.1.1	53	UDP
2024-09-30T15:49:29.886102+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61732	1.1.1.1	53	UDP
2024-09-30T15:49:29.893876+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61733	1.1.1.1	53	UDP
2024-09-30T15:49:30.087753+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61737	1.1.1.1	53	UDP
2024-09-30T15:49:30.095561+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61738	1.1.1.1	53	UDP
2024-09-30T15:49:30.284532+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61741	1.1.1.1	53	UDP
2024-09-30T15:49:30.299615+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61743	1.1.1.1	53	UDP
2024-09-30T15:49:30.480656+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61745	1.1.1.1	53	UDP
2024-09-30T15:49:30.491980+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61746	1.1.1.1	53	UDP
2024-09-30T15:49:30.503797+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61747	1.1.1.1	53	UDP
2024-09-30T15:49:30.512214+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61748	1.1.1.1	53	UDP
2024-09-30T15:49:30.717648+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61750	1.1.1.1	53	UDP
2024-09-30T15:49:30.726414+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61751	1.1.1.1	53	UDP
2024-09-30T15:49:30.742218+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61752	1.1.1.1	53	UDP
2024-09-30T15:49:30.750407+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61753	1.1.1.1	53	UDP
2024-09-30T15:49:31.421635+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	49718	1.1.1.1	53	TCP
2024-09-30T15:49:31.431703+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61757	1.1.1.1	53	UDP
2024-09-30T15:49:31.441746+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61758	1.1.1.1	53	UDP
2024-09-30T15:49:31.625048+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61760	1.1.1.1	53	UDP
2024-09-30T15:49:31.632462+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61761	1.1.1.1	53	UDP
2024-09-30T15:49:31.640142+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61762	1.1.1.1	53	UDP
2024-09-30T15:49:31.648485+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61763	1.1.1.1	53	UDP
2024-09-30T15:49:31.835477+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61765	1.1.1.1	53	UDP
2024-09-30T15:49:32.307901+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61767	1.1.1.1	53	UDP
2024-09-30T15:49:32.316061+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61768	1.1.1.1	53	UDP
2024-09-30T15:49:32.521870+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61771	1.1.1.1	53	UDP
2024-09-30T15:49:32.537555+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61773	1.1.1.1	53	UDP
2024-09-30T15:49:32.833182+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61021	1.1.1.1	53	UDP
2024-09-30T15:49:32.876587+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61024	1.1.1.1	53	UDP
2024-09-30T15:49:33.072266+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61027	1.1.1.1	53	UDP
2024-09-30T15:49:33.080098+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61028	1.1.1.1	53	UDP
2024-09-30T15:49:33.087180+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61029	1.1.1.1	53	UDP
2024-09-30T15:49:33.260594+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61031	1.1.1.1	53	UDP
2024-09-30T15:49:33.269308+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61032	1.1.1.1	53	UDP
2024-09-30T15:49:33.277840+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61033	1.1.1.1	53	UDP
2024-09-30T15:49:33.289003+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61034	1.1.1.1	53	UDP
2024-09-30T15:49:33.461970+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61036	1.1.1.1	53	UDP
2024-09-30T15:49:33.469908+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61037	1.1.1.1	53	UDP
2024-09-30T15:49:33.477687+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61038	1.1.1.1	53	UDP
2024-09-30T15:49:34.013806+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	49720	1.1.1.1	53	TCP
2024-09-30T15:49:34.014055+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61039	1.1.1.1	53	UDP
2024-09-30T15:49:34.206665+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61042	1.1.1.1	53	UDP
2024-09-30T15:49:34.214331+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61043	1.1.1.1	53	UDP
2024-09-30T15:49:34.222086+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61044	1.1.1.1	53	UDP
2024-09-30T15:49:34.403413+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61046	1.1.1.1	53	UDP
2024-09-30T15:49:34.410632+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61047	1.1.1.1	53	UDP
2024-09-30T15:49:34.419094+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61048	1.1.1.1	53	UDP
2024-09-30T15:49:34.430244+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61049	1.1.1.1	53	UDP
2024-09-30T15:49:34.602401+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61051	1.1.1.1	53	UDP
2024-09-30T15:49:34.648775+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61052	1.1.1.1	53	UDP
2024-09-30T15:49:34.666094+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61054	1.1.1.1	53	UDP
2024-09-30T15:49:34.853621+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61056	1.1.1.1	53	UDP
2024-09-30T15:49:34.879597+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61059	1.1.1.1	53	UDP
2024-09-30T15:49:35.068827+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61062	1.1.1.1	53	UDP
2024-09-30T15:49:35.076376+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61063	1.1.1.1	53	UDP
2024-09-30T15:49:35.084705+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61064	1.1.1.1	53	UDP
2024-09-30T15:49:35.258581+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61066	1.1.1.1	53	UDP
2024-09-30T15:49:35.266193+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61067	1.1.1.1	53	UDP
2024-09-30T15:49:35.471975+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61071	1.1.1.1	53	UDP
2024-09-30T15:49:35.487866+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61073	1.1.1.1	53	UDP
2024-09-30T15:49:35.496684+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61074	1.1.1.1	53	UDP
2024-09-30T15:49:35.743660+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61076	1.1.1.1	53	UDP
2024-09-30T15:49:35.827266+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61079	1.1.1.1	53	UDP
2024-09-30T15:49:36.155295+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61082	1.1.1.1	53	UDP
2024-09-30T15:49:36.164961+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61083	1.1.1.1	53	UDP
2024-09-30T15:49:36.358573+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61087	1.1.1.1	53	UDP
2024-09-30T15:49:36.371329+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61088	1.1.1.1	53	UDP
2024-09-30T15:49:36.568999+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61093	1.1.1.1	53	UDP
2024-09-30T15:49:36.764370+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61096	1.1.1.1	53	UDP
2024-09-30T15:49:36.772200+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61097	1.1.1.1	53	UDP
2024-09-30T15:49:36.779502+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61098	1.1.1.1	53	UDP
2024-09-30T15:49:36.786918+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61099	1.1.1.1	53	UDP
2024-09-30T15:49:36.962585+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61101	1.1.1.1	53	UDP
2024-09-30T15:49:36.970662+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61102	1.1.1.1	53	UDP
2024-09-30T15:49:37.164040+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61106	1.1.1.1	53	UDP
2024-09-30T15:49:37.172115+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61107	1.1.1.1	53	UDP
2024-09-30T15:49:37.180080+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61108	1.1.1.1	53	UDP
2024-09-30T15:49:37.188915+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61109	1.1.1.1	53	UDP
2024-09-30T15:49:37.367165+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61111	1.1.1.1	53	UDP
2024-09-30T15:49:37.375424+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61112	1.1.1.1	53	UDP
2024-09-30T15:49:37.383705+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61113	1.1.1.1	53	UDP
2024-09-30T15:49:37.393458+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61114	1.1.1.1	53	UDP
2024-09-30T15:49:37.582518+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61116	1.1.1.1	53	UDP
2024-09-30T15:49:37.599352+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61118	1.1.1.1	53	UDP
2024-09-30T15:49:37.607851+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	61119	1.1.1.1	53	UDP
2024-09-30T15:49:37.952492+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	57865	1.1.1.1	53	UDP
2024-09-30T15:49:37.972109+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	57866	1.1.1.1	53	UDP
2024-09-30T15:49:37.980148+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	57867	1.1.1.1	53	UDP
2024-09-30T15:49:38.169601+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	57870	1.1.1.1	53	UDP
2024-09-30T15:49:38.191532+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	57872	1.1.1.1	53	UDP
2024-09-30T15:49:38.212281+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	57873	1.1.1.1	53	UDP
2024-09-30T15:49:38.404867+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	57875	1.1.1.1	53	UDP
2024-09-30T15:49:38.466325+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	57876	1.1.1.1	53	UDP
2024-09-30T15:49:38.480500+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	57877	1.1.1.1	53	UDP
2024-09-30T15:49:39.041746+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	57885	1.1.1.1	53	UDP
2024-09-30T15:49:39.050321+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	57886	1.1.1.1	53	UDP
2024-09-30T15:49:39.265955+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	57892	1.1.1.1	53	UDP
2024-09-30T15:49:39.273501+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	57893	1.1.1.1	53	UDP
2024-09-30T15:49:39.478728+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	57898	1.1.1.1	53	UDP
2024-09-30T15:49:39.688374+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	57901	1.1.1.1	53	UDP
2024-09-30T15:49:39.706109+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	57903	1.1.1.1	53	UDP
2024-09-30T15:49:39.885270+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	57905	1.1.1.1	53	UDP
2024-09-30T15:49:39.893573+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	57906	1.1.1.1	53	UDP
2024-09-30T15:49:39.903055+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	57907	1.1.1.1	53	UDP
2024-09-30T15:49:39.910643+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	57908	1.1.1.1	53	UDP
2024-09-30T15:49:40.085240+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	57910	1.1.1.1	53	UDP
2024-09-30T15:49:40.100967+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	57912	1.1.1.1	53	UDP
2024-09-30T15:49:40.289665+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	57915	1.1.1.1	53	UDP
2024-09-30T15:49:40.496194+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	57920	1.1.1.1	53	UDP
2024-09-30T15:49:40.525386+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	57923	1.1.1.1	53	UDP
2024-09-30T15:49:40.712762+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	57926	1.1.1.1	53	UDP
2024-09-30T15:49:40.728333+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	57927	1.1.1.1	53	UDP
2024-09-30T15:49:40.943630+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	57931	1.1.1.1	53	UDP
2024-09-30T15:49:40.953023+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	57932	1.1.1.1	53	UDP
2024-09-30T15:49:40.960509+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	57933	1.1.1.1	53	UDP
2024-09-30T15:49:41.660545+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	57936	1.1.1.1	53	UDP
2024-09-30T15:49:41.669889+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	57937	1.1.1.1	53	UDP
2024-09-30T15:49:41.857939+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	57940	1.1.1.1	53	UDP
2024-09-30T15:49:41.881831+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	57942	1.1.1.1	53	UDP
2024-09-30T15:49:42.084071+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	57946	1.1.1.1	53	UDP
2024-09-30T15:49:42.092212+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	57947	1.1.1.1	53	UDP
2024-09-30T15:49:42.101236+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	57948	1.1.1.1	53	UDP
2024-09-30T15:49:42.273885+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	57950	1.1.1.1	53	UDP
2024-09-30T15:49:42.290932+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	57952	1.1.1.1	53	UDP
2024-09-30T15:49:42.499931+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	57955	1.1.1.1	53	UDP
2024-09-30T15:49:42.507845+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	57956	1.1.1.1	53	UDP
2024-09-30T15:49:42.515649+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	57957	1.1.1.1	53	UDP
2024-09-30T15:49:42.525684+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	57958	1.1.1.1	53	UDP
2024-09-30T15:49:42.873021+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52392	1.1.1.1	53	UDP
2024-09-30T15:49:42.883079+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52393	1.1.1.1	53	UDP
2024-09-30T15:49:42.898560+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52395	1.1.1.1	53	UDP
2024-09-30T15:49:43.073523+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52397	1.1.1.1	53	UDP
2024-09-30T15:49:43.082056+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52398	1.1.1.1	53	UDP
2024-09-30T15:49:43.277891+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52402	1.1.1.1	53	UDP
2024-09-30T15:49:43.285656+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52403	1.1.1.1	53	UDP
2024-09-30T15:49:43.293237+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52404	1.1.1.1	53	UDP
2024-09-30T15:49:43.301097+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52405	1.1.1.1	53	UDP
2024-09-30T15:49:43.495140+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52407	1.1.1.1	53	UDP
2024-09-30T15:49:43.503542+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52408	1.1.1.1	53	UDP
2024-09-30T15:49:43.511728+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52409	1.1.1.1	53	UDP
2024-09-30T15:49:43.704092+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52412	1.1.1.1	53	UDP
2024-09-30T15:49:43.712444+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52413	1.1.1.1	53	UDP
2024-09-30T15:49:43.720664+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52414	1.1.1.1	53	UDP
2024-09-30T15:49:43.911669+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52417	1.1.1.1	53	UDP
2024-09-30T15:49:43.930013+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52419	1.1.1.1	53	UDP
2024-09-30T15:49:43.937756+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52420	1.1.1.1	53	UDP
2024-09-30T15:49:44.128601+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52423	1.1.1.1	53	UDP
2024-09-30T15:49:44.148468+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52425	1.1.1.1	53	UDP
2024-09-30T15:49:44.322827+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52427	1.1.1.1	53	UDP
2024-09-30T15:49:44.331071+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52428	1.1.1.1	53	UDP
2024-09-30T15:49:44.532366+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52432	1.1.1.1	53	UDP
2024-09-30T15:49:44.540024+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52433	1.1.1.1	53	UDP
2024-09-30T15:49:44.939470+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52442	1.1.1.1	53	UDP
2024-09-30T15:49:44.956817+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52444	1.1.1.1	53	UDP
2024-09-30T15:49:44.964335+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52445	1.1.1.1	53	UDP
2024-09-30T15:49:45.150783+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52447	1.1.1.1	53	UDP
2024-09-30T15:49:45.160203+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52448	1.1.1.1	53	UDP
2024-09-30T15:49:45.172410+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52449	1.1.1.1	53	UDP
2024-09-30T15:49:45.386355+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52454	1.1.1.1	53	UDP
2024-09-30T15:49:45.615192+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52460	1.1.1.1	53	UDP
2024-09-30T15:49:45.797749+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52462	1.1.1.1	53	UDP
2024-09-30T15:49:45.805328+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52463	1.1.1.1	53	UDP
2024-09-30T15:49:45.813562+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52464	1.1.1.1	53	UDP
2024-09-30T15:49:45.825333+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52465	1.1.1.1	53	UDP
2024-09-30T15:49:46.012700+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52467	1.1.1.1	53	UDP
2024-09-30T15:49:46.021162+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52468	1.1.1.1	53	UDP
2024-09-30T15:49:46.028741+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52469	1.1.1.1	53	UDP
2024-09-30T15:49:46.036854+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52470	1.1.1.1	53	UDP
2024-09-30T15:49:46.226845+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52472	1.1.1.1	53	UDP
2024-09-30T15:49:46.433148+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52477	1.1.1.1	53	UDP
2024-09-30T15:49:46.442406+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52478	1.1.1.1	53	UDP
2024-09-30T15:49:46.450396+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52479	1.1.1.1	53	UDP
2024-09-30T15:49:46.458915+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52480	1.1.1.1	53	UDP
2024-09-30T15:49:46.636939+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52482	1.1.1.1	53	UDP
2024-09-30T15:49:46.649506+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52483	1.1.1.1	53	UDP
2024-09-30T15:49:46.657172+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52484	1.1.1.1	53	UDP
2024-09-30T15:49:46.672723+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	52485	1.1.1.1	53	UDP
2024-09-30T15:49:47.213113+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52488	1.1.1.1	53	UDP
2024-09-30T15:49:47.233957+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	52490	1.1.1.1	53	UDP
2024-09-30T15:49:47.421245+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52492	1.1.1.1	53	UDP
2024-09-30T15:49:47.439106+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	52494	1.1.1.1	53	UDP
2024-09-30T15:49:47.682943+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63461	1.1.1.1	53	UDP
2024-09-30T15:49:47.693836+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63462	1.1.1.1	53	UDP
2024-09-30T15:49:47.713806+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63464	1.1.1.1	53	UDP
2024-09-30T15:49:47.890062+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63466	1.1.1.1	53	UDP
2024-09-30T15:49:48.113808+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63472	1.1.1.1	53	UDP
2024-09-30T15:49:48.121781+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63473	1.1.1.1	53	UDP
2024-09-30T15:49:48.129757+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63474	1.1.1.1	53	UDP
2024-09-30T15:49:48.313844+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63476	1.1.1.1	53	UDP
2024-09-30T15:49:48.528116+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63481	1.1.1.1	53	UDP
2024-09-30T15:49:48.537898+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63482	1.1.1.1	53	UDP
2024-09-30T15:49:48.555866+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63484	1.1.1.1	53	UDP
2024-09-30T15:49:48.752523+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63487	1.1.1.1	53	UDP
2024-09-30T15:49:48.960961+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63492	1.1.1.1	53	UDP
2024-09-30T15:49:49.173342+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63497	1.1.1.1	53	UDP
2024-09-30T15:49:49.180766+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63498	1.1.1.1	53	UDP
2024-09-30T15:49:49.377869+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63501	1.1.1.1	53	UDP
2024-09-30T15:49:49.385726+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63502	1.1.1.1	53	UDP
2024-09-30T15:49:49.393078+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63503	1.1.1.1	53	UDP
2024-09-30T15:49:49.600136+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63507	1.1.1.1	53	UDP
2024-09-30T15:49:50.113733+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63514	1.1.1.1	53	UDP
2024-09-30T15:49:50.312119+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63516	1.1.1.1	53	UDP
2024-09-30T15:49:50.323247+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63517	1.1.1.1	53	UDP
2024-09-30T15:49:50.334816+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63518	1.1.1.1	53	UDP
2024-09-30T15:49:50.525255+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63521	1.1.1.1	53	UDP
2024-09-30T15:49:50.542135+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63523	1.1.1.1	53	UDP
2024-09-30T15:49:50.551439+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63524	1.1.1.1	53	UDP
2024-09-30T15:49:51.269034+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63532	1.1.1.1	53	UDP
2024-09-30T15:49:51.284706+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63534	1.1.1.1	53	UDP
2024-09-30T15:49:51.489498+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63537	1.1.1.1	53	UDP
2024-09-30T15:49:51.507936+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63539	1.1.1.1	53	UDP
2024-09-30T15:49:51.690100+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63541	1.1.1.1	53	UDP
2024-09-30T15:49:51.714050+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63543	1.1.1.1	53	UDP
2024-09-30T15:49:51.919281+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63546	1.1.1.1	53	UDP
2024-09-30T15:49:51.929557+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63547	1.1.1.1	53	UDP
2024-09-30T15:49:51.947240+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63549	1.1.1.1	53	UDP
2024-09-30T15:49:52.138617+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63551	1.1.1.1	53	UDP
2024-09-30T15:49:52.158574+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63553	1.1.1.1	53	UDP
2024-09-30T15:49:52.373830+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63557	1.1.1.1	53	UDP
2024-09-30T15:49:52.390071+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63558	1.1.1.1	53	UDP
2024-09-30T15:49:52.400182+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63559	1.1.1.1	53	UDP
2024-09-30T15:49:52.952786+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63565	1.1.1.1	53	UDP
2024-09-30T15:49:52.961870+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63566	1.1.1.1	53	UDP
2024-09-30T15:49:52.978766+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63568	1.1.1.1	53	UDP
2024-09-30T15:49:53.185645+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63571	1.1.1.1	53	UDP
2024-09-30T15:49:53.193677+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63572	1.1.1.1	53	UDP
2024-09-30T15:49:53.201965+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63573	1.1.1.1	53	UDP
2024-09-30T15:49:53.387479+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63575	1.1.1.1	53	UDP
2024-09-30T15:49:53.399860+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63576	1.1.1.1	53	UDP
2024-09-30T15:49:53.407466+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63577	1.1.1.1	53	UDP
2024-09-30T15:49:53.415524+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63578	1.1.1.1	53	UDP
2024-09-30T15:49:53.587006+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63580	1.1.1.1	53	UDP
2024-09-30T15:49:53.795650+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63585	1.1.1.1	53	UDP
2024-09-30T15:49:53.819197+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63586	1.1.1.1	53	UDP
2024-09-30T15:49:53.828052+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63587	1.1.1.1	53	UDP
2024-09-30T15:49:53.837427+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63588	1.1.1.1	53	UDP
2024-09-30T15:49:54.043426+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63593	1.1.1.1	53	UDP
2024-09-30T15:49:54.288018+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63597	1.1.1.1	53	UDP
2024-09-30T15:49:54.493693+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63601	1.1.1.1	53	UDP
2024-09-30T15:49:54.504130+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63602	1.1.1.1	53	UDP
2024-09-30T15:49:55.055772+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63606	1.1.1.1	53	UDP
2024-09-30T15:49:55.286704+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63611	1.1.1.1	53	UDP
2024-09-30T15:49:55.497061+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63617	1.1.1.1	53	UDP
2024-09-30T15:49:55.855895+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63622	1.1.1.1	53	UDP
2024-09-30T15:49:55.864321+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63623	1.1.1.1	53	UDP
2024-09-30T15:49:56.066296+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63627	1.1.1.1	53	UDP
2024-09-30T15:49:56.074971+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63628	1.1.1.1	53	UDP
2024-09-30T15:49:56.270386+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63630	1.1.1.1	53	UDP
2024-09-30T15:49:56.280034+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63631	1.1.1.1	53	UDP
2024-09-30T15:49:56.297682+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63633	1.1.1.1	53	UDP
2024-09-30T15:49:56.486599+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63635	1.1.1.1	53	UDP
2024-09-30T15:49:56.496545+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63636	1.1.1.1	53	UDP
2024-09-30T15:49:56.513291+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63638	1.1.1.1	53	UDP
2024-09-30T15:49:56.717717+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63642	1.1.1.1	53	UDP
2024-09-30T15:49:56.725830+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63643	1.1.1.1	53	UDP
2024-09-30T15:49:56.929043+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63646	1.1.1.1	53	UDP
2024-09-30T15:49:56.937369+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63647	1.1.1.1	53	UDP
2024-09-30T15:49:57.121200+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63650	1.1.1.1	53	UDP
2024-09-30T15:49:57.129569+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63651	1.1.1.1	53	UDP
2024-09-30T15:49:57.144587+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	63653	1.1.1.1	53	UDP
2024-09-30T15:49:57.329990+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63655	1.1.1.1	53	UDP
2024-09-30T15:49:57.359017+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63657	1.1.1.1	53	UDP
2024-09-30T15:49:57.367817+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	63658	1.1.1.1	53	UDP
2024-09-30T15:49:57.559429+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63660	1.1.1.1	53	UDP
2024-09-30T15:49:57.569623+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63661	1.1.1.1	53	UDP
2024-09-30T15:49:57.586386+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	63663	1.1.1.1	53	UDP
2024-09-30T15:49:57.819588+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	49741	1.1.1.1	53	UDP
2024-09-30T15:49:57.828896+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	49742	1.1.1.1	53	UDP
2024-09-30T15:49:58.034774+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	49746	1.1.1.1	53	UDP
2024-09-30T15:49:58.042749+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	49747	1.1.1.1	53	UDP
2024-09-30T15:49:58.228664+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	49750	1.1.1.1	53	UDP
2024-09-30T15:49:58.237019+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	49751	1.1.1.1	53	UDP
2024-09-30T15:49:58.262274+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	49753	1.1.1.1	53	UDP
2024-09-30T15:49:58.909360+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	49760	1.1.1.1	53	UDP
2024-09-30T15:49:59.147409+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	49766	1.1.1.1	53	UDP
2024-09-30T15:49:59.367252+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	49771	1.1.1.1	53	UDP
2024-09-30T15:49:59.575239+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	49775	1.1.1.1	53	UDP
2024-09-30T15:49:59.800697+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	49782	1.1.1.1	53	UDP
2024-09-30T15:50:00.229955+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	49791	1.1.1.1	53	UDP
2024-09-30T15:50:00.272198+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	49793	1.1.1.1	53	UDP
2024-09-30T15:50:00.456089+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	49796	1.1.1.1	53	UDP
2024-09-30T15:50:00.675913+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	49802	1.1.1.1	53	UDP
2024-09-30T15:50:00.684154+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	49803	1.1.1.1	53	UDP
2024-09-30T15:50:00.877829+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	49805	1.1.1.1	53	UDP
2024-09-30T15:50:00.895133+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	49807	1.1.1.1	53	UDP
2024-09-30T15:50:01.146877+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	49810	1.1.1.1	53	UDP
2024-09-30T15:50:01.634608+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	49815	1.1.1.1	53	UDP
2024-09-30T15:50:01.651775+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	49817	1.1.1.1	53	UDP
2024-09-30T15:50:01.879040+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	49823	1.1.1.1	53	UDP
2024-09-30T15:50:02.056562+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	49825	1.1.1.1	53	UDP
2024-09-30T15:50:02.089133+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	49828	1.1.1.1	53	UDP
2024-09-30T15:50:02.296365+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	49833	1.1.1.1	53	UDP
2024-09-30T15:50:02.495726+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	49835	1.1.1.1	53	UDP
2024-09-30T15:50:02.516492+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	49837	1.1.1.1	53	UDP
2024-09-30T15:50:03.178151+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	65260	1.1.1.1	53	UDP
2024-09-30T15:50:03.791578+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	65274	1.1.1.1	53	UDP
2024-09-30T15:50:03.807933+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	65276	1.1.1.1	53	UDP
2024-09-30T15:50:03.816106+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	65277	1.1.1.1	53	UDP
2024-09-30T15:50:04.703674+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	65281	1.1.1.1	53	UDP
2024-09-30T15:50:05.121982+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	65292	1.1.1.1	53	UDP
2024-09-30T15:50:05.510579+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	65301	1.1.1.1	53	UDP
2024-09-30T15:50:05.725866+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	65304	1.1.1.1	53	UDP
2024-09-30T15:50:05.734156+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	65305	1.1.1.1	53	UDP
2024-09-30T15:50:05.927893+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	65310	1.1.1.1	53	UDP
2024-09-30T15:50:06.372459+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	65322	1.1.1.1	53	UDP
2024-09-30T15:50:06.549974+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	65325	1.1.1.1	53	UDP
2024-09-30T15:50:06.559438+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	65326	1.1.1.1	53	UDP
2024-09-30T15:50:07.184305+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	65341	1.1.1.1	53	UDP
2024-09-30T15:50:07.397198+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	65344	1.1.1.1	53	UDP
2024-09-30T15:50:07.613411+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	65349	1.1.1.1	53	UDP
2024-09-30T15:50:07.621362+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	65350	1.1.1.1	53	UDP
2024-09-30T15:50:07.983791+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	65344	1.1.1.1	53	UDP
2024-09-30T15:50:09.515256+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	65349	1.1.1.1	53	UDP
2024-09-30T15:50:09.526161+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	65350	1.1.1.1	53	UDP
2024-09-30T15:50:10.503335+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	65376	1.1.1.1	53	UDP
2024-09-30T15:50:11.274459+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	65394	1.1.1.1	53	UDP
2024-09-30T15:50:11.490518+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	65402	1.1.1.1	53	UDP
2024-09-30T15:50:11.660372+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	65405	1.1.1.1	53	UDP
2024-09-30T15:50:11.668993+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	65406	1.1.1.1	53	UDP
2024-09-30T15:50:11.677403+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	65407	1.1.1.1	53	UDP
2024-09-30T15:50:12.279931+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	65421	1.1.1.1	53	UDP
2024-09-30T15:50:13.122780+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55567	1.1.1.1	53	UDP
2024-09-30T15:50:13.134072+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55568	1.1.1.1	53	UDP
2024-09-30T15:50:13.316078+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55573	1.1.1.1	53	UDP
2024-09-30T15:50:13.728005+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55585	1.1.1.1	53	UDP
2024-09-30T15:50:15.353726+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55618	1.1.1.1	53	UDP
2024-09-30T15:50:17.820554+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55284	1.1.1.1	53	UDP
2024-09-30T15:50:18.941856+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55313	1.1.1.1	53	UDP
2024-09-30T15:50:20.406251+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55348	1.1.1.1	53	UDP
2024-09-30T15:50:21.586030+0200	2829498	ETPRO MALWARE GandCrab DNS Lookup 1	1	192.168.2.8	55378	1.1.1.1	53	UDP
2024-09-30T15:50:21.774081+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	55383	1.1.1.1	53	UDP
2024-09-30T15:50:22.525580+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	55403	1.1.1.1	53	UDP
2024-09-30T15:50:23.493561+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	61836	1.1.1.1	53	UDP
2024-09-30T15:50:27.580875+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	61918	1.1.1.1	53	UDP
2024-09-30T15:50:29.652400+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	53547	1.1.1.1	53	UDP
2024-09-30T15:50:31.438340+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	53582	1.1.1.1	53	UDP
2024-09-30T15:50:34.020756+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	59053	1.1.1.1	53	UDP
2024-09-30T15:50:34.181758+0200	2026737	ET MALWARE Observed GandCrab Domain (gandcrab .bit)	1	192.168.2.8	59056	1.1.1.1	53	UDP
2024-09-30T15:50:34.725242+0200	2829500	ETPRO MALWARE GandCrab DNS Lookup 3	1	192.168.2.8	59066	1.1.1.1	53	UDP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 30, 2024 15:48:54.111927986 CEST	49714	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:54.116849899 CEST	53	49714	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:54.119570971 CEST	49714	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:54.119642019 CEST	49714	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:54.124700069 CEST	53	49714	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:54.127490044 CEST	49714	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:54.132273912 CEST	53	49714	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:54.643755913 CEST	53	49714	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:54.647600889 CEST	49714	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:54.652859926 CEST	53	49714	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:54.655503035 CEST	49714	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:19.561013937 CEST	49715	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:19.565851927 CEST	53	49715	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:19.565912008 CEST	49715	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:19.565948009 CEST	49715	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:19.570718050 CEST	53	49715	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:19.570759058 CEST	49715	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:19.575612068 CEST	53	49715	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.009888887 CEST	53	49715	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.010165930 CEST	49715	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.015755892 CEST	53	49715	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.015839100 CEST	49715	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:28.120527029 CEST	49717	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:28.125351906 CEST	53	49717	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:28.127682924 CEST	49717	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:28.127701044 CEST	49717	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:28.132508993 CEST	53	49717	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:28.136281967 CEST	49717	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:28.141068935 CEST	53	49717	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:28.640166998 CEST	53	49717	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:28.640274048 CEST	49717	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:28.646142006 CEST	53	49717	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:28.646225929 CEST	49717	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.948622942 CEST	49718	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.955601931 CEST	53	49718	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.955740929 CEST	49718	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.955786943 CEST	49718	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.963783979 CEST	53	49718	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.966922045 CEST	49718	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.974374056 CEST	53	49718	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:31.419702053 CEST	53	49718	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:31.421634912 CEST	49718	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:31.427172899 CEST	53	49718	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:31.427690983 CEST	49718	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:31.842936993 CEST	49719	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:31.847754955 CEST	53	49719	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:31.847825050 CEST	49719	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:31.847852945 CEST	49719	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:31.852699041 CEST	53	49719	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:31.852746964 CEST	49719	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:31.860688925 CEST	53	49719	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:32.299913883 CEST	53	49719	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:32.300107002 CEST	49719	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:32.305393934 CEST	53	49719	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:32.305461884 CEST	49719	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.484858990 CEST	49720	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.489825964 CEST	53	49720	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:33.489921093 CEST	49720	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.489939928 CEST	49720	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.494818926 CEST	53	49720	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:33.494891882 CEST	49720	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.499737024 CEST	53	49720	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.013612986 CEST	53	49720	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.013806105 CEST	49720	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.019515991 CEST	53	49720	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.019593954 CEST	49720	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:08.192933083 CEST	49721	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:08.197833061 CEST	53	49721	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:08.197902918 CEST	49721	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:08.198072910 CEST	49721	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:08.204636097 CEST	53	49721	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:08.204695940 CEST	49721	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:08.209733009 CEST	53	49721	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.514724016 CEST	53	49721	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.514930010 CEST	49721	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:09.515445948 CEST	53	49721	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.515513897 CEST	49721	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:09.515642881 CEST	53	49721	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.515690088 CEST	49721	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:09.517029047 CEST	53	49721	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.517080069 CEST	49721	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:09.523694038 CEST	53	49721	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.523756981 CEST	49721	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.722248077 CEST	49722	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.727348089 CEST	53	49722	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.727427006 CEST	49722	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.727447987 CEST	49722	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.732815981 CEST	53	49722	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.732969046 CEST	49722	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.738028049 CEST	53	49722	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:16.265167952 CEST	53	49722	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:16.265276909 CEST	49722	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:16.270831108 CEST	53	49722	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:16.270900965 CEST	49722	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.051647902 CEST	49723	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.056560040 CEST	53	49723	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.056617022 CEST	49723	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.056648016 CEST	49723	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.061552048 CEST	53	49723	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.061593056 CEST	49723	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.066441059 CEST	53	49723	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.512486935 CEST	53	49723	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.512662888 CEST	49723	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.517903090 CEST	53	49723	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.517967939 CEST	49723	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:25.218348026 CEST	49724	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:25.223193884 CEST	53	49724	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:25.225719929 CEST	49724	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:25.225756884 CEST	49724	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:25.230539083 CEST	53	49724	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:25.230586052 CEST	49724	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:25.235400915 CEST	53	49724	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:25.693334103 CEST	53	49724	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:25.693533897 CEST	49724	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:25.698906898 CEST	53	49724	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:25.699017048 CEST	49724	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.407490969 CEST	49725	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.413176060 CEST	53	49725	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:30.413269043 CEST	49725	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.413331985 CEST	49725	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.418150902 CEST	53	49725	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:30.418227911 CEST	49725	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.423120975 CEST	53	49725	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:30.876857042 CEST	53	49725	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:30.880073071 CEST	49725	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.885953903 CEST	53	49725	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:30.887753010 CEST	49725	53	192.168.2.8	1.1.1.1

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 30, 2024 15:48:37.888866901 CEST	54175	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:37.900368929 CEST	53	54175	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:38.581779957 CEST	54572	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:38.729351997 CEST	53	54572	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:38.752686977 CEST	54573	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:38.760334969 CEST	53	54573	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:38.760971069 CEST	54574	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:38.777232885 CEST	53	54574	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:38.777504921 CEST	54575	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:38.799174070 CEST	53	54575	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:38.799468994 CEST	54576	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:38.810766935 CEST	53	54576	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:38.810992956 CEST	54577	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:38.820362091 CEST	53	54577	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.048804998 CEST	54578	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.057279110 CEST	53	54578	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.057854891 CEST	54579	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.074361086 CEST	53	54579	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.074832916 CEST	54580	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.090161085 CEST	53	54580	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.091227055 CEST	54581	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.100474119 CEST	53	54581	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.100923061 CEST	54582	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.117669106 CEST	53	54582	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.323029995 CEST	54583	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.330759048 CEST	53	54583	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.331285000 CEST	54584	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.342067957 CEST	53	54584	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.342454910 CEST	54585	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.363137960 CEST	53	54585	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.363765001 CEST	54586	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.379297972 CEST	53	54586	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.379641056 CEST	54587	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.394572020 CEST	53	54587	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.599663973 CEST	54588	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.606801987 CEST	53	54588	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.607213020 CEST	54589	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.618275881 CEST	53	54589	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.618695021 CEST	54590	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.639086008 CEST	53	54590	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.639480114 CEST	54591	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.648375034 CEST	53	54591	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.648745060 CEST	54592	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.657042027 CEST	53	54592	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.877727985 CEST	54593	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.885538101 CEST	53	54593	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.885895967 CEST	54594	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.896874905 CEST	53	54594	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.897427082 CEST	54595	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.906586885 CEST	53	54595	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.906975031 CEST	54596	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.916112900 CEST	53	54596	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:39.916876078 CEST	54597	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:39.926603079 CEST	53	54597	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:40.546019077 CEST	54598	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:40.553308010 CEST	53	54598	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:40.553740978 CEST	54599	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:40.569865942 CEST	53	54599	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:40.570427895 CEST	54600	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:40.585597038 CEST	53	54600	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:40.586086035 CEST	54601	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:40.600589991 CEST	53	54601	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:40.601177931 CEST	54602	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:40.611335039 CEST	53	54602	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:40.863394976 CEST	54603	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:40.871020079 CEST	53	54603	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:40.871579885 CEST	54604	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:40.887048960 CEST	53	54604	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:40.887546062 CEST	54605	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:40.898397923 CEST	53	54605	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:40.899023056 CEST	54606	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:40.909986973 CEST	53	54606	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:40.910449028 CEST	54607	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:40.919997931 CEST	53	54607	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:41.167113066 CEST	54608	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:41.174468040 CEST	53	54608	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:41.175173044 CEST	54609	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:41.191196918 CEST	53	54609	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:41.191705942 CEST	54610	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:41.200045109 CEST	53	54610	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:41.200614929 CEST	54611	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:41.216150045 CEST	53	54611	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:41.216787100 CEST	54612	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:41.233854055 CEST	53	54612	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:41.438801050 CEST	54613	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:41.446026087 CEST	53	54613	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:41.446562052 CEST	54614	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:41.461703062 CEST	53	54614	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:41.462281942 CEST	54615	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:41.478741884 CEST	53	54615	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:41.479460001 CEST	54616	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:41.499664068 CEST	53	54616	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:41.511836052 CEST	54617	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:41.519851923 CEST	53	54617	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:41.730658054 CEST	54618	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:41.737417936 CEST	53	54618	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:41.741938114 CEST	54619	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:41.758264065 CEST	53	54619	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:41.758805037 CEST	54620	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:41.766812086 CEST	53	54620	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:41.767193079 CEST	54621	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:41.775093079 CEST	53	54621	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:41.775543928 CEST	54622	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:41.784480095 CEST	53	54622	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:41.985883951 CEST	54623	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:41.994505882 CEST	53	54623	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:41.995136023 CEST	54624	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:42.005197048 CEST	53	54624	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:42.005579948 CEST	54625	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:42.023808956 CEST	53	54625	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:42.024178982 CEST	54626	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:42.032655001 CEST	53	54626	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:42.033013105 CEST	54627	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:42.040610075 CEST	53	54627	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:42.254570961 CEST	54628	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:42.261465073 CEST	53	54628	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:42.261884928 CEST	54629	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:42.276597977 CEST	53	54629	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:42.276928902 CEST	54630	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:42.287679911 CEST	53	54630	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:42.288038015 CEST	54631	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:42.304768085 CEST	53	54631	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:42.305063009 CEST	54632	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:42.314426899 CEST	53	54632	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:42.521641970 CEST	54633	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:42.528512001 CEST	53	54633	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:42.528925896 CEST	54634	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:42.545141935 CEST	53	54634	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:42.545504093 CEST	54635	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:42.552634954 CEST	53	54635	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:42.552911997 CEST	54636	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:42.568911076 CEST	53	54636	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:42.569206953 CEST	54637	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:42.580096960 CEST	53	54637	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:43.073184013 CEST	53128	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:43.380258083 CEST	53	53128	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:43.392066002 CEST	53129	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:43.399560928 CEST	53	53129	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:43.399992943 CEST	53130	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:43.419209957 CEST	53	53130	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:43.419559002 CEST	53131	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:43.429235935 CEST	53	53131	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:43.429550886 CEST	53132	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:43.438060999 CEST	53	53132	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:43.439265013 CEST	53133	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:43.449506998 CEST	53	53133	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:43.771626949 CEST	53134	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:43.778915882 CEST	53	53134	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:43.779485941 CEST	53135	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:43.788625956 CEST	53	53135	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:43.788995981 CEST	53136	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:43.804064989 CEST	53	53136	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:43.804472923 CEST	53137	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:43.813400984 CEST	53	53137	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:43.813812017 CEST	53138	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:43.823776960 CEST	53	53138	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.036155939 CEST	53139	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.045229912 CEST	53	53139	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.045819998 CEST	53140	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.070025921 CEST	53	53140	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.070384979 CEST	53141	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.078681946 CEST	53	53141	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.079098940 CEST	53142	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.088496923 CEST	53	53142	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.088745117 CEST	53143	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.098745108 CEST	53	53143	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.317398071 CEST	53144	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.326344013 CEST	53	53144	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.326870918 CEST	53145	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.336164951 CEST	53	53145	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.336757898 CEST	53146	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.349229097 CEST	53	53146	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.353557110 CEST	53147	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.369457006 CEST	53	53147	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.369908094 CEST	53148	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.379405022 CEST	53	53148	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.579965115 CEST	53149	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.587311029 CEST	53	53149	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.587989092 CEST	53150	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.596462011 CEST	53	53150	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.596829891 CEST	53151	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.612993002 CEST	53	53151	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.613352060 CEST	53152	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.636149883 CEST	53	53152	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.636481047 CEST	53153	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.651611090 CEST	53	53153	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.861977100 CEST	53154	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.868995905 CEST	53	53154	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.869493961 CEST	53155	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.877644062 CEST	53	53155	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.878020048 CEST	53156	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.890388966 CEST	53	53156	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.890748024 CEST	53157	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.898241997 CEST	53	53157	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:44.898597956 CEST	53158	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:44.914555073 CEST	53	53158	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:45.157536983 CEST	53159	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:45.166635990 CEST	53	53159	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:45.167484999 CEST	53160	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:45.175230026 CEST	53	53160	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:45.175657988 CEST	53161	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:45.182452917 CEST	53	53161	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:45.183096886 CEST	53162	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:45.192682981 CEST	53	53162	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:45.193041086 CEST	53163	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:45.210306883 CEST	53	53163	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:45.768480062 CEST	53164	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:45.775732040 CEST	53	53164	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:45.776240110 CEST	53165	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:45.801177025 CEST	53	53165	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:45.801623106 CEST	53166	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:45.812800884 CEST	53	53166	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:45.813184023 CEST	53167	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:45.828454971 CEST	53	53167	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:45.828849077 CEST	53168	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:45.849891901 CEST	53	53168	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.124674082 CEST	53169	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.132414103 CEST	53	53169	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.132886887 CEST	53170	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.149527073 CEST	53	53170	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.149926901 CEST	53171	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.160145998 CEST	53	53171	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.160572052 CEST	53172	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.167994976 CEST	53	53172	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.168349981 CEST	53173	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.182929993 CEST	53	53173	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.399909973 CEST	55395	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.407286882 CEST	53	55395	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.416131973 CEST	55396	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.424917936 CEST	53	55396	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.425403118 CEST	55397	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.433192015 CEST	53	55397	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.433696985 CEST	55398	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.443484068 CEST	53	55398	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.444021940 CEST	55399	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.454333067 CEST	53	55399	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.644721985 CEST	55400	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.652364969 CEST	53	55400	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.653141022 CEST	55401	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.662076950 CEST	53	55401	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.663772106 CEST	55402	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.673144102 CEST	53	55402	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.675772905 CEST	55403	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.683716059 CEST	53	55403	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.687799931 CEST	55404	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.697062969 CEST	53	55404	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.920686960 CEST	50372	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.927767038 CEST	53	50372	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.929881096 CEST	50373	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.940696955 CEST	53	50373	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.941804886 CEST	50374	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.952009916 CEST	53	50374	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.953844070 CEST	50375	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.962127924 CEST	53	50375	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:46.964740992 CEST	50376	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:46.972928047 CEST	53	50376	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:47.247948885 CEST	50377	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:47.255215883 CEST	53	50377	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:47.255863905 CEST	50378	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:47.263951063 CEST	53	50378	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:47.264287949 CEST	50379	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:47.280107021 CEST	53	50379	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:47.280455112 CEST	50380	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:47.292902946 CEST	53	50380	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:47.293256998 CEST	50381	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:47.308072090 CEST	53	50381	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:47.564438105 CEST	50593	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:47.571950912 CEST	53	50593	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:47.572439909 CEST	50594	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:47.582767963 CEST	53	50594	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:47.583225965 CEST	50595	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:47.593496084 CEST	53	50595	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:47.593878984 CEST	50596	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:47.613962889 CEST	53	50596	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:47.614434004 CEST	50597	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:47.630242109 CEST	53	50597	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:47.907202005 CEST	53129	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:47.996720076 CEST	53	53129	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:48.009452105 CEST	53130	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:48.016247034 CEST	53	53130	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:48.016885042 CEST	53131	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:48.026335955 CEST	53	53131	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:48.026715040 CEST	53132	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:48.035074949 CEST	53	53132	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:48.035604000 CEST	53133	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:48.043047905 CEST	53	53133	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:48.043509960 CEST	53134	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:48.053291082 CEST	53	53134	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:48.297780037 CEST	53135	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:48.304826975 CEST	53	53135	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:48.305425882 CEST	53136	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:48.321271896 CEST	53	53136	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:48.321634054 CEST	53137	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:48.337549925 CEST	53	53137	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:48.337902069 CEST	53138	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:48.348709106 CEST	53	53138	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:48.349102020 CEST	53139	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:48.358347893 CEST	53	53139	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:48.677659988 CEST	53140	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:48.685535908 CEST	53	53140	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:48.686084986 CEST	53141	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:48.694850922 CEST	53	53141	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:48.695242882 CEST	53142	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:48.702753067 CEST	53	53142	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:48.703151941 CEST	53143	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:48.710948944 CEST	53	53143	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:48.711328030 CEST	53144	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:48.719527960 CEST	53	53144	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:48.978781939 CEST	54684	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:48.986069918 CEST	53	54684	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:48.986548901 CEST	54685	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:48.994096994 CEST	53	54685	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:48.994473934 CEST	54686	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:49.002821922 CEST	53	54686	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:49.003164053 CEST	54687	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:49.019334078 CEST	53	54687	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:49.019772053 CEST	54688	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:49.027883053 CEST	53	54688	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:49.273780107 CEST	54689	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:49.281478882 CEST	53	54689	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:49.281949997 CEST	54690	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:49.291671991 CEST	53	54690	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:49.292013884 CEST	54691	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:49.308525085 CEST	53	54691	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:49.309036016 CEST	54692	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:49.320370913 CEST	53	54692	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:49.320771933 CEST	54693	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:49.329644918 CEST	53	54693	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:49.565324068 CEST	54694	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:49.572170019 CEST	53	54694	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:49.572791100 CEST	54695	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:49.583076954 CEST	53	54695	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:49.583432913 CEST	54696	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:49.592915058 CEST	53	54696	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:49.593241930 CEST	54697	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:49.603442907 CEST	53	54697	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:49.603751898 CEST	54698	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:49.626266956 CEST	53	54698	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:50.008105040 CEST	54699	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:50.015222073 CEST	53	54699	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:50.015824080 CEST	54700	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:50.024143934 CEST	53	54700	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:50.024549007 CEST	54701	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:50.032826900 CEST	53	54701	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:50.033472061 CEST	54702	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:50.049943924 CEST	53	54702	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:50.057625055 CEST	54703	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:50.079598904 CEST	53	54703	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:50.592495918 CEST	54704	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:50.599877119 CEST	53	54704	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:50.601794004 CEST	54705	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:50.609138966 CEST	53	54705	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:50.609630108 CEST	54706	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:50.618889093 CEST	53	54706	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:50.619525909 CEST	54707	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:50.626848936 CEST	53	54707	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:50.628901005 CEST	54708	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:50.636559010 CEST	53	54708	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:50.845707893 CEST	54709	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:50.853581905 CEST	53	54709	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:50.853982925 CEST	54710	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:50.861920118 CEST	53	54710	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:50.862190962 CEST	54711	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:50.877094984 CEST	53	54711	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:50.877429962 CEST	54712	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:50.884625912 CEST	53	54712	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:50.884906054 CEST	54713	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:50.904119015 CEST	53	54713	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:51.081722021 CEST	54714	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:52.060384035 CEST	53	54714	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:52.061924934 CEST	54715	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:52.073223114 CEST	53	54715	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:52.079438925 CEST	54716	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:52.088244915 CEST	53	54716	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:52.088625908 CEST	54717	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:52.108290911 CEST	53	54717	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:52.108654976 CEST	54718	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:52.124521017 CEST	53	54718	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:52.289715052 CEST	54719	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:52.297302008 CEST	53	54719	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:52.297817945 CEST	54720	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:52.306101084 CEST	53	54720	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:52.306454897 CEST	54721	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:52.313873053 CEST	53	54721	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:52.314269066 CEST	54722	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:52.324599981 CEST	53	54722	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:52.324995995 CEST	54723	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:52.334901094 CEST	53	54723	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:52.528790951 CEST	54724	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:52.535835028 CEST	53	54724	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:52.536350012 CEST	54725	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:52.544322968 CEST	53	54725	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:52.544877052 CEST	54726	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:52.552990913 CEST	53	54726	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:52.553378105 CEST	54727	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:52.561080933 CEST	53	54727	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:52.561536074 CEST	54728	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:52.570739985 CEST	53	54728	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.114732027 CEST	56463	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.163815975 CEST	53	56463	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.174880028 CEST	56464	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.181986094 CEST	53	56464	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.182487965 CEST	56465	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.203315973 CEST	53	56465	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.203778982 CEST	56466	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.212074995 CEST	53	56466	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.213757992 CEST	56467	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.221133947 CEST	53	56467	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.221533060 CEST	56468	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.229602098 CEST	53	56468	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.421200991 CEST	56469	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.428158045 CEST	53	56469	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.428611040 CEST	56470	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.443628073 CEST	53	56470	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.444099903 CEST	56471	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.452233076 CEST	53	56471	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.452694893 CEST	56472	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.473185062 CEST	53	56472	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.473639011 CEST	56473	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.481213093 CEST	53	56473	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.650368929 CEST	56474	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.657643080 CEST	53	56474	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.658133984 CEST	56475	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.666407108 CEST	53	56475	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.666899920 CEST	56476	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.674551964 CEST	53	56476	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.674835920 CEST	56477	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.682962894 CEST	53	56477	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.683366060 CEST	56478	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.692018986 CEST	53	56478	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.863939047 CEST	56479	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.871476889 CEST	53	56479	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.872061968 CEST	56480	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.879645109 CEST	53	56480	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.880002022 CEST	56481	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.896795034 CEST	53	56481	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.897341013 CEST	56482	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.905098915 CEST	53	56482	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:53.905698061 CEST	56483	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:53.913800001 CEST	53	56483	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:54.088120937 CEST	56484	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:54.095360994 CEST	53	56484	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:54.096486092 CEST	56485	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:54.107439995 CEST	53	56485	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:54.647875071 CEST	56486	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:54.657272100 CEST	53	56486	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:54.657633066 CEST	56487	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:54.678875923 CEST	53	56487	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:54.679918051 CEST	56488	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:54.689656019 CEST	53	56488	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:54.848007917 CEST	56489	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:54.855396986 CEST	53	56489	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:54.855834961 CEST	56490	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:54.875467062 CEST	53	56490	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:54.875876904 CEST	56491	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:54.883133888 CEST	53	56491	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:54.883380890 CEST	56492	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:54.891836882 CEST	53	56492	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:54.892194033 CEST	56493	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:54.908113003 CEST	53	56493	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:55.064512968 CEST	56494	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:55.071609020 CEST	53	56494	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:55.071970940 CEST	56495	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:55.092988968 CEST	53	56495	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:55.095299006 CEST	56496	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:55.118210077 CEST	53	56496	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:55.120239019 CEST	56497	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:55.127917051 CEST	53	56497	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:55.130805969 CEST	56498	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:55.150963068 CEST	53	56498	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:55.419929981 CEST	56499	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:55.429853916 CEST	53	56499	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:55.430891037 CEST	56500	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:55.446312904 CEST	53	56500	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:55.454128981 CEST	56501	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:55.463795900 CEST	53	56501	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:55.472954988 CEST	56502	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:55.481750011 CEST	53	56502	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:55.486828089 CEST	56503	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:55.496263027 CEST	53	56503	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:55.751566887 CEST	56504	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:55.761183977 CEST	53	56504	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:55.761651993 CEST	56505	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:55.777686119 CEST	53	56505	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:55.778372049 CEST	56506	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:55.801868916 CEST	53	56506	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:55.802220106 CEST	56507	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:55.812536001 CEST	53	56507	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:55.812928915 CEST	56508	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:55.833978891 CEST	53	56508	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.004024029 CEST	56509	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.011327982 CEST	53	56509	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.011748075 CEST	56510	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.026601076 CEST	53	56510	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.026907921 CEST	56511	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.042658091 CEST	53	56511	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.042943954 CEST	56512	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.052093983 CEST	53	56512	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.052328110 CEST	56513	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.072046041 CEST	53	56513	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.270350933 CEST	56514	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.277393103 CEST	53	56514	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.278029919 CEST	56515	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.288398027 CEST	53	56515	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.288930893 CEST	56516	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.296951056 CEST	53	56516	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.297400951 CEST	56517	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.305700064 CEST	53	56517	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.306395054 CEST	56518	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.317054033 CEST	53	56518	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.504895926 CEST	56519	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.512000084 CEST	53	56519	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.513859034 CEST	56520	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.533514023 CEST	53	56520	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.543222904 CEST	56521	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.550718069 CEST	53	56521	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.551217079 CEST	56522	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.561083078 CEST	53	56522	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.561501980 CEST	56523	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.570241928 CEST	53	56523	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.736105919 CEST	56524	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.746150017 CEST	53	56524	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.746592999 CEST	56525	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.754338980 CEST	53	56525	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.754611969 CEST	56526	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.766834021 CEST	53	56526	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.767139912 CEST	56527	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.776494980 CEST	53	56527	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.776751041 CEST	56528	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.786185026 CEST	53	56528	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.958936930 CEST	56529	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.965825081 CEST	53	56529	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.966504097 CEST	56530	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.974128962 CEST	53	56530	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.974464893 CEST	56531	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.982420921 CEST	53	56531	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.985830069 CEST	56532	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:56.996973991 CEST	53	56532	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:56.998431921 CEST	56533	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:57.006217957 CEST	53	56533	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:57.178370953 CEST	56534	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:57.186465025 CEST	53	56534	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:57.187031984 CEST	56535	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:57.207030058 CEST	53	56535	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:57.207880974 CEST	56536	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:57.215902090 CEST	53	56536	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:57.219836950 CEST	56537	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:57.228276968 CEST	53	56537	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:57.229329109 CEST	56538	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:57.238976955 CEST	53	56538	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:57.415865898 CEST	56539	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:57.423285007 CEST	53	56539	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:57.423702002 CEST	56540	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:57.433834076 CEST	53	56540	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:57.434138060 CEST	56541	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:57.441550970 CEST	53	56541	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:57.441926003 CEST	56542	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:57.449707985 CEST	53	56542	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:57.450076103 CEST	56543	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:57.469775915 CEST	53	56543	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:57.655349016 CEST	51188	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:57.810208082 CEST	53	51188	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:57.818686008 CEST	51189	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:57.825539112 CEST	53	51189	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:57.826138973 CEST	51190	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:57.833713055 CEST	53	51190	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:57.834089994 CEST	51191	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:57.843333006 CEST	53	51191	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:57.843641043 CEST	51192	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:57.852715015 CEST	53	51192	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:57.852972984 CEST	51193	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:57.869250059 CEST	53	51193	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.038014889 CEST	51194	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.046128035 CEST	53	51194	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.046541929 CEST	51195	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.056271076 CEST	53	51195	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.056493044 CEST	51196	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.067534924 CEST	53	51196	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.067908049 CEST	51197	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.076514959 CEST	53	51197	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.076766968 CEST	51198	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.091557980 CEST	53	51198	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.289891958 CEST	51199	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.296941996 CEST	53	51199	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.297422886 CEST	51200	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.318414927 CEST	53	51200	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.318876028 CEST	51201	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.333733082 CEST	53	51201	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.334110022 CEST	51202	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.341587067 CEST	53	51202	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.341916084 CEST	51203	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.359333038 CEST	53	51203	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.521446943 CEST	51204	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.528326035 CEST	53	51204	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.529798031 CEST	51205	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.537663937 CEST	53	51205	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.542071104 CEST	51206	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.612955093 CEST	53	51206	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.613954067 CEST	51207	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.622720957 CEST	53	51207	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.623874903 CEST	51208	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.632074118 CEST	53	51208	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.800905943 CEST	51209	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.808269024 CEST	53	51209	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.808734894 CEST	51210	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.823925972 CEST	53	51210	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.824266911 CEST	51211	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.839190006 CEST	53	51211	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.839509964 CEST	51212	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.853171110 CEST	53	51212	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:58.853491068 CEST	51213	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:58.861850977 CEST	53	51213	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.024301052 CEST	51214	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.031769991 CEST	53	51214	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.032320976 CEST	51215	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.041879892 CEST	53	51215	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.042273045 CEST	51216	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.052365065 CEST	53	51216	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.052707911 CEST	51217	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.060714960 CEST	53	51217	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.060981035 CEST	51218	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.069152117 CEST	53	51218	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.238903046 CEST	51219	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.245985985 CEST	53	51219	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.246507883 CEST	51220	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.257591009 CEST	53	51220	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.258246899 CEST	51221	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.265930891 CEST	53	51221	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.268887997 CEST	51222	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.276648998 CEST	53	51222	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.277055025 CEST	51223	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.285494089 CEST	53	51223	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.482364893 CEST	51224	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.489177942 CEST	53	51224	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.489584923 CEST	51225	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.498243093 CEST	53	51225	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.498521090 CEST	51226	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.508069038 CEST	53	51226	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.508351088 CEST	51227	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.516634941 CEST	53	51227	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.516958952 CEST	51228	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.525777102 CEST	53	51228	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.697511911 CEST	51229	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.705884933 CEST	53	51229	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.706432104 CEST	51230	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.722352028 CEST	53	51230	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.722939014 CEST	51231	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.735289097 CEST	53	51231	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.735622883 CEST	51232	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.743500948 CEST	53	51232	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.743721962 CEST	51233	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.751121998 CEST	53	51233	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.913043976 CEST	51234	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.920466900 CEST	53	51234	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.921032906 CEST	51235	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.941071033 CEST	53	51235	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.941628933 CEST	51236	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.956537962 CEST	53	51236	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.957082987 CEST	51237	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.964581966 CEST	53	51237	1.1.1.1	192.168.2.8
Sep 30, 2024 15:48:59.964992046 CEST	51238	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:48:59.984404087 CEST	53	51238	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:00.143743038 CEST	51239	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:00.150990009 CEST	53	51239	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:00.151397943 CEST	51240	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:00.159149885 CEST	53	51240	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:00.159473896 CEST	51241	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:00.167727947 CEST	53	51241	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:00.168024063 CEST	51242	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:00.178365946 CEST	53	51242	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:00.178901911 CEST	51243	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:00.196170092 CEST	53	51243	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:00.379230022 CEST	51244	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:00.567570925 CEST	53	51244	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:00.568133116 CEST	51245	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:00.575527906 CEST	53	51245	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:00.576184988 CEST	51246	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:00.591072083 CEST	53	51246	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:00.591376066 CEST	51247	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:00.601679087 CEST	53	51247	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:00.602014065 CEST	51248	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:00.609989882 CEST	53	51248	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:00.781780005 CEST	51249	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:00.788712978 CEST	53	51249	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:00.789551973 CEST	51250	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:00.805061102 CEST	53	51250	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:00.805572033 CEST	51251	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:00.812935114 CEST	53	51251	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:00.814007998 CEST	51252	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:00.821443081 CEST	53	51252	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:00.822489977 CEST	51253	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:00.838385105 CEST	53	51253	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.035183907 CEST	61724	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:01.041878939 CEST	53	61724	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.043905020 CEST	61725	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:01.064182043 CEST	53	61725	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.064660072 CEST	61726	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:01.089481115 CEST	53	61726	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.090014935 CEST	61727	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:01.098390102 CEST	53	61727	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.098692894 CEST	61728	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:01.114784002 CEST	53	61728	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.286947966 CEST	61729	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:01.294677973 CEST	53	61729	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.295123100 CEST	61730	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:01.303292036 CEST	53	61730	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.303600073 CEST	61731	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:01.314198971 CEST	53	61731	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.314474106 CEST	61732	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:01.324399948 CEST	53	61732	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.324850082 CEST	61733	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:01.334836960 CEST	53	61733	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.507014990 CEST	61734	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:01.707531929 CEST	53	61734	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.712687969 CEST	61735	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:01.720216036 CEST	53	61735	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.721822977 CEST	61736	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:01.730376005 CEST	53	61736	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.733241081 CEST	61737	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:01.741625071 CEST	53	61737	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.745713949 CEST	61738	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:01.761528015 CEST	53	61738	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.964293003 CEST	61739	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:01.972085953 CEST	53	61739	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.972475052 CEST	61740	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:01.983264923 CEST	53	61740	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.983577967 CEST	61741	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:01.992500067 CEST	53	61741	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:01.993033886 CEST	61742	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:02.010660887 CEST	53	61742	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:02.011013985 CEST	61743	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:02.028462887 CEST	53	61743	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:02.533035040 CEST	61744	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:02.575834990 CEST	53	61744	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:02.576426029 CEST	61745	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:02.593584061 CEST	53	61745	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:02.593975067 CEST	61746	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:02.610909939 CEST	53	61746	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:02.611274004 CEST	61747	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:02.626408100 CEST	53	61747	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:02.626751900 CEST	61748	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:02.635507107 CEST	53	61748	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:02.800163984 CEST	52916	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:02.957917929 CEST	53	52916	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:02.967080116 CEST	52917	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:02.974196911 CEST	53	52917	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:02.974679947 CEST	52918	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:02.981576920 CEST	53	52918	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:02.981862068 CEST	52919	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.003315926 CEST	53	52919	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.003827095 CEST	52920	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.012957096 CEST	53	52920	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.013214111 CEST	52921	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.021795988 CEST	53	52921	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.191838026 CEST	52922	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.198821068 CEST	53	52922	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.199207067 CEST	52923	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.207086086 CEST	53	52923	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.207389116 CEST	52924	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.219043016 CEST	53	52924	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.219346046 CEST	52925	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.228086948 CEST	53	52925	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.228354931 CEST	52926	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.236232042 CEST	53	52926	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.405786991 CEST	52927	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.413439035 CEST	53	52927	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.414071083 CEST	52928	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.422017097 CEST	53	52928	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.422327042 CEST	52929	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.430234909 CEST	53	52929	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.432588100 CEST	52930	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.440386057 CEST	53	52930	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.440665007 CEST	52931	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.448616028 CEST	53	52931	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.610646009 CEST	52932	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.617954016 CEST	53	52932	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.618402958 CEST	52933	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.625910997 CEST	53	52933	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.626246929 CEST	52934	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.641520023 CEST	53	52934	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.641792059 CEST	52935	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.665709972 CEST	53	52935	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.666043997 CEST	52936	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.673253059 CEST	53	52936	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.833543062 CEST	52937	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.841177940 CEST	53	52937	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.841722012 CEST	52938	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.852464914 CEST	53	52938	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.852802038 CEST	52939	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.864340067 CEST	53	52939	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.864662886 CEST	52940	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.872318983 CEST	53	52940	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:03.872528076 CEST	52941	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:03.886894941 CEST	53	52941	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.050611973 CEST	52942	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.059169054 CEST	53	52942	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.059783936 CEST	52943	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.069940090 CEST	53	52943	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.070410967 CEST	52944	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.081726074 CEST	53	52944	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.082020998 CEST	52945	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.089761972 CEST	53	52945	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.093806028 CEST	52946	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.100801945 CEST	53	52946	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.273485899 CEST	52947	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.282705069 CEST	53	52947	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.283193111 CEST	52948	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.290880919 CEST	53	52948	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.291270018 CEST	52949	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.300528049 CEST	53	52949	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.301651955 CEST	52950	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.317691088 CEST	53	52950	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.317949057 CEST	52951	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.329011917 CEST	53	52951	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.520622015 CEST	52952	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.527698994 CEST	53	52952	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.528124094 CEST	52953	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.536896944 CEST	53	52953	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.537180901 CEST	52954	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.545433044 CEST	53	52954	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.545739889 CEST	52955	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.564702034 CEST	53	52955	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.565206051 CEST	52956	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.581403971 CEST	53	52956	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.752015114 CEST	52957	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.760191917 CEST	53	52957	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.760624886 CEST	52958	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.772074938 CEST	53	52958	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.772469997 CEST	52959	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.787760019 CEST	53	52959	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.788146973 CEST	52960	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.796989918 CEST	53	52960	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.803401947 CEST	52961	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.814053059 CEST	53	52961	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.972603083 CEST	52962	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.979533911 CEST	53	52962	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.979937077 CEST	52963	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.987447023 CEST	53	52963	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.987643957 CEST	52964	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:04.997888088 CEST	53	52964	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:04.998151064 CEST	52965	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.006138086 CEST	53	52965	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.006349087 CEST	52966	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.014269114 CEST	53	52966	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.180092096 CEST	52967	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.188493013 CEST	53	52967	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.188961983 CEST	52968	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.196873903 CEST	53	52968	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.197094917 CEST	52969	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.204616070 CEST	53	52969	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.204823017 CEST	52970	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.213504076 CEST	53	52970	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.213720083 CEST	52971	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.238616943 CEST	53	52971	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.416277885 CEST	52972	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.423878908 CEST	53	52972	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.424345016 CEST	52973	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.432174921 CEST	53	52973	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.432584047 CEST	52974	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.441059113 CEST	53	52974	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.441404104 CEST	52975	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.459475994 CEST	53	52975	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.459922075 CEST	52976	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.470972061 CEST	53	52976	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.644762993 CEST	52977	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.651825905 CEST	53	52977	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.652268887 CEST	52978	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.660096884 CEST	53	52978	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.660372972 CEST	52979	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.670380116 CEST	53	52979	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.670691013 CEST	52980	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.681278944 CEST	53	52980	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.681597948 CEST	52981	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.691788912 CEST	53	52981	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.873239994 CEST	52982	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.880361080 CEST	53	52982	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.880784988 CEST	52983	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.897347927 CEST	53	52983	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.897952080 CEST	52984	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.906618118 CEST	53	52984	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.907004118 CEST	52985	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.923891068 CEST	53	52985	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:05.924305916 CEST	52986	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:05.932432890 CEST	53	52986	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.097060919 CEST	52987	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.105813980 CEST	53	52987	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.106236935 CEST	52988	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.113404989 CEST	53	52988	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.113781929 CEST	52989	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.124109983 CEST	53	52989	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.124417067 CEST	52990	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.133474112 CEST	53	52990	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.133764982 CEST	52991	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.142184019 CEST	53	52991	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.298542023 CEST	52992	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.305566072 CEST	53	52992	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.306124926 CEST	52993	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.322338104 CEST	53	52993	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.322881937 CEST	52994	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.333163977 CEST	53	52994	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.333658934 CEST	52995	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.341574907 CEST	53	52995	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.341897011 CEST	52996	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.356931925 CEST	53	52996	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.556031942 CEST	52997	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.563937902 CEST	53	52997	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.564378023 CEST	52998	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.572638035 CEST	53	52998	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.572979927 CEST	52999	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.581075907 CEST	53	52999	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.581346035 CEST	53000	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.589468002 CEST	53	53000	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.589718103 CEST	53001	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.599292040 CEST	53	53001	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.768054962 CEST	53002	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.775487900 CEST	53	53002	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.777864933 CEST	53003	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.786142111 CEST	53	53003	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.789835930 CEST	53004	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.798890114 CEST	53	53004	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.801815987 CEST	53005	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.810122967 CEST	53	53005	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:06.813810110 CEST	53006	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:06.830403090 CEST	53	53006	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.008047104 CEST	53007	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.015727997 CEST	53	53007	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.016133070 CEST	53008	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.029839993 CEST	53	53008	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.030200958 CEST	53009	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.037947893 CEST	53	53009	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.038259983 CEST	53010	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.046227932 CEST	53	53010	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.046442986 CEST	53011	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.054020882 CEST	53	53011	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.228379965 CEST	53012	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.235938072 CEST	53	53012	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.236361980 CEST	53013	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.253501892 CEST	53	53013	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.257106066 CEST	53014	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.268258095 CEST	53	53014	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.269732952 CEST	53015	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.288451910 CEST	53	53015	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.289432049 CEST	53016	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.298666954 CEST	53	53016	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.475039005 CEST	53017	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.483335018 CEST	53	53017	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.483731985 CEST	53018	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.491792917 CEST	53	53018	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.492152929 CEST	53019	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.501437902 CEST	53	53019	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.501811028 CEST	53020	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.509712934 CEST	53	53020	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.509987116 CEST	53021	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.519833088 CEST	53	53021	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.682111025 CEST	52176	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.731156111 CEST	53	52176	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.741210938 CEST	52177	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.749532938 CEST	53	52177	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.754823923 CEST	52178	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.762676954 CEST	53	52178	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.765743017 CEST	52179	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.773700953 CEST	53	52179	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.776329041 CEST	52180	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.784833908 CEST	53	52180	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.785846949 CEST	52181	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.793715000 CEST	53	52181	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.951924086 CEST	52182	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.959340096 CEST	53	52182	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.960222006 CEST	52183	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.968389988 CEST	53	52183	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.972166061 CEST	52184	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.979319096 CEST	53	52184	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.979765892 CEST	52185	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:07.990082026 CEST	53	52185	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:07.991904974 CEST	52186	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:08.000622988 CEST	53	52186	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:08.175312042 CEST	52187	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:08.187545061 CEST	53	52187	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:08.188055992 CEST	52188	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:08.199119091 CEST	53	52188	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:08.199465990 CEST	52189	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:08.206883907 CEST	53	52189	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:08.207173109 CEST	52190	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:08.214797974 CEST	53	52190	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:08.215861082 CEST	52191	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:08.223906994 CEST	53	52191	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:08.395585060 CEST	52192	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:08.403155088 CEST	53	52192	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:08.403601885 CEST	52193	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:08.411572933 CEST	53	52193	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:08.411823988 CEST	52194	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:08.419456005 CEST	53	52194	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:08.419713020 CEST	52195	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:08.428052902 CEST	53	52195	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:08.428297997 CEST	52196	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:08.436868906 CEST	53	52196	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:08.640352964 CEST	52197	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:08.647248030 CEST	53	52197	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:08.647579908 CEST	52198	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:08.655689001 CEST	53	52198	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:08.656028032 CEST	52199	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:08.664978981 CEST	53	52199	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:08.665158033 CEST	52200	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:08.674319983 CEST	53	52200	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:08.674710989 CEST	52201	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:08.683465004 CEST	53	52201	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.172115088 CEST	52202	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.181160927 CEST	53	52202	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.181551933 CEST	52203	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.191761971 CEST	53	52203	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.192138910 CEST	52204	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.199594975 CEST	53	52204	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.200015068 CEST	52205	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.207901955 CEST	53	52205	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.208223104 CEST	52206	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.215707064 CEST	53	52206	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.378983021 CEST	52207	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.388905048 CEST	53	52207	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.389319897 CEST	52208	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.398155928 CEST	53	52208	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.398489952 CEST	52209	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.406245947 CEST	53	52209	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.406547070 CEST	52210	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.416019917 CEST	53	52210	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.416423082 CEST	52211	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.431520939 CEST	53	52211	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.616497993 CEST	52212	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.623970985 CEST	53	52212	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.625919104 CEST	52213	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.642333984 CEST	53	52213	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.645888090 CEST	52214	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.655014992 CEST	53	52214	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.655446053 CEST	52215	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.665584087 CEST	53	52215	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.665982008 CEST	52216	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.675468922 CEST	53	52216	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.847304106 CEST	52217	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.853908062 CEST	53	52217	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.854806900 CEST	52218	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.883852005 CEST	53	52218	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.884311914 CEST	52219	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.892344952 CEST	53	52219	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.892622948 CEST	52220	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.902076006 CEST	53	52220	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:09.902432919 CEST	52221	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:09.918313980 CEST	53	52221	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.077944994 CEST	52222	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.084791899 CEST	53	52222	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.085323095 CEST	52223	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.092596054 CEST	53	52223	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.093077898 CEST	52224	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.103506088 CEST	53	52224	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.103827000 CEST	52225	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.119640112 CEST	53	52225	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.119963884 CEST	52226	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.127365112 CEST	53	52226	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.284997940 CEST	52227	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.292409897 CEST	53	52227	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.292907000 CEST	52228	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.300786018 CEST	53	52228	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.304341078 CEST	52229	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.311820984 CEST	53	52229	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.313689947 CEST	52230	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.321408033 CEST	53	52230	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.321717978 CEST	52231	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.332998991 CEST	53	52231	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.506993055 CEST	52232	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.514513016 CEST	53	52232	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.514951944 CEST	52233	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.522439957 CEST	53	52233	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.522747993 CEST	52234	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.529786110 CEST	53	52234	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.530014038 CEST	52235	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.537784100 CEST	53	52235	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.538068056 CEST	52236	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.545253992 CEST	53	52236	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.701690912 CEST	52237	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.709072113 CEST	53	52237	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.709528923 CEST	52238	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.716722965 CEST	53	52238	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.717029095 CEST	52239	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.725496054 CEST	53	52239	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.725687981 CEST	52240	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.733465910 CEST	53	52240	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.733810902 CEST	52241	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.742026091 CEST	53	52241	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.909070015 CEST	52242	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.916137934 CEST	53	52242	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.916590929 CEST	52243	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.924772978 CEST	53	52243	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.925035000 CEST	52244	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.932979107 CEST	53	52244	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.933286905 CEST	52245	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.940764904 CEST	53	52245	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:10.941076994 CEST	52246	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:10.951998949 CEST	53	52246	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:11.113965988 CEST	52247	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:11.120713949 CEST	53	52247	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:11.121249914 CEST	52248	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:11.128456116 CEST	53	52248	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:11.128839970 CEST	52249	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:11.136712074 CEST	53	52249	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:11.137044907 CEST	52250	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:11.144746065 CEST	53	52250	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:11.145001888 CEST	52251	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:11.154026031 CEST	53	52251	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:11.795881033 CEST	52252	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:11.803141117 CEST	53	52252	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:11.803514957 CEST	52253	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:11.810868025 CEST	53	52253	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:11.811117887 CEST	52254	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:11.820600033 CEST	53	52254	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:11.820966959 CEST	52255	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:11.837105989 CEST	53	52255	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:11.837498903 CEST	52256	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:11.845525026 CEST	53	52256	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.004578114 CEST	52257	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.012020111 CEST	53	52257	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.012434006 CEST	52258	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.020184994 CEST	53	52258	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.020576000 CEST	52259	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.030224085 CEST	53	52259	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.030606031 CEST	52260	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.046895981 CEST	53	52260	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.047390938 CEST	52261	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.057135105 CEST	53	52261	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.220499992 CEST	52262	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.227186918 CEST	53	52262	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.227575064 CEST	52263	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.235131025 CEST	53	52263	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.235394955 CEST	52264	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.243527889 CEST	53	52264	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.243745089 CEST	52265	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.250649929 CEST	53	52265	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.250886917 CEST	52266	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.260668993 CEST	53	52266	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.478697062 CEST	52267	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.485408068 CEST	53	52267	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.485826969 CEST	52268	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.495851994 CEST	53	52268	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.496191978 CEST	52269	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.504209995 CEST	53	52269	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.504448891 CEST	52270	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.513492107 CEST	53	52270	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.513731003 CEST	52271	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.521575928 CEST	53	52271	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.681806087 CEST	50903	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.733071089 CEST	53	50903	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.751569986 CEST	50904	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.758467913 CEST	53	50904	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.758881092 CEST	50905	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.766222000 CEST	53	50905	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.766650915 CEST	50906	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.786298990 CEST	53	50906	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.786674023 CEST	50907	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.794209957 CEST	53	50907	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.794477940 CEST	50908	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.803236008 CEST	53	50908	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.970859051 CEST	62801	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.979651928 CEST	53	62801	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.980077028 CEST	62802	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.988801003 CEST	53	62802	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.989113092 CEST	62803	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:12.997270107 CEST	53	62803	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:12.998203039 CEST	62804	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.014405966 CEST	53	62804	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.014718056 CEST	62805	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.023588896 CEST	53	62805	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.191298962 CEST	62806	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.198661089 CEST	53	62806	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.199127913 CEST	62807	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.206952095 CEST	53	62807	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.207150936 CEST	62808	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.215446949 CEST	53	62808	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.215725899 CEST	62809	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.223478079 CEST	53	62809	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.223653078 CEST	62810	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.239737988 CEST	53	62810	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.409652948 CEST	62811	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.416588068 CEST	53	62811	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.419802904 CEST	62812	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.432619095 CEST	53	62812	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.432934999 CEST	62813	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.441546917 CEST	53	62813	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.441842079 CEST	62814	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.455956936 CEST	53	62814	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.456226110 CEST	62815	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.464900017 CEST	53	62815	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.625868082 CEST	62816	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.633402109 CEST	53	62816	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.633748055 CEST	62817	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.648109913 CEST	53	62817	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.648358107 CEST	62818	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.656296015 CEST	53	62818	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.656536102 CEST	62819	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.664001942 CEST	53	62819	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.664316893 CEST	62820	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.672143936 CEST	53	62820	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.827500105 CEST	62821	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.836241961 CEST	53	62821	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.836687088 CEST	62822	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.844201088 CEST	53	62822	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.844511986 CEST	62823	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.852432966 CEST	53	62823	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.852699041 CEST	62824	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.860696077 CEST	53	62824	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:13.860945940 CEST	62825	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:13.869334936 CEST	53	62825	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.035662889 CEST	62826	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.042570114 CEST	53	62826	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.043052912 CEST	62827	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.051160097 CEST	53	62827	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.051371098 CEST	62828	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.058638096 CEST	53	62828	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.058840036 CEST	62829	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.067147970 CEST	53	62829	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.067586899 CEST	62830	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.080663919 CEST	53	62830	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.281789064 CEST	62831	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.288652897 CEST	53	62831	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.289078951 CEST	62832	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.296994925 CEST	53	62832	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.297272921 CEST	62833	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.304698944 CEST	53	62833	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.304882050 CEST	62834	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.312553883 CEST	53	62834	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.312886000 CEST	62835	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.320856094 CEST	53	62835	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.503798962 CEST	62836	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.710959911 CEST	53	62836	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.711806059 CEST	62837	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.728430033 CEST	53	62837	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.728831053 CEST	62838	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.736942053 CEST	53	62838	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.737140894 CEST	62839	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.744744062 CEST	53	62839	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.744940042 CEST	62840	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.752948046 CEST	53	62840	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.907537937 CEST	62841	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.915242910 CEST	53	62841	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.915740013 CEST	62842	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.923541069 CEST	53	62842	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.923830032 CEST	62843	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.932442904 CEST	53	62843	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.934649944 CEST	62844	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.948162079 CEST	53	62844	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:14.948448896 CEST	62845	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:14.957437038 CEST	53	62845	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.130033970 CEST	62846	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.137701988 CEST	53	62846	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.141972065 CEST	62847	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.149985075 CEST	53	62847	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.152791977 CEST	62848	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.161236048 CEST	53	62848	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.163331032 CEST	62849	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.171606064 CEST	53	62849	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.172054052 CEST	62850	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.180573940 CEST	53	62850	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.348342896 CEST	62851	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.355082035 CEST	53	62851	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.355789900 CEST	62852	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.364842892 CEST	53	62852	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.365293026 CEST	62853	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.373619080 CEST	53	62853	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.374089956 CEST	62854	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.382235050 CEST	53	62854	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.383760929 CEST	62855	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.392107964 CEST	53	62855	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.572005033 CEST	62856	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.579751968 CEST	53	62856	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.580121040 CEST	62857	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.587969065 CEST	53	62857	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.588327885 CEST	62858	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.595752001 CEST	53	62858	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.595949888 CEST	62859	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.604578018 CEST	53	62859	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.604753971 CEST	62860	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.612682104 CEST	53	62860	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.769768953 CEST	62861	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.776923895 CEST	53	62861	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.777295113 CEST	62862	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.785355091 CEST	53	62862	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.785701036 CEST	62863	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.801340103 CEST	53	62863	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.801681995 CEST	62864	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.811058998 CEST	53	62864	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.811606884 CEST	62865	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.826317072 CEST	53	62865	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.988081932 CEST	62866	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:15.995280027 CEST	53	62866	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:15.995642900 CEST	62867	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.003628016 CEST	53	62867	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.003854990 CEST	62868	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.011507034 CEST	53	62868	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.011714935 CEST	62869	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.019248009 CEST	53	62869	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.019485950 CEST	62870	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.027990103 CEST	53	62870	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.200207949 CEST	62871	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.207143068 CEST	53	62871	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.207488060 CEST	62872	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.215018034 CEST	53	62872	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.215327978 CEST	62873	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.224672079 CEST	53	62873	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.224968910 CEST	62874	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.234848022 CEST	53	62874	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.235095024 CEST	62875	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.243060112 CEST	53	62875	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.407507896 CEST	62876	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.414463997 CEST	53	62876	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.414951086 CEST	62877	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.422398090 CEST	53	62877	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.423079967 CEST	62878	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.433096886 CEST	53	62878	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.433455944 CEST	62879	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.440901995 CEST	53	62879	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.441167116 CEST	62880	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.448729992 CEST	53	62880	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.629403114 CEST	62881	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.636398077 CEST	53	62881	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.636835098 CEST	62882	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.645100117 CEST	53	62882	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.645359993 CEST	62883	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.660797119 CEST	53	62883	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.661086082 CEST	62884	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.670511007 CEST	53	62884	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.670862913 CEST	62885	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.678678989 CEST	53	62885	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.847372055 CEST	62886	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.854494095 CEST	53	62886	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.855330944 CEST	62887	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.863003016 CEST	53	62887	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.868113041 CEST	62888	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.875103951 CEST	53	62888	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.875574112 CEST	62889	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.882426977 CEST	53	62889	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:16.882774115 CEST	62890	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:16.902435064 CEST	53	62890	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.064024925 CEST	62891	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.072748899 CEST	53	62891	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.073293924 CEST	62892	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.081732988 CEST	53	62892	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.082022905 CEST	62893	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.089997053 CEST	53	62893	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.090295076 CEST	62894	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.106544018 CEST	53	62894	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.107079029 CEST	62895	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.121866941 CEST	53	62895	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.295592070 CEST	62896	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.302933931 CEST	53	62896	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.303390026 CEST	62897	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.311359882 CEST	53	62897	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.311696053 CEST	62898	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.319515944 CEST	53	62898	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.319684029 CEST	62899	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.335580111 CEST	53	62899	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.335865974 CEST	62900	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.351447105 CEST	53	62900	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.534563065 CEST	62901	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.541615963 CEST	53	62901	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.542010069 CEST	62902	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.549226046 CEST	53	62902	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.549552917 CEST	62903	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.557393074 CEST	53	62903	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.559094906 CEST	62904	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.567209959 CEST	53	62904	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.567450047 CEST	62905	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.575134993 CEST	53	62905	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.737859964 CEST	63738	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.786125898 CEST	53	63738	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.796120882 CEST	63739	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.802968025 CEST	53	63739	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.803977013 CEST	63740	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.811892986 CEST	53	63740	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.812716007 CEST	63741	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.820146084 CEST	53	63741	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.821245909 CEST	63742	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.828438997 CEST	53	63742	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:17.829564095 CEST	63743	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:17.838594913 CEST	53	63743	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.024241924 CEST	63744	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.031331062 CEST	53	63744	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.031800032 CEST	63745	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.039165974 CEST	53	63745	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.039484024 CEST	63746	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.048758984 CEST	53	63746	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.048963070 CEST	63747	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.058068037 CEST	53	63747	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.058254004 CEST	63748	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.067401886 CEST	53	63748	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.254540920 CEST	63749	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.261909008 CEST	53	63749	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.262705088 CEST	63750	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.270076036 CEST	53	63750	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.273813963 CEST	63751	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.281779051 CEST	53	63751	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.285773039 CEST	63752	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.292968988 CEST	53	63752	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.296284914 CEST	63753	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.303706884 CEST	53	63753	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.514796019 CEST	63754	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.522147894 CEST	53	63754	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.522614002 CEST	63755	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.538053036 CEST	53	63755	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.538558960 CEST	63756	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.546761990 CEST	53	63756	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.547188044 CEST	63757	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.555223942 CEST	53	63757	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.555646896 CEST	63758	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.563446999 CEST	53	63758	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.726654053 CEST	63759	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.733356953 CEST	53	63759	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.733829975 CEST	63760	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.743009090 CEST	53	63760	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.743258953 CEST	63761	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.750300884 CEST	53	63761	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.750494957 CEST	63762	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.757761002 CEST	53	63762	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.757929087 CEST	63763	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.765785933 CEST	53	63763	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.933845043 CEST	63764	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.940977097 CEST	53	63764	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.941387892 CEST	63765	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.950517893 CEST	53	63765	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.950901031 CEST	63766	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.959650040 CEST	53	63766	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.959868908 CEST	63767	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.967573881 CEST	53	63767	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:18.967818975 CEST	63768	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:18.976624012 CEST	53	63768	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:19.140929937 CEST	63769	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:19.147751093 CEST	53	63769	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:19.148304939 CEST	63770	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:19.155582905 CEST	53	63770	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:19.155978918 CEST	63771	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:19.164120913 CEST	53	63771	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:19.164426088 CEST	63772	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:19.172019958 CEST	53	63772	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:19.172403097 CEST	63773	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:19.180579901 CEST	53	63773	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:19.344120026 CEST	63774	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:19.351219893 CEST	53	63774	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:19.351583958 CEST	63775	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:19.359975100 CEST	53	63775	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:19.360291004 CEST	63776	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:19.367964983 CEST	53	63776	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:19.368180037 CEST	63777	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:19.376983881 CEST	53	63777	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:19.377214909 CEST	63778	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:19.385004997 CEST	53	63778	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:19.553788900 CEST	63779	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:19.560595036 CEST	53	63779	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.010730028 CEST	63780	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.018256903 CEST	53	63780	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.018606901 CEST	63781	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.040051937 CEST	53	63781	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.040424109 CEST	63782	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.048815012 CEST	53	63782	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.049153090 CEST	63783	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.057720900 CEST	53	63783	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.229639053 CEST	63784	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.236613989 CEST	53	63784	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.236985922 CEST	63785	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.253350973 CEST	53	63785	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.253612041 CEST	63786	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.262098074 CEST	53	63786	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.262399912 CEST	63787	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.270962954 CEST	53	63787	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.351579905 CEST	63788	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.358783007 CEST	53	63788	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.686383009 CEST	63789	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.694108963 CEST	53	63789	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.694499969 CEST	63790	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.714736938 CEST	53	63790	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.715199947 CEST	63791	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.724401951 CEST	53	63791	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.724632978 CEST	63792	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.733597994 CEST	53	63792	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.733818054 CEST	63793	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.740704060 CEST	53	63793	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.911464930 CEST	63794	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.918391943 CEST	53	63794	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.918778896 CEST	63795	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.926209927 CEST	53	63795	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.926598072 CEST	63796	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.933528900 CEST	53	63796	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.933758974 CEST	63797	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.942217112 CEST	53	63797	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:20.942497015 CEST	63798	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:20.952526093 CEST	53	63798	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.111479044 CEST	63799	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.121191025 CEST	53	63799	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.121628046 CEST	63800	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.130245924 CEST	53	63800	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.130542994 CEST	63801	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.137725115 CEST	53	63801	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.137974024 CEST	63802	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.145416975 CEST	53	63802	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.145596981 CEST	63803	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.153965950 CEST	53	63803	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.314975977 CEST	63804	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.323132992 CEST	53	63804	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.323853016 CEST	63805	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.330811024 CEST	53	63805	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.335041046 CEST	63806	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.343583107 CEST	53	63806	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.343949080 CEST	63807	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.351214886 CEST	53	63807	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.351403952 CEST	63808	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.361979961 CEST	53	63808	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.542648077 CEST	63809	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.549890041 CEST	53	63809	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.550260067 CEST	63810	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.557739019 CEST	53	63810	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.557995081 CEST	63811	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.566469908 CEST	53	63811	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.566761017 CEST	63812	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.575149059 CEST	53	63812	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.575505018 CEST	63813	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.583242893 CEST	53	63813	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.751477957 CEST	63814	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.758886099 CEST	53	63814	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.759263039 CEST	63815	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.766675949 CEST	53	63815	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.766875982 CEST	63816	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.774954081 CEST	53	63816	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.775129080 CEST	63817	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.783216000 CEST	53	63817	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.783469915 CEST	63818	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.792100906 CEST	53	63818	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.958664894 CEST	63819	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.968099117 CEST	53	63819	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.968656063 CEST	63820	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.977130890 CEST	53	63820	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.977550983 CEST	63821	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.985749006 CEST	53	63821	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.986080885 CEST	63822	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:21.993758917 CEST	53	63822	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:21.993982077 CEST	63823	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:22.006933928 CEST	53	63823	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:22.172804117 CEST	63824	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:22.180094957 CEST	53	63824	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:22.180521011 CEST	63825	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:22.187962055 CEST	53	63825	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:22.188402891 CEST	63826	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:22.196238041 CEST	53	63826	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:22.196573973 CEST	63827	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:22.207011938 CEST	53	63827	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:22.207371950 CEST	63828	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:22.216753960 CEST	53	63828	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:22.405179977 CEST	63829	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:22.411909103 CEST	53	63829	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:22.412276983 CEST	63830	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:22.419101954 CEST	53	63830	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:22.419380903 CEST	63831	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:22.426744938 CEST	53	63831	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:22.427025080 CEST	63832	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:22.434664965 CEST	53	63832	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:22.434901953 CEST	63833	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:22.442347050 CEST	53	63833	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:22.611941099 CEST	55279	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:22.761765957 CEST	53	55279	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:22.769833088 CEST	55280	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:22.777995110 CEST	53	55280	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:22.781847954 CEST	55281	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:22.791104078 CEST	53	55281	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:22.792072058 CEST	55282	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:22.799261093 CEST	53	55282	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:22.801836014 CEST	55283	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:22.809551954 CEST	53	55283	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:22.813738108 CEST	55284	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:22.821297884 CEST	53	55284	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.227145910 CEST	55285	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.234195948 CEST	53	55285	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.234591961 CEST	55286	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.243355989 CEST	53	55286	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.245731115 CEST	55287	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.253313065 CEST	53	55287	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.253689051 CEST	55288	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.269790888 CEST	53	55288	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.270549059 CEST	55289	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.278562069 CEST	53	55289	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.449784040 CEST	55290	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.456890106 CEST	53	55290	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.457365990 CEST	55291	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.465805054 CEST	53	55291	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.466226101 CEST	55292	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.476003885 CEST	53	55292	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.476272106 CEST	55293	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.484630108 CEST	53	55293	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.484874964 CEST	55294	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.493583918 CEST	53	55294	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.660808086 CEST	55295	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.667936087 CEST	53	55295	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.668301105 CEST	55296	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.678778887 CEST	53	55296	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.679202080 CEST	55297	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.687463999 CEST	53	55297	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.687658072 CEST	55298	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.696778059 CEST	53	55298	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.696970940 CEST	55299	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.706659079 CEST	53	55299	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.865631104 CEST	55300	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.872941971 CEST	53	55300	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.873333931 CEST	55301	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.885756016 CEST	53	55301	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.886046886 CEST	55302	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.894509077 CEST	53	55302	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.894740105 CEST	55303	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.902453899 CEST	53	55303	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:23.902683020 CEST	55304	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:23.910070896 CEST	53	55304	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.079590082 CEST	55305	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.087563992 CEST	53	55305	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.087897062 CEST	55306	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.097238064 CEST	53	55306	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.097551107 CEST	55307	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.105150938 CEST	53	55307	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.105426073 CEST	55308	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.113452911 CEST	53	55308	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.117101908 CEST	55309	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.125149012 CEST	53	55309	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.283487082 CEST	55310	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.291153908 CEST	53	55310	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.291558981 CEST	55311	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.299880028 CEST	53	55311	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.300156116 CEST	55312	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.308172941 CEST	53	55312	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.308371067 CEST	55313	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.316185951 CEST	53	55313	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.316370010 CEST	55314	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.332767010 CEST	53	55314	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.523715973 CEST	55315	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.530929089 CEST	53	55315	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.531337976 CEST	55316	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.539124966 CEST	53	55316	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.539474010 CEST	55317	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.547812939 CEST	53	55317	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.548158884 CEST	55318	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.557018042 CEST	53	55318	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.557305098 CEST	55319	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.581306934 CEST	53	55319	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.734008074 CEST	55320	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.741029024 CEST	53	55320	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.741390944 CEST	55321	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.749690056 CEST	53	55321	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.749911070 CEST	55322	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.758630037 CEST	53	55322	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.759010077 CEST	55323	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.767031908 CEST	53	55323	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.767282963 CEST	55324	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.775393009 CEST	53	55324	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.937853098 CEST	55325	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.945034981 CEST	53	55325	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.945355892 CEST	55326	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.952853918 CEST	53	55326	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.953162909 CEST	55327	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.960402012 CEST	53	55327	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.960591078 CEST	55328	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.967891932 CEST	53	55328	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:24.968107939 CEST	55329	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:24.975739002 CEST	53	55329	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.139513016 CEST	55331	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.146770954 CEST	53	55331	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.147255898 CEST	55332	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.154402018 CEST	53	55332	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.154692888 CEST	55333	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.162424088 CEST	53	55333	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.163103104 CEST	55334	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.170342922 CEST	53	55334	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.170680046 CEST	55335	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.178147078 CEST	53	55335	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.342502117 CEST	55336	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.349813938 CEST	53	55336	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.350198030 CEST	55337	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.357942104 CEST	53	55337	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.358591080 CEST	55338	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.367686987 CEST	53	55338	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.367932081 CEST	55339	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.375606060 CEST	53	55339	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.375889063 CEST	55340	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.383349895 CEST	53	55340	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.571450949 CEST	55341	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.727709055 CEST	53	55341	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.728210926 CEST	55342	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.738276005 CEST	53	55342	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.738540888 CEST	55343	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.750634909 CEST	53	55343	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.750890017 CEST	55344	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.758527040 CEST	53	55344	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.758778095 CEST	55345	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.766463041 CEST	53	55345	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.921899080 CEST	55346	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.929702997 CEST	53	55346	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.930252075 CEST	55347	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.938863993 CEST	53	55347	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.939183950 CEST	55348	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.947535038 CEST	53	55348	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.947792053 CEST	55349	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.955961943 CEST	53	55349	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:25.956206083 CEST	55350	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:25.963586092 CEST	53	55350	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.126456022 CEST	55351	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.133922100 CEST	53	55351	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.134727001 CEST	55352	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.142283916 CEST	53	55352	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.142551899 CEST	55353	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.150722980 CEST	53	55353	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.151047945 CEST	55354	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.158453941 CEST	53	55354	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.158669949 CEST	55355	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.166553974 CEST	53	55355	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.353076935 CEST	55356	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.360373974 CEST	53	55356	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.360722065 CEST	55357	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.367549896 CEST	53	55357	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.367805004 CEST	55358	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.375585079 CEST	53	55358	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.375787020 CEST	55359	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.383265018 CEST	53	55359	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.383672953 CEST	55360	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.391235113 CEST	53	55360	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.566685915 CEST	55361	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.573754072 CEST	53	55361	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.574117899 CEST	55362	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.584378004 CEST	53	55362	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.584655046 CEST	55363	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.591954947 CEST	53	55363	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.592210054 CEST	55364	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.599514961 CEST	53	55364	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.599831104 CEST	55365	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.610188961 CEST	53	55365	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.769870043 CEST	55366	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.776827097 CEST	53	55366	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.777335882 CEST	55367	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.786365986 CEST	53	55367	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.786694050 CEST	55368	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.794502020 CEST	53	55368	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.794744968 CEST	55369	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.802428961 CEST	53	55369	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.802766085 CEST	55370	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.811533928 CEST	53	55370	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.970535040 CEST	55371	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.977946043 CEST	53	55371	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.978373051 CEST	55372	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.986377954 CEST	53	55372	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.986635923 CEST	55373	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:26.994194984 CEST	53	55373	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:26.994410992 CEST	55374	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:27.002578974 CEST	53	55374	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:27.002804041 CEST	55375	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:27.010440111 CEST	53	55375	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:27.173662901 CEST	55376	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:27.180741072 CEST	53	55376	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:27.181220055 CEST	55377	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:27.191219091 CEST	53	55377	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:27.191905022 CEST	55378	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:27.200316906 CEST	53	55378	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:27.203917027 CEST	55379	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:27.212483883 CEST	53	55379	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:27.212809086 CEST	55380	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:27.228646994 CEST	53	55380	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:27.392781973 CEST	55381	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:27.400185108 CEST	53	55381	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:27.401411057 CEST	55382	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:27.409311056 CEST	53	55382	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:27.411317110 CEST	55383	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:27.419508934 CEST	53	55383	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:27.419869900 CEST	55384	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:27.427303076 CEST	53	55384	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:27.427692890 CEST	55385	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:27.434969902 CEST	53	55385	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:27.609451056 CEST	55386	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:27.616681099 CEST	53	55386	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:27.617137909 CEST	55387	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:27.624859095 CEST	53	55387	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:27.625138998 CEST	55388	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:27.632906914 CEST	53	55388	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:27.633187056 CEST	55389	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:27.640441895 CEST	53	55389	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:27.640666962 CEST	55390	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:27.648788929 CEST	53	55390	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:27.808569908 CEST	61698	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:28.065756083 CEST	53	61698	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:28.075716019 CEST	61699	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:28.083235025 CEST	53	61699	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:28.083931923 CEST	61700	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:28.090832949 CEST	53	61700	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:28.091104031 CEST	61701	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:28.098490953 CEST	53	61701	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:28.100104094 CEST	61702	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:28.107649088 CEST	53	61702	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:28.112027884 CEST	61703	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:28.118793011 CEST	53	61703	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:28.800868034 CEST	61704	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:28.807609081 CEST	53	61704	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:28.808018923 CEST	61705	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:28.816710949 CEST	53	61705	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:28.817039967 CEST	61706	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:28.824249029 CEST	53	61706	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:28.824470997 CEST	61707	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:28.831748009 CEST	53	61707	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:28.831993103 CEST	61708	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:28.838962078 CEST	53	61708	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.004337072 CEST	61709	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.011296988 CEST	53	61709	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.011742115 CEST	61710	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.019176006 CEST	53	61710	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.019455910 CEST	61711	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.026870012 CEST	53	61711	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.027106047 CEST	61712	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.034918070 CEST	53	61712	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.035079002 CEST	61713	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.042215109 CEST	53	61713	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.211658955 CEST	61714	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.219244003 CEST	53	61714	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.219639063 CEST	61715	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.226861000 CEST	53	61715	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.227118015 CEST	61716	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.238452911 CEST	53	61716	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.238720894 CEST	61717	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.246401072 CEST	53	61717	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.246721029 CEST	61718	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.254323006 CEST	53	61718	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.422137976 CEST	61719	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.429305077 CEST	53	61719	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.429702044 CEST	61720	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.439548016 CEST	53	61720	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.439882994 CEST	61721	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.447459936 CEST	53	61721	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.447647095 CEST	61722	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.455260992 CEST	53	61722	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.455560923 CEST	61723	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.463380098 CEST	53	61723	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.653553009 CEST	61724	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.660312891 CEST	53	61724	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.660722017 CEST	61725	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.668339968 CEST	53	61725	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.668617010 CEST	61726	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.678224087 CEST	53	61726	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.678462982 CEST	61727	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.686204910 CEST	53	61727	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.686453104 CEST	61728	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.694511890 CEST	53	61728	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.861615896 CEST	61729	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.868731022 CEST	53	61729	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.869225025 CEST	61730	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.877342939 CEST	53	61730	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.877680063 CEST	61731	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.885869980 CEST	53	61731	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.886101961 CEST	61732	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.893569946 CEST	53	61732	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:29.893876076 CEST	61733	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:29.902045012 CEST	53	61733	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.064951897 CEST	61734	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.071772099 CEST	53	61734	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.072101116 CEST	61735	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.079736948 CEST	53	61735	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.080029964 CEST	61736	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.087548971 CEST	53	61736	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.087753057 CEST	61737	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.095289946 CEST	53	61737	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.095561028 CEST	61738	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.103858948 CEST	53	61738	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.268887997 CEST	61739	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.276135921 CEST	53	61739	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.276460886 CEST	61740	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.284302950 CEST	53	61740	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.284532070 CEST	61741	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.291748047 CEST	53	61741	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.292026997 CEST	61742	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.299351931 CEST	53	61742	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.299614906 CEST	61743	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.308065891 CEST	53	61743	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.472779036 CEST	61744	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.479801893 CEST	53	61744	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.480655909 CEST	61745	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.488763094 CEST	53	61745	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.491980076 CEST	61746	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.501964092 CEST	53	61746	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.503797054 CEST	61747	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.511213064 CEST	53	61747	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.512213945 CEST	61748	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.519783020 CEST	53	61748	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.709876060 CEST	61749	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.717225075 CEST	53	61749	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.717648029 CEST	61750	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.726135015 CEST	53	61750	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.726413965 CEST	61751	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.741915941 CEST	53	61751	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.742218018 CEST	61752	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.750024080 CEST	53	61752	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.750406981 CEST	61753	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.761038065 CEST	53	61753	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.927505016 CEST	61754	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.936707020 CEST	53	61754	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:30.937118053 CEST	61755	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:30.948360920 CEST	53	61755	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:31.421911001 CEST	61756	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:31.431380033 CEST	53	61756	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:31.431703091 CEST	61757	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:31.438859940 CEST	53	61757	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:31.441745996 CEST	61758	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:31.449836016 CEST	53	61758	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:31.617285967 CEST	61759	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:31.624505997 CEST	53	61759	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:31.625047922 CEST	61760	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:31.632148027 CEST	53	61760	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:31.632462025 CEST	61761	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:31.639866114 CEST	53	61761	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:31.640141964 CEST	61762	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:31.648317099 CEST	53	61762	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:31.648484945 CEST	61763	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:31.656728983 CEST	53	61763	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:31.828079939 CEST	61764	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:31.835093021 CEST	53	61764	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:31.835477114 CEST	61765	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:31.842653990 CEST	53	61765	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:32.300369024 CEST	61766	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:32.307502985 CEST	53	61766	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:32.307900906 CEST	61767	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:32.315781116 CEST	53	61767	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:32.316061020 CEST	61768	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:32.338105917 CEST	53	61768	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:32.501152039 CEST	61769	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:32.508533955 CEST	53	61769	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:32.509917974 CEST	61770	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:32.518387079 CEST	53	61770	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:32.521869898 CEST	61771	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:32.528852940 CEST	53	61771	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:32.529767036 CEST	61772	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:32.537365913 CEST	53	61772	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:32.537554979 CEST	61773	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:32.545243025 CEST	53	61773	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:32.732718945 CEST	61019	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:32.817490101 CEST	53	61019	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:32.825941086 CEST	61020	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:32.832746983 CEST	53	61020	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:32.833182096 CEST	61021	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:32.860022068 CEST	53	61021	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:32.860340118 CEST	61022	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:32.867492914 CEST	53	61022	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:32.867674112 CEST	61023	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:32.876391888 CEST	53	61023	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:32.876586914 CEST	61024	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:32.884407997 CEST	53	61024	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:33.056874037 CEST	61025	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.063910007 CEST	53	61025	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:33.064338923 CEST	61026	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.071970940 CEST	53	61026	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:33.072266102 CEST	61027	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.079899073 CEST	53	61027	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:33.080097914 CEST	61028	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.087021112 CEST	53	61028	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:33.087179899 CEST	61029	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.095464945 CEST	53	61029	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:33.253115892 CEST	61030	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.260099888 CEST	53	61030	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:33.260593891 CEST	61031	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.268930912 CEST	53	61031	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:33.269308090 CEST	61032	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.277525902 CEST	53	61032	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:33.277839899 CEST	61033	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.286655903 CEST	53	61033	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:33.289002895 CEST	61034	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.296659946 CEST	53	61034	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:33.453643084 CEST	61035	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.460632086 CEST	53	61035	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:33.461970091 CEST	61036	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.469543934 CEST	53	61036	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:33.469907999 CEST	61037	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.477402925 CEST	53	61037	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:33.477686882 CEST	61038	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:33.484612942 CEST	53	61038	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.014055014 CEST	61039	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.021536112 CEST	53	61039	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.188361883 CEST	61040	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.198030949 CEST	53	61040	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.198384047 CEST	61041	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.206403017 CEST	53	61041	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.206665039 CEST	61042	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.214065075 CEST	53	61042	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.214330912 CEST	61043	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.221869946 CEST	53	61043	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.222085953 CEST	61044	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.229280949 CEST	53	61044	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.394788980 CEST	61045	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.403029919 CEST	53	61045	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.403413057 CEST	61046	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.410381079 CEST	53	61046	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.410631895 CEST	61047	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.418833017 CEST	53	61047	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.419094086 CEST	61048	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.427638054 CEST	53	61048	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.430243969 CEST	61049	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.438878059 CEST	53	61049	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.594742060 CEST	61050	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.601890087 CEST	53	61050	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.602401018 CEST	61051	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.648262024 CEST	53	61051	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.648775101 CEST	61052	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.657857895 CEST	53	61052	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.658204079 CEST	61053	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.665826082 CEST	53	61053	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.666094065 CEST	61054	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.685992956 CEST	53	61054	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.846028090 CEST	61055	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.853179932 CEST	53	61055	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.853621006 CEST	61056	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.861141920 CEST	53	61056	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.861536026 CEST	61057	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.870374918 CEST	53	61057	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.870672941 CEST	61058	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.879313946 CEST	53	61058	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:34.879596949 CEST	61059	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:34.888361931 CEST	53	61059	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.053349018 CEST	61060	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.060339928 CEST	53	61060	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.060698986 CEST	61061	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.068572998 CEST	53	61061	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.068826914 CEST	61062	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.076114893 CEST	53	61062	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.076375961 CEST	61063	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.084542036 CEST	53	61063	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.084705114 CEST	61064	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.092299938 CEST	53	61064	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.251276970 CEST	61065	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.258141994 CEST	53	61065	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.258580923 CEST	61066	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.265963078 CEST	53	61066	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.266192913 CEST	61067	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.273634911 CEST	53	61067	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.273816109 CEST	61068	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.281944990 CEST	53	61068	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.282115936 CEST	61069	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.290378094 CEST	53	61069	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.462932110 CEST	61070	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.471560955 CEST	53	61070	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.471975088 CEST	61071	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.479872942 CEST	53	61071	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.480115891 CEST	61072	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.487670898 CEST	53	61072	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.487865925 CEST	61073	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.496468067 CEST	53	61073	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.496684074 CEST	61074	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.504389048 CEST	53	61074	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.735984087 CEST	61075	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.743278027 CEST	53	61075	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.743659973 CEST	61076	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.752543926 CEST	53	61076	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.753021002 CEST	61077	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.762979031 CEST	53	61077	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.764224052 CEST	61078	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.771898985 CEST	53	61078	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:35.827265978 CEST	61079	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:35.835269928 CEST	53	61079	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.140187979 CEST	61080	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.147306919 CEST	53	61080	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.147721052 CEST	61081	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.154957056 CEST	53	61081	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.155294895 CEST	61082	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.163713932 CEST	53	61082	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.164961100 CEST	61083	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.172669888 CEST	53	61083	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.172944069 CEST	61084	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.180722952 CEST	53	61084	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.342446089 CEST	61085	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.349896908 CEST	53	61085	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.350368977 CEST	61086	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.358206987 CEST	53	61086	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.358572960 CEST	61087	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.371037006 CEST	53	61087	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.371329069 CEST	61088	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.379791021 CEST	53	61088	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.380100965 CEST	61089	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.387794018 CEST	53	61089	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.546031952 CEST	61090	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.553189993 CEST	53	61090	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.553630114 CEST	61091	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.560698032 CEST	53	61091	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.561001062 CEST	61092	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.568629026 CEST	53	61092	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.568999052 CEST	61093	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.576386929 CEST	53	61093	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.576637983 CEST	61094	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.583853960 CEST	53	61094	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.756829977 CEST	61095	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.763807058 CEST	53	61095	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.764369965 CEST	61096	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.771845102 CEST	53	61096	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.772200108 CEST	61097	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.779293060 CEST	53	61097	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.779501915 CEST	61098	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.786750078 CEST	53	61098	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.786917925 CEST	61099	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.794713974 CEST	53	61099	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.953413010 CEST	61100	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.962021112 CEST	53	61100	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.962584972 CEST	61101	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.970329046 CEST	53	61101	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.970662117 CEST	61102	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.979970932 CEST	53	61102	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.980169058 CEST	61103	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.989043951 CEST	53	61103	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:36.989245892 CEST	61104	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:36.999162912 CEST	53	61104	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.156930923 CEST	61105	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.163649082 CEST	53	61105	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.164040089 CEST	61106	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.171720982 CEST	53	61106	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.172115088 CEST	61107	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.179766893 CEST	53	61107	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.180079937 CEST	61108	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.188523054 CEST	53	61108	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.188915014 CEST	61109	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.199800968 CEST	53	61109	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.358838081 CEST	61110	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.366795063 CEST	53	61110	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.367165089 CEST	61111	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.375135899 CEST	53	61111	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.375423908 CEST	61112	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.383512974 CEST	53	61112	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.383704901 CEST	61113	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.392947912 CEST	53	61113	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.393457890 CEST	61114	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.402551889 CEST	53	61114	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.572623014 CEST	61115	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.581934929 CEST	53	61115	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.582518101 CEST	61116	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.590321064 CEST	53	61116	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.590645075 CEST	61117	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.599143982 CEST	53	61117	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.599351883 CEST	61118	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.607440948 CEST	53	61118	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.607851028 CEST	61119	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.615617037 CEST	53	61119	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.783101082 CEST	57863	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.936912060 CEST	53	57863	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.945348024 CEST	57864	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.952127934 CEST	53	57864	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.952491999 CEST	57865	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.971741915 CEST	53	57865	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.972109079 CEST	57866	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.979856014 CEST	53	57866	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.980148077 CEST	57867	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.987524033 CEST	53	57867	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:37.987730026 CEST	57868	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:37.996306896 CEST	53	57868	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:38.159975052 CEST	57869	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:38.166817904 CEST	53	57869	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:38.169600964 CEST	57870	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:38.178358078 CEST	53	57870	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:38.178623915 CEST	57871	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:38.188189030 CEST	53	57871	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:38.191531897 CEST	57872	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:38.199345112 CEST	53	57872	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:38.212280989 CEST	57873	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:38.221512079 CEST	53	57873	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:38.387907028 CEST	57874	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:38.395045996 CEST	53	57874	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:38.404866934 CEST	57875	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:38.412914038 CEST	53	57875	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:38.466325045 CEST	57876	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:38.476406097 CEST	53	57876	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:38.480499983 CEST	57877	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:38.488169909 CEST	53	57877	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:38.490524054 CEST	57878	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:38.506375074 CEST	53	57878	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:38.816423893 CEST	57879	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:38.824397087 CEST	53	57879	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:38.824929953 CEST	57880	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:38.832400084 CEST	53	57880	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:38.832691908 CEST	57881	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:38.840764046 CEST	53	57881	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:38.841120958 CEST	57882	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:38.848840952 CEST	53	57882	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:38.849349976 CEST	57883	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:38.857439041 CEST	53	57883	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.032212019 CEST	57884	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.041322947 CEST	53	57884	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.041745901 CEST	57885	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.050120115 CEST	53	57885	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.050321102 CEST	57886	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.058949947 CEST	53	57886	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.059149981 CEST	57887	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.067274094 CEST	53	57887	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.067517996 CEST	57888	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.075679064 CEST	53	57888	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.238878012 CEST	57889	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.247273922 CEST	53	57889	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.247673035 CEST	57890	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.256459951 CEST	53	57890	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.256774902 CEST	57891	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.265708923 CEST	53	57891	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.265954971 CEST	57892	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.273283005 CEST	53	57892	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.273500919 CEST	57893	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.281217098 CEST	53	57893	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.440989971 CEST	57894	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.450737953 CEST	53	57894	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.451127052 CEST	57895	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.461190939 CEST	53	57895	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.461560011 CEST	57896	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.469378948 CEST	53	57896	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.469729900 CEST	57897	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.478530884 CEST	53	57897	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.478728056 CEST	57898	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.488171101 CEST	53	57898	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.670346022 CEST	57899	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.677253008 CEST	53	57899	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.680609941 CEST	57900	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.688081980 CEST	53	57900	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.688374043 CEST	57901	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.697685003 CEST	53	57901	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.698075056 CEST	57902	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.705868959 CEST	53	57902	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.706109047 CEST	57903	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.713640928 CEST	53	57903	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.876676083 CEST	57904	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.884884119 CEST	53	57904	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.885270119 CEST	57905	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.893260956 CEST	53	57905	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.893573046 CEST	57906	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.902801991 CEST	53	57906	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.903054953 CEST	57907	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.910382986 CEST	53	57907	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:39.910643101 CEST	57908	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:39.918447018 CEST	53	57908	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.077166080 CEST	57909	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.084903955 CEST	53	57909	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.085239887 CEST	57910	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.092930079 CEST	53	57910	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.093169928 CEST	57911	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.100718975 CEST	53	57911	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.100966930 CEST	57912	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.108464956 CEST	53	57912	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.108721972 CEST	57913	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.116274118 CEST	53	57913	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.281850100 CEST	57914	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.289268970 CEST	53	57914	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.289664984 CEST	57915	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.298008919 CEST	53	57915	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.298479080 CEST	57916	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.306529045 CEST	53	57916	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.306797028 CEST	57917	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.317856073 CEST	53	57917	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.318133116 CEST	57918	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.327619076 CEST	53	57918	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.488403082 CEST	57919	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.495661974 CEST	53	57919	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.496193886 CEST	57920	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.504245043 CEST	53	57920	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.504573107 CEST	57921	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.512990952 CEST	53	57921	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.513204098 CEST	57922	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.525135040 CEST	53	57922	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.525386095 CEST	57923	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.533732891 CEST	53	57923	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.695070982 CEST	57924	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.701955080 CEST	53	57924	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.702611923 CEST	57925	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.712440968 CEST	53	57925	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.712762117 CEST	57926	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.722963095 CEST	53	57926	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.728332996 CEST	57927	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.737600088 CEST	53	57927	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.737999916 CEST	57928	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.746264935 CEST	53	57928	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.915751934 CEST	57929	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.923096895 CEST	53	57929	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.923593998 CEST	57930	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.943180084 CEST	53	57930	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.943629980 CEST	57931	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.952641010 CEST	53	57931	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.953022957 CEST	57932	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.960164070 CEST	53	57932	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:40.960509062 CEST	57933	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:40.967777014 CEST	53	57933	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:41.414819956 CEST	57934	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:41.651773930 CEST	53	57934	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:41.652494907 CEST	57935	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:41.660094976 CEST	53	57935	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:41.660545111 CEST	57936	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:41.669531107 CEST	53	57936	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:41.669888973 CEST	57937	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:41.677083015 CEST	53	57937	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:41.677417040 CEST	57938	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:41.685929060 CEST	53	57938	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:41.846353054 CEST	57939	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:41.854765892 CEST	53	57939	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:41.857939005 CEST	57940	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:41.866017103 CEST	53	57940	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:41.869878054 CEST	57941	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:41.877747059 CEST	53	57941	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:41.881830931 CEST	57942	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:41.889796019 CEST	53	57942	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:41.892641068 CEST	57943	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:41.900764942 CEST	53	57943	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.064275026 CEST	57944	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.073335886 CEST	53	57944	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.073833942 CEST	57945	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.082261086 CEST	53	57945	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.084070921 CEST	57946	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.091439962 CEST	53	57946	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.092211962 CEST	57947	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.099663019 CEST	53	57947	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.101236105 CEST	57948	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.109169960 CEST	53	57948	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.265827894 CEST	57949	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.273464918 CEST	53	57949	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.273885012 CEST	57950	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.281299114 CEST	53	57950	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.281784058 CEST	57951	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.290086985 CEST	53	57951	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.290931940 CEST	57952	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.299246073 CEST	53	57952	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.299935102 CEST	57953	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.307414055 CEST	53	57953	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.492316961 CEST	57954	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.499392986 CEST	53	57954	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.499931097 CEST	57955	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.507580042 CEST	53	57955	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.507844925 CEST	57956	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.515417099 CEST	53	57956	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.515649080 CEST	57957	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.525439024 CEST	53	57957	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.525684118 CEST	57958	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.533803940 CEST	53	57958	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.692280054 CEST	52390	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.852807999 CEST	53	52390	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.862272978 CEST	52391	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.872503042 CEST	53	52391	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.873020887 CEST	52392	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.882714033 CEST	53	52392	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.883079052 CEST	52393	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.890458107 CEST	53	52393	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.890863895 CEST	52394	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.898252010 CEST	53	52394	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:42.898560047 CEST	52395	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:42.906167030 CEST	53	52395	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.064937115 CEST	52396	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.073087931 CEST	53	52396	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.073523045 CEST	52397	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.081712008 CEST	53	52397	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.082056046 CEST	52398	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.090363026 CEST	53	52398	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.090673923 CEST	52399	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.098839045 CEST	53	52399	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.099050999 CEST	52400	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.106810093 CEST	53	52400	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.270531893 CEST	52401	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.277441025 CEST	53	52401	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.277890921 CEST	52402	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.285382032 CEST	53	52402	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.285655975 CEST	52403	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.292992115 CEST	53	52403	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.293236971 CEST	52404	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.300875902 CEST	53	52404	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.301096916 CEST	52405	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.309313059 CEST	53	52405	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.487420082 CEST	52406	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.494601965 CEST	53	52406	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.495140076 CEST	52407	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.503139019 CEST	53	52407	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.503541946 CEST	52408	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.511368036 CEST	53	52408	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.511728048 CEST	52409	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.519583941 CEST	53	52409	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.519948959 CEST	52410	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.527508020 CEST	53	52410	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.696315050 CEST	52411	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.703623056 CEST	53	52411	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.704092026 CEST	52412	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.712100983 CEST	53	52412	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.712444067 CEST	52413	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.720310926 CEST	53	52413	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.720664024 CEST	52414	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.728724003 CEST	53	52414	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.729016066 CEST	52415	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.736407995 CEST	53	52415	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.903882027 CEST	52416	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.911164045 CEST	53	52416	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.911669016 CEST	52417	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.920849085 CEST	53	52417	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.921166897 CEST	52418	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.929532051 CEST	53	52418	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.930012941 CEST	52419	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.937336922 CEST	53	52419	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:43.937756062 CEST	52420	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:43.945389032 CEST	53	52420	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.113127947 CEST	52421	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.120124102 CEST	53	52421	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.120500088 CEST	52422	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.128181934 CEST	53	52422	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.128601074 CEST	52423	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.136240959 CEST	53	52423	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.136614084 CEST	52424	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.146128893 CEST	53	52424	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.148468018 CEST	52425	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.156709909 CEST	53	52425	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.315426111 CEST	52426	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.322427988 CEST	53	52426	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.322827101 CEST	52427	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.330722094 CEST	53	52427	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.331070900 CEST	52428	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.340039015 CEST	53	52428	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.340312004 CEST	52429	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.347815037 CEST	53	52429	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.348376036 CEST	52430	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.355739117 CEST	53	52430	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.525284052 CEST	52431	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.532004118 CEST	53	52431	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.532366037 CEST	52432	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.539726019 CEST	53	52432	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.540024042 CEST	52433	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.547549009 CEST	53	52433	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.547800064 CEST	52434	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.555583954 CEST	53	52434	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.555871010 CEST	52435	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.563314915 CEST	53	52435	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.720885038 CEST	52436	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.728352070 CEST	53	52436	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.728769064 CEST	52437	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.736407042 CEST	53	52437	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.736690044 CEST	52438	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.743941069 CEST	53	52438	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.744204044 CEST	52439	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.751306057 CEST	53	52439	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.751549959 CEST	52440	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.759217978 CEST	53	52440	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.930289030 CEST	52441	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.939038038 CEST	53	52441	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.939470053 CEST	52442	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.946800947 CEST	53	52442	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.947079897 CEST	52443	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.955029011 CEST	53	52443	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.956816912 CEST	52444	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.963969946 CEST	53	52444	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:44.964334965 CEST	52445	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:44.971977949 CEST	53	52445	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.143572092 CEST	52446	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.150376081 CEST	53	52446	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.150783062 CEST	52447	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.158246994 CEST	53	52447	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.160202980 CEST	52448	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.168257952 CEST	53	52448	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.172410011 CEST	52449	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.179861069 CEST	53	52449	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.184243917 CEST	52450	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.191838980 CEST	53	52450	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.363473892 CEST	52451	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.370903015 CEST	53	52451	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.371335983 CEST	52452	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.378565073 CEST	53	52452	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.378928900 CEST	52453	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.386071920 CEST	53	52453	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.386354923 CEST	52454	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.395139933 CEST	53	52454	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.395448923 CEST	52455	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.403229952 CEST	53	52455	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.583122969 CEST	52456	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.590169907 CEST	53	52456	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.590616941 CEST	52457	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.598313093 CEST	53	52457	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.598651886 CEST	52458	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.606436014 CEST	53	52458	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.606751919 CEST	52459	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.614758968 CEST	53	52459	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.615191936 CEST	52460	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.623370886 CEST	53	52460	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.789882898 CEST	52461	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.797322035 CEST	53	52461	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.797749043 CEST	52462	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.805054903 CEST	53	52462	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.805327892 CEST	52463	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.813271046 CEST	53	52463	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.813561916 CEST	52464	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.824801922 CEST	53	52464	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:45.825333118 CEST	52465	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:45.832535982 CEST	53	52465	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.004522085 CEST	52466	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.012187004 CEST	53	52466	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.012700081 CEST	52467	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.020781040 CEST	53	52467	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.021162033 CEST	52468	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.028425932 CEST	53	52468	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.028740883 CEST	52469	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.036469936 CEST	53	52469	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.036854029 CEST	52470	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.044744968 CEST	53	52470	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.210206032 CEST	52471	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.220386028 CEST	53	52471	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.226845026 CEST	52472	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.236884117 CEST	53	52472	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.237346888 CEST	52473	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.246185064 CEST	53	52473	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.246761084 CEST	52474	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.254214048 CEST	53	52474	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.254559040 CEST	52475	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.263400078 CEST	53	52475	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.424766064 CEST	52476	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.432728052 CEST	53	52476	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.433147907 CEST	52477	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.442011118 CEST	53	52477	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.442405939 CEST	52478	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.450087070 CEST	53	52478	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.450396061 CEST	52479	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.458664894 CEST	53	52479	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.458914995 CEST	52480	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.467109919 CEST	53	52480	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.629160881 CEST	52481	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.636517048 CEST	53	52481	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.636939049 CEST	52482	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.649162054 CEST	53	52482	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.649506092 CEST	52483	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.656888008 CEST	53	52483	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.657171965 CEST	52484	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.672406912 CEST	53	52484	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.672723055 CEST	52485	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:46.683778048 CEST	53	52485	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:46.854521036 CEST	52486	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.202698946 CEST	53	52486	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.203387976 CEST	52487	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.212682962 CEST	53	52487	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.213113070 CEST	52488	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.220649004 CEST	53	52488	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.221009970 CEST	52489	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.229638100 CEST	53	52489	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.233957052 CEST	52490	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.241729975 CEST	53	52490	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.413033009 CEST	52491	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.420876026 CEST	53	52491	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.421245098 CEST	52492	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.429364920 CEST	53	52492	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.429704905 CEST	52493	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.438849926 CEST	53	52493	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.439105988 CEST	52494	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.446289062 CEST	53	52494	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.446485043 CEST	52495	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.454745054 CEST	53	52495	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.614003897 CEST	63459	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.661988020 CEST	53	63459	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.673681021 CEST	63460	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.682456970 CEST	53	63460	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.682943106 CEST	63461	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.693233013 CEST	53	63461	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.693835974 CEST	63462	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.703488111 CEST	53	63462	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.705771923 CEST	63463	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.713396072 CEST	53	63463	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.713805914 CEST	63464	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.721476078 CEST	53	63464	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.879842997 CEST	63465	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.888008118 CEST	53	63465	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.890062094 CEST	63466	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.898652077 CEST	53	63466	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.901593924 CEST	63467	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.910092115 CEST	53	63467	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.914002895 CEST	63468	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.924880028 CEST	53	63468	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:47.929811954 CEST	63469	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:47.937684059 CEST	53	63469	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.096422911 CEST	63470	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.104341984 CEST	53	63470	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.104705095 CEST	63471	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.112257004 CEST	53	63471	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.113807917 CEST	63472	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.121479988 CEST	53	63472	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.121781111 CEST	63473	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.129427910 CEST	53	63473	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.129756927 CEST	63474	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.138181925 CEST	53	63474	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.306416988 CEST	63475	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.313296080 CEST	53	63475	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.313843966 CEST	63476	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.321630001 CEST	53	63476	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.322017908 CEST	63477	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.329608917 CEST	53	63477	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.329803944 CEST	63478	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.339447021 CEST	53	63478	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.339628935 CEST	63479	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.349548101 CEST	53	63479	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.519516945 CEST	63480	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.527736902 CEST	53	63480	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.528115988 CEST	63481	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.537600040 CEST	53	63481	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.537898064 CEST	63482	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.546977997 CEST	53	63482	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.547285080 CEST	63483	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.555589914 CEST	53	63483	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.555866003 CEST	63484	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.566056013 CEST	53	63484	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.735654116 CEST	63485	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.743235111 CEST	53	63485	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.743719101 CEST	63486	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.752151012 CEST	53	63486	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.752522945 CEST	63487	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.761100054 CEST	53	63487	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.761418104 CEST	63488	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.768557072 CEST	53	63488	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.768835068 CEST	63489	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.776510954 CEST	53	63489	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.941976070 CEST	63490	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.950162888 CEST	53	63490	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.950654030 CEST	63491	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.958559036 CEST	53	63491	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.960961103 CEST	63492	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.969959974 CEST	53	63492	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.970298052 CEST	63493	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.977885008 CEST	53	63493	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:48.978169918 CEST	63494	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:48.987009048 CEST	53	63494	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:49.158016920 CEST	63495	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:49.165285110 CEST	53	63495	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:49.165673971 CEST	63496	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:49.173049927 CEST	53	63496	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:49.173341990 CEST	63497	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:49.180478096 CEST	53	63497	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:49.180766106 CEST	63498	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:49.188677073 CEST	53	63498	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:49.188971996 CEST	63499	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:49.196983099 CEST	53	63499	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:49.370681047 CEST	63500	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:49.377392054 CEST	53	63500	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:49.377868891 CEST	63501	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:49.385447025 CEST	53	63501	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:49.385725975 CEST	63502	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:49.392865896 CEST	53	63502	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:49.393078089 CEST	63503	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:49.401778936 CEST	53	63503	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:49.402024984 CEST	63504	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:49.409889936 CEST	53	63504	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:49.581111908 CEST	63505	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:49.588855028 CEST	53	63505	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:49.591512918 CEST	63506	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:49.599754095 CEST	53	63506	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:49.600136042 CEST	63507	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:49.607690096 CEST	53	63507	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:49.608916044 CEST	63508	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:49.616332054 CEST	53	63508	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:49.617860079 CEST	63509	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:49.629929066 CEST	53	63509	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:50.060523033 CEST	63510	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:50.067670107 CEST	53	63510	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:50.083625078 CEST	63511	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:50.091689110 CEST	53	63511	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:50.092653990 CEST	63512	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:50.101317883 CEST	53	63512	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:50.103944063 CEST	63513	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:50.111835957 CEST	53	63513	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:50.113733053 CEST	63514	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:50.122070074 CEST	53	63514	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:50.301641941 CEST	63515	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:50.311552048 CEST	53	63515	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:50.312119007 CEST	63516	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:50.322575092 CEST	53	63516	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:50.323246956 CEST	63517	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:50.334352970 CEST	53	63517	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:50.334815979 CEST	63518	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:50.345523119 CEST	53	63518	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:50.345813990 CEST	63519	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:50.353872061 CEST	53	63519	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:50.517107964 CEST	63520	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:50.524874926 CEST	53	63520	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:50.525254965 CEST	63521	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:50.533375025 CEST	53	63521	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:50.533719063 CEST	63522	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:50.541897058 CEST	53	63522	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:50.542135000 CEST	63523	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:50.551148891 CEST	53	63523	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:50.551439047 CEST	63524	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:50.558698893 CEST	53	63524	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:50.739660025 CEST	63525	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.049916983 CEST	53	63525	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.050689936 CEST	63526	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.058428049 CEST	53	63526	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.058809042 CEST	63527	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.069320917 CEST	53	63527	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.069820881 CEST	63528	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.077088118 CEST	53	63528	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.077507973 CEST	63529	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.084167957 CEST	53	63529	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.251497030 CEST	63530	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.259278059 CEST	53	63530	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.259747982 CEST	63531	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.268467903 CEST	53	63531	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.269033909 CEST	63532	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.276211977 CEST	53	63532	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.276554108 CEST	63533	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.284390926 CEST	53	63533	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.284706116 CEST	63534	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.292521000 CEST	53	63534	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.471873999 CEST	63535	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.480022907 CEST	53	63535	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.480469942 CEST	63536	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.489157915 CEST	53	63536	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.489497900 CEST	63537	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.498240948 CEST	53	63537	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.498620033 CEST	63538	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.507637024 CEST	53	63538	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.507936001 CEST	63539	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.518034935 CEST	53	63539	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.675251007 CEST	63540	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.685771942 CEST	53	63540	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.690099955 CEST	63541	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.699834108 CEST	53	63541	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.700201988 CEST	63542	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.710370064 CEST	53	63542	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.714050055 CEST	63543	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.725480080 CEST	53	63543	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.726021051 CEST	63544	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.737534046 CEST	53	63544	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.910656929 CEST	63545	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.917731047 CEST	53	63545	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.919281006 CEST	63546	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.928119898 CEST	53	63546	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.929557085 CEST	63547	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.937630892 CEST	53	63547	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.938020945 CEST	63548	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.945997953 CEST	53	63548	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:51.947240114 CEST	63549	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:51.954605103 CEST	53	63549	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:52.126302958 CEST	63550	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:52.135858059 CEST	53	63550	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:52.138617039 CEST	63551	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:52.148143053 CEST	53	63551	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:52.148538113 CEST	63552	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:52.158272028 CEST	53	63552	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:52.158574104 CEST	63553	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:52.167910099 CEST	53	63553	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:52.171112061 CEST	63554	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:52.179514885 CEST	53	63554	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:52.351012945 CEST	63555	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:52.359417915 CEST	53	63555	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:52.362129927 CEST	63556	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:52.372354031 CEST	53	63556	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:52.373830080 CEST	63557	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:52.388968945 CEST	53	63557	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:52.390070915 CEST	63558	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:52.398780107 CEST	53	63558	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:52.400182009 CEST	63559	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:52.408190966 CEST	53	63559	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:52.850609064 CEST	63563	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:52.936036110 CEST	53	63563	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:52.943634987 CEST	63564	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:52.952353001 CEST	53	63564	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:52.952785969 CEST	63565	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:52.961575031 CEST	53	63565	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:52.961869955 CEST	63566	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:52.969506979 CEST	53	63566	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:52.969719887 CEST	63567	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:52.978564978 CEST	53	63567	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:52.978765965 CEST	63568	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:52.986300945 CEST	53	63568	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.169171095 CEST	63569	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.177089930 CEST	53	63569	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.177562952 CEST	63570	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.185146093 CEST	53	63570	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.185645103 CEST	63571	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.193356037 CEST	53	63571	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.193676949 CEST	63572	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.201674938 CEST	53	63572	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.201965094 CEST	63573	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.209707975 CEST	53	63573	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.378546953 CEST	63574	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.386998892 CEST	53	63574	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.387479067 CEST	63575	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.399272919 CEST	53	63575	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.399859905 CEST	63576	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.407212019 CEST	53	63576	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.407465935 CEST	63577	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.415333986 CEST	53	63577	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.415524006 CEST	63578	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.423249960 CEST	53	63578	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.579526901 CEST	63579	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.586595058 CEST	53	63579	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.587006092 CEST	63580	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.594881058 CEST	53	63580	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.595274925 CEST	63581	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.603051901 CEST	53	63581	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.603271961 CEST	63582	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.610563040 CEST	53	63582	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.610826969 CEST	63583	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.618108034 CEST	53	63583	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.786194086 CEST	63584	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.795141935 CEST	53	63584	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.795650005 CEST	63585	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.818689108 CEST	53	63585	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.819196939 CEST	63586	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.827585936 CEST	53	63586	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.828052044 CEST	63587	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.836227894 CEST	53	63587	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:53.837426901 CEST	63588	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:53.846649885 CEST	53	63588	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:54.010065079 CEST	63589	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:54.017693043 CEST	53	63589	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:54.018197060 CEST	63590	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:54.026365995 CEST	53	63590	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:54.026734114 CEST	63591	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:54.034545898 CEST	53	63591	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:54.035001040 CEST	63592	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:54.043046951 CEST	53	63592	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:54.043426037 CEST	63593	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:54.087438107 CEST	53	63593	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:54.258606911 CEST	63594	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:54.265700102 CEST	53	63594	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:54.268162966 CEST	63595	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:54.275499105 CEST	53	63595	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:54.276135921 CEST	63596	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:54.283946037 CEST	53	63596	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:54.288017988 CEST	63597	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:54.298197985 CEST	53	63597	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:54.300292969 CEST	63598	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:54.307691097 CEST	53	63598	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:54.477561951 CEST	63599	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:54.485243082 CEST	53	63599	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:54.485829115 CEST	63600	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:54.493431091 CEST	53	63600	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:54.493693113 CEST	63601	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:54.501029968 CEST	53	63601	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:54.504129887 CEST	63602	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:54.512629032 CEST	53	63602	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:54.512993097 CEST	63603	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:54.520993948 CEST	53	63603	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:54.697011948 CEST	63604	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.045661926 CEST	53	63604	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.046349049 CEST	63605	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.055195093 CEST	53	63605	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.055772066 CEST	63606	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.064956903 CEST	53	63606	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.065568924 CEST	63607	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.073043108 CEST	53	63607	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.073437929 CEST	63608	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.082252979 CEST	53	63608	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.271506071 CEST	63609	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.278353930 CEST	53	63609	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.278914928 CEST	63610	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.286329985 CEST	53	63610	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.286704063 CEST	63611	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.294516087 CEST	53	63611	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.294852018 CEST	63612	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.302434921 CEST	53	63612	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.302763939 CEST	63613	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.310344934 CEST	53	63613	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.472664118 CEST	63614	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.479697943 CEST	53	63614	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.480166912 CEST	63615	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.487612009 CEST	53	63615	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.487885952 CEST	63616	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.496717930 CEST	53	63616	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.497061014 CEST	63617	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.504539013 CEST	53	63617	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.504822969 CEST	63618	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.513088942 CEST	53	63618	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.676400900 CEST	63619	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.834403992 CEST	53	63619	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.838026047 CEST	63620	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.846563101 CEST	53	63620	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.846879005 CEST	63621	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.854343891 CEST	53	63621	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.855895042 CEST	63622	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.863960981 CEST	53	63622	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:55.864320993 CEST	63623	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:55.873091936 CEST	53	63623	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.039295912 CEST	63624	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.047132015 CEST	53	63624	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.047811031 CEST	63625	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.056122065 CEST	53	63625	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.056513071 CEST	63626	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.065953970 CEST	53	63626	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.066296101 CEST	63627	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.074738979 CEST	53	63627	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.074970961 CEST	63628	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.085454941 CEST	53	63628	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.262545109 CEST	63629	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.269709110 CEST	53	63629	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.270385981 CEST	63630	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.279656887 CEST	53	63630	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.280034065 CEST	63631	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.289139986 CEST	53	63631	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.289383888 CEST	63632	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.297358990 CEST	53	63632	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.297682047 CEST	63633	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.305357933 CEST	53	63633	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.475677967 CEST	63634	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.484091997 CEST	53	63634	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.486598969 CEST	63635	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.495996952 CEST	53	63635	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.496545076 CEST	63636	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.504054070 CEST	53	63636	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.504452944 CEST	63637	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.513016939 CEST	53	63637	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.513290882 CEST	63638	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.521064997 CEST	53	63638	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.693010092 CEST	63639	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.699745893 CEST	53	63639	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.700176001 CEST	63640	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.708079100 CEST	53	63640	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.708411932 CEST	63641	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.717453003 CEST	53	63641	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.717716932 CEST	63642	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.725575924 CEST	53	63642	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.725830078 CEST	63643	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.732923031 CEST	53	63643	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.911566973 CEST	63644	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.919363976 CEST	53	63644	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.919900894 CEST	63645	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.928639889 CEST	53	63645	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.929043055 CEST	63646	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.936990023 CEST	53	63646	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.937369108 CEST	63647	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.946907997 CEST	53	63647	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:56.947272062 CEST	63648	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:56.955037117 CEST	53	63648	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.113795996 CEST	63649	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.120701075 CEST	53	63649	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.121200085 CEST	63650	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.129239082 CEST	53	63650	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.129569054 CEST	63651	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.136826038 CEST	53	63651	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.137032032 CEST	63652	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.144356966 CEST	53	63652	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.144587040 CEST	63653	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.152196884 CEST	53	63653	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.320875883 CEST	63654	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.329217911 CEST	53	63654	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.329989910 CEST	63655	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.341052055 CEST	53	63655	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.341417074 CEST	63656	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.358634949 CEST	53	63656	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.359016895 CEST	63657	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.367584944 CEST	53	63657	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.367816925 CEST	63658	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.382107019 CEST	53	63658	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.549947977 CEST	63659	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.559036970 CEST	53	63659	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.559428930 CEST	63660	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.569221020 CEST	53	63660	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.569622993 CEST	63661	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.577409983 CEST	53	63661	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.577711105 CEST	63662	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.586191893 CEST	53	63662	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.586385965 CEST	63663	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.596056938 CEST	53	63663	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.745064974 CEST	49738	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.794051886 CEST	53	49738	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.803534985 CEST	49739	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.810570002 CEST	53	49739	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.811079025 CEST	49740	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.819294930 CEST	53	49740	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.819587946 CEST	49741	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.828589916 CEST	53	49741	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.828896046 CEST	49742	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.837817907 CEST	53	49742	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:57.838073969 CEST	49743	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:57.845618010 CEST	53	49743	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.017755985 CEST	49744	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.025510073 CEST	53	49744	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.026433945 CEST	49745	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.034053087 CEST	53	49745	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.034774065 CEST	49746	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.042258024 CEST	53	49746	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.042748928 CEST	49747	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.050937891 CEST	53	49747	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.051403999 CEST	49748	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.060347080 CEST	53	49748	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.221091032 CEST	49749	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.228202105 CEST	53	49749	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.228663921 CEST	49750	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.236620903 CEST	53	49750	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.237019062 CEST	49751	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.245512962 CEST	53	49751	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.245768070 CEST	49752	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.262007952 CEST	53	49752	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.262274027 CEST	49753	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.270350933 CEST	53	49753	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.439110041 CEST	49754	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.446258068 CEST	53	49754	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.446671009 CEST	49755	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.454437017 CEST	53	49755	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.454730034 CEST	49756	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.462632895 CEST	53	49756	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.462848902 CEST	49757	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.471637011 CEST	53	49757	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.471894026 CEST	49758	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.480755091 CEST	53	49758	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.652755976 CEST	49759	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.908766031 CEST	53	49759	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.909359932 CEST	49760	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.918870926 CEST	53	49760	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.919231892 CEST	49761	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.927493095 CEST	53	49761	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.927830935 CEST	49762	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.936042070 CEST	53	49762	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:58.936345100 CEST	49763	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:58.944133043 CEST	53	49763	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.115113974 CEST	49764	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.124146938 CEST	53	49764	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.125765085 CEST	49765	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.144337893 CEST	53	49765	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.147408962 CEST	49766	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.156507969 CEST	53	49766	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.157138109 CEST	49767	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.165568113 CEST	53	49767	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.166156054 CEST	49768	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.174972057 CEST	53	49768	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.348855972 CEST	49769	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.358079910 CEST	53	49769	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.358506918 CEST	49770	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.366936922 CEST	53	49770	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.367252111 CEST	49771	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.383373976 CEST	53	49771	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.383822918 CEST	49772	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.392612934 CEST	53	49772	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.393039942 CEST	49773	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.403839111 CEST	53	49773	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.567163944 CEST	49774	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.574678898 CEST	53	49774	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.575238943 CEST	49775	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.584328890 CEST	53	49775	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.584626913 CEST	49776	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.593105078 CEST	53	49776	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.593533993 CEST	49777	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.601223946 CEST	53	49777	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.601557016 CEST	49778	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.612667084 CEST	53	49778	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.775943995 CEST	49779	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.783273935 CEST	53	49779	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.783691883 CEST	49780	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.791516066 CEST	53	49780	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.791814089 CEST	49781	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.800370932 CEST	53	49781	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.800697088 CEST	49782	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.808382988 CEST	53	49782	1.1.1.1	192.168.2.8
Sep 30, 2024 15:49:59.808732986 CEST	49783	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:49:59.817759037 CEST	53	49783	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.006802082 CEST	49784	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.014091969 CEST	53	49784	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.014668941 CEST	49785	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.023435116 CEST	53	49785	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.023833990 CEST	49786	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.031526089 CEST	53	49786	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.031822920 CEST	49787	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.039963961 CEST	53	49787	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.040457964 CEST	49788	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.048305988 CEST	53	49788	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.205228090 CEST	49789	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.213368893 CEST	53	49789	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.217946053 CEST	49790	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.226979971 CEST	53	49790	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.229954958 CEST	49791	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.237432003 CEST	53	49791	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.243089914 CEST	49792	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.271362066 CEST	53	49792	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.272197962 CEST	49793	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.280747890 CEST	53	49793	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.440660954 CEST	49794	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.447671890 CEST	53	49794	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.448190928 CEST	49795	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.455708981 CEST	53	49795	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.456089020 CEST	49796	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.466259003 CEST	53	49796	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.466614962 CEST	49797	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.476032019 CEST	53	49797	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.476488113 CEST	49798	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.483604908 CEST	53	49798	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.650676012 CEST	49799	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.658024073 CEST	53	49799	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.658480883 CEST	49800	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.666045904 CEST	53	49800	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.666371107 CEST	49801	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.675633907 CEST	53	49801	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.675913095 CEST	49802	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.683892965 CEST	53	49802	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.684154034 CEST	49803	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.692440033 CEST	53	49803	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.869925976 CEST	49804	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.877418995 CEST	53	49804	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.877829075 CEST	49805	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.886259079 CEST	53	49805	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.886547089 CEST	49806	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.894556999 CEST	53	49806	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.895133018 CEST	49807	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.902618885 CEST	53	49807	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:00.902915955 CEST	49808	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:00.912002087 CEST	53	49808	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:01.139252901 CEST	49809	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:01.146387100 CEST	53	49809	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:01.146877050 CEST	49810	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:01.153860092 CEST	53	49810	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:01.154558897 CEST	49811	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:01.172862053 CEST	53	49811	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:01.181289911 CEST	49812	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:01.191006899 CEST	53	49812	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:01.191462994 CEST	49813	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:01.212884903 CEST	53	49813	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:01.627058029 CEST	49814	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:01.634197950 CEST	53	49814	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:01.634608030 CEST	49815	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:01.642714024 CEST	53	49815	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:01.642970085 CEST	49816	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:01.651458025 CEST	53	49816	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:01.651774883 CEST	49817	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:01.660310030 CEST	53	49817	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:01.660612106 CEST	49818	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:01.669126034 CEST	53	49818	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:01.837799072 CEST	49819	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:01.845705032 CEST	53	49819	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:01.850564003 CEST	49820	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:01.858582973 CEST	53	49820	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:01.859110117 CEST	49821	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:01.870608091 CEST	53	49821	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:01.870956898 CEST	49822	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:01.878566980 CEST	53	49822	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:01.879040003 CEST	49823	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:01.888953924 CEST	53	49823	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.048283100 CEST	49824	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.055949926 CEST	53	49824	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.056561947 CEST	49825	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.066399097 CEST	53	49825	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.068212032 CEST	49826	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.076998949 CEST	53	49826	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.080173016 CEST	49827	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.088716984 CEST	53	49827	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.089133024 CEST	49828	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.099261999 CEST	53	49828	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.262545109 CEST	49829	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.269737005 CEST	53	49829	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.270241022 CEST	49830	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.277684927 CEST	53	49830	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.278203011 CEST	49831	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.287111044 CEST	53	49831	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.287417889 CEST	49832	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.295003891 CEST	53	49832	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.296365023 CEST	49833	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.320990086 CEST	53	49833	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.487867117 CEST	49834	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.494880915 CEST	53	49834	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.495726109 CEST	49835	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.504949093 CEST	53	49835	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.505424023 CEST	49836	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.513700008 CEST	53	49836	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.516491890 CEST	49837	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.524218082 CEST	53	49837	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.524976015 CEST	49838	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.534543991 CEST	53	49838	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.701453924 CEST	65247	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.749352932 CEST	53	65247	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.757313967 CEST	65248	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.764422894 CEST	53	65248	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.764811039 CEST	65249	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.773253918 CEST	53	65249	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.773530006 CEST	65250	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.780855894 CEST	53	65250	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.781239033 CEST	65251	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.791661978 CEST	53	65251	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.791953087 CEST	65252	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.801179886 CEST	53	65252	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.961882114 CEST	65253	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.968691111 CEST	53	65253	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.969152927 CEST	65254	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.979254961 CEST	53	65254	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.979545116 CEST	65255	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.988497972 CEST	53	65255	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.988826990 CEST	65256	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:02.997515917 CEST	53	65256	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:02.997823000 CEST	65257	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.005698919 CEST	53	65257	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.158855915 CEST	65258	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.169214010 CEST	53	65258	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.169768095 CEST	65259	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.177877903 CEST	53	65259	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.178150892 CEST	65260	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.187086105 CEST	53	65260	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.187495947 CEST	65261	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.196082115 CEST	53	65261	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.196476936 CEST	65262	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.204535961 CEST	53	65262	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.364267111 CEST	65263	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.371444941 CEST	53	65263	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.371879101 CEST	65264	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.380634069 CEST	53	65264	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.381037951 CEST	65265	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.389401913 CEST	53	65265	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.389729977 CEST	65266	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.399180889 CEST	53	65266	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.399519920 CEST	65267	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.407830954 CEST	53	65267	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.575041056 CEST	65268	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.581929922 CEST	53	65268	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.582597017 CEST	65269	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.592683077 CEST	53	65269	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.593122959 CEST	65270	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.600358963 CEST	53	65270	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.600616932 CEST	65271	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.617188931 CEST	53	65271	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.617435932 CEST	65272	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.624685049 CEST	53	65272	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.783189058 CEST	65273	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.791059017 CEST	53	65273	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.791578054 CEST	65274	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.798661947 CEST	53	65274	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.798955917 CEST	65275	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.807681084 CEST	53	65275	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.807933092 CEST	65276	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.815763950 CEST	53	65276	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.816106081 CEST	65277	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:03.824944973 CEST	53	65277	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:03.998444080 CEST	65278	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:04.685991049 CEST	53	65278	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:04.686672926 CEST	65279	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:04.695374012 CEST	53	65279	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:04.695668936 CEST	65280	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:04.703346014 CEST	53	65280	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:04.703674078 CEST	65281	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:04.711601019 CEST	53	65281	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:04.711860895 CEST	65282	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:04.719937086 CEST	53	65282	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:04.881628990 CEST	65283	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:04.888776064 CEST	53	65283	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:04.889308929 CEST	65284	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:04.897245884 CEST	53	65284	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:04.897614956 CEST	65285	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:04.906929970 CEST	53	65285	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:04.907329082 CEST	65286	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:04.916090965 CEST	53	65286	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:04.916440010 CEST	65287	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:04.925025940 CEST	53	65287	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.082889080 CEST	65288	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.092277050 CEST	53	65288	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.092806101 CEST	65289	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.102579117 CEST	53	65289	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.102973938 CEST	65290	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.110786915 CEST	53	65290	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.111177921 CEST	65291	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.121700048 CEST	53	65291	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.121982098 CEST	65292	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.134032011 CEST	53	65292	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.293833971 CEST	65293	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.300698042 CEST	53	65293	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.301290035 CEST	65294	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.309423923 CEST	53	65294	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.309757948 CEST	65295	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.318444967 CEST	53	65295	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.318924904 CEST	65296	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.326136112 CEST	53	65296	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.326405048 CEST	65297	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.335586071 CEST	53	65297	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.487104893 CEST	65298	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.494343042 CEST	53	65298	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.494874001 CEST	65299	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.502985954 CEST	53	65299	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.503350019 CEST	65300	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.510211945 CEST	53	65300	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.510579109 CEST	65301	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.518063068 CEST	53	65301	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.518378973 CEST	65302	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.525913954 CEST	53	65302	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.718231916 CEST	65303	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.725415945 CEST	53	65303	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.725866079 CEST	65304	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.733814955 CEST	53	65304	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.734155893 CEST	65305	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.743210077 CEST	53	65305	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.743532896 CEST	65306	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.751096964 CEST	53	65306	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.751419067 CEST	65307	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.759258032 CEST	53	65307	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.913212061 CEST	65308	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.919857025 CEST	53	65308	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.920289993 CEST	65309	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.927592039 CEST	53	65309	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.927892923 CEST	65310	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.935982943 CEST	53	65310	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.936295033 CEST	65311	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.944767952 CEST	53	65311	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:05.945193052 CEST	65312	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:05.953454018 CEST	53	65312	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.114540100 CEST	65313	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.121614933 CEST	53	65313	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.122051001 CEST	65314	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.129760027 CEST	53	65314	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.130162001 CEST	65315	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.138943911 CEST	53	65315	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.139229059 CEST	65316	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.146795034 CEST	53	65316	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.147133112 CEST	65317	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.156061888 CEST	53	65317	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.337349892 CEST	65318	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.344599009 CEST	53	65318	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.345005035 CEST	65319	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.354242086 CEST	53	65319	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.354630947 CEST	65320	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.364171028 CEST	53	65320	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.364476919 CEST	65321	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.372169971 CEST	53	65321	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.372458935 CEST	65322	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.379831076 CEST	53	65322	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.532747984 CEST	65323	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.540262938 CEST	53	65323	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.541050911 CEST	65324	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.548748970 CEST	53	65324	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.549973965 CEST	65325	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.559041023 CEST	53	65325	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.559437990 CEST	65326	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.567245960 CEST	53	65326	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.568685055 CEST	65327	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.576627016 CEST	53	65327	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.735326052 CEST	65328	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.742561102 CEST	53	65328	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.743181944 CEST	65329	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.750226974 CEST	53	65329	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.750478029 CEST	65330	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.764480114 CEST	53	65330	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.764714956 CEST	65331	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.772253990 CEST	53	65331	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.772480011 CEST	65332	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.779870033 CEST	53	65332	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.950319052 CEST	65333	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.958077908 CEST	53	65333	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.958688021 CEST	65334	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.967617035 CEST	53	65334	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.968085051 CEST	65335	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.976692915 CEST	53	65335	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.977065086 CEST	65336	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.984870911 CEST	53	65336	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:06.985335112 CEST	65337	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:06.993381977 CEST	53	65337	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.154395103 CEST	65338	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:07.161484003 CEST	53	65338	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.161880970 CEST	65339	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:07.170934916 CEST	53	65339	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.172014952 CEST	65340	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:07.181132078 CEST	53	65340	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.184304953 CEST	65341	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:07.191832066 CEST	53	65341	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.195920944 CEST	65342	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:07.211146116 CEST	53	65342	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.386778116 CEST	65343	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:07.394072056 CEST	53	65343	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.397197962 CEST	65344	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:07.407886982 CEST	53	65344	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.412389040 CEST	65345	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:07.420264006 CEST	53	65345	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.420682907 CEST	65346	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:07.428653955 CEST	53	65346	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.432141066 CEST	65347	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:07.440165997 CEST	53	65347	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.605950117 CEST	65348	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:07.613009930 CEST	53	65348	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.613410950 CEST	65349	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:07.621025085 CEST	53	65349	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.621361971 CEST	65350	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:07.629697084 CEST	53	65350	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.629975080 CEST	65351	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:07.638619900 CEST	53	65351	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.638959885 CEST	65352	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:07.646485090 CEST	53	65352	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.814407110 CEST	65342	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:07.965657949 CEST	53	65342	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.975867987 CEST	65343	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:07.983302116 CEST	53	65343	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.983791113 CEST	65344	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:07.993688107 CEST	53	65344	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:07.994517088 CEST	65345	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:08.002624035 CEST	53	65345	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:08.003043890 CEST	65346	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:08.010400057 CEST	53	65346	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:08.011224985 CEST	65347	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:08.018549919 CEST	53	65347	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:08.182955027 CEST	65348	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:08.192635059 CEST	53	65348	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.515255928 CEST	65349	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:09.525839090 CEST	53	65349	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.526160955 CEST	65350	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:09.534554958 CEST	53	65350	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.534902096 CEST	65351	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:09.545309067 CEST	53	65351	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.545660019 CEST	65352	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:09.561275959 CEST	53	65352	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.703116894 CEST	65353	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:09.714998960 CEST	53	65353	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.715395927 CEST	65354	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:09.723261118 CEST	53	65354	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.723521948 CEST	65355	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:09.730823994 CEST	53	65355	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.731064081 CEST	65356	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:09.739967108 CEST	53	65356	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.740169048 CEST	65357	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:09.748229027 CEST	53	65357	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.892045975 CEST	65358	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:09.899034023 CEST	53	65358	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.899538994 CEST	65359	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:09.906940937 CEST	53	65359	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.907289028 CEST	65360	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:09.915314913 CEST	53	65360	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.915641069 CEST	65361	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:09.923197031 CEST	53	65361	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:09.923544884 CEST	65362	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:09.931477070 CEST	53	65362	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.080817938 CEST	65363	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.087621927 CEST	53	65363	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.088205099 CEST	65364	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.095488071 CEST	53	65364	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.100560904 CEST	65365	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.108598948 CEST	53	65365	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.108963966 CEST	65366	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.116297007 CEST	53	65366	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.116720915 CEST	65367	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.124829054 CEST	53	65367	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.282315016 CEST	65368	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.289536953 CEST	53	65368	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.290041924 CEST	65369	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.297897100 CEST	53	65369	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.298253059 CEST	65370	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.307220936 CEST	53	65370	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.307632923 CEST	65371	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.315891027 CEST	53	65371	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.316251040 CEST	65372	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.324982882 CEST	53	65372	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.478440046 CEST	65373	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.486085892 CEST	53	65373	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.486505032 CEST	65374	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.494594097 CEST	53	65374	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.495277882 CEST	65375	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.503001928 CEST	53	65375	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.503334999 CEST	65376	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.512541056 CEST	53	65376	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.512906075 CEST	65377	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.521668911 CEST	53	65377	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.674247026 CEST	65378	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.681396008 CEST	53	65378	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.681799889 CEST	65379	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.689112902 CEST	53	65379	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.689438105 CEST	65380	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.697094917 CEST	53	65380	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.697559118 CEST	65381	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.706553936 CEST	53	65381	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.707146883 CEST	65382	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.715154886 CEST	53	65382	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.863584042 CEST	65383	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.871536970 CEST	53	65383	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.871947050 CEST	65384	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.883456945 CEST	53	65384	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.884311914 CEST	65385	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.892255068 CEST	53	65385	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.892843008 CEST	65386	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.900645018 CEST	53	65386	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:10.900965929 CEST	65387	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:10.908956051 CEST	53	65387	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.073430061 CEST	65388	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.080286980 CEST	53	65388	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.080686092 CEST	65389	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.089243889 CEST	53	65389	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.092259884 CEST	65390	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.100240946 CEST	53	65390	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.100569963 CEST	65391	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.107784986 CEST	53	65391	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.108066082 CEST	65392	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.115766048 CEST	53	65392	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.266937017 CEST	65393	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.273967028 CEST	53	65393	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.274458885 CEST	65394	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.283154011 CEST	53	65394	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.283468962 CEST	65395	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.291244984 CEST	53	65395	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.291497946 CEST	65396	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.298804045 CEST	53	65396	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.299030066 CEST	65397	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.306495905 CEST	53	65397	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.455498934 CEST	65398	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.463211060 CEST	53	65398	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.463753939 CEST	65399	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.472090960 CEST	53	65399	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.472433090 CEST	65400	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.481364012 CEST	53	65400	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.481792927 CEST	65401	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.489242077 CEST	53	65401	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.490518093 CEST	65402	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.499424934 CEST	53	65402	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.644016027 CEST	65403	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.651575089 CEST	53	65403	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.652124882 CEST	65404	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.660099983 CEST	53	65404	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.660372019 CEST	65405	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.668709040 CEST	53	65405	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.668992996 CEST	65406	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.677153111 CEST	53	65406	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.677402973 CEST	65407	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.686084986 CEST	53	65407	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.853307009 CEST	65408	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.860925913 CEST	53	65408	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.861412048 CEST	65409	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.869029999 CEST	53	65409	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.869437933 CEST	65410	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.877762079 CEST	53	65410	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.878041983 CEST	65411	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.885947943 CEST	53	65411	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:11.886235952 CEST	65412	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:11.894023895 CEST	53	65412	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.054179907 CEST	65413	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.062792063 CEST	53	65413	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.063169003 CEST	65414	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.071225882 CEST	53	65414	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.071507931 CEST	65415	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.079901934 CEST	53	65415	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.080214977 CEST	65416	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.089010000 CEST	53	65416	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.089246988 CEST	65417	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.098433018 CEST	53	65417	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.251244068 CEST	65418	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.258466959 CEST	53	65418	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.258848906 CEST	65419	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.270030022 CEST	53	65419	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.270302057 CEST	65420	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.279684067 CEST	53	65420	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.279931068 CEST	65421	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.287863970 CEST	53	65421	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.288114071 CEST	65422	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.296241999 CEST	53	65422	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.438891888 CEST	65423	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.446197033 CEST	53	65423	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.446624994 CEST	65424	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.455280066 CEST	53	65424	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.455627918 CEST	65425	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.464066982 CEST	53	65425	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.464359045 CEST	65426	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.471868992 CEST	53	65426	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.472191095 CEST	65427	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.481260061 CEST	53	65427	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.622241974 CEST	55555	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.705429077 CEST	53	55555	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.713885069 CEST	55556	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.722306013 CEST	53	55556	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.722791910 CEST	55557	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.731260061 CEST	53	55557	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.731635094 CEST	55558	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.744004011 CEST	53	55558	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.744288921 CEST	55559	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.753022909 CEST	53	55559	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.753360033 CEST	55560	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.760662079 CEST	53	55560	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.921546936 CEST	55561	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.928669930 CEST	53	55561	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.930645943 CEST	55562	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.938339949 CEST	53	55562	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.938659906 CEST	55563	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.947585106 CEST	53	55563	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.947870970 CEST	55564	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.956098080 CEST	53	55564	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:12.956540108 CEST	55565	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:12.964200020 CEST	53	55565	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.114049911 CEST	55566	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.122375965 CEST	53	55566	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.122780085 CEST	55567	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.133733988 CEST	53	55567	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.134072065 CEST	55568	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.141796112 CEST	53	55568	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.142030954 CEST	55569	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.150708914 CEST	53	55569	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.151030064 CEST	55570	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.159091949 CEST	53	55570	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.297923088 CEST	55571	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.304903030 CEST	53	55571	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.307610989 CEST	55572	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.314896107 CEST	53	55572	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.316077948 CEST	55573	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.323916912 CEST	53	55573	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.327924013 CEST	55574	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.335473061 CEST	53	55574	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.336611986 CEST	55575	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.344201088 CEST	53	55575	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.493192911 CEST	55576	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.500157118 CEST	53	55576	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.502773046 CEST	55577	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.511029005 CEST	53	55577	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.511403084 CEST	55578	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.519340038 CEST	53	55578	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.520325899 CEST	55579	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.528614998 CEST	53	55579	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.532155037 CEST	55580	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.539793968 CEST	53	55580	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.691104889 CEST	55581	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.698410034 CEST	53	55581	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.700190067 CEST	55582	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.708508015 CEST	53	55582	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.709573984 CEST	55583	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.717781067 CEST	53	55583	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.718120098 CEST	55584	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.726000071 CEST	53	55584	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.728004932 CEST	55585	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.737251043 CEST	53	55585	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.919738054 CEST	55586	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.927122116 CEST	53	55586	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.929009914 CEST	55587	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.937077045 CEST	53	55587	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.937475920 CEST	55588	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.944905996 CEST	53	55588	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.945750952 CEST	55589	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.953320026 CEST	53	55589	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:13.953592062 CEST	55590	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:13.961126089 CEST	53	55590	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.330147982 CEST	55591	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.337172031 CEST	53	55591	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.342010021 CEST	55592	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.350753069 CEST	53	55592	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.353636980 CEST	55593	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.362231970 CEST	53	55593	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.365544081 CEST	55594	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.373591900 CEST	53	55594	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.377558947 CEST	55595	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.384752989 CEST	53	55595	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.554157972 CEST	55596	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.561512947 CEST	53	55596	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.562062979 CEST	55597	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.569946051 CEST	53	55597	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.570324898 CEST	55598	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.578008890 CEST	53	55598	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.578380108 CEST	55599	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.585812092 CEST	53	55599	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.586188078 CEST	55600	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.594907045 CEST	53	55600	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.735630035 CEST	55601	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.743427992 CEST	53	55601	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.743844032 CEST	55602	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.752455950 CEST	53	55602	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.752703905 CEST	55603	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.760334969 CEST	53	55603	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.760567904 CEST	55604	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.769139051 CEST	53	55604	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.769367933 CEST	55605	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.777719975 CEST	53	55605	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.931236029 CEST	55606	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.939862013 CEST	53	55606	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.940314054 CEST	55607	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.957463980 CEST	53	55607	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.957866907 CEST	55608	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.965851068 CEST	53	55608	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.966125965 CEST	55609	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.974145889 CEST	53	55609	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:14.974360943 CEST	55610	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:14.983042002 CEST	53	55610	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.147742987 CEST	55611	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.156039953 CEST	53	55611	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.156492949 CEST	55612	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.165049076 CEST	53	55612	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.165401936 CEST	55613	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.172782898 CEST	53	55613	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.173086882 CEST	55614	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.181077957 CEST	53	55614	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.181396961 CEST	55615	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.189929962 CEST	53	55615	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.329545975 CEST	55616	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.344002962 CEST	53	55616	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.344538927 CEST	55617	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.353421926 CEST	53	55617	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.353725910 CEST	55618	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.362056017 CEST	53	55618	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.362356901 CEST	55619	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.369620085 CEST	53	55619	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.370358944 CEST	55620	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.377943993 CEST	53	55620	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.518835068 CEST	55621	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.526211023 CEST	53	55621	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.526778936 CEST	55622	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.534516096 CEST	53	55622	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.534854889 CEST	55623	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.542642117 CEST	53	55623	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.543414116 CEST	55624	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.551852942 CEST	53	55624	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.553116083 CEST	55625	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.561240911 CEST	53	55625	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.707412004 CEST	55626	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.714901924 CEST	53	55626	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:15.715337038 CEST	55627	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:15.721988916 CEST	53	55627	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:16.265512943 CEST	55628	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:16.273380995 CEST	53	55628	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:16.273762941 CEST	55629	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:16.281189919 CEST	53	55629	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:16.281621933 CEST	55630	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:16.293376923 CEST	53	55630	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:16.438968897 CEST	55631	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:17.503782988 CEST	53	55631	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:17.504604101 CEST	55632	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:17.537894964 CEST	53	55632	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:17.538446903 CEST	55633	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:17.551630020 CEST	53	55633	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:17.551915884 CEST	55634	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:17.559788942 CEST	53	55634	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:17.560116053 CEST	55635	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:17.569000959 CEST	53	55635	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:17.730415106 CEST	55279	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:17.778954029 CEST	53	55279	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:17.786911964 CEST	55280	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:17.793852091 CEST	53	55280	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:17.794255018 CEST	55281	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:17.803442001 CEST	53	55281	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:17.803946972 CEST	55282	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:17.811491966 CEST	53	55282	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:17.811882973 CEST	55283	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:17.820257902 CEST	53	55283	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:17.820554018 CEST	55284	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:17.828041077 CEST	53	55284	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:17.971832037 CEST	55285	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:17.978946924 CEST	53	55285	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:17.979640007 CEST	55286	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:17.987827063 CEST	53	55286	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:17.988079071 CEST	55287	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:17.995970964 CEST	53	55287	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:17.996201992 CEST	55288	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.003956079 CEST	53	55288	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.004264116 CEST	55289	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.012155056 CEST	53	55289	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.158977032 CEST	55290	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.167237997 CEST	53	55290	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.167807102 CEST	55291	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.175987005 CEST	53	55291	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.176311970 CEST	55292	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.184396029 CEST	53	55292	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.184659958 CEST	55293	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.192433119 CEST	53	55293	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.192706108 CEST	55294	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.201817989 CEST	53	55294	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.349873066 CEST	55295	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.358104944 CEST	53	55295	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.358541965 CEST	55296	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.366527081 CEST	53	55296	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.366888046 CEST	55297	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.374388933 CEST	53	55297	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.374646902 CEST	55298	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.382523060 CEST	53	55298	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.383070946 CEST	55299	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.391361952 CEST	53	55299	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.533431053 CEST	55300	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.541939020 CEST	53	55300	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.542416096 CEST	55301	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.550462961 CEST	53	55301	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.550762892 CEST	55302	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.558289051 CEST	53	55302	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.558655024 CEST	55303	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.566890955 CEST	53	55303	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.567272902 CEST	55304	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.575073957 CEST	53	55304	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.722590923 CEST	55305	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.729820013 CEST	53	55305	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.730289936 CEST	55306	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.737688065 CEST	53	55306	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.740236998 CEST	55307	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.754160881 CEST	53	55307	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.754529953 CEST	55308	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.762291908 CEST	53	55308	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.762495041 CEST	55309	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.769824028 CEST	53	55309	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.912908077 CEST	55310	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.921669006 CEST	53	55310	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.922075033 CEST	55311	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.933279037 CEST	53	55311	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.933607101 CEST	55312	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.941571951 CEST	53	55312	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.941855907 CEST	55313	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.950191021 CEST	53	55313	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:18.950587988 CEST	55314	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:18.958750010 CEST	53	55314	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.149775028 CEST	55315	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.168297052 CEST	53	55315	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.168915987 CEST	55316	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.176892042 CEST	53	55316	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.177555084 CEST	55317	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.186063051 CEST	53	55317	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.186487913 CEST	55318	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.195359945 CEST	53	55318	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.195626974 CEST	55319	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.204287052 CEST	53	55319	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.346831083 CEST	55320	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.354280949 CEST	53	55320	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.354759932 CEST	55321	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.363429070 CEST	53	55321	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.364056110 CEST	55322	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.372287035 CEST	53	55322	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.372873068 CEST	55323	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.381336927 CEST	53	55323	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.381711006 CEST	55324	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.389472961 CEST	53	55324	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.543131113 CEST	55325	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.551995993 CEST	53	55325	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.552956104 CEST	55326	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.560728073 CEST	53	55326	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.561044931 CEST	55327	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.568620920 CEST	53	55327	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.568978071 CEST	55328	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.576595068 CEST	53	55328	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.576919079 CEST	55329	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.585726976 CEST	53	55329	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.727015018 CEST	55331	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.734127045 CEST	53	55331	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.738645077 CEST	55332	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.746622086 CEST	53	55332	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.751094103 CEST	55333	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.759381056 CEST	53	55333	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.761468887 CEST	55334	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.770080090 CEST	53	55334	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.774312019 CEST	55335	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.782706022 CEST	53	55335	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.943710089 CEST	55336	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.954596043 CEST	53	55336	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.955413103 CEST	55337	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.963219881 CEST	53	55337	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.963934898 CEST	55338	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.973264933 CEST	53	55338	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.973887920 CEST	55339	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.982366085 CEST	53	55339	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:19.982917070 CEST	55340	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:19.991030931 CEST	53	55340	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.193794012 CEST	55341	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.201709986 CEST	53	55341	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.202361107 CEST	55342	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.209768057 CEST	53	55342	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.210123062 CEST	55343	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.218852997 CEST	53	55343	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.219202995 CEST	55344	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.227144003 CEST	53	55344	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.227545023 CEST	55345	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.237152100 CEST	53	55345	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.389184952 CEST	55346	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.397722960 CEST	53	55346	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.398339033 CEST	55347	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.405711889 CEST	53	55347	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.406250954 CEST	55348	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.414572954 CEST	53	55348	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.414911985 CEST	55349	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.422802925 CEST	53	55349	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.423412085 CEST	55350	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.430785894 CEST	53	55350	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.583419085 CEST	55351	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.593609095 CEST	53	55351	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.594590902 CEST	55352	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.603715897 CEST	53	55352	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.604971886 CEST	55353	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.613214970 CEST	53	55353	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.614308119 CEST	55354	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.622868061 CEST	53	55354	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.625637054 CEST	55355	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.637662888 CEST	53	55355	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.806950092 CEST	55356	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.814388990 CEST	53	55356	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.814882040 CEST	55357	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.822638035 CEST	53	55357	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.823153973 CEST	55358	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.832737923 CEST	53	55358	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.833091021 CEST	55359	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.841523886 CEST	53	55359	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.841912985 CEST	55360	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.849950075 CEST	53	55360	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.986716986 CEST	55361	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:20.994328976 CEST	53	55361	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:20.995644093 CEST	55362	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.003770113 CEST	53	55362	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.004089117 CEST	55363	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.015773058 CEST	53	55363	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.016058922 CEST	55364	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.031954050 CEST	53	55364	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.032366037 CEST	55365	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.040076971 CEST	53	55365	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.202835083 CEST	55366	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.209868908 CEST	53	55366	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.210402012 CEST	55367	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.219306946 CEST	53	55367	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.219659090 CEST	55368	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.227317095 CEST	53	55368	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.227559090 CEST	55369	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.234718084 CEST	53	55369	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.235002041 CEST	55370	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.242593050 CEST	53	55370	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.380170107 CEST	55371	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.387232065 CEST	53	55371	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.387692928 CEST	55372	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.395756960 CEST	53	55372	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.396142960 CEST	55373	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.404649019 CEST	53	55373	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.405069113 CEST	55374	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.413997889 CEST	53	55374	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.414345026 CEST	55375	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.422718048 CEST	53	55375	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.566860914 CEST	55376	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.573829889 CEST	53	55376	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.574275017 CEST	55377	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.581641912 CEST	53	55377	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.586030006 CEST	55378	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.593255043 CEST	53	55378	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.594135046 CEST	55379	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.602680922 CEST	53	55379	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.606163979 CEST	55380	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.614356041 CEST	53	55380	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.752537012 CEST	55381	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.760792971 CEST	53	55381	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.762031078 CEST	55382	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.771611929 CEST	53	55382	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.774080992 CEST	55383	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.782241106 CEST	53	55383	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.785079956 CEST	55384	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.793375015 CEST	53	55384	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.796102047 CEST	55385	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.804661036 CEST	53	55385	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.946521997 CEST	55386	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.957643986 CEST	53	55386	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.958127975 CEST	55387	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.968137980 CEST	53	55387	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.972235918 CEST	55388	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.980319023 CEST	53	55388	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.980870008 CEST	55389	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.989675999 CEST	53	55389	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:21.990046978 CEST	55390	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:21.997306108 CEST	53	55390	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.136926889 CEST	55391	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.143785000 CEST	53	55391	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.144372940 CEST	55392	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.152617931 CEST	53	55392	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.153013945 CEST	55393	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.160933971 CEST	53	55393	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.161715031 CEST	55394	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.169707060 CEST	53	55394	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.170037985 CEST	55395	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.178455114 CEST	53	55395	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.321917057 CEST	55396	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.328574896 CEST	53	55396	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.329113960 CEST	55397	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.336895943 CEST	53	55397	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.337749004 CEST	55398	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.346472025 CEST	53	55398	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.347018003 CEST	55399	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.355637074 CEST	53	55399	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.356021881 CEST	55400	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.364574909 CEST	53	55400	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.508421898 CEST	55401	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.515846014 CEST	53	55401	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.516443968 CEST	55402	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.525214911 CEST	53	55402	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.525579929 CEST	55403	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.533162117 CEST	53	55403	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.533524036 CEST	55404	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.543567896 CEST	53	55404	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.544425011 CEST	55405	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.552887917 CEST	53	55405	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.685499907 CEST	61813	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.735987902 CEST	53	61813	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.744688988 CEST	61814	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.752370119 CEST	53	61814	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.752850056 CEST	61815	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.761499882 CEST	53	61815	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.761766911 CEST	61816	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.769001961 CEST	53	61816	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.769269943 CEST	61817	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.778207064 CEST	53	61817	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.778455019 CEST	61818	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.788486004 CEST	53	61818	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.930759907 CEST	61819	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.937768936 CEST	53	61819	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.938354015 CEST	61820	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.945648909 CEST	53	61820	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.945904970 CEST	61821	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.953041077 CEST	53	61821	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.953300953 CEST	61822	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.961368084 CEST	53	61822	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:22.961611032 CEST	61823	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:22.969738960 CEST	53	61823	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.124598980 CEST	61824	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.131732941 CEST	53	61824	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.132129908 CEST	61825	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.139436007 CEST	53	61825	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.139740944 CEST	61826	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.147237062 CEST	53	61826	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.147579908 CEST	61827	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.155592918 CEST	53	61827	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.155930042 CEST	61828	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.165169954 CEST	53	61828	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.300467014 CEST	61829	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.308810949 CEST	53	61829	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.309417009 CEST	61830	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.316842079 CEST	53	61830	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.317112923 CEST	61831	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.324282885 CEST	53	61831	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.324485064 CEST	61832	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.331866026 CEST	53	61832	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.332135916 CEST	61833	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.340467930 CEST	53	61833	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.477169991 CEST	61834	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.484638929 CEST	53	61834	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.485297918 CEST	61835	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.493011951 CEST	53	61835	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.493561029 CEST	61836	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.500493050 CEST	53	61836	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.500942945 CEST	61837	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.508500099 CEST	53	61837	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.508759022 CEST	61838	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.517023087 CEST	53	61838	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.658536911 CEST	61839	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.665688992 CEST	53	61839	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.666280985 CEST	61840	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.674340010 CEST	53	61840	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.674846888 CEST	61841	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.682497978 CEST	53	61841	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.682749987 CEST	61842	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.690042019 CEST	53	61842	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.690279007 CEST	61843	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.698185921 CEST	53	61843	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.842828035 CEST	61844	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.854770899 CEST	53	61844	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.855299950 CEST	61845	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.867355108 CEST	53	61845	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.867695093 CEST	61846	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.876974106 CEST	53	61846	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.877513885 CEST	61847	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.888169050 CEST	53	61847	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:23.888680935 CEST	61848	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:23.896348953 CEST	53	61848	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.036634922 CEST	61849	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.043987036 CEST	53	61849	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.044351101 CEST	61850	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.051392078 CEST	53	61850	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.512933016 CEST	61851	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.520514965 CEST	53	61851	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.520874977 CEST	61852	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.530384064 CEST	53	61852	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.530730963 CEST	61853	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.540893078 CEST	53	61853	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.674853086 CEST	61854	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.682841063 CEST	53	61854	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.683290005 CEST	61855	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.691392899 CEST	53	61855	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.691611052 CEST	61856	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.700140953 CEST	53	61856	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.700351000 CEST	61857	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.707524061 CEST	53	61857	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.707736969 CEST	61858	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.715401888 CEST	53	61858	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.847616911 CEST	61859	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.861555099 CEST	53	61859	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.866286039 CEST	61860	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.874308109 CEST	53	61860	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.876136065 CEST	61861	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.883397102 CEST	53	61861	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.884882927 CEST	61862	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.893254042 CEST	53	61862	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:24.893676996 CEST	61863	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:24.902808905 CEST	53	61863	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:25.038532972 CEST	61864	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:25.184922934 CEST	53	61864	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:25.185508966 CEST	61865	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:25.193346024 CEST	53	61865	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:25.193675041 CEST	61866	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:25.201340914 CEST	53	61866	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:25.201647997 CEST	61867	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:25.210835934 CEST	53	61867	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:25.211323977 CEST	61868	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:25.218070030 CEST	53	61868	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:25.831723928 CEST	61869	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:25.838876009 CEST	53	61869	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:25.839248896 CEST	61870	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:25.846666098 CEST	53	61870	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:25.846930027 CEST	61871	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:25.854469061 CEST	53	61871	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:25.854687929 CEST	61872	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:25.863857031 CEST	53	61872	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:25.864113092 CEST	61873	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:25.872456074 CEST	53	61873	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.011497021 CEST	61874	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.018829107 CEST	53	61874	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.019555092 CEST	61875	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.028408051 CEST	53	61875	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.028712988 CEST	61876	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.038137913 CEST	53	61876	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.038403988 CEST	61877	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.046318054 CEST	53	61877	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.046557903 CEST	61878	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.054961920 CEST	53	61878	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.196222067 CEST	61879	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.203125954 CEST	53	61879	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.203583956 CEST	61880	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.212340117 CEST	53	61880	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.212677002 CEST	61881	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.222556114 CEST	53	61881	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.222959995 CEST	61882	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.230876923 CEST	53	61882	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.231210947 CEST	61883	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.238934040 CEST	53	61883	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.379734039 CEST	61884	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.387492895 CEST	53	61884	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.388125896 CEST	61885	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.398521900 CEST	53	61885	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.398853064 CEST	61886	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.406553030 CEST	53	61886	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.406980991 CEST	61887	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.414747000 CEST	53	61887	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.415023088 CEST	61888	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.425796986 CEST	53	61888	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.569303036 CEST	61889	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.581687927 CEST	53	61889	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.582321882 CEST	61890	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.592437029 CEST	53	61890	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.592819929 CEST	61891	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.604120016 CEST	53	61891	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.604701996 CEST	61892	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.614705086 CEST	53	61892	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.615187883 CEST	61893	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.625658035 CEST	53	61893	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.756478071 CEST	61894	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.765703917 CEST	53	61894	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.766122103 CEST	61895	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.775918961 CEST	53	61895	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.776386023 CEST	61896	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.785048008 CEST	53	61896	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.785429955 CEST	61897	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.794457912 CEST	53	61897	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.794945002 CEST	61898	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.804491997 CEST	53	61898	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.948929071 CEST	61899	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.957454920 CEST	53	61899	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.958177090 CEST	61900	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.967703104 CEST	53	61900	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.968235970 CEST	61901	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.976788044 CEST	53	61901	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.977338076 CEST	61902	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.986093044 CEST	53	61902	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:26.986596107 CEST	61903	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:26.994875908 CEST	53	61903	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.136379957 CEST	61904	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.144540071 CEST	53	61904	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.144972086 CEST	61905	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.152522087 CEST	53	61905	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.152899027 CEST	61906	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.161180019 CEST	53	61906	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.161459923 CEST	61907	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.169517040 CEST	53	61907	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.169857025 CEST	61908	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.178153992 CEST	53	61908	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.366969109 CEST	61909	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.374042034 CEST	53	61909	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.374577045 CEST	61910	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.382278919 CEST	53	61910	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.382555962 CEST	61911	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.392112017 CEST	53	61911	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.392429113 CEST	61912	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.400629044 CEST	53	61912	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.400927067 CEST	61913	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.409496069 CEST	53	61913	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.547514915 CEST	61914	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.554946899 CEST	53	61914	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.555318117 CEST	61915	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.563551903 CEST	53	61915	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.563781977 CEST	61916	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.572927952 CEST	53	61916	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.573208094 CEST	61917	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.580610037 CEST	53	61917	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.580874920 CEST	61918	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.589247942 CEST	53	61918	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.721604109 CEST	53495	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.776959896 CEST	53	53495	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.788052082 CEST	53496	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.805224895 CEST	53	53496	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.806181908 CEST	53497	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.813855886 CEST	53	53497	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.818099022 CEST	53498	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.826396942 CEST	53	53498	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.828286886 CEST	53499	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.836105108 CEST	53	53499	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.840485096 CEST	53500	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:27.850748062 CEST	53	53500	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:27.996772051 CEST	53501	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.005157948 CEST	53	53501	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.005644083 CEST	53502	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.013331890 CEST	53	53502	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.016542912 CEST	53503	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.024744987 CEST	53	53503	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.025237083 CEST	53504	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.033346891 CEST	53	53504	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.033699036 CEST	53505	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.041383028 CEST	53	53505	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.178985119 CEST	53506	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.188201904 CEST	53	53506	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.188680887 CEST	53507	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.197861910 CEST	53	53507	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.198173046 CEST	53508	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.205838919 CEST	53	53508	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.206175089 CEST	53509	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.213843107 CEST	53	53509	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.214097023 CEST	53510	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.221832037 CEST	53	53510	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.353511095 CEST	53511	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.362042904 CEST	53	53511	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.367170095 CEST	53512	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.379462957 CEST	53	53512	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.380031109 CEST	53513	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.387654066 CEST	53	53513	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.387926102 CEST	53514	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.397227049 CEST	53	53514	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.397475004 CEST	53515	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.407087088 CEST	53	53515	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.538214922 CEST	53516	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.546266079 CEST	53	53516	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.547647953 CEST	53517	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.556210995 CEST	53	53517	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.556663036 CEST	53518	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.570822954 CEST	53	53518	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.571248055 CEST	53519	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.579139948 CEST	53	53519	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.580981970 CEST	53520	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.592453957 CEST	53	53520	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.732546091 CEST	53521	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.739638090 CEST	53	53521	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.740221024 CEST	53522	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.748229980 CEST	53	53522	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.748585939 CEST	53523	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.756807089 CEST	53	53523	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.757147074 CEST	53524	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.766024113 CEST	53	53524	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.766263962 CEST	53525	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.774435997 CEST	53	53525	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.913127899 CEST	53526	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.920363903 CEST	53	53526	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.920881987 CEST	53527	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.929680109 CEST	53	53527	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.930411100 CEST	53528	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.938477039 CEST	53	53528	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.938781977 CEST	53529	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.946613073 CEST	53	53529	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:28.946912050 CEST	53530	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:28.954320908 CEST	53	53530	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.090753078 CEST	53531	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.098901987 CEST	53	53531	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.099416018 CEST	53532	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.107578993 CEST	53	53532	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.107902050 CEST	53533	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.116476059 CEST	53	53533	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.116856098 CEST	53534	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.124067068 CEST	53	53534	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.124367952 CEST	53535	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.131690979 CEST	53	53535	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.272509098 CEST	53536	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.279860973 CEST	53	53536	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.280392885 CEST	53537	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.289350033 CEST	53	53537	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.289705992 CEST	53538	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.297656059 CEST	53	53538	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.298082113 CEST	53539	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.307780027 CEST	53	53539	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.308058023 CEST	53540	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.317830086 CEST	53	53540	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.458291054 CEST	53541	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.466934919 CEST	53	53541	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.470130920 CEST	53542	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.478247881 CEST	53	53542	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.481992006 CEST	53543	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.491813898 CEST	53	53543	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.493957043 CEST	53544	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.501271009 CEST	53	53544	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.505918026 CEST	53545	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.513850927 CEST	53	53545	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.643585920 CEST	53546	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.651937962 CEST	53	53546	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.652400017 CEST	53547	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.663373947 CEST	53	53547	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.663691998 CEST	53548	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.672086954 CEST	53	53548	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.672481060 CEST	53549	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.681742907 CEST	53	53549	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.682166100 CEST	53550	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.689934015 CEST	53	53550	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.818231106 CEST	53551	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.826441050 CEST	53	53551	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.826878071 CEST	53552	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.834563017 CEST	53	53552	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.834893942 CEST	53553	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.843204975 CEST	53	53553	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.843574047 CEST	53554	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.850972891 CEST	53	53554	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.851365089 CEST	53555	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.859009027 CEST	53	53555	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.987847090 CEST	53556	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:29.995686054 CEST	53	53556	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:29.996227980 CEST	53557	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.003803968 CEST	53	53557	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:30.004374981 CEST	53558	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.011930943 CEST	53	53558	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:30.012351036 CEST	53559	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.020102024 CEST	53	53559	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:30.020361900 CEST	53560	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.028083086 CEST	53	53560	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:30.167604923 CEST	53561	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.176273108 CEST	53	53561	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:30.176820040 CEST	53562	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.184401989 CEST	53	53562	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:30.184849977 CEST	53563	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.192665100 CEST	53	53563	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:30.193022966 CEST	53564	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.201997995 CEST	53	53564	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:30.202388048 CEST	53565	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.209496021 CEST	53	53565	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:30.396490097 CEST	53566	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.404016972 CEST	53	53566	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:30.880410910 CEST	53567	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.888586998 CEST	53	53567	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:30.892385006 CEST	53568	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.901433945 CEST	53	53568	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:30.904073954 CEST	53569	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.912586927 CEST	53	53569	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:30.916188955 CEST	53570	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:30.927015066 CEST	53	53570	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.050931931 CEST	53571	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.058088064 CEST	53	53571	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.058480978 CEST	53572	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.067349911 CEST	53	53572	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.067665100 CEST	53573	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.074980021 CEST	53	53573	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.075771093 CEST	53574	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.083873987 CEST	53	53574	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.084258080 CEST	53575	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.093147039 CEST	53	53575	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.250443935 CEST	53576	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.259206057 CEST	53	53576	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.259648085 CEST	53577	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.268569946 CEST	53	53577	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.268959045 CEST	53578	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.276984930 CEST	53	53578	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.277950048 CEST	53579	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.286257029 CEST	53	53579	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.289644957 CEST	53580	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.297056913 CEST	53	53580	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.426632881 CEST	53581	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.434180021 CEST	53	53581	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.438339949 CEST	53582	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.446996927 CEST	53	53582	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.449985981 CEST	53583	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.457729101 CEST	53	53583	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.465959072 CEST	53584	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.473794937 CEST	53	53584	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.478133917 CEST	53585	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.486156940 CEST	53	53585	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.632587910 CEST	53586	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.639661074 CEST	53	53586	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.640153885 CEST	53587	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.648040056 CEST	53	53587	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.648418903 CEST	53588	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.656312943 CEST	53	53588	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.656578064 CEST	53589	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.664695978 CEST	53	53589	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:31.664979935 CEST	53590	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:31.673444986 CEST	53	53590	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.070153952 CEST	53591	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.076994896 CEST	53	53591	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.077440023 CEST	53592	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.084592104 CEST	53	53592	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.084897995 CEST	53593	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.092653036 CEST	53	53593	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.092962980 CEST	53594	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.100188017 CEST	53	53594	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.100476027 CEST	53595	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.108251095 CEST	53	53595	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.252090931 CEST	53596	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.259361029 CEST	53	53596	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.259780884 CEST	53597	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.268945932 CEST	53	53597	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.269273043 CEST	53598	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.279414892 CEST	53	53598	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.279761076 CEST	53599	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.290731907 CEST	53	53599	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.291073084 CEST	53600	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.299313068 CEST	53	53600	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.425785065 CEST	53601	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.432996988 CEST	53	53601	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.433468103 CEST	53602	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.442159891 CEST	53	53602	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.442466974 CEST	53603	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.450855017 CEST	53	53603	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.451153040 CEST	53604	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.522876978 CEST	53	53604	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.523391962 CEST	53605	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.666119099 CEST	53	53605	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.802722931 CEST	59018	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.851448059 CEST	53	59018	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.868429899 CEST	59019	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.877049923 CEST	53	59019	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.877484083 CEST	59020	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.885559082 CEST	53	59020	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.888261080 CEST	59021	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.897320032 CEST	53	59021	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.897974968 CEST	59022	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.906831980 CEST	53	59022	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:32.907939911 CEST	59023	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:32.917658091 CEST	53	59023	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.053004980 CEST	59024	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.060348034 CEST	53	59024	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.060863972 CEST	59025	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.068855047 CEST	53	59025	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.069591999 CEST	59026	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.078356028 CEST	53	59026	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.078843117 CEST	59027	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.087656021 CEST	53	59027	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.088001013 CEST	59028	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.097239971 CEST	53	59028	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.256702900 CEST	59029	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.264543056 CEST	53	59029	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.264952898 CEST	59030	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.272860050 CEST	53	59030	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.273175001 CEST	59031	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.281887054 CEST	53	59031	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.282234907 CEST	59032	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.290117979 CEST	53	59032	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.290376902 CEST	59033	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.302304983 CEST	53	59033	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.446038008 CEST	59034	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.456418991 CEST	53	59034	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.460475922 CEST	59035	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.468422890 CEST	53	59035	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.469155073 CEST	59036	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.476191998 CEST	53	59036	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.476475000 CEST	59037	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.484376907 CEST	53	59037	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.485166073 CEST	59038	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.494118929 CEST	53	59038	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.638386965 CEST	59039	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.645867109 CEST	53	59039	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.646378994 CEST	59040	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.654422045 CEST	53	59040	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.654846907 CEST	59041	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.662250042 CEST	53	59041	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.662539959 CEST	59042	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.674451113 CEST	53	59042	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.676987886 CEST	59043	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.684721947 CEST	53	59043	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.815536022 CEST	59044	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.824940920 CEST	53	59044	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.826741934 CEST	59045	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.835484982 CEST	53	59045	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.835846901 CEST	59046	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.845005989 CEST	53	59046	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.845331907 CEST	59047	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.853390932 CEST	53	59047	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.853656054 CEST	59048	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.860899925 CEST	53	59048	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.989240885 CEST	59049	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:33.996117115 CEST	53	59049	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:33.996687889 CEST	59050	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.004209042 CEST	53	59050	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:34.004477024 CEST	59051	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.012625933 CEST	53	59051	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:34.012888908 CEST	59052	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.020355940 CEST	53	59052	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:34.020756006 CEST	59053	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.027919054 CEST	53	59053	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:34.165465117 CEST	59054	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.172732115 CEST	53	59054	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:34.173233986 CEST	59055	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.181150913 CEST	53	59055	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:34.181757927 CEST	59056	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.189510107 CEST	53	59056	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:34.189899921 CEST	59057	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.199028969 CEST	53	59057	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:34.199497938 CEST	59058	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.208497047 CEST	53	59058	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:34.349832058 CEST	59059	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.356980085 CEST	53	59059	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:34.358140945 CEST	59060	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.368048906 CEST	53	59060	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:34.368865967 CEST	59061	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.377268076 CEST	53	59061	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:34.377552032 CEST	59062	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.387801886 CEST	53	59062	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:34.388135910 CEST	59063	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.396416903 CEST	53	59063	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:34.704365015 CEST	59064	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.714119911 CEST	53	59064	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:34.714626074 CEST	59065	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.722909927 CEST	53	59065	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:34.725241899 CEST	59066	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.733526945 CEST	53	59066	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:34.733938932 CEST	59067	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.740911961 CEST	53	59067	1.1.1.1	192.168.2.8
Sep 30, 2024 15:50:34.741256952 CEST	59068	53	192.168.2.8	1.1.1.1
Sep 30, 2024 15:50:34.749778986 CEST	53	59068	1.1.1.1	192.168.2.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 30, 2024 15:48:37.888866901 CEST	192.168.2.8	1.1.1.1	0xa85b	Standard query (0)	ipv4bot.whatismyipaddress.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:38.581779957 CEST	192.168.2.8	1.1.1.1	0xd73	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:38.752686977 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:38.760971069 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:38.777504921 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:38.799468994 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:38.810992956 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:39.048804998 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:39.057854891 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:39.074832916 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:39.091227055 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:39.100923061 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:39.323029995 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:39.331285000 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:39.342454910 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:39.363765001 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:39.379641056 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:39.599663973 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:39.607213020 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:39.618695021 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:39.639480114 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:39.648745060 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:39.877727985 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:39.885895967 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:39.897427082 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:39.906975031 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:39.916876078 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:40.546019077 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:40.553740978 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:40.570427895 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:40.586086035 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:40.601177931 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:40.863394976 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:40.871579885 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:40.887546062 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:40.899023056 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:40.910449028 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:41.167113066 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:41.175173044 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:41.191705942 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:41.200614929 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:41.216787100 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:41.438801050 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:41.446562052 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:41.462281942 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:41.479460001 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:41.511836052 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:41.730658054 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:41.741938114 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:41.758805037 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:41.767193079 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:41.775543928 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:41.985883951 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:41.995136023 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:42.005579948 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:42.024178982 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:42.033013105 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:42.254570961 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:42.261884928 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:42.276928902 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:42.288038015 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:42.305063009 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:42.521641970 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:42.528925896 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:42.545504093 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:42.552911997 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:42.569206953 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:43.073184013 CEST	192.168.2.8	1.1.1.1	0x92e8	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:43.392066002 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:43.399992943 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:43.419559002 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:43.429550886 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:43.439265013 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:43.771626949 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:43.779485941 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:43.788995981 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:43.804472923 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:43.813812017 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:44.036155939 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:44.045819998 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:44.070384979 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:44.079098940 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:44.088745117 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:44.317398071 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:44.326870918 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:44.336757898 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:44.353557110 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:44.369908094 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:44.579965115 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:44.587989092 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:44.596829891 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:44.613352060 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:44.636481047 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:44.861977100 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:44.869493961 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:44.878020048 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:44.890748024 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:44.898597956 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:45.157536983 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:45.167484999 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:45.175657988 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:45.183096886 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:45.193041086 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:45.768480062 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:45.776240110 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:45.801623106 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:45.813184023 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:45.828849077 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:46.124674082 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:46.132886887 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:46.149926901 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:46.160572052 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:46.168349981 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:46.399909973 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:46.416131973 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:46.425403118 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:46.433696985 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:46.444021940 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:46.644721985 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:46.653141022 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:46.663772106 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:46.675772905 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:46.687799931 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:46.920686960 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:46.929881096 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:46.941804886 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:46.953844070 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:46.964740992 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:47.247948885 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:47.255863905 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:47.264287949 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:47.280455112 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:47.293256998 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:47.564438105 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:47.572439909 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:47.583225965 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:47.593878984 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:47.614434004 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:47.907202005 CEST	192.168.2.8	1.1.1.1	0x6093	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:48.009452105 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:48.016885042 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:48.026715040 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:48.035604000 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:48.043509960 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:48.297780037 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:48.305425882 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:48.321634054 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:48.337902069 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:48.349102020 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:48.677659988 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:48.686084986 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:48.695242882 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:48.703151941 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:48.711328030 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:48.978781939 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:48.986548901 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:48.994473934 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:49.003164053 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:49.019772053 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:49.273780107 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:49.281949997 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:49.292013884 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:49.309036016 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:49.320771933 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:49.565324068 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:49.572791100 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:49.583432913 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:49.593241930 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:49.603751898 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:50.008105040 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:50.015824080 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:50.024549007 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:50.033472061 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:50.057625055 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:50.592495918 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:50.601794004 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:50.609630108 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:50.619525909 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:50.628901005 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:50.845707893 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:50.853982925 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:50.862190962 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:50.877429962 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:50.884906054 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:51.081722021 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:52.061924934 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:52.079438925 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:52.088625908 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:52.108654976 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:52.289715052 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:52.297817945 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:52.306454897 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:52.314269066 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:52.324995995 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:52.528790951 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:52.536350012 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:52.544877052 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:52.553378105 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:52.561536074 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:53.114732027 CEST	192.168.2.8	1.1.1.1	0x8422	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:53.174880028 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:53.182487965 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:53.203778982 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:53.213757992 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:53.221533060 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:53.421200991 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:53.428611040 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:53.444099903 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:53.452694893 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:53.473639011 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:53.650368929 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:53.658133984 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:53.666899920 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:53.674835920 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:53.683366060 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:53.863939047 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:53.872061968 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:53.880002022 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:53.897341013 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:53.905698061 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:54.088120937 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:54.096486092 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:54.647875071 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:54.657633066 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:54.679918051 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:54.848007917 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:54.855834961 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:54.875876904 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:54.883380890 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:54.892194033 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:55.064512968 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:55.071970940 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:55.095299006 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:55.120239019 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:55.130805969 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:55.419929981 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:55.430891037 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:55.454128981 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:55.472954988 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:55.486828089 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:55.751566887 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:55.761651993 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:55.778372049 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:55.802220106 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:55.812928915 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.004024029 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:56.011748075 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.026907921 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.042943954 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.052328110 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.270350933 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:56.278029919 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.288930893 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.297400951 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.306395054 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.504895926 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:56.513859034 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.543222904 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.551217079 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.561501980 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.736105919 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:56.746592999 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.754611969 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.767139912 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.776751041 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.958936930 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:56.966504097 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.974464893 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.985830069 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.998431921 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:57.178370953 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:57.187031984 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:57.207880974 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:57.219836950 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:57.229329109 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:57.415865898 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:57.423702002 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:57.434138060 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:57.441926003 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:57.450076103 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:57.655349016 CEST	192.168.2.8	1.1.1.1	0x9166	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:57.818686008 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:57.826138973 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:57.834089994 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:57.843641043 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:57.852972984 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:58.038014889 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:58.046541929 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:58.056493044 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:58.067908049 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:58.076766968 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:58.289891958 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:58.297422886 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:58.318876028 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:58.334110022 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:58.341916084 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:58.521446943 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:58.529798031 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:58.542071104 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:58.613954067 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:58.623874903 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:58.800905943 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:58.808734894 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:58.824266911 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:58.839509964 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:58.853491068 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.024301052 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:59.032320976 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.042273045 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.052707911 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.060981035 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.238903046 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:59.246507883 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.258246899 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.268887997 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.277055025 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.482364893 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:59.489584923 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.498521090 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.508351088 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.516958952 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.697511911 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:59.706432104 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.722939014 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.735622883 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.743721962 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.913043976 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:59.921032906 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.941628933 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.957082987 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.964992046 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:00.143743038 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:00.151397943 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:00.159473896 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:00.168024063 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:00.178901911 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:00.379230022 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:00.568133116 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:00.576184988 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:00.591376066 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:00.602014065 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:00.781780005 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:00.789551973 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:00.805572033 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:00.814007998 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:00.822489977 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:01.035183907 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:01.043905020 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:01.064660072 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:01.090014935 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:01.098692894 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:01.286947966 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:01.295123100 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:01.303600073 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:01.314474106 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:01.324850082 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:01.507014990 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:01.712687969 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:01.721822977 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:01.733241081 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:01.745713949 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:01.964293003 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:01.972475052 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:01.983577967 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:01.993033886 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:02.011013985 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:02.533035040 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:02.576426029 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:02.593975067 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:02.611274004 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:02.626751900 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:02.800163984 CEST	192.168.2.8	1.1.1.1	0xc5b1	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:02.967080116 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:02.974679947 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:02.981862068 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:03.003827095 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.013214111 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:03.191838026 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:03.199207067 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.207389116 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:03.219346046 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.228354931 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:03.405786991 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:03.414071083 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.422327042 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:03.432588100 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.440665007 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:03.610646009 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:03.618402958 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.626246929 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:03.641792059 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.666043997 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:03.833543062 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:03.841722012 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.852802038 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:03.864662886 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.872528076 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.050611973 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:04.059783936 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.070410967 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.082020998 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.093806028 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.273485899 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:04.283193111 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.291270018 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.301651955 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.317949057 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.520622015 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:04.528124094 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.537180901 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.545739889 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.565206051 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.752015114 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:04.760624886 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.772469997 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.788146973 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.803401947 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.972603083 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:04.979937077 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.987643957 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.998151064 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.006349087 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:05.180092096 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:05.188961983 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.197094917 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:05.204823017 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.213720083 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:05.416277885 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:05.424345016 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.432584047 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:05.441404104 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.459922075 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:05.644762993 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:05.652268887 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.660372972 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:05.670691013 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.681597948 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:05.873239994 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:05.880784988 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.897952080 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:05.907004118 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.924305916 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:06.097060919 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:06.106236935 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.113781929 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:06.124417067 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.133764982 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:06.298542023 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:06.306124926 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.322881937 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:06.333658934 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.341897011 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:06.556031942 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:06.564378023 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.572979927 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:06.581346035 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.589718103 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:06.768054962 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:06.777864933 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.789835930 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:06.801815987 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.813810110 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.008047104 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:07.016133070 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.030200958 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.038259983 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.046442986 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.228379965 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:07.236361980 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.257106066 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.269732952 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.289432049 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.475039005 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:07.483731985 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.492152929 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.501811028 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.509987116 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.682111025 CEST	192.168.2.8	1.1.1.1	0xbb9b	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.741210938 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:07.754823923 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.765743017 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.776329041 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.785846949 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.951924086 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:07.960222006 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.972166061 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.979765892 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.991904974 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:08.175312042 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:08.188055992 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:08.199465990 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:08.207173109 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:08.215861082 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:08.395585060 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:08.403601885 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:08.411823988 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:08.419713020 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:08.428297997 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:08.640352964 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:08.647579908 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:08.656028032 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:08.665158033 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:08.674710989 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:09.172115088 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:09.181551933 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:09.192138910 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:09.200015068 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:09.208223104 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:09.378983021 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:09.389319897 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:09.398489952 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:09.406547070 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:09.416423082 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:09.616497993 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:09.625919104 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:09.645888090 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:09.655446053 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:09.665982008 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:09.847304106 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:09.854806900 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:09.884311914 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:09.892622948 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:09.902432919 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.077944994 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:10.085323095 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.093077898 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.103827000 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.119963884 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.284997940 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:10.292907000 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.304341078 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.313689947 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.321717978 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.506993055 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:10.514951944 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.522747993 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.530014038 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.538068056 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.701690912 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:10.709528923 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.717029095 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.725687981 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.733810902 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.909070015 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:10.916590929 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.925035000 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.933286905 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.941076994 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:11.113965988 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:11.121249914 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:11.128839970 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:11.137044907 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:11.145001888 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:11.795881033 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:11.803514957 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:11.811117887 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:11.820966959 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:11.837498903 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.004578114 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:12.012434006 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.020576000 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.030606031 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.047390938 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.220499992 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:12.227575064 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.235394955 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.243745089 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.250886917 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.478697062 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:12.485826969 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.496191978 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.504448891 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.513731003 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.681806087 CEST	192.168.2.8	1.1.1.1	0xa93b	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.751569986 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:12.758881092 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.766650915 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.786674023 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.794477940 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.970859051 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:12.980077028 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.989113092 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.998203039 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.014718056 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:13.191298962 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:13.199127913 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.207150936 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:13.215725899 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.223653078 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:13.409652948 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:13.419802904 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.432934999 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:13.441842079 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.456226110 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:13.625868082 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:13.633748055 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.648358107 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:13.656536102 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.664316893 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:13.827500105 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:13.836687088 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.844511986 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:13.852699041 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.860945940 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:14.035662889 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:14.043052912 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:14.051371098 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:14.058840036 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:14.067586899 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:14.281789064 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:14.289078951 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:14.297272921 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:14.304882050 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:14.312886000 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:14.503798962 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:14.711806059 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:14.728831053 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:14.737140894 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:14.744940042 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:14.907537937 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:14.915740013 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:14.923830032 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:14.934649944 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:14.948448896 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:15.130033970 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:15.141972065 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:15.152791977 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:15.163331032 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:15.172054052 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:15.348342896 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:15.355789900 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:15.365293026 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:15.374089956 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:15.383760929 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:15.572005033 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:15.580121040 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:15.588327885 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:15.595949888 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:15.604753971 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:15.769768953 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:15.777295113 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:15.785701036 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:15.801681995 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:15.811606884 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:15.988081932 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:15.995642900 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.003854990 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:16.011714935 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.019485950 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:16.200207949 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:16.207488060 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.215327978 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:16.224968910 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.235095024 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:16.407507896 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:16.414951086 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.423079967 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:16.433455944 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.441167116 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:16.629403114 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:16.636835098 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.645359993 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:16.661086082 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.670862913 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:16.847372055 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:16.855330944 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.868113041 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:16.875574112 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.882774115 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:17.064024925 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:17.073293924 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:17.082022905 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:17.090295076 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:17.107079029 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:17.295592070 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:17.303390026 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:17.311696053 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:17.319684029 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:17.335865974 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:17.534563065 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:17.542010069 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:17.549552917 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:17.559094906 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:17.567450047 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:17.737859964 CEST	192.168.2.8	1.1.1.1	0x1be0	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:17.796120882 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:17.803977013 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:17.812716007 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:17.821245909 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:17.829564095 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.024241924 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:18.031800032 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.039484024 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.048963070 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.058254004 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.254540920 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:18.262705088 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.273813963 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.285773039 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.296284914 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.514796019 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:18.522614002 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.538558960 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.547188044 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.555646896 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.726654053 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:18.733829975 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.743258953 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.750494957 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.757929087 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.933845043 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:18.941387892 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.950901031 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.959868908 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.967818975 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:19.140929937 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:19.148304939 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:19.155978918 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:19.164426088 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:19.172403097 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:19.344120026 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:19.351583958 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:19.360291004 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:19.368180037 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:19.377214909 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:19.553788900 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:20.010730028 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:20.018606901 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:20.040424109 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:20.049153090 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:20.229639053 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:20.236985922 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:20.253612041 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:20.262399912 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:20.351579905 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:20.686383009 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:20.694499969 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:20.715199947 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:20.724632978 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:20.733818054 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:20.911464930 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:20.918778896 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:20.926598072 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:20.933758974 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:20.942497015 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.111479044 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:21.121628046 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.130542994 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.137974024 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.145596981 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.314975977 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:21.323853016 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.335041046 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.343949080 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.351403952 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.542648077 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:21.550260067 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.557995081 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.566761017 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.575505018 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.751477957 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:21.759263039 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.766875982 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.775129080 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.783469915 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.958664894 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:21.968656063 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.977550983 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.986080885 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.993982077 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:22.172804117 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:22.180521011 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:22.188402891 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:22.196573973 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:22.207371950 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:22.405179977 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:22.412276983 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:22.419380903 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:22.427025080 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:22.434901953 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:22.611941099 CEST	192.168.2.8	1.1.1.1	0xaaa	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:22.769833088 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:22.781847954 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:22.792072058 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:22.801836014 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:22.813738108 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:23.227145910 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:23.234591961 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:23.245731115 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:23.253689051 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:23.270549059 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:23.449784040 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:23.457365990 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:23.466226101 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:23.476272106 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:23.484874964 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:23.660808086 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:23.668301105 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:23.679202080 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:23.687658072 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:23.696970940 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:23.865631104 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:23.873333931 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:23.886046886 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:23.894740105 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:23.902683020 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.079590082 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:24.087897062 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.097551107 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.105426073 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.117101908 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.283487082 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:24.291558981 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.300156116 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.308371067 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.316370010 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.523715973 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:24.531337976 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.539474010 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.548158884 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.557305098 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.734008074 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:24.741390944 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.749911070 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.759010077 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.767282963 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.937853098 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:24.945355892 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.953162909 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.960591078 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.968107939 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:25.139513016 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:25.147255898 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:25.154692888 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:25.163103104 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:25.170680046 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:25.342502117 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:25.350198030 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:25.358591080 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:25.367932081 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:25.375889063 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:25.571450949 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:25.728210926 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:25.738540888 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:25.750890017 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:25.758778095 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:25.921899080 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:25.930252075 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:25.939183950 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:25.947792053 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:25.956206083 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.126456022 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:26.134727001 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:26.142551899 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.151047945 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:26.158669949 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.353076935 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:26.360722065 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:26.367805004 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.375787020 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:26.383672953 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.566685915 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:26.574117899 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:26.584655046 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.592210054 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:26.599831104 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.769870043 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:26.777335882 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:26.786694050 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.794744968 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:26.802766085 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.970535040 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:26.978373051 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:26.986635923 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.994410992 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:27.002804041 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:27.173662901 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:27.181220055 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:27.191905022 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:27.203917027 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:27.212809086 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:27.392781973 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:27.401411057 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:27.411317110 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:27.419869900 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:27.427692890 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:27.609451056 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:27.617137909 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:27.625138998 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:27.633187056 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:27.640666962 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:27.808569908 CEST	192.168.2.8	1.1.1.1	0x4cbe	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:28.075716019 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:28.083931923 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:28.091104031 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:28.100104094 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:28.112027884 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:28.800868034 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:28.808018923 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:28.817039967 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:28.824470997 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:28.831993103 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.004337072 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:29.011742115 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.019455910 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.027106047 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.035079002 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.211658955 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:29.219639063 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.227118015 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.238720894 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.246721029 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.422137976 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:29.429702044 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.439882994 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.447647095 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.455560923 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.653553009 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:29.660722017 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.668617010 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.678462982 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.686453104 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.861615896 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:29.869225025 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.877680063 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.886101961 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.893876076 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:30.064951897 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:30.072101116 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:30.080029964 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:30.087753057 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:30.095561028 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:30.268887997 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:30.276460886 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:30.284532070 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:30.292026997 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:30.299614906 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:30.472779036 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:30.480655909 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:30.491980076 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:30.503797054 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:30.512213945 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:30.709876060 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:30.717648029 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:30.726413965 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:30.742218018 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:30.750406981 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:30.927505016 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:30.937118053 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:31.421911001 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:31.431703091 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:31.441745996 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:31.617285967 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:31.625047922 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:31.632462025 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:31.640141964 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:31.648484945 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:31.828079939 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:31.835477114 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:32.300369024 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:32.307900906 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:32.316061020 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:32.501152039 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:32.509917974 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:32.521869898 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:32.529767036 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:32.537554979 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:32.732718945 CEST	192.168.2.8	1.1.1.1	0x87d7	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:32.825941086 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:32.833182096 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:32.860340118 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:32.867674112 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:32.876586914 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:33.056874037 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:33.064338923 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:33.072266102 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:33.080097914 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:33.087179899 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:33.253115892 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:33.260593891 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:33.269308090 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:33.277839899 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:33.289002895 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:33.453643084 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:33.461970091 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:33.469907999 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:33.477686882 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:34.014055014 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:34.188361883 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:34.198384047 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:34.206665039 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:34.214330912 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:34.222085953 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:34.394788980 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:34.403413057 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:34.410631895 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:34.419094086 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:34.430243969 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:34.594742060 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:34.602401018 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:34.648775101 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:34.658204079 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:34.666094065 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:34.846028090 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:34.853621006 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:34.861536026 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:34.870672941 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:34.879596949 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:35.053349018 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:35.060698986 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:35.068826914 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:35.076375961 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:35.084705114 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:35.251276970 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:35.258580923 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:35.266192913 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:35.273816109 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:35.282115936 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:35.462932110 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:35.471975088 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:35.480115891 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:35.487865925 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:35.496684074 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:35.735984087 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:35.743659973 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:35.753021002 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:35.764224052 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:35.827265978 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.140187979 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:36.147721052 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.155294895 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.164961100 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.172944069 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.342446089 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:36.350368977 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.358572960 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.371329069 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.380100965 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.546031952 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:36.553630114 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.561001062 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.568999052 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.576637983 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.756829977 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:36.764369965 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.772200108 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.779501915 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.786917925 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.953413010 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:36.962584972 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.970662117 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.980169058 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.989245892 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:37.156930923 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:37.164040089 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:37.172115088 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:37.180079937 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:37.188915014 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:37.358838081 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:37.367165089 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:37.375423908 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:37.383704901 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:37.393457890 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:37.572623014 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:37.582518101 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:37.590645075 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:37.599351883 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:37.607851028 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:37.783101082 CEST	192.168.2.8	1.1.1.1	0x8405	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:37.945348024 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:37.952491999 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:37.972109079 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:37.980148077 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:37.987730026 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:38.159975052 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:38.169600964 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:38.178623915 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:38.191531897 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:38.212280989 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:38.387907028 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:38.404866934 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:38.466325045 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:38.480499983 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:38.490524054 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:38.816423893 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:38.824929953 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:38.832691908 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:38.841120958 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:38.849349976 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.032212019 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:39.041745901 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.050321102 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.059149981 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.067517996 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.238878012 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:39.247673035 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.256774902 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.265954971 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.273500919 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.440989971 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:39.451127052 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.461560011 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.469729900 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.478728056 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.670346022 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:39.680609941 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.688374043 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.698075056 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.706109047 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.876676083 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:39.885270119 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.893573046 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.903054953 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.910643101 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.077166080 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:40.085239887 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.093169928 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.100966930 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.108721972 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.281850100 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:40.289664984 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.298479080 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.306797028 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.318133116 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.488403082 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:40.496193886 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.504573107 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.513204098 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.525386095 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.695070982 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:40.702611923 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.712762117 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.728332996 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.737999916 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.915751934 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:40.923593998 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.943629980 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.953022957 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.960509062 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:41.414819956 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:41.652494907 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:41.660545111 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:41.669888973 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:41.677417040 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:41.846353054 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:41.857939005 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:41.869878054 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:41.881830931 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:41.892641068 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:42.064275026 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:42.073833942 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:42.084070921 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:42.092211962 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:42.101236105 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:42.265827894 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:42.273885012 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:42.281784058 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:42.290931940 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:42.299935102 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:42.492316961 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:42.499931097 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:42.507844925 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:42.515649080 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:42.525684118 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:42.692280054 CEST	192.168.2.8	1.1.1.1	0x9e70	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:42.862272978 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:42.873020887 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:42.883079052 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:42.890863895 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:42.898560047 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.064937115 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:43.073523045 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.082056046 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.090673923 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.099050999 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.270531893 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:43.277890921 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.285655975 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.293236971 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.301096916 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.487420082 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:43.495140076 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.503541946 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.511728048 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.519948959 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.696315050 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:43.704092026 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.712444067 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.720664024 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.729016066 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.903882027 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:43.911669016 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.921166897 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.930012941 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.937756062 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.113127947 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:44.120500088 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.128601074 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.136614084 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.148468018 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.315426111 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:44.322827101 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.331070900 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.340312004 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.348376036 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.525284052 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:44.532366037 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.540024042 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.547800064 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.555871010 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.720885038 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:44.728769064 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.736690044 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.744204044 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.751549959 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.930289030 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:44.939470053 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.947079897 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.956816912 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.964334965 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:45.143572092 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:45.150783062 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:45.160202980 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:45.172410011 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:45.184243917 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:45.363473892 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:45.371335983 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:45.378928900 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:45.386354923 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:45.395448923 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:45.583122969 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:45.590616941 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:45.598651886 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:45.606751919 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:45.615191936 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:45.789882898 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:45.797749043 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:45.805327892 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:45.813561916 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:45.825333118 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:46.004522085 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:46.012700081 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:46.021162033 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:46.028740883 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:46.036854029 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:46.210206032 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:46.226845026 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:46.237346888 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:46.246761084 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:46.254559040 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:46.424766064 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:46.433147907 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:46.442405939 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:46.450396061 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:46.458914995 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:46.629160881 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:46.636939049 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:46.649506092 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:46.657171965 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:46.672723055 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:46.854521036 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:47.203387976 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:47.213113070 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:47.221009970 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:47.233957052 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:47.413033009 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:47.421245098 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:47.429704905 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:47.439105988 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:47.446485043 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:47.614003897 CEST	192.168.2.8	1.1.1.1	0x404e	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:47.673681021 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:47.682943106 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:47.693835974 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:47.705771923 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:47.713805914 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:47.879842997 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:47.890062094 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:47.901593924 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:47.914002895 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:47.929811954 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.096422911 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:48.104705095 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.113807917 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.121781111 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.129756927 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.306416988 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:48.313843966 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.322017908 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.329803944 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.339628935 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.519516945 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:48.528115988 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.537898064 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.547285080 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.555866003 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.735654116 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:48.743719101 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.752522945 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.761418104 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.768835068 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.941976070 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:48.950654030 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.960961103 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.970298052 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.978169918 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:49.158016920 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:49.165673971 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:49.173341990 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:49.180766106 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:49.188971996 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:49.370681047 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:49.377868891 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:49.385725975 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:49.393078089 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:49.402024984 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:49.581111908 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:49.591512918 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:49.600136042 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:49.608916044 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:49.617860079 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:50.060523033 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:50.083625078 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:50.092653990 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:50.103944063 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:50.113733053 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:50.301641941 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:50.312119007 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:50.323246956 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:50.334815979 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:50.345813990 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:50.517107964 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:50.525254965 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:50.533719063 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:50.542135000 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:50.551439047 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:50.739660025 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:51.050689936 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.058809042 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.069820881 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.077507973 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.251497030 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:51.259747982 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.269033909 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.276554108 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.284706116 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.471873999 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:51.480469942 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.489497900 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.498620033 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.507936001 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.675251007 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:51.690099955 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.700201988 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.714050055 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.726021051 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.910656929 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:51.919281006 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.929557085 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.938020945 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.947240114 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:52.126302958 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:52.138617039 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:52.148538113 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:52.158574104 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:52.171112061 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:52.351012945 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:52.362129927 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:52.373830080 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:52.390070915 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:52.400182009 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:52.850609064 CEST	192.168.2.8	1.1.1.1	0x7162	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:52.943634987 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:52.952785969 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:52.961869955 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:52.969719887 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:52.978765965 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:53.169171095 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:53.177562952 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:53.185645103 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:53.193676949 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:53.201965094 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:53.378546953 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:53.387479067 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:53.399859905 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:53.407465935 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:53.415524006 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:53.579526901 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:53.587006092 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:53.595274925 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:53.603271961 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:53.610826969 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:53.786194086 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:53.795650005 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:53.819196939 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:53.828052044 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:53.837426901 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:54.010065079 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:54.018197060 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:54.026734114 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:54.035001040 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:54.043426037 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:54.258606911 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:54.268162966 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:54.276135921 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:54.288017988 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:54.300292969 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:54.477561951 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:54.485829115 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:54.493693113 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:54.504129887 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:54.512993097 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:54.697011948 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:55.046349049 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:55.055772066 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:55.065568924 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:55.073437929 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:55.271506071 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:55.278914928 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:55.286704063 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:55.294852018 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:55.302763939 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:55.472664118 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:55.480166912 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:55.487885952 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:55.497061014 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:55.504822969 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:55.676400900 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:55.838026047 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:55.846879005 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:55.855895042 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:55.864320993 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.039295912 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:56.047811031 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.056513071 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.066296101 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.074970961 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.262545109 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:56.270385981 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.280034065 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.289383888 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.297682047 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.475677967 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:56.486598969 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.496545076 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.504452944 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.513290882 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.693010092 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:56.700176001 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.708411932 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.717716932 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.725830078 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.911566973 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:56.919900894 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.929043055 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.937369108 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.947272062 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:57.113795996 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:57.121200085 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:57.129569054 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:57.137032032 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:57.144587040 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:57.320875883 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:57.329989910 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:57.341417074 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:57.359016895 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:57.367816925 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:57.549947977 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:57.559428930 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:57.569622993 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:57.577711105 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:57.586385965 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:57.745064974 CEST	192.168.2.8	1.1.1.1	0xec73	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:57.803534985 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:57.811079025 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:57.819587946 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:57.828896046 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:57.838073969 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:58.017755985 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:58.026433945 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:58.034774065 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:58.042748928 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:58.051403999 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:58.221091032 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:58.228663921 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:58.237019062 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:58.245768070 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:58.262274027 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:58.439110041 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:58.446671009 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:58.454730034 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:58.462848902 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:58.471894026 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:58.652755976 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:58.909359932 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:58.919231892 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:58.927830935 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:58.936345100 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:59.115113974 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:59.125765085 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:59.147408962 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:59.157138109 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:59.166156054 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:59.348855972 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:59.358506918 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:59.367252111 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:59.383822918 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:59.393039942 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:59.567163944 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:59.575238943 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:59.584626913 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:59.593533993 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:59.601557016 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:59.775943995 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:59.783691883 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:59.791814089 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:49:59.800697088 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:59.808732986 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.006802082 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:00.014668941 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.023833990 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.031822920 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.040457964 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.205228090 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:00.217946053 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.229954958 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.243089914 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.272197962 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.440660954 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:00.448190928 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.456089020 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.466614962 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.476488113 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.650676012 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:00.658480883 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.666371107 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.675913095 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.684154034 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.869925976 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:00.877829075 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.886547089 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.895133018 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.902915955 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:01.139252901 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:01.146877050 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:01.154558897 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:01.181289911 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:01.191462994 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:01.627058029 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:01.634608030 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:01.642970085 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:01.651774883 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:01.660612106 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:01.837799072 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:01.850564003 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:01.859110117 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:01.870956898 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:01.879040003 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.048283100 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:02.056561947 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.068212032 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.080173016 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.089133024 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.262545109 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:02.270241022 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.278203011 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.287417889 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.296365023 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.487867117 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:02.495726109 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.505424023 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.516491890 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.524976015 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.701453924 CEST	192.168.2.8	1.1.1.1	0xe614	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.757313967 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:02.764811039 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.773530006 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.781239033 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.791953087 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.961882114 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:02.969152927 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.979545116 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.988826990 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.997823000 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:03.158855915 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:03.169768095 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:03.178150892 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:03.187495947 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:03.196476936 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:03.364267111 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:03.371879101 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:03.381037951 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:03.389729977 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:03.399519920 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:03.575041056 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:03.582597017 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:03.593122959 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:03.600616932 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:03.617435932 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:03.783189058 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:03.791578054 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:03.798955917 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:03.807933092 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:03.816106081 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:03.998444080 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:04.686672926 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:04.695668936 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:04.703674078 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:04.711860895 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:04.881628990 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:04.889308929 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:04.897614956 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:04.907329082 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:04.916440010 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.082889080 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:05.092806101 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.102973938 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.111177921 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.121982098 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.293833971 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:05.301290035 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.309757948 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.318924904 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.326405048 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.487104893 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:05.494874001 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.503350019 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.510579109 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.518378973 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.718231916 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:05.725866079 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.734155893 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.743532896 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.751419067 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.913212061 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:05.920289993 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.927892923 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.936295033 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.945193052 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.114540100 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:06.122051001 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.130162001 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.139229059 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.147133112 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.337349892 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:06.345005035 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.354630947 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.364476919 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.372458935 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.532747984 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:06.541050911 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.549973965 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.559437990 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.568685055 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.735326052 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:06.743181944 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.750478029 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.764714956 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.772480011 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.950319052 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:06.958688021 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.968085051 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.977065086 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.985335112 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:07.154395103 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:07.161880970 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:07.172014952 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:07.184304953 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:07.195920944 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:07.386778116 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:07.397197962 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:07.412389040 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:07.420682907 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:07.432141066 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:07.605950117 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:07.613410950 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:07.621361971 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:07.629975080 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:07.638959885 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:07.814407110 CEST	192.168.2.8	1.1.1.1	0xbca	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:07.975867987 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:07.983791113 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:07.994517088 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:08.003043890 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:08.011224985 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:08.182955027 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:09.515255928 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:09.526160955 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:09.534902096 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:09.545660019 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:09.703116894 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:09.715395927 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:09.723521948 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:09.731064081 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:09.740169048 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:09.892045975 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:09.899538994 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:09.907289028 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:09.915641069 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:09.923544884 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.080817938 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:10.088205099 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.100560904 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.108963966 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.116720915 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.282315016 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:10.290041924 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.298253059 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.307632923 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.316251040 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.478440046 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:10.486505032 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.495277882 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.503334999 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.512906075 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.674247026 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:10.681799889 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.689438105 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.697559118 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.707146883 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.863584042 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:10.871947050 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.884311914 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.892843008 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.900965929 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.073430061 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:11.080686092 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.092259884 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.100569963 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.108066082 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.266937017 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:11.274458885 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.283468962 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.291497946 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.299030066 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.455498934 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:11.463753939 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.472433090 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.481792927 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.490518093 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.644016027 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:11.652124882 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.660372019 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.668992996 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.677402973 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.853307009 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:11.861412048 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.869437933 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.878041983 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.886235952 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.054179907 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:12.063169003 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.071507931 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.080214977 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.089246988 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.251244068 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:12.258848906 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.270302057 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.279931068 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.288114071 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.438891888 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:12.446624994 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.455627918 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.464359045 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.472191095 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.622241974 CEST	192.168.2.8	1.1.1.1	0xa857	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.713885069 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:12.722791910 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.731635094 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.744288921 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.753360033 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.921546936 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:12.930645943 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.938659906 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.947870970 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.956540108 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.114049911 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:13.122780085 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.134072065 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.142030954 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.151030064 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.297923088 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:13.307610989 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.316077948 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.327924013 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.336611986 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.493192911 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:13.502773046 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.511403084 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.520325899 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.532155037 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.691104889 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:13.700190067 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.709573984 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.718120098 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.728004932 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.919738054 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:13.929009914 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.937475920 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.945750952 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.953592062 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:14.330147982 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:14.342010021 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:14.353636980 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:14.365544081 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:14.377558947 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:14.554157972 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:14.562062979 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:14.570324898 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:14.578380108 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:14.586188078 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:14.735630035 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:14.743844032 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:14.752703905 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:14.760567904 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:14.769367933 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:14.931236029 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:14.940314054 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:14.957866907 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:14.966125965 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:14.974360943 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:15.147742987 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:15.156492949 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:15.165401936 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:15.173086882 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:15.181396961 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:15.329545975 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:15.344538927 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:15.353725910 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:15.362356901 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:15.370358944 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:15.518835068 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:15.526778936 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:15.534854889 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:15.543414116 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:15.553116083 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:15.707412004 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:15.715337038 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:16.265512943 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:16.273762941 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:16.281621933 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:16.438968897 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:17.504604101 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:17.538446903 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:17.551915884 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:17.560116053 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:17.730415106 CEST	192.168.2.8	1.1.1.1	0x4128	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:17.786911964 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:17.794255018 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:17.803946972 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:17.811882973 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:17.820554018 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:17.971832037 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:17.979640007 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:17.988079071 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:17.996201992 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.004264116 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.158977032 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:18.167807102 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.176311970 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.184659958 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.192706108 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.349873066 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:18.358541965 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.366888046 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.374646902 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.383070946 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.533431053 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:18.542416096 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.550762892 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.558655024 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.567272902 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.722590923 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:18.730289936 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.740236998 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.754529953 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.762495041 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.912908077 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:18.922075033 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.933607101 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.941855907 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.950587988 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.149775028 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:19.168915987 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.177555084 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.186487913 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.195626974 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.346831083 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:19.354759932 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.364056110 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.372873068 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.381711006 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.543131113 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:19.552956104 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.561044931 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.568978071 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.576919079 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.727015018 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:19.738645077 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.751094103 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.761468887 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.774312019 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.943710089 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:19.955413103 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.963934898 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.973887920 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.982917070 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:20.193794012 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:20.202361107 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:20.210123062 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:20.219202995 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:20.227545023 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:20.389184952 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:20.398339033 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:20.406250954 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:20.414911985 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:20.423412085 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:20.583419085 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:20.594590902 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:20.604971886 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:20.614308119 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:20.625637054 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:20.806950092 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:20.814882040 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:20.823153973 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:20.833091021 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:20.841912985 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:20.986716986 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:20.995644093 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.004089117 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.016058922 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.032366037 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.202835083 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:21.210402012 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.219659090 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.227559090 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.235002041 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.380170107 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:21.387692928 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.396142960 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.405069113 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.414345026 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.566860914 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:21.574275017 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.586030006 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.594135046 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.606163979 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.752537012 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:21.762031078 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.774080992 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.785079956 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.796102047 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.946521997 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:21.958127975 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.972235918 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.980870008 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.990046978 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.136926889 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:22.144372940 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.153013945 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.161715031 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.170037985 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.321917057 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:22.329113960 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.337749004 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.347018003 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.356021881 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.508421898 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:22.516443968 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.525579929 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.533524036 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.544425011 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.685499907 CEST	192.168.2.8	1.1.1.1	0x608c	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.744688988 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:22.752850056 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.761766911 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.769269943 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.778455019 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.930759907 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:22.938354015 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.945904970 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.953300953 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.961611032 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.124598980 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:23.132129908 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.139740944 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.147579908 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.155930042 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.300467014 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:23.309417009 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.317112923 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.324485064 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.332135916 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.477169991 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:23.485297918 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.493561029 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.500942945 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.508759022 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.658536911 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:23.666280985 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.674846888 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.682749987 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.690279007 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.842828035 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:23.855299950 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.867695093 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.877513885 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.888680935 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:24.036634922 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:24.044351101 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:24.512933016 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:24.520874977 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:24.530730963 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:24.674853086 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:24.683290005 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:24.691611052 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:24.700351000 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:24.707736969 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:24.847616911 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:24.866286039 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:24.876136065 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:24.884882927 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:24.893676996 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:25.038532972 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:25.185508966 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:25.193675041 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:25.201647997 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:25.211323977 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:25.831723928 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:25.839248896 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:25.846930027 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:25.854687929 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:25.864113092 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.011497021 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:26.019555092 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.028712988 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.038403988 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.046557903 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.196222067 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:26.203583956 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.212677002 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.222959995 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.231210947 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.379734039 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:26.388125896 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.398853064 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.406980991 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.415023088 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.569303036 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:26.582321882 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.592819929 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.604701996 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.615187883 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.756478071 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:26.766122103 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.776386023 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.785429955 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.794945002 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.948929071 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:26.958177090 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.968235970 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.977338076 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.986596107 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:27.136379957 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:27.144972086 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:27.152899027 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:27.161459923 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:27.169857025 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:27.366969109 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:27.374577045 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:27.382555962 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:27.392429113 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:27.400927067 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:27.547514915 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:27.555318117 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:27.563781977 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:27.573208094 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:27.580874920 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:27.721604109 CEST	192.168.2.8	1.1.1.1	0x608c	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:27.788052082 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:27.806181908 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:27.818099022 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:27.828286886 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:27.840485096 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:27.996772051 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:28.005644083 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.016542912 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.025237083 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.033699036 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.178985119 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:28.188680887 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.198173046 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.206175089 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.214097023 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.353511095 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:28.367170095 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.380031109 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.387926102 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.397475004 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.538214922 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:28.547647953 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.556663036 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.571248055 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.580981970 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.732546091 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:28.740221024 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.748585939 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.757147074 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.766263962 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.913127899 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:28.920881987 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.930411100 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.938781977 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.946912050 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.090753078 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:29.099416018 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.107902050 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.116856098 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.124367952 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.272509098 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:29.280392885 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.289705992 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.298082113 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.308058023 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.458291054 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:29.470130920 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.481992006 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.493957043 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.505918026 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.643585920 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:29.652400017 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.663691998 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.672481060 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.682166100 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.818231106 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:29.826878071 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.834893942 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.843574047 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.851365089 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.987847090 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:29.996227980 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:30.004374981 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:30.012351036 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:30.020361900 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:30.167604923 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:30.176820040 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:30.184849977 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:30.193022966 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:30.202388048 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:30.396490097 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:30.880410910 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:30.892385006 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:30.904073954 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:30.916188955 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:31.050931931 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:31.058480978 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:31.067665100 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:31.075771093 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:31.084258080 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:31.250443935 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:31.259648085 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:31.268959045 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:31.277950048 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:31.289644957 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:31.426632881 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:31.438339949 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:31.449985981 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:31.465959072 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:31.478133917 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:31.632587910 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:31.640153885 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:31.648418903 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:31.656578064 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:31.664979935 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:32.070153952 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:32.077440023 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:32.084897995 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:32.092962980 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:32.100476027 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:32.252090931 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:32.259780884 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:32.269273043 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:32.279761076 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:32.291073084 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:32.425785065 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:32.433468103 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:32.442466974 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:32.451153040 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:32.523391962 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:32.802722931 CEST	192.168.2.8	1.1.1.1	0xb943	Standard query (0)	dns1.soprodns.ru	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:32.868429899 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:32.877484083 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:32.888261080 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:32.897974968 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:32.907939911 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.053004980 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:33.060863972 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.069591999 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.078843117 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.088001013 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.256702900 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:33.264952898 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.273175001 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.282234907 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.290376902 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.446038008 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:33.460475922 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.469155073 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.476475000 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.485166073 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.638386965 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:33.646378994 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.654846907 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.662539959 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.676987886 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.815536022 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:33.826741934 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.835846901 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.845331907 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.853656054 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.989240885 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:33.996687889 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:34.004477024 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:34.012888908 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:34.020756006 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:34.165465117 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:34.173233986 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:34.181757927 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:34.189899921 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	gandcrab.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:34.199497938 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	gandcrab.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:34.349832058 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:34.358140945 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:34.368865967 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:34.377552032 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	nomoreransom.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:34.388135910 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	nomoreransom.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:34.704365015 CEST	192.168.2.8	1.1.1.1	0x1	Standard query (0)	1.1.1.1.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:34.714626074 CEST	192.168.2.8	1.1.1.1	0x2	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:34.725241899 CEST	192.168.2.8	1.1.1.1	0x3	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false
Sep 30, 2024 15:50:34.733938932 CEST	192.168.2.8	1.1.1.1	0x4	Standard query (0)	emsisoft.bit	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:34.741256952 CEST	192.168.2.8	1.1.1.1	0x5	Standard query (0)	emsisoft.bit	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 30, 2024 15:48:38.729351997 CEST	1.1.1.1	192.168.2.8	0xd73	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:38.760334969 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:38.777232885 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:38.799174070 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:38.810766935 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:38.820362091 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:39.057279110 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:39.074361086 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:39.090161085 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:39.100474119 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:39.117669106 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:39.330759048 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:39.342067957 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:39.363137960 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:39.379297972 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:39.394572020 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:39.606801987 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:39.618275881 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:39.639086008 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:39.648375034 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:39.657042027 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:39.885538101 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:39.896874905 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:39.906586885 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:39.916112900 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:39.926603079 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:40.553308010 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:40.569865942 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:40.585597038 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:40.600589991 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:40.611335039 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:40.871020079 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:40.887048960 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:40.898397923 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:40.909986973 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:40.919997931 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:41.174468040 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:41.191196918 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:41.200045109 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:41.216150045 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:41.233854055 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:41.446026087 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:41.461703062 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:41.478741884 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:41.499664068 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:41.519851923 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:41.737417936 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:41.758264065 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:41.766812086 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:41.775093079 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:41.784480095 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:41.994505882 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:42.005197048 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:42.023808956 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:42.032655001 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:42.040610075 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:42.261465073 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:42.276597977 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:42.287679911 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:42.304768085 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:42.314426899 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:42.528512001 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:42.545141935 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:42.552634954 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:42.568911076 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:42.580096960 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:43.380258083 CEST	1.1.1.1	192.168.2.8	0x92e8	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:43.399560928 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:43.419209957 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:43.429235935 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:43.438060999 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:43.449506998 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:43.778915882 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:43.788625956 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:43.804064989 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:43.813400984 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:43.823776960 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:44.045229912 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:44.070025921 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:44.078681946 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:44.088496923 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:44.098745108 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:44.326344013 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:44.336164951 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:44.349229097 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:44.369457006 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:44.379405022 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:44.587311029 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:44.596462011 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:44.612993002 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:44.636149883 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:44.651611090 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:44.868995905 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:44.877644062 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:44.890388966 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:44.898241997 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:44.914555073 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:45.166635990 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:45.175230026 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:45.182452917 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:45.192682981 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:45.210306883 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:45.775732040 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:45.801177025 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:45.812800884 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:45.828454971 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:45.849891901 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:46.132414103 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:46.149527073 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:46.160145998 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:46.167994976 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:46.182929993 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:46.407286882 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:46.424917936 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:46.433192015 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:46.443484068 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:46.454333067 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:46.652364969 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:46.662076950 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:46.673144102 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:46.683716059 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:46.697062969 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:46.927767038 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:46.940696955 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:46.952009916 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:46.962127924 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:46.972928047 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:47.255215883 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:47.263951063 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:47.280107021 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:47.292902946 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:47.308072090 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:47.571950912 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:47.582767963 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:47.593496084 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:47.613962889 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:47.630242109 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:47.996720076 CEST	1.1.1.1	192.168.2.8	0x6093	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:48.016247034 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:48.026335955 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:48.035074949 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:48.043047905 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:48.053291082 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:48.304826975 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:48.321271896 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:48.337549925 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:48.348709106 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:48.358347893 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:48.685535908 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:48.694850922 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:48.702753067 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:48.710948944 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:48.719527960 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:48.986069918 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:48.994096994 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:49.002821922 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:49.019334078 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:49.027883053 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:49.281478882 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:49.291671991 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:49.308525085 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:49.320370913 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:49.329644918 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:49.572170019 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:49.583076954 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:49.592915058 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:49.603442907 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:49.626266956 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:50.015222073 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:50.024143934 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:50.032826900 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:50.049943924 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:50.079598904 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:50.599877119 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:50.609138966 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:50.618889093 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:50.626848936 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:50.636559010 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:50.853581905 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:50.861920118 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:50.877094984 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:50.884625912 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:50.904119015 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:52.060384035 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:52.073223114 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:52.088244915 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:52.108290911 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:52.124521017 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:52.297302008 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:52.306101084 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:52.313873053 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:52.324599981 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:52.334901094 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:52.535835028 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:52.544322968 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:52.552990913 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:52.561080933 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:52.570739985 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:53.163815975 CEST	1.1.1.1	192.168.2.8	0x8422	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:53.181986094 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:53.203315973 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:53.212074995 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:53.221133947 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:53.229602098 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:53.428158045 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:53.443628073 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:53.452233076 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:53.473185062 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:53.481213093 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:53.657643080 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:53.666407108 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:53.674551964 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:53.682962894 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:53.692018986 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:53.871476889 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:53.879645109 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:53.896795034 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:53.905098915 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:53.913800001 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:54.095360994 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:54.643755913 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:54.657272100 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:54.678875923 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:54.689656019 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:54.855396986 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:54.875467062 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:54.883133888 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:54.891836882 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:54.908113003 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:55.071609020 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:55.092988968 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:55.118210077 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:55.127917051 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:55.150963068 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:55.429853916 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:55.446312904 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:55.463795900 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:55.481750011 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:55.496263027 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:55.761183977 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:55.777686119 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:55.801868916 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:55.812536001 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:55.833978891 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.011327982 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:56.026601076 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.042658091 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.052093983 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.072046041 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.277393103 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:56.288398027 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.296951056 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.305700064 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.317054033 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.512000084 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:56.533514023 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.550718069 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.561083078 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.570241928 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.746150017 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:56.754338980 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.766834021 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.776494980 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.786185026 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.965825081 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:56.974128962 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.982420921 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:56.996973991 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:57.006217957 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:57.186465025 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:57.207030058 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:57.215902090 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:57.228276968 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:57.238976955 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:57.423285007 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:57.433834076 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:57.441550970 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:57.449707985 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:57.469775915 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:57.810208082 CEST	1.1.1.1	192.168.2.8	0x9166	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:57.825539112 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:57.833713055 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:57.843333006 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:57.852715015 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:57.869250059 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:58.046128035 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:58.056271076 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:58.067534924 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:58.076514959 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:58.091557980 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:58.296941996 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:58.318414927 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:58.333733082 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:58.341587067 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:58.359333038 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:58.528326035 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:58.537663937 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:58.612955093 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:58.622720957 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:58.632074118 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:58.808269024 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:58.823925972 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:58.839190006 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:58.853171110 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:58.861850977 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.031769991 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:59.041879892 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.052365065 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.060714960 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.069152117 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.245985985 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:59.257591009 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.265930891 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.276648998 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.285494089 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.489177942 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:59.498243093 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.508069038 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.516634941 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.525777102 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.705884933 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:59.722352028 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.735289097 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.743500948 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.751121998 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.920466900 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:48:59.941071033 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.956537962 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:48:59.964581966 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:59.984404087 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:00.150990009 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:00.159149885 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:00.167727947 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:00.178365946 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:00.196170092 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:00.567570925 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:00.575527906 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:00.591072083 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:00.601679087 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:00.609989882 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:00.788712978 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:00.805061102 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:00.812935114 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:00.821443081 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:00.838385105 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:01.041878939 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:01.064182043 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:01.089481115 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:01.098390102 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:01.114784002 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:01.294677973 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:01.303292036 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:01.314198971 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:01.324399948 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:01.334836960 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:01.707531929 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:01.720216036 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:01.730376005 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:01.741625071 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:01.761528015 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:01.972085953 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:01.983264923 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:01.992500067 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:02.010660887 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:02.028462887 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:02.575834990 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:02.593584061 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:02.610909939 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:02.626408100 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:02.635507107 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:02.957917929 CEST	1.1.1.1	192.168.2.8	0xc5b1	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:02.974196911 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:02.981576920 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.003315926 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:03.012957096 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.021795988 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:03.198821068 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:03.207086086 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.219043016 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:03.228086948 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.236232042 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:03.413439035 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:03.422017097 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.430234909 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:03.440386057 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.448616028 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:03.617954016 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:03.625910997 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.641520023 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:03.665709972 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.673253059 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:03.841177940 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:03.852464914 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.864340067 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:03.872318983 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.886894941 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.059169054 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:04.069940090 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.081726074 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.089761972 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.100801945 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.282705069 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:04.290880919 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.300528049 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.317691088 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.329011917 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.527698994 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:04.536896944 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.545433044 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.564702034 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.581403971 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.760191917 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:04.772074938 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.787760019 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.796989918 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.814053059 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:04.979533911 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:04.987447023 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.997888088 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:05.006138086 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.014269114 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:05.188493013 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:05.196873903 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.204616070 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:05.213504076 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.238616943 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:05.423878908 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:05.432174921 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.441059113 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:05.459475994 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.470972061 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:05.651825905 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:05.660096884 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.670380116 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:05.681278944 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.691788912 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:05.880361080 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:05.897347927 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.906618118 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:05.923891068 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.932432890 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:06.105813980 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:06.113404989 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.124109983 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:06.133474112 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.142184019 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:06.305566072 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:06.322338104 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.333163977 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:06.341574907 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.356931925 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:06.563937902 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:06.572638035 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.581075907 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:06.589468002 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.599292040 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:06.775487900 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:06.786142111 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.798890114 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:06.810122967 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.830403090 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.015727997 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:07.029839993 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.037947893 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.046227932 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.054020882 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.235938072 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:07.253501892 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.268258095 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.288451910 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.298666954 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.483335018 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:07.491792917 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.501437902 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.509712934 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.519833088 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.731156111 CEST	1.1.1.1	192.168.2.8	0xbb9b	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.749532938 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:07.762676954 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.773700953 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.784833908 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.793715000 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.959340096 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:07.968389988 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.979319096 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:07.990082026 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:08.000622988 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:08.187545061 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:08.199119091 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:08.206883907 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:08.214797974 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:08.223906994 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:08.403155088 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:08.411572933 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:08.419456005 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:08.428052902 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:08.436868906 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:08.647248030 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:08.655689001 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:08.664978981 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:08.674319983 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:08.683465004 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:09.181160927 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:09.191761971 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:09.199594975 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:09.207901955 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:09.215707064 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:09.388905048 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:09.398155928 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:09.406245947 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:09.416019917 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:09.431520939 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:09.623970985 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:09.642333984 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:09.655014992 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:09.665584087 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:09.675468922 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:09.853908062 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:09.883852005 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:09.892344952 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:09.902076006 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:09.918313980 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.084791899 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:10.092596054 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.103506088 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.119640112 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.127365112 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.292409897 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:10.300786018 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.311820984 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.321408033 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.332998991 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.514513016 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:10.522439957 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.529786110 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.537784100 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.545253992 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.709072113 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:10.716722965 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.725496054 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.733465910 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.742026091 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.916137934 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:10.924772978 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.932979107 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:10.940764904 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:10.951998949 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:11.120713949 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:11.128456116 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:11.136712074 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:11.144746065 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:11.154026031 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:11.803141117 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:11.810868025 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:11.820600033 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:11.837105989 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:11.845525026 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.012020111 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:12.020184994 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.030224085 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.046895981 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.057135105 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.227186918 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:12.235131025 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.243527889 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.250649929 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.260668993 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.485408068 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:12.495851994 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.504209995 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.513492107 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.521575928 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.733071089 CEST	1.1.1.1	192.168.2.8	0xa93b	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.758467913 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:12.766222000 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.786298990 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.794209957 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.803236008 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:12.979651928 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:12.988801003 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.997270107 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:13.014405966 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.023588896 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:13.198661089 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:13.206952095 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.215446949 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:13.223478079 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.239737988 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:13.416588068 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:13.432619095 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.441546917 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:13.455956936 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.464900017 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:13.633402109 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:13.648109913 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.656296015 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:13.664001942 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.672143936 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:13.836241961 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:13.844201088 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.852432966 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:13.860696077 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.869334936 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:14.042570114 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:14.051160097 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:14.058638096 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:14.067147970 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:14.080663919 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:14.288652897 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:14.296994925 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:14.304698944 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:14.312553883 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:14.320856094 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:14.710959911 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:14.728430033 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:14.736942053 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:14.744744062 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:14.752948046 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:14.915242910 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:14.923541069 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:14.932442904 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:14.948162079 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:14.957437038 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:15.137701988 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:15.149985075 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:15.161236048 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:15.171606064 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:15.180573940 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:15.355082035 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:15.364842892 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:15.373619080 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:15.382235050 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:15.392107964 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:15.579751968 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:15.587969065 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:15.595752001 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:15.604578018 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:15.612682104 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:15.776923895 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:15.785355091 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:15.801340103 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:15.811058998 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:15.826317072 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:15.995280027 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:16.003628016 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.011507034 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:16.019248009 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.027990103 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:16.207143068 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:16.215018034 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.224672079 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:16.234848022 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.243060112 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:16.414463997 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:16.422398090 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.433096886 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:16.440901995 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.448729992 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:16.636398077 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:16.645100117 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.660797119 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:16.670511007 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.678678989 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:16.854494095 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:16.863003016 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.875103951 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:16.882426977 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:16.902435064 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:17.072748899 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:17.081732988 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:17.089997053 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:17.106544018 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:17.121866941 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:17.302933931 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:17.311359882 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:17.319515944 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:17.335580111 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:17.351447105 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:17.541615963 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:17.549226046 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:17.557393074 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:17.567209959 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:17.575134993 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:17.786125898 CEST	1.1.1.1	192.168.2.8	0x1be0	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:17.802968025 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:17.811892986 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:17.820146084 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:17.828438997 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:17.838594913 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.031331062 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:18.039165974 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.048758984 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.058068037 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.067401886 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.261909008 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:18.270076036 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.281779051 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.292968988 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.303706884 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.522147894 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:18.538053036 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.546761990 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.555223942 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.563446999 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.733356953 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:18.743009090 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.750300884 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.757761002 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.765785933 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.940977097 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:18.950517893 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.959650040 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:18.967573881 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.976624012 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:19.147751093 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:19.155582905 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:19.164120913 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:19.172019958 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:19.180579901 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:19.351219893 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:19.359975100 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:19.367964983 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:19.376983881 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:19.385004997 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:20.009888887 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:20.018256903 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:20.040051937 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:20.048815012 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:20.057720900 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:20.236613989 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:20.253350973 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:20.262098074 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:20.270962954 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:20.358783007 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:20.694108963 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:20.714736938 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:20.724401951 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:20.733597994 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:20.740704060 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:20.918391943 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:20.926209927 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:20.933528900 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:20.942217112 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:20.952526093 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.121191025 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:21.130245924 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.137725115 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.145416975 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.153965950 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.323132992 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:21.330811024 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.343583107 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.351214886 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.361979961 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.549890041 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:21.557739019 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.566469908 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.575149059 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.583242893 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.758886099 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:21.766675949 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.774954081 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.783216000 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.792100906 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.968099117 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:21.977130890 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:21.985749006 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:21.993758917 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:22.006933928 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:22.180094957 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:22.187962055 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:22.196238041 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:22.207011938 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:22.216753960 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:22.411909103 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:22.419101954 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:22.426744938 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:22.434664965 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:22.442347050 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:22.761765957 CEST	1.1.1.1	192.168.2.8	0xaaa	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:22.777995110 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:22.791104078 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:22.799261093 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:22.809551954 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:22.821297884 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:23.234195948 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:23.243355989 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:23.253313065 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:23.269790888 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:23.278562069 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:23.456890106 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:23.465805054 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:23.476003885 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:23.484630108 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:23.493583918 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:23.667936087 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:23.678778887 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:23.687463999 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:23.696778059 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:23.706659079 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:23.872941971 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:23.885756016 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:23.894509077 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:23.902453899 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:23.910070896 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.087563992 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:24.097238064 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.105150938 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.113452911 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.125149012 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.291153908 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:24.299880028 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.308172941 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.316185951 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.332767010 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.530929089 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:24.539124966 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.547812939 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.557018042 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.581306934 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.741029024 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:24.749690056 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.758630037 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.767031908 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.775393009 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.945034981 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:24.952853918 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.960402012 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:24.967891932 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:24.975739002 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:25.146770954 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:25.154402018 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:25.162424088 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:25.170342922 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:25.178147078 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:25.349813938 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:25.357942104 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:25.367686987 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:25.375606060 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:25.383349895 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:25.727709055 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:25.738276005 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:25.750634909 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:25.758527040 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:25.766463041 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:25.929702997 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:25.938863993 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:25.947535038 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:25.955961943 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:25.963586092 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.133922100 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:26.142283916 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:26.150722980 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.158453941 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:26.166553974 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.360373974 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:26.367549896 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:26.375585079 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.383265018 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:26.391235113 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.573754072 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:26.584378004 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:26.591954947 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.599514961 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:26.610188961 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.776827097 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:26.786365986 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:26.794502020 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.802428961 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:26.811533928 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:26.977946043 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:26.986377954 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:26.994194984 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:27.002578974 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:27.010440111 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:27.180741072 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:27.191219091 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:27.200316906 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:27.212483883 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:27.228646994 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:27.400185108 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:27.409311056 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:27.419508934 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:27.427303076 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:27.434969902 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:27.616681099 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:27.624859095 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:27.632906914 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:27.640441895 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:27.648788929 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:28.065756083 CEST	1.1.1.1	192.168.2.8	0x4cbe	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:28.083235025 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:28.090832949 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:28.098490953 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:28.107649088 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:28.640166998 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:28.807609081 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:28.816710949 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:28.824249029 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:28.831748009 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:28.838962078 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.011296988 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:29.019176006 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.026870012 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.034918070 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.042215109 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.219244003 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:29.226861000 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.238452911 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.246401072 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.254323006 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.429305077 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:29.439548016 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.447459936 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.455260992 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.463380098 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.660312891 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:29.668339968 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.678224087 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.686204910 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.694511890 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.868731022 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:29.877342939 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.885869980 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:29.893569946 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:29.902045012 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:30.071772099 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:30.079736948 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:30.087548971 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:30.095289946 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:30.103858948 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:30.276135921 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:30.284302950 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:30.291748047 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:30.299351931 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:30.308065891 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:30.479801893 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:30.488763094 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:30.501964092 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:30.511213064 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:30.519783020 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:30.717225075 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:30.726135015 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:30.741915941 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:30.750024080 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:30.761038065 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:30.936707020 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:31.419702053 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:31.431380033 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:31.438859940 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:31.449836016 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:31.624505997 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:31.632148027 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:31.639866114 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:31.648317099 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:31.656728983 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:31.835093021 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:32.299913883 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:32.307502985 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:32.315781116 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:32.338105917 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:32.508533955 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:32.518387079 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:32.528852940 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:32.537365913 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:32.545243025 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:32.817490101 CEST	1.1.1.1	192.168.2.8	0x87d7	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:32.832746983 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:32.860022068 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:32.867492914 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:32.876391888 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:32.884407997 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:33.063910007 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:33.071970940 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:33.079899073 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:33.087021112 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:33.095464945 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:33.260099888 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:33.268930912 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:33.277525902 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:33.286655903 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:33.296659946 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:33.460632086 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:33.469543934 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:33.477402925 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:34.013612986 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:34.021536112 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:34.198030949 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:34.206403017 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:34.214065075 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:34.221869946 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:34.229280949 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:34.403029919 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:34.410381079 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:34.418833017 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:34.427638054 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:34.438878059 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:34.601890087 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:34.648262024 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:34.657857895 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:34.665826082 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:34.685992956 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:34.853179932 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:34.861141920 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:34.870374918 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:34.879313946 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:34.888361931 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:35.060339928 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:35.068572998 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:35.076114893 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:35.084542036 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:35.092299938 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:35.258141994 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:35.265963078 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:35.273634911 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:35.281944990 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:35.290378094 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:35.471560955 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:35.479872942 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:35.487670898 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:35.496468067 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:35.504389048 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:35.743278027 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:35.752543926 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:35.762979031 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:35.771898985 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:35.835269928 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.147306919 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:36.154957056 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.163713932 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.172669888 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.180722952 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.349896908 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:36.358206987 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.371037006 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.379791021 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.387794018 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.553189993 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:36.560698032 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.568629026 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.576386929 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.583853960 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.763807058 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:36.771845102 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.779293060 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.786750078 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.794713974 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.962021112 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:36.970329046 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.979970932 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:36.989043951 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:36.999162912 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:37.163649082 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:37.171720982 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:37.179766893 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:37.188523054 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:37.199800968 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:37.366795063 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:37.375135899 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:37.383512974 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:37.392947912 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:37.402551889 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:37.581934929 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:37.590321064 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:37.599143982 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:37.607440948 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:37.615617037 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:37.936912060 CEST	1.1.1.1	192.168.2.8	0x8405	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:37.952127934 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:37.971741915 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:37.979856014 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:37.987524033 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:37.996306896 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:38.166817904 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:38.178358078 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:38.188189030 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:38.199345112 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:38.221512079 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:38.395045996 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:38.412914038 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:38.476406097 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:38.488169909 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:38.506375074 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:38.824397087 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:38.832400084 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:38.840764046 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:38.848840952 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:38.857439041 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.041322947 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:39.050120115 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.058949947 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.067274094 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.075679064 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.247273922 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:39.256459951 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.265708923 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.273283005 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.281217098 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.450737953 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:39.461190939 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.469378948 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.478530884 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.488171101 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.677253008 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:39.688081980 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.697685003 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.705868959 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.713640928 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.884884119 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:39.893260956 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.902801991 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:39.910382986 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:39.918447018 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.084903955 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:40.092930079 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.100718975 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.108464956 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.116274118 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.289268970 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:40.298008919 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.306529045 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.317856073 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.327619076 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.495661974 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:40.504245043 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.512990952 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.525135040 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.533732891 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.701955080 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:40.712440968 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.722963095 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.737600088 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.746264935 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.923096895 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:40.943180084 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.952641010 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:40.960164070 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:40.967777014 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:41.651773930 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:41.660094976 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:41.669531107 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:41.677083015 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:41.685929060 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:41.854765892 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:41.866017103 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:41.877747059 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:41.889796019 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:41.900764942 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:42.073335886 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:42.082261086 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:42.091439962 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:42.099663019 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:42.109169960 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:42.273464918 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:42.281299114 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:42.290086985 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:42.299246073 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:42.307414055 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:42.499392986 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:42.507580042 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:42.515417099 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:42.525439024 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:42.533803940 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:42.852807999 CEST	1.1.1.1	192.168.2.8	0x9e70	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:42.872503042 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:42.882714033 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:42.890458107 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:42.898252010 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:42.906167030 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.073087931 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:43.081712008 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.090363026 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.098839045 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.106810093 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.277441025 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:43.285382032 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.292992115 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.300875902 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.309313059 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.494601965 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:43.503139019 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.511368036 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.519583941 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.527508020 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.703623056 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:43.712100983 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.720310926 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.728724003 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.736407995 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.911164045 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:43.920849085 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.929532051 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:43.937336922 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:43.945389032 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.120124102 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:44.128181934 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.136240959 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.146128893 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.156709909 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.322427988 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:44.330722094 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.340039015 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.347815037 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.355739117 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.532004118 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:44.539726019 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.547549009 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.555583954 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.563314915 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.728352070 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:44.736407042 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.743941069 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.751306057 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.759217978 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.939038038 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:44.946800947 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.955029011 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:44.963969946 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:44.971977949 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:45.150376081 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:45.158246994 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:45.168257952 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:45.179861069 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:45.191838980 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:45.370903015 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:45.378565073 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:45.386071920 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:45.395139933 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:45.403229952 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:45.590169907 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:45.598313093 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:45.606436014 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:45.614758968 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:45.623370886 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:45.797322035 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:45.805054903 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:45.813271046 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:45.824801922 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:45.832535982 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:46.012187004 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:46.020781040 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:46.028425932 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:46.036469936 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:46.044744968 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:46.220386028 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:46.236884117 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:46.246185064 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:46.254214048 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:46.263400078 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:46.432728052 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:46.442011118 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:46.450087070 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:46.458664894 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:46.467109919 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:46.636517048 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:46.649162054 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:46.656888008 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:46.672406912 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:46.683778048 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:47.202698946 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:47.212682962 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:47.220649004 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:47.229638100 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:47.241729975 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:47.420876026 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:47.429364920 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:47.438849926 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:47.446289062 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:47.454745054 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:47.661988020 CEST	1.1.1.1	192.168.2.8	0x404e	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:47.682456970 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:47.693233013 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:47.703488111 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:47.713396072 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:47.721476078 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:47.888008118 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:47.898652077 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:47.910092115 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:47.924880028 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:47.937684059 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.104341984 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:48.112257004 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.121479988 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.129427910 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.138181925 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.313296080 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:48.321630001 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.329608917 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.339447021 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.349548101 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.527736902 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:48.537600040 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.546977997 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.555589914 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.566056013 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.743235111 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:48.752151012 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.761100054 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.768557072 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.776510954 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.950162888 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:48.958559036 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.969959974 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:48.977885008 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:48.987009048 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:49.165285110 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:49.173049927 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:49.180478096 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:49.188677073 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:49.196983099 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:49.377392054 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:49.385447025 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:49.392865896 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:49.401778936 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:49.409889936 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:49.588855028 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:49.599754095 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:49.607690096 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:49.616332054 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:49.629929066 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:50.067670107 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:50.091689110 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:50.101317883 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:50.111835957 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:50.122070074 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:50.311552048 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:50.322575092 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:50.334352970 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:50.345523119 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:50.353872061 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:50.524874926 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:50.533375025 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:50.541897058 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:50.551148891 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:50.558698893 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.049916983 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:51.058428049 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.069320917 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.077088118 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.084167957 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.259278059 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:51.268467903 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.276211977 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.284390926 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.292521000 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.480022907 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:51.489157915 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.498240948 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.507637024 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.518034935 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.685771942 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:51.699834108 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.710370064 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.725480080 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.737534046 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.917731047 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:51.928119898 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.937630892 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:51.945997953 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:51.954605103 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:52.135858059 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:52.148143053 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:52.158272028 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:52.167910099 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:52.179514885 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:52.359417915 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:52.372354031 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:52.388968945 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:52.398780107 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:52.408190966 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:52.936036110 CEST	1.1.1.1	192.168.2.8	0x7162	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:52.952353001 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:52.961575031 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:52.969506979 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:52.978564978 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:52.986300945 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:53.177089930 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:53.185146093 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:53.193356037 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:53.201674938 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:53.209707975 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:53.386998892 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:53.399272919 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:53.407212019 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:53.415333986 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:53.423249960 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:53.586595058 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:53.594881058 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:53.603051901 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:53.610563040 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:53.618108034 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:53.795141935 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:53.818689108 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:53.827585936 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:53.836227894 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:53.846649885 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:54.017693043 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:54.026365995 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:54.034545898 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:54.043046951 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:54.087438107 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:54.265700102 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:54.275499105 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:54.283946037 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:54.298197985 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:54.307691097 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:54.485243082 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:54.493431091 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:54.501029968 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:54.512629032 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:54.520993948 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:55.045661926 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:55.055195093 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:55.064956903 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:55.073043108 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:55.082252979 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:55.278353930 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:55.286329985 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:55.294516087 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:55.302434921 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:55.310344934 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:55.479697943 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:55.487612009 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:55.496717930 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:55.504539013 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:55.513088942 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:55.834403992 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:55.846563101 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:55.854343891 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:55.863960981 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:55.873091936 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.047132015 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:56.056122065 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.065953970 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.074738979 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.085454941 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.269709110 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:56.279656887 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.289139986 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.297358990 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.305357933 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.484091997 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:56.495996952 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.504054070 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.513016939 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.521064997 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.699745893 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:56.708079100 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.717453003 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.725575924 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.732923031 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.919363976 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:56.928639889 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.936990023 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:56.946907997 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:56.955037117 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:57.120701075 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:57.129239082 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:57.136826038 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:57.144356966 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:57.152196884 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:57.329217911 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:57.341052055 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:57.358634949 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:57.367584944 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:57.382107019 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:57.559036970 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:57.569221020 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:57.577409983 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:57.586191893 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:57.596056938 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:57.794051886 CEST	1.1.1.1	192.168.2.8	0xec73	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:57.810570002 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:57.819294930 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:57.828589916 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:57.837817907 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:57.845618010 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:58.025510073 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:58.034053087 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:58.042258024 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:58.050937891 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:58.060347080 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:58.228202105 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:58.236620903 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:58.245512962 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:58.262007952 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:58.270350933 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:58.446258068 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:58.454437017 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:58.462632895 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:58.471637011 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:58.480755091 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:58.908766031 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:58.918870926 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:58.927493095 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:58.936042070 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:58.944133043 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:59.124146938 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:59.144337893 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:59.156507969 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:59.165568113 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:59.174972057 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:59.358079910 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:59.366936922 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:59.383373976 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:59.392612934 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:59.403839111 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:59.574678898 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:59.584328890 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:59.593105078 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:59.601223946 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:59.612667084 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:59.783273935 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:49:59.791516066 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:59.800370932 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:49:59.808382988 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:59.817759037 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.014091969 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:00.023435116 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.031526089 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.039963961 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.048305988 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.213368893 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:00.226979971 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.237432003 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.271362066 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.280747890 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.447671890 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:00.455708981 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.466259003 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.476032019 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.483604908 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.658024073 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:00.666045904 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.675633907 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.683892965 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.692440033 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.877418995 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:00.886259079 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.894556999 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:00.902618885 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:00.912002087 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:01.146387100 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:01.153860092 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:01.172862053 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:01.191006899 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:01.212884903 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:01.634197950 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:01.642714024 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:01.651458025 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:01.660310030 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:01.669126034 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:01.845705032 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:01.858582973 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:01.870608091 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:01.878566980 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:01.888953924 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.055949926 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:02.066399097 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.076998949 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.088716984 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.099261999 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.269737005 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:02.277684927 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.287111044 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.295003891 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.320990086 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.494880915 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:02.504949093 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.513700008 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.524218082 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.534543991 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.749352932 CEST	1.1.1.1	192.168.2.8	0xe614	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.764422894 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:02.773253918 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.780855894 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.791661978 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.801179886 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.968691111 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:02.979254961 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:02.988497972 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:02.997515917 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:03.005698919 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:03.169214010 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:03.177877903 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:03.187086105 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:03.196082115 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:03.204535961 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:03.371444941 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:03.380634069 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:03.389401913 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:03.399180889 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:03.407830954 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:03.581929922 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:03.592683077 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:03.600358963 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:03.617188931 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:03.624685049 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:03.791059017 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:03.798661947 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:03.807681084 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:03.815763950 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:03.824944973 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:04.685991049 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:04.695374012 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:04.703346014 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:04.711601019 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:04.719937086 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:04.888776064 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:04.897245884 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:04.906929970 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:04.916090965 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:04.925025940 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.092277050 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:05.102579117 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.110786915 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.121700048 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.134032011 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.300698042 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:05.309423923 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.318444967 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.326136112 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.335586071 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.494343042 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:05.502985954 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.510211945 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.518063068 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.525913954 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.725415945 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:05.733814955 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.743210077 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.751096964 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.759258032 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.919857025 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:05.927592039 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.935982943 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:05.944767952 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:05.953454018 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.121614933 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:06.129760027 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.138943911 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.146795034 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.156061888 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.344599009 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:06.354242086 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.364171028 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.372169971 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.379831076 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.540262938 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:06.548748970 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.559041023 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.567245960 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.576627016 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.742561102 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:06.750226974 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.764480114 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.772253990 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.779870033 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.958077908 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:06.967617035 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.976692915 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:06.984870911 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:06.993381977 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:07.161484003 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:07.170934916 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:07.181132078 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:07.191832066 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:07.211146116 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:07.394072056 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:07.407886982 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:07.420264006 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:07.428653955 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:07.440165997 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:07.613009930 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:07.621025085 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:07.629697084 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:07.638619900 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:07.646485090 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:07.965657949 CEST	1.1.1.1	192.168.2.8	0xbca	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:07.983302116 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:07.993688107 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:08.002624035 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:08.010400057 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:08.018549919 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:09.514724016 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:09.515445948 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:09.515642881 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:09.517029047 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:09.525839090 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:09.534554958 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:09.545309067 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:09.561275959 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:09.714998960 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:09.723261118 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:09.730823994 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:09.739967108 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:09.748229027 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:09.899034023 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:09.906940937 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:09.915314913 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:09.923197031 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:09.931477070 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.087621927 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:10.095488071 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.108598948 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.116297007 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.124829054 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.289536953 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:10.297897100 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.307220936 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.315891027 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.324982882 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.486085892 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:10.494594097 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.503001928 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.512541056 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.521668911 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.681396008 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:10.689112902 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.697094917 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.706553936 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.715154886 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.871536970 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:10.883456945 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.892255068 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:10.900645018 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:10.908956051 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.080286980 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:11.089243889 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.100240946 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.107784986 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.115766048 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.273967028 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:11.283154011 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.291244984 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.298804045 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.306495905 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.463211060 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:11.472090960 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.481364012 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.489242077 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.499424934 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.651575089 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:11.660099983 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.668709040 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.677153111 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.686084986 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.860925913 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:11.869029999 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.877762079 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:11.885947943 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:11.894023895 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.062792063 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:12.071225882 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.079901934 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.089010000 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.098433018 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.258466959 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:12.270030022 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.279684067 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.287863970 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.296241999 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.446197033 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:12.455280066 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.464066982 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.471868992 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.481260061 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.705429077 CEST	1.1.1.1	192.168.2.8	0xa857	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.722306013 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:12.731260061 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.744004011 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.753022909 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.760662079 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.928669930 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:12.938339949 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.947585106 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:12.956098080 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:12.964200020 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.122375965 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:13.133733988 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.141796112 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.150708914 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.159091949 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.304903030 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:13.314896107 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.323916912 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.335473061 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.344201088 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.500157118 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:13.511029005 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.519340038 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.528614998 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.539793968 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.698410034 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:13.708508015 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.717781067 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.726000071 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.737251043 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.927122116 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:13.937077045 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.944905996 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:13.953320026 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:13.961126089 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:14.337172031 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:14.350753069 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:14.362231970 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:14.373591900 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:14.384752989 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:14.561512947 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:14.569946051 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:14.578008890 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:14.585812092 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:14.594907045 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:14.743427992 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:14.752455950 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:14.760334969 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:14.769139051 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:14.777719975 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:14.939862013 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:14.957463980 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:14.965851068 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:14.974145889 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:14.983042002 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:15.156039953 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:15.165049076 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:15.172782898 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:15.181077957 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:15.189929962 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:15.344002962 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:15.353421926 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:15.362056017 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:15.369620085 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:15.377943993 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:15.526211023 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:15.534516096 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:15.542642117 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:15.551852942 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:15.561240911 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:15.714901924 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:16.265167952 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:16.273380995 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:16.281189919 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:16.293376923 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:17.503782988 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:17.537894964 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:17.551630020 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:17.559788942 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:17.569000959 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:17.778954029 CEST	1.1.1.1	192.168.2.8	0x4128	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:17.793852091 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:17.803442001 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:17.811491966 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:17.820257902 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:17.828041077 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:17.978946924 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:17.987827063 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:17.995970964 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.003956079 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.012155056 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.167237997 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:18.175987005 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.184396029 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.192433119 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.201817989 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.358104944 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:18.366527081 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.374388933 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.382523060 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.391361952 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.541939020 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:18.550462961 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.558289051 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.566890955 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.575073957 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.729820013 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:18.737688065 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.754160881 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.762291908 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.769824028 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.921669006 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:18.933279037 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.941571951 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:18.950191021 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:18.958750010 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.168297052 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:19.176892042 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.186063051 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.195359945 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.204287052 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.354280949 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:19.363429070 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.372287035 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.381336927 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.389472961 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.551995993 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:19.560728073 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.568620920 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.576595068 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.585726976 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.734127045 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:19.746622086 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.759381056 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.770080090 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.782706022 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.954596043 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:19.963219881 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.973264933 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:19.982366085 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:19.991030931 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:20.201709986 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:20.209768057 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:20.218852997 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:20.227144003 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:20.237152100 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:20.397722960 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:20.405711889 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:20.414572954 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:20.422802925 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:20.430785894 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:20.593609095 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:20.603715897 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:20.613214970 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:20.622868061 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:20.637662888 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:20.814388990 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:20.822638035 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:20.832737923 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:20.841523886 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:20.849950075 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:20.994328976 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:21.003770113 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.015773058 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.031954050 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.040076971 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.209868908 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:21.219306946 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.227317095 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.234718084 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.242593050 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.387232065 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:21.395756960 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.404649019 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.413997889 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.422718048 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.573829889 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:21.581641912 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.593255043 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.602680922 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.614356041 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.760792971 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:21.771611929 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.782241106 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.793375015 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.804661036 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.957643986 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:21.968137980 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.980319023 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:21.989675999 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:21.997306108 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.143785000 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:22.152617931 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.160933971 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.169707060 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.178455114 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.328574896 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:22.336895943 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.346472025 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.355637074 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.364574909 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.515846014 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:22.525214911 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.533162117 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.543567896 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.552887917 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.735987902 CEST	1.1.1.1	192.168.2.8	0x608c	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.752370119 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:22.761499882 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.769001961 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.778207064 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.788486004 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.937768936 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:22.945648909 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.953041077 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:22.961368084 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:22.969738960 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.131732941 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:23.139436007 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.147237062 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.155592918 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.165169954 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.308810949 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:23.316842079 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.324282885 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.331866026 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.340467930 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.484638929 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:23.493011951 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.500493050 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.508500099 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.517023087 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.665688992 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:23.674340010 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.682497978 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.690042019 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.698185921 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.854770899 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:23.867355108 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.876974106 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:23.888169050 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:23.896348953 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:24.043987036 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:24.512486935 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:24.520514965 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:24.530384064 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:24.540893078 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:24.682841063 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:24.691392899 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:24.700140953 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:24.707524061 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:24.715401888 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:24.861555099 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:24.874308109 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:24.883397102 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:24.893254042 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:24.902808905 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:25.184922934 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:25.193346024 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:25.201340914 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:25.210835934 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:25.693334103 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:25.838876009 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:25.846666098 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:25.854469061 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:25.863857031 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:25.872456074 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.018829107 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:26.028408051 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.038137913 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.046318054 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.054961920 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.203125954 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:26.212340117 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.222556114 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.230876923 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.238934040 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.387492895 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:26.398521900 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.406553030 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.414747000 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.425796986 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.581687927 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:26.592437029 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.604120016 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.614705086 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.625658035 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.765703917 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:26.775918961 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.785048008 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.794457912 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.804491997 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.957454920 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:26.967703104 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.976788044 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:26.986093044 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:26.994875908 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:27.144540071 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:27.152522087 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:27.161180019 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:27.169517040 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:27.178153992 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:27.374042034 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:27.382278919 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:27.392112017 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:27.400629044 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:27.409496069 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:27.554946899 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:27.563551903 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:27.572927952 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:27.580610037 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:27.589247942 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:27.776959896 CEST	1.1.1.1	192.168.2.8	0x608c	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:27.805224895 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:27.813855886 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:27.826396942 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:27.836105108 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:27.850748062 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.005157948 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:28.013331890 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.024744987 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.033346891 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.041383028 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.188201904 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:28.197861910 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.205838919 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.213843107 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.221832037 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.362042904 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:28.379462957 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.387654066 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.397227049 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.407087088 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.546266079 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:28.556210995 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.570822954 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.579139948 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.592453957 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.739638090 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:28.748229980 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.756807089 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.766024113 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.774435997 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.920363903 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:28.929680109 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.938477039 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:28.946613073 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:28.954320908 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.098901987 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:29.107578993 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.116476059 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.124067068 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.131690979 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.279860973 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:29.289350033 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.297656059 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.307780027 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.317830086 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.466934919 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:29.478247881 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.491813898 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.501271009 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.513850927 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.651937962 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:29.663373947 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.672086954 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.681742907 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.689934015 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.826441050 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:29.834563017 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.843204975 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.850972891 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:29.859009027 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:29.995686054 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:30.003803968 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:30.011930943 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:30.020102024 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:30.028083086 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:30.176273108 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:30.184401989 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:30.192665100 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:30.201997995 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:30.209496021 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:30.876857042 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:30.888586998 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:30.901433945 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:30.912586927 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:30.927015066 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:31.058088064 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:31.067349911 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:31.074980021 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:31.083873987 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:31.093147039 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:31.259206057 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:31.268569946 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:31.276984930 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:31.286257029 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:31.297056913 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:31.434180021 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:31.446996927 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:31.457729101 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:31.473794937 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:31.486156940 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:31.639661074 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:31.648040056 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:31.656312943 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:31.664695978 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:31.673444986 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:32.076994896 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:32.084592104 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:32.092653036 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:32.100188017 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:32.108251095 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:32.259361029 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:32.268945932 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:32.279414892 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:32.290731907 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:32.299313068 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:32.432996988 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:32.442159891 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:32.450855017 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:32.522876978 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:32.666119099 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:32.851448059 CEST	1.1.1.1	192.168.2.8	0xb943	Name error (3)	dns1.soprodns.ru	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:32.877049923 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:32.885559082 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:32.897320032 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:32.906831980 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:32.917658091 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.060348034 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:33.068855047 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.078356028 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.087656021 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.097239971 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.264543056 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:33.272860050 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.281887054 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.290117979 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.302304983 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.456418991 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:33.468422890 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.476191998 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.484376907 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.494118929 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.645867109 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:33.654422045 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.662250042 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.674451113 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.684721947 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.824940920 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:33.835484982 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.845005989 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.853390932 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:33.860899925 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:33.996117115 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:34.004209042 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:34.012625933 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:34.020355940 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:34.027919054 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:34.172732115 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:34.181150913 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:34.189510107 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:34.199028969 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	gandcrab.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:34.208497047 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	gandcrab.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:34.356980085 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:34.368048906 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:34.377268076 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:34.387801886 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	nomoreransom.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:34.396416903 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	nomoreransom.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:34.714119911 CEST	1.1.1.1	192.168.2.8	0x1	No error (0)	1.1.1.1.in-addr.arpa			PTR (Pointer record)	IN (0x0001)	false
Sep 30, 2024 15:50:34.722909927 CEST	1.1.1.1	192.168.2.8	0x2	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:34.733526945 CEST	1.1.1.1	192.168.2.8	0x3	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false
Sep 30, 2024 15:50:34.740911961 CEST	1.1.1.1	192.168.2.8	0x4	Name error (3)	emsisoft.bit	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:50:34.749778986 CEST	1.1.1.1	192.168.2.8	0x5	Name error (3)	emsisoft.bit	none	none	28	IN (0x0001)	false

Target ID:	0
Start time:	09:48:29
Start date:	30/09/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x400000
File size:	148'992 bytes
MD5 hash:	D8029E1465CE1C847C658C71F7711BDE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:48:37
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup nomoreransom.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	09:48:37
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	09:48:38
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup emsisoft.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	09:48:38
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	09:48:38
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup gandcrab.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	09:48:38
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	09:48:38
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup nomoreransom.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	09:48:38
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	09:48:38
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup emsisoft.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	09:48:39
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	09:48:39
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup gandcrab.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	09:48:39
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	09:48:39
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup nomoreransom.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	09:48:39
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	09:48:40
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup emsisoft.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	09:48:40
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	09:48:40
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup gandcrab.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	09:48:40
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	09:48:40
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup nomoreransom.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	09:48:40
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	09:48:41
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup emsisoft.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	09:48:41
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	09:48:41
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup gandcrab.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	09:48:41
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	09:48:41
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup nomoreransom.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	09:48:41
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	09:48:41
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup emsisoft.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	09:48:41
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	09:48:42
Start date:	30/09/2024
Path:	C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe"
Imagebase:	0x400000
File size:	148'992 bytes
MD5 hash:	05AE50BF6E638FAC969303A04BF8CCE6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Gandcrab, Description: Gandcrab Payload, Source: C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe, Author: kevoreilly
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	09:48:42
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup gandcrab.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	09:48:42
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	09:48:43
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup nomoreransom.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	09:48:43
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	09:48:43
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup emsisoft.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	09:48:43
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	09:48:43
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup gandcrab.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	09:48:43
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	09:48:43
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup nomoreransom.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	09:48:44
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	09:48:44
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup emsisoft.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	09:48:44
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	09:48:44
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup gandcrab.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	09:48:44
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	09:48:45
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup nomoreransom.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	09:48:45
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	09:48:45
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup emsisoft.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	50
Start time:	09:48:45
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	51
Start time:	09:48:45
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup gandcrab.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	52
Start time:	09:48:45
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	53
Start time:	09:48:46
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup nomoreransom.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	54
Start time:	09:48:46
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	55
Start time:	09:48:46
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup emsisoft.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	56
Start time:	09:48:46
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	57
Start time:	09:48:46
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup gandcrab.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	58
Start time:	09:48:46
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	59
Start time:	09:48:46
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup nomoreransom.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	60
Start time:	09:48:47
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	61
Start time:	09:48:47
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup emsisoft.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	62
Start time:	09:48:47
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	63
Start time:	09:48:47
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup gandcrab.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	64
Start time:	09:48:47
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	65
Start time:	09:48:48
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup nomoreransom.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	66
Start time:	09:48:48
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	67
Start time:	09:48:48
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup emsisoft.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	68
Start time:	09:48:48
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	69
Start time:	09:48:48
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup gandcrab.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	70
Start time:	09:48:48
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	71
Start time:	09:48:48
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup nomoreransom.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	72
Start time:	09:48:48
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	73
Start time:	09:48:49
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\nslookup.exe
Wow64 process (32bit):	true
Commandline:	nslookup emsisoft.bit dns1.soprodns.ru
Imagebase:	0x7c0000
File size:	77'824 bytes
MD5 hash:	9D2EB13476B126CB61B12CDD03C7DCA6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	74
Start time:	09:48:49
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	4.3%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	20%
Total number of Nodes:	155
Total number of Limit Nodes:	18

Executed Functions

Function 00407DB0 Relevance: 21.1, APIs: 9, Strings: 3, Instructions: 96
encryptionlibrarymemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CryptAcquireContextW.ADVAPI32(?,00000000,00000000,00000001,F0000000,00000000,00000000,00000000), ref: 00407DD0
VirtualAlloc.KERNEL32(00000000,00000007,00003000,00000040), ref: 00407DF8
GetModuleHandleA.KERNEL32(?), ref: 00407E4D
LoadLibraryA.KERNEL32(Advapi32.dll), ref: 00407E5B
GetProcAddress.KERNEL32(00000000,CryptGenRandomAdvapi32.dll), ref: 00407E6A
CryptReleaseContext.ADVAPI32(?,00000000), ref: 00407E8E
VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00407E9C
CryptReleaseContext.ADVAPI32(?,00000000,?,?,?,?,?,?,?,?,?,?,?,?,0040292B), ref: 00407EB0
VirtualFree.KERNEL32(00000000,00000000,00008000,?,?,?,?,?,?,?,?,?,?,?,?,0040292B), ref: 00407EBE

Strings

Advapi32.dll, xrefs: 00407E57, 00407E5A
+)@, xrefs: 00407E77
CryptGenRandomAdvapi32.dll, xrefs: 00407E65, 00407E68

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ContextCryptVirtual$FreeRelease$AcquireAddressAllocHandleLibraryLoadModuleProc
String ID: +)@$Advapi32.dll$CryptGenRandomAdvapi32.dll
API String ID: 3996966626-924267565
Opcode ID: ecf7433da154a3d3e4de08d5f3ff40864c9027ea2fbed6340348b44d82ee8ddf
Instruction ID: be5cfa20fe97609e74d06931db444e7d7e20eeaeedb8336480d1c404223e93be
Opcode Fuzzy Hash: ecf7433da154a3d3e4de08d5f3ff40864c9027ea2fbed6340348b44d82ee8ddf
Instruction Fuzzy Hash: FA318471E05209AFEB109FA5DD49BEEBB78EF44701F104079E605B6291D774AE00CB69

Function 00407C60 Relevance: 19.4, APIs: 9, Strings: 2, Instructions: 111
encryptionlibrarymemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CryptAcquireContextW.ADVAPI32(?,00000000,00000000,00000001,F0000000,00000000,00000000,00000000), ref: 00407C7D
VirtualAlloc.KERNEL32(00000000,00000001,00003000,00000040), ref: 00407CAB
GetModuleHandleA.KERNEL32(?), ref: 00407CFF
LoadLibraryA.KERNEL32(Advapi32.dll), ref: 00407D0D
GetProcAddress.KERNEL32(00000000,CryptGenRandomAdvapi32.dll), ref: 00407D1C
CryptReleaseContext.ADVAPI32(?,00000000), ref: 00407D65
VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00407D73
CryptReleaseContext.ADVAPI32(?,00000000), ref: 00407D87
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 00407D95

Strings

CryptGenRandomAdvapi32.dll, xrefs: 00407D17, 00407D1A
Advapi32.dll, xrefs: 00407D09, 00407D0C

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ContextCryptVirtual$FreeRelease$AcquireAddressAllocHandleLibraryLoadModuleProc
String ID: Advapi32.dll$CryptGenRandomAdvapi32.dll
API String ID: 3996966626-2152921537
Opcode ID: 0458a47c7d0f6a737997e540b1eda647f42b02ba3f55a885d4cf6adcdbbaa127
Instruction ID: 199b4cbb89f92d6933ab86ad2097cfc69592b150d2405189e4f4276a6cc67689
Opcode Fuzzy Hash: 0458a47c7d0f6a737997e540b1eda647f42b02ba3f55a885d4cf6adcdbbaa127
Instruction Fuzzy Hash: 8931F871E04209ABEB109FE4DD49BEEBB78EF44700F204079E505B62A1E775AE01CB6D

Function 00402F50 Relevance: 10.6, APIs: 7, Instructions: 86
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

K32EnumDeviceDrivers.KERNEL32(?,00000004,?), ref: 00402F74
VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004), ref: 00402F8D

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AllocDeviceDriversEnumVirtual
String ID:
API String ID: 4140748134-0
Opcode ID: 0a6431d7b680dec11b95763bc23b6023e0c9d24f66c7ef9fbc3c6dcadf6177f1
Instruction ID: ae1065d34e0a9f40daa088a41d748c469a9f576a3d92cbe81eb507f1f3ca9255
Opcode Fuzzy Hash: 0a6431d7b680dec11b95763bc23b6023e0c9d24f66c7ef9fbc3c6dcadf6177f1
Instruction Fuzzy Hash: 9621A43260011AABEB109B989D89FAAB7BCEB44715F1001B6EE04E61D0D7B19D05AB94

Function 00402960 Relevance: 63.1, APIs: 5, Strings: 31, Instructions: 87
registrystringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrlenW.KERNEL32(00520050,00000041,755AF770,00000000), ref: 0040299D

Part of subcall function 00407C60: CryptAcquireContextW.ADVAPI32(?,00000000,00000000,00000001,F0000000,00000000,00000000,00000000), ref: 00407C7D
Part of subcall function 00407C60: VirtualAlloc.KERNEL32(00000000,00000001,00003000,00000040), ref: 00407CAB
Part of subcall function 00407C60: GetModuleHandleA.KERNEL32(?), ref: 00407CFF
Part of subcall function 00407C60: LoadLibraryA.KERNEL32(Advapi32.dll), ref: 00407D0D
Part of subcall function 00407C60: GetProcAddress.KERNEL32(00000000,CryptGenRandomAdvapi32.dll), ref: 00407D1C
Part of subcall function 00407C60: CryptReleaseContext.ADVAPI32(?,00000000), ref: 00407D65
Part of subcall function 00407C60: VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00407D73

RegCreateKeyExW.KERNEL32(80000001,004F0053,00000000,00000000,00000000,000F003F,00000000,E,@,00000000), ref: 00402A84
lstrlenW.KERNEL32(00000000), ref: 00402A8F
RegSetValueExW.KERNEL32(E,@,00520050,00000000,00000001,00000000,00000000), ref: 00402AA4
RegCloseKey.KERNEL32(?), ref: 00402AB1

Strings

S, xrefs: 004029B0
n, xrefs: 00402A6F
I, xrefs: 00402979
H, xrefs: 00402993
r, xrefs: 00402A3E
i, xrefs: 004029F8
\, xrefs: 00402A14
W, xrefs: 004029C7
s, xrefs: 00402A06
w, xrefs: 00402A29
f, xrefs: 00402A0D
n, xrefs: 00402A45
F, xrefs: 004029BD
r, xrefs: 00402A53
A, xrefs: 0040298C
r, xrefs: 004029FF
i, xrefs: 00402A5A
e, xrefs: 00402A7D
n, xrefs: 00402A61
n, xrefs: 00402A76
\, xrefs: 00402A30
V, xrefs: 00402A4C
i, xrefs: 00402A1B
R, xrefs: 004029CE
R, xrefs: 00402A68
U, xrefs: 00402984
E,@, xrefs: 004029BA, 00402AA1, 004029D7
\, xrefs: 004029EB
P, xrefs: 0040296D
u, xrefs: 00402A37
d, xrefs: 00402A22

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: ContextCryptVirtuallstrlen$AcquireAddressAllocCloseCreateFreeHandleLibraryLoadModuleProcReleaseValue
String ID: A$E,@$F$H$I$P$R$R$S$U$V$W$\$\$\$d$e$f$i$i$i$n$n$n$n$r$r$r$s$u$w
API String ID: 553367697-1908525871
Opcode ID: bc2aa759d9655fff48c3731314f56cd013a72bf6e49cbd10b87566378500ce0d
Instruction ID: 6d84f0b14520ef3984e43a4999751383e09c14a2564039d175e156e7e031e40b
Opcode Fuzzy Hash: bc2aa759d9655fff48c3731314f56cd013a72bf6e49cbd10b87566378500ce0d
Instruction Fuzzy Hash: A431DBB090021CDFEB20CF91E949BEDBFB5FB01709F108119D5187A292D7BA4948CF95

Function 00402D30 Relevance: 54.4, APIs: 19, Strings: 12, Instructions: 137
windowthreadregistryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00402F50: K32EnumDeviceDrivers.KERNEL32(?,00000004,?), ref: 00402F74

GetModuleHandleW.KERNEL32(?,?,?,?,?,?,?,?,?,00000000), ref: 00402E19
LoadCursorW.USER32(00000000,00007F00), ref: 00402E2E
LoadIconW.USER32 ref: 00402E59
RegisterClassExW.USER32(?), ref: 00402E68
ExitThread.KERNEL32 ref: 00402E75

Part of subcall function 00402F50: VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004), ref: 00402F8D

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,?,?,00007F00), ref: 00402E7B
GetModuleHandleW.KERNEL32(00000000,00000000,?,?,?,?,?,?,00007F00), ref: 00402E81
CreateWindowExW.USER32(00000000,win32app,firefox,00CF0000,80000000,80000000,00000005,00000005,00000000,00000000,00000000), ref: 00402EA7
SetWindowLongW.USER32(00000000,000000F0,00000000), ref: 00402EB4
ExitThread.KERNEL32 ref: 00402EBF

Part of subcall function 00402F50: K32EnumDeviceDrivers.KERNEL32(00000000,00000000,?), ref: 00402FA8
Part of subcall function 00402F50: K32GetDeviceDriverBaseNameW.KERNEL32(00000000,?,00000400), ref: 00402FCF
Part of subcall function 00402F50: lstrcmpiW.KERNEL32(?,006C006B), ref: 00402FE3
Part of subcall function 00402F50: VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00402FFA

ExitThread.KERNEL32 ref: 00402F3F

Part of subcall function 00402AD0: VirtualAlloc.KERNEL32(00000000,00000800,00003000,00000040), ref: 00402AEA
Part of subcall function 00402AD0: GetModuleFileNameW.KERNEL32(00000000,00000000,00000100), ref: 00402B2C
Part of subcall function 00402AD0: GetTempPathW.KERNEL32(00000100,00000000), ref: 00402B38
Part of subcall function 00402AD0: ExitThread.KERNEL32 ref: 00402C47

ShowWindow.USER32(00000000,00000005,?,?,?,?,?,?,00007F00), ref: 00402EC8
UpdateWindow.USER32(00000000), ref: 00402ECF
CreateThread.KERNEL32(00000000,00000000,00402D10,00000000,00000000,00000000), ref: 00402EE3
CloseHandle.KERNEL32(00000000,?,?,?,?,?,?,00007F00), ref: 00402EEE
GetMessageW.USER32(?,00000000,00000000,00000000), ref: 00402F05
TranslateMessage.USER32(?), ref: 00402F1C
DispatchMessageW.USER32(?), ref: 00402F23
GetMessageW.USER32(?,00000000,00000000,00000000), ref: 00402F37

Strings

s, xrefs: 00402D7F
f, xrefs: 00402DA1
0, xrefs: 00402DF1
s, xrefs: 00402DB9
win32app, xrefs: 00402E51, 00402EA0
firefox, xrefs: 00402E9B
k, xrefs: 00402D67
1, xrefs: 00402D6F
d, xrefs: 00402DA9
s, xrefs: 00402D77
w, xrefs: 00402DB1
s, xrefs: 00402DC1

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: Thread$ExitHandleMessageModuleWindow$DeviceVirtual$AllocCreateDriversEnumLoadName$BaseClassCloseCursorDispatchDriverFileFreeIconLongPathRegisterShowTempTranslateUpdatelstrcmpi
String ID: 0$1$d$f$firefox$k$s$s$s$s$w$win32app
API String ID: 3011903443-520298170
Opcode ID: 4a679d84ba6cb8d8a57319f91f88c6eb5e3a57dc7d18787ade47d617a941c88f
Instruction ID: 6dadb659047271fd80ce1d130f626f3db599e38ffd86fa9de69c1f1ec4dcf306
Opcode Fuzzy Hash: 4a679d84ba6cb8d8a57319f91f88c6eb5e3a57dc7d18787ade47d617a941c88f
Instruction Fuzzy Hash: 0F515070248302AFF7109F618D0DB5B7AE4AF44748F10092DF684BA2D1D7F99945CB9E

Function 00402AD0 Relevance: 29.9, APIs: 10, Strings: 7, Instructions: 114
stringmemorythreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(00000000,00000800,00003000,00000040), ref: 00402AEA
GetModuleFileNameW.KERNEL32(00000000,00000000,00000100), ref: 00402B2C
GetTempPathW.KERNEL32(00000100,00000000), ref: 00402B38
lstrlenW.KERNEL32(?,?,?,00000052), ref: 00402B7D

Part of subcall function 00407C60: CryptAcquireContextW.ADVAPI32(?,00000000,00000000,00000001,F0000000,00000000,00000000,00000000), ref: 00407C7D
Part of subcall function 00407C60: VirtualAlloc.KERNEL32(00000000,00000001,00003000,00000040), ref: 00407CAB
Part of subcall function 00407C60: GetModuleHandleA.KERNEL32(?), ref: 00407CFF
Part of subcall function 00407C60: LoadLibraryA.KERNEL32(Advapi32.dll), ref: 00407D0D
Part of subcall function 00407C60: GetProcAddress.KERNEL32(00000000,CryptGenRandomAdvapi32.dll), ref: 00407D1C
Part of subcall function 00407C60: CryptReleaseContext.ADVAPI32(?,00000000), ref: 00407D65
Part of subcall function 00407C60: VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00407D73

GetEnvironmentVariableW.KERNEL32(AppData,00000000,00000100), ref: 00402B9C
lstrcatW.KERNEL32(00000000,\Microsoft\), ref: 00402BE4
lstrcatW.KERNEL32(00000000,?), ref: 00402BEC
lstrcatW.KERNEL32(00000000,.exe), ref: 00402BF4
wsprintfW.USER32 ref: 00402C35
ExitThread.KERNEL32 ref: 00402C47

Strings

\Microsoft\, xrefs: 00402BDE
.exe, xrefs: 00402BEE
U, xrefs: 00402B75
AppData, xrefs: 00402B97
"%s", xrefs: 00402C2F
P, xrefs: 00402B55
I, xrefs: 00402B6C

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: Virtuallstrcat$AllocContextCryptModule$AcquireAddressEnvironmentExitFileFreeHandleLibraryLoadNamePathProcReleaseTempThreadVariablelstrlenwsprintf
String ID: "%s"$.exe$AppData$I$P$U$\Microsoft\
API String ID: 139215849-2398311915
Opcode ID: 6e6a8f62b256392a6330cb3d11e6480f682840227812e37f6e34e8b9bfe8e280
Instruction ID: 1f7025583fece4150ab6efb2fb4095bab450847bdb3333ccf3c22af7b910d208
Opcode Fuzzy Hash: 6e6a8f62b256392a6330cb3d11e6480f682840227812e37f6e34e8b9bfe8e280
Instruction Fuzzy Hash: 0841A771204311ABE304EF219E4DB5F77A8AF84704F04443EB555B62D2DBB8A908CBAF

Function 00402890 Relevance: 12.1, APIs: 8, Instructions: 90
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,00000000,755AF770,00000000,?,?,00402C02), ref: 004028AB
GetFileSize.KERNEL32(00000000,00000000,?,?,00402C02), ref: 004028BA
CreateFileMappingW.KERNELBASE(00000000,00000000,-00000008,00000000,00000000,00000000,?,?,00402C02), ref: 004028E5
CloseHandle.KERNEL32(00000000,?,?,00402C02), ref: 004028F3
MapViewOfFile.KERNEL32(00000000,755AF771,00000000,00000000,00000000,?,?,00402C02), ref: 0040290A
UnmapViewOfFile.KERNEL32(00000000,?,?,?,?,00402C02), ref: 00402942
CloseHandle.KERNEL32(?,?,?,00402C02), ref: 00402951
CloseHandle.KERNEL32(00000000,?,?,00402C02), ref: 00402954

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: File$CloseHandle$CreateView$MappingSizeUnmap
String ID:
API String ID: 265113797-0
Opcode ID: 4a3bd338fa8f98e6ea1ce6eff48d1651597d918e060f7fce2cadfb8332af991f
Instruction ID: c7753fadabc3ce0f8503889d90d66a1a67b62c86d4c9c93fbc6d336bdc04640e
Opcode Fuzzy Hash: 4a3bd338fa8f98e6ea1ce6eff48d1651597d918e060f7fce2cadfb8332af991f
Instruction Fuzzy Hash: 8A2134B2B011197FE7106B749D8AF7F7B6CEB45225F00423AFC01B22C1E6789D0045A8

Function 00406EF7 Relevance: 10.7, APIs: 6, Strings: 1, Instructions: 229
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(00000000), ref: 00406F0D
VirtualAlloc.KERNEL32(00000000,00000004,00000004), ref: 00406F23
VirtualAlloc.KERNEL32(00000000,?,?,00000000,?,?,?,?), ref: 0040703C
VirtualAlloc.KERNEL32(00000000,00000040,00000004,?), ref: 004070F1

Strings

x64, xrefs: 0040710D

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: x64
API String ID: 4275171209-218858810
Opcode ID: 06b69d64e50e143928d637c756c7af8b5ef3db51dba014c0b1f2e383e2fbe9e4
Instruction ID: bba14f87fa3773265295ebe88ce185abb5afe3f465883deb063cbfb342e9331d
Opcode Fuzzy Hash: 06b69d64e50e143928d637c756c7af8b5ef3db51dba014c0b1f2e383e2fbe9e4
Instruction Fuzzy Hash: BC71D670845305AACB11BBB2CC07BDEB7A1AF0030CF10086FF54666192DA7D95E2DA2F

Function 00406FA0 Relevance: 7.7, APIs: 4, Strings: 1, Instructions: 175
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(00000000,?,?,00000000,?,?,?,?), ref: 0040703C

Strings

x64, xrefs: 0040710D

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: x64
API String ID: 4275171209-218858810
Opcode ID: 73bfb3c494e1ab2ba05fa2efb495922b3159d4ded374f87fcf1fcb2e52199a04
Instruction ID: b8685d923d09174c796e1111678d2e4f02c3f5549e6e6ce843064863860b6c83
Opcode Fuzzy Hash: 73bfb3c494e1ab2ba05fa2efb495922b3159d4ded374f87fcf1fcb2e52199a04
Instruction Fuzzy Hash: 9551B570805705AACB11BBB2CC46BDE77A1AF0430CF10086FF54666192DE7DA4E6DA6F

Function 00406FE3 Relevance: 7.7, APIs: 4, Strings: 1, Instructions: 154
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(00000000,?,?,00000000,?,?,?,?), ref: 0040703C
VirtualAlloc.KERNEL32(00000000,00000040,00000004,?), ref: 004070F1

Strings

x64, xrefs: 0040710D

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: x64
API String ID: 4275171209-218858810
Opcode ID: dbaa124a76d5819b0f355a5694afd5b598f636f64a4383cc6b702528ce503da6
Instruction ID: b23eccef1643459d8dccfd47025449bcfce518714c1d15a9d2ded94271d5944d
Opcode Fuzzy Hash: dbaa124a76d5819b0f355a5694afd5b598f636f64a4383cc6b702528ce503da6
Instruction Fuzzy Hash: BD51A570845305AACB10BBB2C846BDEB7A1AF0430CF10096FF54666192DB7DA4A2D65F

Function 00407097 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 108
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(00000000,00000040,00000004,?), ref: 004070F1
VirtualAlloc.KERNEL32(00000000), ref: 0040716D
VirtualAlloc.KERNEL32(00000000,00000004), ref: 00407180

Strings

x64, xrefs: 0040710D

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: x64
API String ID: 4275171209-218858810
Opcode ID: bfaa6fc78b532da3158b62d93e79340fea57a49741c4b8c45c888bdb45dc8ea3
Instruction ID: 2b6df17dc0da31bf37d225ac04f43b25ea2446cf7edbc88e38cbc5cbf7e2d500
Opcode Fuzzy Hash: bfaa6fc78b532da3158b62d93e79340fea57a49741c4b8c45c888bdb45dc8ea3
Instruction Fuzzy Hash: A831E670C057049ACB10BBB2C846BEE77E4AF0071CF00096FF5456A292DF7DA4929A2F

Function 00406DC9 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 112
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(00000000), ref: 00406E10
VirtualAlloc.KERNEL32 ref: 00406E6E

Strings

By=, xrefs: 00406E90

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: By=
API String ID: 4275171209-2010441707
Opcode ID: 79c703df03a1479eaeb1c5cc9d456531b56c937abd16d068e36147ed027f6f3a
Instruction ID: e25689ad46479fbad51ae687e9a62bc06f8cf99e604e03bdfb9d0e30b3cd6317
Opcode Fuzzy Hash: 79c703df03a1479eaeb1c5cc9d456531b56c937abd16d068e36147ed027f6f3a
Instruction Fuzzy Hash: AB31E3B18457059FC7617BB28D06BCE77A1EF11318F01052FF145A94A2EB3CD8A2866F

Function 00407114 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 60
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(00000000), ref: 0040716D
VirtualAlloc.KERNEL32(00000000,00000004), ref: 00407180

Strings

ARM, xrefs: 00407114

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: ARM
API String ID: 4275171209-251214878
Opcode ID: 3dcd523f36dba3e29ad4ce0451e884e221c71608afb8ac6a61eee2ac067b0f05
Instruction ID: 2f9294a5bb9200ac0514de4f45e1a620860b7996919c8caf223b7b6eb82e2a68
Opcode Fuzzy Hash: 3dcd523f36dba3e29ad4ce0451e884e221c71608afb8ac6a61eee2ac067b0f05
Instruction Fuzzy Hash: 8A119870C457049EC714BBB2C8467EE73A5AF44308F10495FF4455A292DF7DE481C759

Function 0040711B Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 60memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000), ref: 0040716D
VirtualAlloc.KERNEL32(00000000,00000004), ref: 00407180

Strings

Itanium, xrefs: 0040711B

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: Itanium
API String ID: 4275171209-2242518583
Opcode ID: 10f3c23f4fd0bbb2a859fa9fd03d60c3b15227197fc8f3f07e856df74bffb004
Instruction ID: 471545489450bf10ce07bd8ba9e5ef60b556a661cce3bc4c375d3a10cc656294
Opcode Fuzzy Hash: 10f3c23f4fd0bbb2a859fa9fd03d60c3b15227197fc8f3f07e856df74bffb004
Instruction Fuzzy Hash: B411E7B0C447049ECB00BBB2C846BEE73A5AF40308F10486FF4445A292EF7DE482CB69

Function 00407122 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 60memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000), ref: 0040716D
VirtualAlloc.KERNEL32(00000000,00000004), ref: 00407180

Strings

x86, xrefs: 00407122

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: x86
API String ID: 4275171209-2105985432
Opcode ID: cbb4a0296d9dd90894420971b6ed14197ccdb347fccb15dc524190b09353378e
Instruction ID: f044983a83e706564df08dd8ca7dfde9a5bba4465efb05d416fb749dd9f1a848
Opcode Fuzzy Hash: cbb4a0296d9dd90894420971b6ed14197ccdb347fccb15dc524190b09353378e
Instruction Fuzzy Hash: 8911A7B0C457049EDB14BBB2C846BEE73A5AF44308F10496FF4455A292EF7DE482CB69

Function 00402806 Relevance: 4.6, APIs: 3, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11e24458c8c6164182c20fc04851c9c1edfe5cefca488b0c15cef60edb29cac4
Instruction ID: b1c0bffd79622efddd49c46c6f1e047bfe98f47eaa58f977192034cd213a2503
Opcode Fuzzy Hash: 11e24458c8c6164182c20fc04851c9c1edfe5cefca488b0c15cef60edb29cac4
Instruction Fuzzy Hash: 8701FC376001046BDB109F649D8876BB799EB85320F08C6B6FD58B72D2C371DC159B95

Function 00402830 Relevance: 4.5, APIs: 3, Instructions: 40fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(00402C02,40000000,00000000,00000000,00000002,00000080,00000000,00000000,00000000,00000000,00402C02,?,0040293C,?), ref: 0040284C
WriteFile.KERNEL32(00000000,00000000,?,?,00000000,?,0040293C,?,?,?,?,00402C02), ref: 00402869
CloseHandle.KERNEL32(00000000,?,0040293C,?,?,?,?,00402C02), ref: 00402879

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: File$CloseCreateHandleWrite
String ID:
API String ID: 1065093856-0
Opcode ID: 9e9a3c89b6850285b0aaeb729945f32371e326f8768ed0970ed47c3756836101
Instruction ID: 04185e8f6c4e23bdd04b7cf8f7d55746a19b6698dc5ace76ea1193252a574fad
Opcode Fuzzy Hash: 9e9a3c89b6850285b0aaeb729945f32371e326f8768ed0970ed47c3756836101
Instruction Fuzzy Hash: 9CF0827734021477F6201A96AD8DF6BB65CD786B60F104236BA08B61D1D6B5DC0152A8

Function 004076B3 Relevance: 1.3, APIs: 1, Instructions: 73COMMON

Download Yara Rule

APIs

VirtualFree.KERNELBASE(?,00000000), ref: 004076EB

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: FreeVirtual
String ID:
API String ID: 1263568516-0
Opcode ID: 5abfa64486e2dd92bc034aa2ec7ab24242c54b04ba0108904caefae3d186804f
Instruction ID: 82776303e4b7ac765194f441040545dbe65440c446931334fc7cbbb5a32a8cbd
Opcode Fuzzy Hash: 5abfa64486e2dd92bc034aa2ec7ab24242c54b04ba0108904caefae3d186804f
Instruction Fuzzy Hash: D3216135D08244AFCF11B7B5C8654EE7BB1EF51328B0404AFE40167192EE3D6D41D75A

Function 004072AA Relevance: 1.3, APIs: 1, Instructions: 55memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(000000E8), ref: 00407338

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: a7f7d622ff0aa5d4a848dc52a595dc2f0ddacf45354d4d6cb950c099a5e41429
Instruction ID: 6d1c728cad3d2ae8e149a3607ef39057d17cb6cc9991439b86a4e583d77bb5d9
Opcode Fuzzy Hash: a7f7d622ff0aa5d4a848dc52a595dc2f0ddacf45354d4d6cb950c099a5e41429
Instruction Fuzzy Hash: 73119070C042459FCB51AFF5C8414EDBBF5EF09314B1008AFE5519B261EB39AC41DB69

Function 00407594 Relevance: 1.3, APIs: 1, Instructions: 54memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32 ref: 004075B1

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: ff49f3c21823ef5b410b862ca11f0fb94c316d08d9bd35489826f07e6460b081
Instruction ID: e67541d00eb9cd6c169bd55b1a754f9cdb27d6305fab5d46ae378d87bfcd989a
Opcode Fuzzy Hash: ff49f3c21823ef5b410b862ca11f0fb94c316d08d9bd35489826f07e6460b081
Instruction Fuzzy Hash: 2E01B5B1D183546BCB04AF795C12BEE7BB8EF45764F20416FF418E2281D6380D02866A

Function 00404EC6 Relevance: 1.3, APIs: 1, Instructions: 54memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32 ref: 00404F22

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: b4de6bfe96d7660a4fcff9340fbff183151a4fbf68168febff205d5d4ad35b33
Instruction ID: 8c0b21f68bd8c6c5237e42c76860e523e80ae07b1aee8a32cb06d93af7657a8e
Opcode Fuzzy Hash: b4de6bfe96d7660a4fcff9340fbff183151a4fbf68168febff205d5d4ad35b33
Instruction Fuzzy Hash: 4111E5B1E012699EDB00FBB6A8463CEB7E4AF64304F81456FE551A3193EA784501CA69

Function 00406D90 Relevance: 1.3, APIs: 1, Instructions: 45memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000), ref: 00406DB7

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 694cd35148195da3ac12ac3606276d9245cb1b6ea332e0de93773f3383371e4e
Instruction ID: ad587bc6cc45c2b84a610388afa165d3447418ee07570ba0b432e735eee62ab0
Opcode Fuzzy Hash: 694cd35148195da3ac12ac3606276d9245cb1b6ea332e0de93773f3383371e4e
Instruction Fuzzy Hash: 1E01DFB6808309BFCB51EFA1C8419EE7BA8EF16260B01405AFC0596106EB38DD15DB75

Function 00404856 Relevance: 1.3, APIs: 1, Instructions: 42COMMON

Download Yara Rule

APIs

CloseHandle.KERNEL32(?,00000000), ref: 0040486A

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 6e299b8d46e3339e85a139c5101108d4752e3e1ea69a25e0138ed0ff18f25bc8
Instruction ID: 5499c5a695a44fa8f4ed6015dc850ff2a419008083af22688a6b1b873e3e1a26
Opcode Fuzzy Hash: 6e299b8d46e3339e85a139c5101108d4752e3e1ea69a25e0138ed0ff18f25bc8
Instruction Fuzzy Hash: 30F0F6E678C39526D51172B21CA3BAB7B845F93319F048AEFF745390C3895D540142AE

Function 00404F65 Relevance: 1.3, APIs: 1, Instructions: 38memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000), ref: 00404F6A

Part of subcall function 00421971: Sleep.KERNEL32(00404F51), ref: 0042198D

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AllocSleepVirtual
String ID:
API String ID: 503295252-0
Opcode ID: 6712bd22e7e2d61744a14cc6ecac9ca2110c7287aa61fb74c174cc60f099b9fc
Instruction ID: 352583c8e96fc3b8942de6b27cb694dbd4c55b1cb0a868c8ff3719c0d83768a2
Opcode Fuzzy Hash: 6712bd22e7e2d61744a14cc6ecac9ca2110c7287aa61fb74c174cc60f099b9fc
Instruction Fuzzy Hash: AAF09CA17002345ACB04B7752CD157E66D89EE5324F51076FF522920D2D9384842957A

Function 0040752F Relevance: 1.3, APIs: 1, Instructions: 31memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00000004), ref: 0040753D

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 4d7e5d5e8a93758fce9bc9f29ffa03d250b29397803a9cefb1a8c7239e886bbc
Instruction ID: 320f6a9035c77e1ed053653974faf6aefd1fe2d3bceb588248c1444a18cbe72d
Opcode Fuzzy Hash: 4d7e5d5e8a93758fce9bc9f29ffa03d250b29397803a9cefb1a8c7239e886bbc
Instruction Fuzzy Hash: 67E048B1964350ABD6217FF698B3BC925905F11B58F04080FF3696E1C7C97C9DC0466E

Function 00421971 Relevance: 1.3, APIs: 1, Instructions: 15sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(00404F51), ref: 0042198D

Memory Dump Source

Source File: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 29ee57752e5cdff39b48378b84ef9c01698cb976f82444efb919f9765dbcfba8
Instruction ID: 58c3f2c5fb9d3f8327ca89d650417d83c4075697e2d1c4a00ef98cf5c86a3f80
Opcode Fuzzy Hash: 29ee57752e5cdff39b48378b84ef9c01698cb976f82444efb919f9765dbcfba8
Instruction Fuzzy Hash: 0FE017B2105125DFCB51DFACE854980B3E8EB58304385883AE20CDB134E7B0A48ADF8C

Non-executed Functions

Function 004064A0 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 136stringfilememoryCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32 ref: 004064B2
lstrcatW.KERNEL32(?,00410364), ref: 004064C4
FindFirstFileW.KERNEL32(?,?,?,00410364), ref: 004064D2
lstrcmpW.KERNEL32(?,00410368,?,?,?,00410364), ref: 004064FC
lstrcmpW.KERNEL32(?,0041036C,?,?,?,00410364), ref: 00406512
lstrcatW.KERNEL32(?,?,?,?,?,00410364), ref: 00406524
lstrlenW.KERNEL32(?,?,?,?,?,?,00410364), ref: 0040652B
lstrcmpW.KERNEL32(-00000001,.sql,?,?,?,?,?,?,00410364), ref: 0040655A
CreateFileW.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?,?,00410364), ref: 00406571
GetFileSize.KERNEL32(00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?,?,00410364), ref: 0040657C
VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004,?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?), ref: 0040659A
ReadFile.KERNEL32(00000000,00000000,00000000,?,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?), ref: 004065AF
lstrlenA.KERNEL32(*******************,?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?,?,00410364), ref: 004065CE
VirtualFree.KERNEL32(00000000,00000000,00008000,?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?), ref: 004065E9
CloseHandle.KERNEL32(00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?,?,00410364), ref: 004065F3
FindNextFileW.KERNEL32(?,?,?,?,?,00410364), ref: 0040661C
FindClose.KERNEL32(?,?,?,?,00410364), ref: 0040662D

Strings

*******************, xrefs: 004065B9, 004065C9
.sql, xrefs: 00406554

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: File$Findlstrcmplstrlen$CloseVirtuallstrcat$AllocCreateFirstFreeHandleNextReadSize
String ID: *******************$.sql
API String ID: 3616287438-58436570
Opcode ID: 05c8e46b5a6b324242753d00ddfa767ad3d4e90b023ac9ffc8302244919f4615
Instruction ID: d8231c9366fa09183c7f9a28845eb84a492a5b8a9a6307543842452b5fb504c9
Opcode Fuzzy Hash: 05c8e46b5a6b324242753d00ddfa767ad3d4e90b023ac9ffc8302244919f4615
Instruction Fuzzy Hash: 24419271601219ABEB209B609D48FAB77BCEF44704F11447AF902F6191EB799E50CB6C

Function 00406000 Relevance: 22.8, APIs: 10, Strings: 3, Instructions: 89encryptionCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(00412AE8,?,00403724,00000000,00000000,00000000,?,00000800), ref: 0040600B
CryptAcquireContextW.ADVAPI32(00000000,00000000,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000000,?,00403724,00000000,00000000,00000000), ref: 0040602E
GetLastError.KERNEL32(?,00403724,00000000,00000000,00000000), ref: 00406038
CryptAcquireContextW.ADVAPI32(00000000,00000000,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000008,?,00403724,00000000,00000000,00000000), ref: 00406054
CryptImportKey.ADVAPI32(00000000,00000000,00000000,00000000,00000000,00000000,?,00403724,00000000,00000000), ref: 00406089
CryptGetKeyParam.ADVAPI32(00000000,00000008,$7@,0000000A,00000000,?,00403724,00000000), ref: 004060AA
CryptEncrypt.ADVAPI32(00000000,00000000,00000001,00000000,0000000A,00000000,$7@,?,00403724,00000000), ref: 004060D2
GetLastError.KERNEL32(?,00403724,00000000), ref: 004060DB
CryptReleaseContext.ADVAPI32(00000000,00000000,?,00403724,00000000,00000000), ref: 004060F8
LeaveCriticalSection.KERNEL32(00412AE8,?,00403724,00000000,00000000), ref: 00406103

Strings

$7@, xrefs: 004060BC, 004060BF
Microsoft Enhanced Cryptographic Provider v1.0, xrefs: 00406023, 00406049
$7@, xrefs: 004060A0, 004060A3

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: Crypt$Context$AcquireCriticalErrorLastSection$EncryptEnterImportLeaveParamRelease
String ID: $7@$$7@$Microsoft Enhanced Cryptographic Provider v1.0
API String ID: 72144047-2376705498
Opcode ID: 8206897a1cfa35837b8722e43d42d1a1e9784adc6c633a5bd71464a07145b1f5
Instruction ID: f2ae4c90db2c5b8a25dd032e9c4ad046e7fd1e3aad681ca681e37570fcd3149a
Opcode Fuzzy Hash: 8206897a1cfa35837b8722e43d42d1a1e9784adc6c633a5bd71464a07145b1f5
Instruction Fuzzy Hash: 84314F74A40308BFDB10CFA0DD45FAF77B8AB48700F108029F602BA2D0D7B99A50DB69

Function 004066F0 Relevance: 13.6, APIs: 9, Instructions: 109stringfileCOMMON

Download Yara Rule

APIs

Part of subcall function 00406110: VirtualAlloc.KERNEL32(00000000,00000201,00003000,00000040,?,?,?,00406706), ref: 00406123
Part of subcall function 00406110: SHGetSpecialFolderPathW.SHELL32(00000000,00000000,0000002A,00000000,?,?,?,00406706), ref: 004061AE
Part of subcall function 00406110: SHGetSpecialFolderPathW.SHELL32(00000000,00000000,0000002B,00000000,?,?,?,00406706), ref: 004061C8
Part of subcall function 00406110: SHGetSpecialFolderPathW.SHELL32(00000000,00000000,00000024,00000000,?,?,?,00406706), ref: 004061E2
Part of subcall function 00406110: SHGetSpecialFolderPathW.SHELL32(00000000,00000000,0000001C,00000000,?,?,?,00406706), ref: 004061FC
Part of subcall function 00406110: VirtualFree.KERNEL32(00000000,00000000,00008000,?,?,?,00406706), ref: 0040621C

Part of subcall function 004064A0: lstrlenW.KERNEL32 ref: 004064B2
Part of subcall function 004064A0: lstrcatW.KERNEL32(?,00410364), ref: 004064C4
Part of subcall function 004064A0: FindFirstFileW.KERNEL32(?,?,?,00410364), ref: 004064D2
Part of subcall function 004064A0: lstrcmpW.KERNEL32(?,00410368,?,?,?,00410364), ref: 004064FC
Part of subcall function 004064A0: lstrcmpW.KERNEL32(?,0041036C,?,?,?,00410364), ref: 00406512
Part of subcall function 004064A0: lstrcatW.KERNEL32(?,?,?,?,?,00410364), ref: 00406524
Part of subcall function 004064A0: lstrlenW.KERNEL32(?,?,?,?,?,?,00410364), ref: 0040652B
Part of subcall function 004064A0: lstrcmpW.KERNEL32(-00000001,.sql,?,?,?,?,?,?,00410364), ref: 0040655A
Part of subcall function 004064A0: CreateFileW.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?,?,00410364), ref: 00406571
Part of subcall function 004064A0: GetFileSize.KERNEL32(00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?,?,00410364), ref: 0040657C
Part of subcall function 004064A0: VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004,?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?), ref: 0040659A
Part of subcall function 004064A0: ReadFile.KERNEL32(00000000,00000000,00000000,?,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?), ref: 004065AF

Part of subcall function 00406640: VirtualAlloc.KERNEL32(00000000,00000402,00003000,00000040), ref: 00406655
Part of subcall function 00406640: wsprintfW.USER32 ref: 00406663
Part of subcall function 00406640: CreateFileW.KERNEL32(00000000,40000000,00000000,00000000,00000001,00000080,00000000), ref: 0040667F
Part of subcall function 00406640: GetLastError.KERNEL32 ref: 0040668C
Part of subcall function 00406640: VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 004066D8

lstrlenW.KERNEL32 ref: 00406723
lstrcatW.KERNEL32(?,00410364), ref: 0040673B
FindFirstFileW.KERNEL32(?,?,?,00410364), ref: 00406745
lstrcmpW.KERNEL32(?,00410368,?,?,?,00410364), ref: 0040677C
lstrcmpW.KERNEL32(?,0041036C,?,?,?,00410364), ref: 00406796
lstrcatW.KERNEL32(?,?,?,?,?,00410364), ref: 004067A8
lstrcatW.KERNEL32(?,0041039C,?,?,?,?,?,00410364), ref: 004067B9
FindNextFileW.KERNEL32(?,?,?,?,?,00410364), ref: 0040681D
FindClose.KERNEL32(?,?,?,?,00410364), ref: 0040682E

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: File$Virtuallstrcatlstrcmp$FindFolderPathSpecial$Alloclstrlen$CreateFirstFree$CloseErrorLastNextReadSizewsprintf
String ID:
API String ID: 1112924665-0
Opcode ID: 3dbb0dbfe75d924b609b03e20368d36387d9f5ee42819884ccc0485f7efd567d
Instruction ID: e664c09a6a9c308cb7d1e0fe319252d12530e52bee12665a8dc8c6cfb3a3f5dc
Opcode Fuzzy Hash: 3dbb0dbfe75d924b609b03e20368d36387d9f5ee42819884ccc0485f7efd567d
Instruction Fuzzy Hash: 60318F71A00219ABDF10AF65DD84AAE77B8EF44314B0584B7F806F7291DB389E50CB69

Function 00407EE0 Relevance: 2.9, Strings: 2, Instructions: 395COMMON

Download Yara Rule

Strings

o7@, xrefs: 00407EEA, 00407F28, 00407F6B, 00407F79, 00407F87, 00407FD2, 00408028, 00408036, 00408044, 0040808F, 004080E5, 004080F3, 00408101, 0040814C, 004081A2, 004081B3, 004081C4, 00408215, 00408277, 00408288, 00408299, 004082EA, 0040834C, 0040835D, 0040836E, 004083BF
o7@, xrefs: 00407F74, 00408031, 004080EE, 004081AE, 00408283, 00408358, 00408431

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID:
String ID: o7@$o7@
API String ID: 0-723442174
Opcode ID: da1e04724c4d4a96aecbab103dab413677a1afa7e8d63378d07e38b9d77e31b1
Instruction ID: 357c3c7235a915dd8e15f01338308de149f5b460bfde231befa3c1aa23e4610d
Opcode Fuzzy Hash: da1e04724c4d4a96aecbab103dab413677a1afa7e8d63378d07e38b9d77e31b1
Instruction Fuzzy Hash: 1E12E770A102149FCB08CF69D99096ABBF1FB4D300B4684BEE94ADB391CB35AA51CF54

Function 004035E0 Relevance: 58.0, APIs: 29, Strings: 4, Instructions: 300memoryfilestringCOMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNEL32 ref: 004035F4
SetFileAttributesW.KERNEL32(?,00000000), ref: 004035FF
VirtualAlloc.KERNEL32(00000000,00000401,00003000,00000040,00000000,00000000,00000000,?,?,00000000), ref: 0040363A
lstrcpyW.KERNEL32(00000000,?,?,00000000), ref: 00403658
lstrcatW.KERNEL32(00000000,0047002E,?,?,00000000), ref: 00403663

Part of subcall function 00407DB0: CryptAcquireContextW.ADVAPI32(?,00000000,00000000,00000001,F0000000,00000000,00000000,00000000), ref: 00407DD0
Part of subcall function 00407DB0: VirtualAlloc.KERNEL32(00000000,00000007,00003000,00000040), ref: 00407DF8
Part of subcall function 00407DB0: GetModuleHandleA.KERNEL32(?), ref: 00407E4D
Part of subcall function 00407DB0: LoadLibraryA.KERNEL32(Advapi32.dll), ref: 00407E5B
Part of subcall function 00407DB0: GetProcAddress.KERNEL32(00000000,CryptGenRandomAdvapi32.dll), ref: 00407E6A
Part of subcall function 00407DB0: CryptReleaseContext.ADVAPI32(?,00000000), ref: 00407E8E
Part of subcall function 00407DB0: VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00407E9C

Part of subcall function 00407DB0: CryptReleaseContext.ADVAPI32(?,00000000,?,?,?,?,?,?,?,?,?,?,?,?,0040292B), ref: 00407EB0
Part of subcall function 00407DB0: VirtualFree.KERNEL32(00000000,00000000,00008000,?,?,?,?,?,?,?,?,?,?,?,?,0040292B), ref: 00407EBE

VirtualAlloc.KERNEL32(00000000,00000800,00003000,00000004), ref: 004036C6
VirtualAlloc.KERNEL32(00000000,00000800,00003000,00000004), ref: 004036F1

Part of subcall function 00406000: EnterCriticalSection.KERNEL32(00412AE8,?,00403724,00000000,00000000,00000000,?,00000800), ref: 0040600B
Part of subcall function 00406000: CryptAcquireContextW.ADVAPI32(00000000,00000000,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000000,?,00403724,00000000,00000000,00000000), ref: 0040602E
Part of subcall function 00406000: GetLastError.KERNEL32(?,00403724,00000000,00000000,00000000), ref: 00406038
Part of subcall function 00406000: CryptAcquireContextW.ADVAPI32(00000000,00000000,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000008,?,00403724,00000000,00000000,00000000), ref: 00406054

VirtualFree.KERNEL32(?,00000000,00008000), ref: 00403998

Part of subcall function 00406000: CryptImportKey.ADVAPI32(00000000,00000000,00000000,00000000,00000000,00000000,?,00403724,00000000,00000000), ref: 00406089
Part of subcall function 00406000: CryptGetKeyParam.ADVAPI32(00000000,00000008,$7@,0000000A,00000000,?,00403724,00000000), ref: 004060AA
Part of subcall function 00406000: CryptEncrypt.ADVAPI32(00000000,00000000,00000001,00000000,0000000A,00000000,$7@,?,00403724,00000000), ref: 004060D2
Part of subcall function 00406000: GetLastError.KERNEL32(?,00403724,00000000), ref: 004060DB
Part of subcall function 00406000: CryptReleaseContext.ADVAPI32(00000000,00000000,?,00403724,00000000,00000000), ref: 004060F8
Part of subcall function 00406000: LeaveCriticalSection.KERNEL32(00412AE8,?,00403724,00000000,00000000), ref: 00406103

GetLastError.KERNEL32 ref: 00403751
CreateFileW.KERNEL32(?,C0000000,00000001,00000000,00000003,00000080,00000000), ref: 00403787
VirtualAlloc.KERNEL32(00000000,00000008,00003000,00000004), ref: 004037A6
VirtualAlloc.KERNEL32(00000000,00100001,00003000,00000004), ref: 004037C5
ReadFile.KERNEL32(00000000,00000000,00100000,?,00000000), ref: 004037E1
VirtualAlloc.KERNEL32(00000000,?,00003000,00000004), ref: 00403832
_memmove.LIBCMT ref: 00403842
VirtualAlloc.KERNEL32(00000000,?,00003000,00000004), ref: 0040385A
VirtualFree.KERNEL32(?,00000000,00008000), ref: 0040388F

Strings

D, xrefs: 0040364A
, xrefs: 0040370A
., xrefs: 0040363E
B, xrefs: 00403651

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: Virtual$Crypt$Alloc$Context$FileFree$AcquireErrorLastRelease$AttributesCriticalSection$AddressCreateEncryptEnterHandleImportLeaveLibraryLoadModuleParamProcRead_memmovelstrcatlstrcpy
String ID: $.$B$D
API String ID: 837238375-1812608335
Opcode ID: c15eb29179e97668c0832c85613b6c12b7130b63612beb6e2f5d5bab4bd3964c
Instruction ID: e6440529c24e0b0f2c5be8c2954fde7d882e22268c9ef2e78ee628bee86a44a3
Opcode Fuzzy Hash: c15eb29179e97668c0832c85613b6c12b7130b63612beb6e2f5d5bab4bd3964c
Instruction Fuzzy Hash: 28B15DB1E40309BBEB119F94CD45FEEBBB8AB48700F204125F644BA2D1DBB45E448B98

Function 00406240 Relevance: 30.1, APIs: 11, Strings: 9, Instructions: 78stringCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32(00000000,?,?,00000000,00406403), ref: 0040624C
lstrlenW.KERNEL32(00000000,?,?,00000000,00406403), ref: 00406251
lstrcmpiW.KERNEL32(-00000004,desktop.ini,?,?,00000000,00406403), ref: 0040627D
lstrcmpiW.KERNEL32(-00000004,autorun.inf,?,?,00000000,00406403), ref: 00406292
lstrcmpiW.KERNEL32(-00000004,ntuser.dat,?,?,00000000,00406403), ref: 0040629E
lstrcmpiW.KERNEL32(-00000004,iconcache.db,?,?,00000000,00406403), ref: 004062AA
lstrcmpiW.KERNEL32(-00000004,bootsect.bak,?,?,00000000,00406403), ref: 004062B6
lstrcmpiW.KERNEL32(-00000004,boot.ini,?,?,00000000,00406403), ref: 004062C2
lstrcmpiW.KERNEL32(-00000004,ntuser.dat.log,?,?,00000000,00406403), ref: 004062CE
lstrcmpiW.KERNEL32(-00000004,thumbs.db,?,?,00000000,00406403), ref: 004062DA
lstrcmpiW.KERNEL32(-00000004,GDCB-DECRYPT.txt,?,?,00000000,00406403), ref: 004062E6

Strings

ntuser.dat.log, xrefs: 004062C8
desktop.ini, xrefs: 00406277
autorun.inf, xrefs: 0040628C
iconcache.db, xrefs: 004062A4
thumbs.db, xrefs: 004062D4
ntuser.dat, xrefs: 00406298
bootsect.bak, xrefs: 004062B0
boot.ini, xrefs: 004062BC
GDCB-DECRYPT.txt, xrefs: 004062E0

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: lstrcmpi$lstrlen
String ID: GDCB-DECRYPT.txt$autorun.inf$boot.ini$bootsect.bak$desktop.ini$iconcache.db$ntuser.dat$ntuser.dat.log$thumbs.db
API String ID: 203586893-634406045
Opcode ID: 39cfe28d139bfd9c5cd1eab42733880a64dfed75e44f9506df37686ff5eafa02
Instruction ID: 048d6f8e0bde4782f578bbb55f50fa0ba415c8db6f5f272e4d17ab509b81b6c5
Opcode Fuzzy Hash: 39cfe28d139bfd9c5cd1eab42733880a64dfed75e44f9506df37686ff5eafa02
Instruction Fuzzy Hash: 3D11546264262A2ADA6072799C05EEB129C4D91F5031603BBFC05F21C4DFFDDEA285BD

Function 00406110 Relevance: 22.9, APIs: 7, Strings: 6, Instructions: 109memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00000201,00003000,00000040,?,?,?,00406706), ref: 00406123
SHGetSpecialFolderPathW.SHELL32(00000000,00000000,0000002A,00000000,?,?,?,00406706), ref: 004061AE
SHGetSpecialFolderPathW.SHELL32(00000000,00000000,0000002B,00000000,?,?,?,00406706), ref: 004061C8
SHGetSpecialFolderPathW.SHELL32(00000000,00000000,00000024,00000000,?,?,?,00406706), ref: 004061E2
SHGetSpecialFolderPathW.SHELL32(00000000,00000000,0000001C,00000000,?,?,?,00406706), ref: 004061FC
VirtualFree.KERNEL32(00000000,00000000,00008000,?,?,?,00406706), ref: 0040621C
VirtualFree.KERNEL32(00000000,00000000,00008000,?,?,?,00406706), ref: 00406231

Strings

Ransomware, xrefs: 00406167
\Program Files\, xrefs: 0040613F
\All Users\, xrefs: 0040617B
\ProgramData\, xrefs: 00406129
\Local Settings\, xrefs: 0040618F
\Tor Browser\, xrefs: 00406153

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: FolderPathSpecial$Virtual$Free$Alloc
String ID: Ransomware$\All Users\$\Local Settings\$\Program Files\$\ProgramData\$\Tor Browser\
API String ID: 1363212851-106008693
Opcode ID: 91ce4ec0e944e65af3891a9e7947b844704eccb218a88635625be501b693bd95
Instruction ID: f4f5e37f6e05bfd3754b73729b88660f17dd9cd9e6b304112d3c6a2927df81c1
Opcode Fuzzy Hash: 91ce4ec0e944e65af3891a9e7947b844704eccb218a88635625be501b693bd95
Instruction Fuzzy Hash: F4213D3078021233EA2031662D6AB7F299E8BD5749F55447BBA02FA3C5FEBCEC15425D

Function 00406640 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 59filememorystringCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00000402,00003000,00000040), ref: 00406655
wsprintfW.USER32 ref: 00406663
CreateFileW.KERNEL32(00000000,40000000,00000000,00000000,00000001,00000080,00000000), ref: 0040667F
GetLastError.KERNEL32 ref: 0040668C
lstrlenW.KERNEL32(00412000,?,00000000), ref: 004066AE
WriteFile.KERNEL32(00000000,00000000), ref: 004066BE
CloseHandle.KERNEL32(00000000), ref: 004066C5
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 004066D8

Strings

%s\GDCB-DECRYPT.txt, xrefs: 0040665D

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: FileVirtual$AllocCloseCreateErrorFreeHandleLastWritelstrlenwsprintf
String ID: %s\GDCB-DECRYPT.txt
API String ID: 2985722263-4054134092
Opcode ID: bc3a2ebfe9eeb877b40095771c2eb21f56d946499f613914195d7b6821dfde9f
Instruction ID: 9b1f1ee7684b205ce34ce946b48542e85b02e5c2206a3fbb18e6830c08f85e02
Opcode Fuzzy Hash: bc3a2ebfe9eeb877b40095771c2eb21f56d946499f613914195d7b6821dfde9f
Instruction Fuzzy Hash: 2D0171753802107BF7205B64AE4EFAA3A6CEB49B15F100135FB05F91E1DBF96C11866D

Function 00406840 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 47memorythreadCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00000401,00003000,00000040), ref: 00406859
wsprintfW.USER32 ref: 0040686E
InitializeCriticalSection.KERNEL32(?), ref: 0040687C
VirtualAlloc.KERNEL32 ref: 004068B0

Part of subcall function 004066F0: lstrlenW.KERNEL32 ref: 00406723
Part of subcall function 004066F0: lstrcatW.KERNEL32(?,00410364), ref: 0040673B
Part of subcall function 004066F0: FindFirstFileW.KERNEL32(?,?,?,00410364), ref: 00406745

VirtualFree.KERNEL32(?,00000000,00008000,00009C40,00003000,00000004), ref: 004068DB
ExitThread.KERNEL32 ref: 004068E3

Strings

%c:\, xrefs: 00406868

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: Virtual$Alloc$CriticalExitFileFindFirstFreeInitializeSectionThreadlstrcatlstrlenwsprintf
String ID: %c:\
API String ID: 1988002015-3142399695
Opcode ID: 604f28413c3e706cb58562e1e36b7165b908614f6844f0bfde30679f29a18d1a
Instruction ID: d88b45d10d8f236cef520cbec221070cd426d639c7b6d1ffd4d7ad39dfd3f75c
Opcode Fuzzy Hash: 604f28413c3e706cb58562e1e36b7165b908614f6844f0bfde30679f29a18d1a
Instruction Fuzzy Hash: 800196B5244300BFE7109F50CD8EF577BA8AB84B14F004628FB65AD1E2D7B09904CB59

Function 00402C50 Relevance: 10.6, APIs: 7, Instructions: 62stringthreadCOMMON

Download Yara Rule

APIs

DefWindowProcW.USER32(?,?,?,?), ref: 00402C8A
BeginPaint.USER32(?,?), ref: 00402C9F
lstrlenW.KERNEL32(?), ref: 00402CAC
TextOutW.GDI32(00000000,00000005,00000005,?,00000000), ref: 00402CBD
EndPaint.USER32(?,?), ref: 00402CCB
CreateThread.KERNEL32(00000000,00000000,Function_00002AD0,00000000,00000000,00000000), ref: 00402CE9
DestroyWindow.USER32(?), ref: 00402CF2

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: PaintWindow$BeginCreateDestroyProcTextThreadlstrlen
String ID:
API String ID: 572880375-0
Opcode ID: c81bb7d4f7cc3b0479ad99f25df51467dc5e8c815c493290e282321582db75ec
Instruction ID: 316be470bdb16b495eaa6a8a4de42634492684a59cc3721c0e018fd81b09cf01
Opcode Fuzzy Hash: c81bb7d4f7cc3b0479ad99f25df51467dc5e8c815c493290e282321582db75ec
Instruction Fuzzy Hash: D5116332604209ABE711DF54EE0DFAA7B6CFB48311F000626FD45E91E1E7B19D24DB99

Function 00406769 Relevance: 9.0, APIs: 6, Instructions: 48stringfileCOMMON

Download Yara Rule

APIs

lstrcmpW.KERNEL32(?,00410368,?,?,?,00410364), ref: 0040677C
lstrcmpW.KERNEL32(?,0041036C,?,?,?,00410364), ref: 00406796
lstrcatW.KERNEL32(?,?,?,?,?,00410364), ref: 004067A8
lstrcatW.KERNEL32(?,0041039C,?,?,?,?,?,00410364), ref: 004067B9

Part of subcall function 004066F0: lstrlenW.KERNEL32 ref: 00406723
Part of subcall function 004066F0: lstrcatW.KERNEL32(?,00410364), ref: 0040673B
Part of subcall function 004066F0: FindFirstFileW.KERNEL32(?,?,?,00410364), ref: 00406745

FindNextFileW.KERNEL32(?,?,?,?,?,00410364), ref: 0040681D
FindClose.KERNEL32(?,?,?,?,00410364), ref: 0040682E

Memory Dump Source

Source File: 00000000.00000002.2829759133.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2829730680.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829785846.0000000000409000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829810302.0000000000414000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829839596.0000000000416000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829873853.0000000000422000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2829900930.0000000000426000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Similarity

API ID: Findlstrcat$Filelstrcmp$CloseFirstNextlstrlen
String ID:
API String ID: 2032009209-0
Opcode ID: 0f5836726a8da98c3cbf7c47a1779c47cee0d607164868c718d4f6be4fbb4468
Instruction ID: 9b87114a5c2e2fa11aec6284b95cd243dd4daa46cd42d80c1a26711d7dff17e5
Opcode Fuzzy Hash: 0f5836726a8da98c3cbf7c47a1779c47cee0d607164868c718d4f6be4fbb4468
Instruction Fuzzy Hash: 6F012D31A0021DABDF21AB60DC48BEE7BB8EF44704F0444B6F806E61A1D7798A91CB65

Analysis Process: ubrrkv.exePID: 5604, Parent PID: 4084COMMON

Execution Graph

Execution Coverage:	0.6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	45
Total number of Limit Nodes:	3

Executed Functions

Function 004165DF Relevance: 4.7, APIs: 2, Strings: 1, Instructions: 245
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

x64, xrefs: 0040710D

Memory Dump Source

Source File: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID:
String ID: x64
API String ID: 0-218858810
Opcode ID: b4733ee9cb0a9c30d1bc676db967602d46c4165446067cd77a203037981a6ea9
Instruction ID: 106569b42896c0ec2acf3e7fa3420cbeb6f2173502ec35975fb06ca7be9de1c8
Opcode Fuzzy Hash: b4733ee9cb0a9c30d1bc676db967602d46c4165446067cd77a203037981a6ea9
Instruction Fuzzy Hash: 0D81C670805305AECB11BBB2CC46BDE77A1AF04308F00446FF545A6192DB7D95A2DB5F

Function 00406FA0 Relevance: 4.7, APIs: 2, Strings: 1, Instructions: 175
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

x64, xrefs: 0040710D

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID:
String ID: x64
API String ID: 0-218858810
Opcode ID: 73bfb3c494e1ab2ba05fa2efb495922b3159d4ded374f87fcf1fcb2e52199a04
Instruction ID: b8685d923d09174c796e1111678d2e4f02c3f5549e6e6ce843064863860b6c83
Opcode Fuzzy Hash: 73bfb3c494e1ab2ba05fa2efb495922b3159d4ded374f87fcf1fcb2e52199a04
Instruction Fuzzy Hash: 9551B570805705AACB11BBB2CC46BDE77A1AF0430CF10086FF54666192DE7DA4E6DA6F

Function 00406FE3 Relevance: 4.7, APIs: 2, Strings: 1, Instructions: 154
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

x64, xrefs: 0040710D

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID:
String ID: x64
API String ID: 0-218858810
Opcode ID: dbaa124a76d5819b0f355a5694afd5b598f636f64a4383cc6b702528ce503da6
Instruction ID: b23eccef1643459d8dccfd47025449bcfce518714c1d15a9d2ded94271d5944d
Opcode Fuzzy Hash: dbaa124a76d5819b0f355a5694afd5b598f636f64a4383cc6b702528ce503da6
Instruction Fuzzy Hash: BD51A570845305AACB10BBB2C846BDEB7A1AF0430CF10096FF54666192DB7DA4A2D65F

Function 00416619 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 148
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,?,?,?,0040702D,?,?,00406EFE,?,?,00406E5F), ref: 0040716D

Strings

x64, xrefs: 0040710D

Memory Dump Source

Source File: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: AllocVirtual
String ID: x64
API String ID: 4275171209-218858810
Opcode ID: 92d9297c9f634dfe879033ddf19aa48f748d91774a403e093a866549e7f42101
Instruction ID: ac00bb7688bec3349f0fd6cf041bd9caa8bb026d1e0ea87e628f525e92c51f46
Opcode Fuzzy Hash: 92d9297c9f634dfe879033ddf19aa48f748d91774a403e093a866549e7f42101
Instruction Fuzzy Hash: 5B41B2708053049EDB10BBB2C846BDEB7A4EF0430CF00496FF545AA192DB7DA492CB6E

Function 00407097 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 108
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,?,?,?,0040702D,?,?,00406EFE,?,?,00406E5F), ref: 0040716D
VirtualAlloc.KERNELBASE(00000000,00000004,?,?,?,?,0040702D,?,?,00406EFE,?,?,00406E5F), ref: 00407180

Strings

x64, xrefs: 0040710D

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: AllocVirtual
String ID: x64
API String ID: 4275171209-218858810
Opcode ID: bfaa6fc78b532da3158b62d93e79340fea57a49741c4b8c45c888bdb45dc8ea3
Instruction ID: 2b6df17dc0da31bf37d225ac04f43b25ea2446cf7edbc88e38cbc5cbf7e2d500
Opcode Fuzzy Hash: bfaa6fc78b532da3158b62d93e79340fea57a49741c4b8c45c888bdb45dc8ea3
Instruction Fuzzy Hash: A831E670C057049ACB10BBB2C846BEE77E4AF0071CF00096FF5456A292DF7DA4929A2F

Function 00416653 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 95
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,?,?,?,0040702D,?,?,00406EFE,?,?,00406E5F), ref: 0040716D
VirtualAlloc.KERNELBASE(00000000,00000004,?,?,?,?,0040702D,?,?,00406EFE,?,?,00406E5F), ref: 00407180

Strings

x64, xrefs: 0040710D

Memory Dump Source

Source File: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: AllocVirtual
String ID: x64
API String ID: 4275171209-218858810
Opcode ID: 539b036b1cbf75345698aa805e4f35586905e16d409adf83ea6acd66db812802
Instruction ID: b78a6001d43f9b35a7a56d4376ee3ee1f65dfbf7aabe65cbae219cf8af6b0284
Opcode Fuzzy Hash: 539b036b1cbf75345698aa805e4f35586905e16d409adf83ea6acd66db812802
Instruction Fuzzy Hash: B231AF718043009EC710FFB6C846BDA77E9AF04708F04486FF1459A292EB7CA482CB5E

Function 00407114 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 60
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,?,?,?,0040702D,?,?,00406EFE,?,?,00406E5F), ref: 0040716D
VirtualAlloc.KERNELBASE(00000000,00000004,?,?,?,?,0040702D,?,?,00406EFE,?,?,00406E5F), ref: 00407180

Strings

ARM, xrefs: 00407114

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: AllocVirtual
String ID: ARM
API String ID: 4275171209-251214878
Opcode ID: 3dcd523f36dba3e29ad4ce0451e884e221c71608afb8ac6a61eee2ac067b0f05
Instruction ID: 2f9294a5bb9200ac0514de4f45e1a620860b7996919c8caf223b7b6eb82e2a68
Opcode Fuzzy Hash: 3dcd523f36dba3e29ad4ce0451e884e221c71608afb8ac6a61eee2ac067b0f05
Instruction Fuzzy Hash: 8A119870C457049EC714BBB2C8467EE73A5AF44308F10495FF4455A292DF7DE481C759

Function 0040711B Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 60
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,?,?,?,0040702D,?,?,00406EFE,?,?,00406E5F), ref: 0040716D
VirtualAlloc.KERNELBASE(00000000,00000004,?,?,?,?,0040702D,?,?,00406EFE,?,?,00406E5F), ref: 00407180

Strings

Itanium, xrefs: 0040711B

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: AllocVirtual
String ID: Itanium
API String ID: 4275171209-2242518583
Opcode ID: 10f3c23f4fd0bbb2a859fa9fd03d60c3b15227197fc8f3f07e856df74bffb004
Instruction ID: 471545489450bf10ce07bd8ba9e5ef60b556a661cce3bc4c375d3a10cc656294
Opcode Fuzzy Hash: 10f3c23f4fd0bbb2a859fa9fd03d60c3b15227197fc8f3f07e856df74bffb004
Instruction Fuzzy Hash: B411E7B0C447049ECB00BBB2C846BEE73A5AF40308F10486FF4445A292EF7DE482CB69

Function 00407122 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 60
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,?,?,?,0040702D,?,?,00406EFE,?,?,00406E5F), ref: 0040716D
VirtualAlloc.KERNELBASE(00000000,00000004,?,?,?,?,0040702D,?,?,00406EFE,?,?,00406E5F), ref: 00407180

Strings

x86, xrefs: 00407122

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: AllocVirtual
String ID: x86
API String ID: 4275171209-2105985432
Opcode ID: cbb4a0296d9dd90894420971b6ed14197ccdb347fccb15dc524190b09353378e
Instruction ID: f044983a83e706564df08dd8ca7dfde9a5bba4465efb05d416fb749dd9f1a848
Opcode Fuzzy Hash: cbb4a0296d9dd90894420971b6ed14197ccdb347fccb15dc524190b09353378e
Instruction Fuzzy Hash: 8911A7B0C457049EDB14BBB2C846BEE73A5AF44308F10496FF4455A292EF7DE482CB69

Function 00406DC5 Relevance: 3.1, APIs: 1, Strings: 1, Instructions: 109
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,00000004,00000000), ref: 00406E10

Strings

By=, xrefs: 00406E90

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: AllocVirtual
String ID: By=
API String ID: 4275171209-2010441707
Opcode ID: 787b3158049758995235d619ed0cf00649968c8ba952cb62ce8c825296229e9e
Instruction ID: cac0fe05269464da509ef090c927f21268837812c83bfb32b8dc8bbf70293b4a
Opcode Fuzzy Hash: 787b3158049758995235d619ed0cf00649968c8ba952cb62ce8c825296229e9e
Instruction Fuzzy Hash: 8E3103B28857055FCB6177B28C42BDE7761AF11328F01052FF54199493EB3CD8A2866F

Function 00427E83 Relevance: 1.5, APIs: 1, Instructions: 8
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32 ref: 00427E9F

Memory Dump Source

Source File: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 03aaf07d870941c251a4596ceb1f6ec45c659e36a17d9b85c44600488208cd8d
Instruction ID: 97820cdb6aeb9b2c725939d8b4fffb857ff02a842de61682cbfaa2b6802ee30d
Opcode Fuzzy Hash: 03aaf07d870941c251a4596ceb1f6ec45c659e36a17d9b85c44600488208cd8d
Instruction Fuzzy Hash: 09C04C32608006EFDB55CFA8F94CA833BACFB4930434218B1D208D7135D6706D96CB6C

Non-executed Functions

Function 004064A0 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 136stringfilememoryCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32 ref: 004064B2
lstrcatW.KERNEL32(?,00410364), ref: 004064C4
FindFirstFileW.KERNEL32(?,?,?,00410364), ref: 004064D2
lstrcmpW.KERNEL32(?,00410368,?,?,?,00410364), ref: 004064FC
lstrcmpW.KERNEL32(?,0041036C,?,?,?,00410364), ref: 00406512
lstrcatW.KERNEL32(?,?,?,?,?,00410364), ref: 00406524
lstrlenW.KERNEL32(?,?,?,?,?,?,00410364), ref: 0040652B
lstrcmpW.KERNEL32(-00000001,.sql,?,?,?,?,?,?,00410364), ref: 0040655A
CreateFileW.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?,?,00410364), ref: 00406571
GetFileSize.KERNEL32(00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?,?,00410364), ref: 0040657C
VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004,?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?), ref: 0040659A
ReadFile.KERNEL32(00000000,00000000,00000000,?,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?), ref: 004065AF
lstrlenA.KERNEL32(*******************,?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?,?,00410364), ref: 004065CE
VirtualFree.KERNEL32(00000000,00000000,00008000,?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?), ref: 004065E9
CloseHandle.KERNEL32(00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?,?,00410364), ref: 004065F3
FindNextFileW.KERNEL32(?,?,?,?,?,00410364), ref: 0040661C
FindClose.KERNEL32(?,?,?,?,00410364), ref: 0040662D

Strings

.sql, xrefs: 00406554
*******************, xrefs: 004065B9, 004065C9

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: File$Findlstrcmplstrlen$CloseVirtuallstrcat$AllocCreateFirstFreeHandleNextReadSize
String ID: *******************$.sql
API String ID: 3616287438-58436570
Opcode ID: 05c8e46b5a6b324242753d00ddfa767ad3d4e90b023ac9ffc8302244919f4615
Instruction ID: d8231c9366fa09183c7f9a28845eb84a492a5b8a9a6307543842452b5fb504c9
Opcode Fuzzy Hash: 05c8e46b5a6b324242753d00ddfa767ad3d4e90b023ac9ffc8302244919f4615
Instruction Fuzzy Hash: 24419271601219ABEB209B609D48FAB77BCEF44704F11447AF902F6191EB799E50CB6C

Function 00406000 Relevance: 22.8, APIs: 10, Strings: 3, Instructions: 89encryptionCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(00412AE8,?,00403724,00000000,00000000,00000000,?,00000800), ref: 0040600B
CryptAcquireContextW.ADVAPI32(00000000,00000000,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000000,?,00403724,00000000,00000000,00000000), ref: 0040602E
GetLastError.KERNEL32(?,00403724,00000000,00000000,00000000), ref: 00406038
CryptAcquireContextW.ADVAPI32(00000000,00000000,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000008,?,00403724,00000000,00000000,00000000), ref: 00406054
CryptImportKey.ADVAPI32(00000000,00000000,00000000,00000000,00000000,00000000,?,00403724,00000000,00000000), ref: 00406089
CryptGetKeyParam.ADVAPI32(00000000,00000008,$7@,0000000A,00000000,?,00403724,00000000), ref: 004060AA
CryptEncrypt.ADVAPI32(00000000,00000000,00000001,00000000,0000000A,00000000,$7@,?,00403724,00000000), ref: 004060D2
GetLastError.KERNEL32(?,00403724,00000000), ref: 004060DB
CryptReleaseContext.ADVAPI32(00000000,00000000,?,00403724,00000000,00000000), ref: 004060F8
LeaveCriticalSection.KERNEL32(00412AE8,?,00403724,00000000,00000000), ref: 00406103

Strings

Microsoft Enhanced Cryptographic Provider v1.0, xrefs: 00406023, 00406049
$7@, xrefs: 004060A0, 004060A3
$7@, xrefs: 004060BC, 004060BF

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: Crypt$Context$AcquireCriticalErrorLastSection$EncryptEnterImportLeaveParamRelease
String ID: $7@$$7@$Microsoft Enhanced Cryptographic Provider v1.0
API String ID: 72144047-2376705498
Opcode ID: 8206897a1cfa35837b8722e43d42d1a1e9784adc6c633a5bd71464a07145b1f5
Instruction ID: f2ae4c90db2c5b8a25dd032e9c4ad046e7fd1e3aad681ca681e37570fcd3149a
Opcode Fuzzy Hash: 8206897a1cfa35837b8722e43d42d1a1e9784adc6c633a5bd71464a07145b1f5
Instruction Fuzzy Hash: 84314F74A40308BFDB10CFA0DD45FAF77B8AB48700F108029F602BA2D0D7B99A50DB69

Function 00407DB0 Relevance: 21.1, APIs: 9, Strings: 3, Instructions: 96encryptionlibrarymemoryCOMMON

Download Yara Rule

APIs

CryptAcquireContextW.ADVAPI32(?,00000000,00000000,00000001,F0000000,00000000,00000000,00000000,?,00000000,00000000,00000000,?,80000000,00000001,00000000), ref: 00407DD0
VirtualAlloc.KERNEL32(00000000,00000007,00003000,00000040,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00407DF8
GetModuleHandleA.KERNEL32(00000000,?,00000000,00000000), ref: 00407E4D
LoadLibraryA.KERNEL32(Advapi32.dll,?,00000000,00000000), ref: 00407E5B
GetProcAddress.KERNEL32(00000000,CryptGenRandomAdvapi32.dll), ref: 00407E6A
CryptReleaseContext.ADVAPI32(?,00000000,?,00000000,00000000), ref: 00407E8E
VirtualFree.KERNEL32(00000000,00000000,00008000,?,00000000,00000000), ref: 00407E9C
CryptReleaseContext.ADVAPI32(?,00000000,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00407EB0
VirtualFree.KERNEL32(00000000,00000000,00008000,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00407EBE

Strings

om, xrefs: 00407E2A
Advapi32.dll, xrefs: 00407E57, 00407E5A
Advapi32.dll, xrefs: 00407E11

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: ContextCryptVirtual$FreeRelease$AcquireAddressAllocHandleLibraryLoadModuleProc
String ID: Advapi32.dll$Advapi32.dll$om
API String ID: 3996966626-604197212
Opcode ID: ecf7433da154a3d3e4de08d5f3ff40864c9027ea2fbed6340348b44d82ee8ddf
Instruction ID: be5cfa20fe97609e74d06931db444e7d7e20eeaeedb8336480d1c404223e93be
Opcode Fuzzy Hash: ecf7433da154a3d3e4de08d5f3ff40864c9027ea2fbed6340348b44d82ee8ddf
Instruction Fuzzy Hash: FA318471E05209AFEB109FA5DD49BEEBB78EF44701F104079E605B6291D774AE00CB69

Function 00407C60 Relevance: 19.4, APIs: 9, Strings: 2, Instructions: 111encryptionlibrarymemoryCOMMON

Download Yara Rule

APIs

CryptAcquireContextW.ADVAPI32(?,00000000,00000000,00000001,F0000000), ref: 00407C7D
VirtualAlloc.KERNEL32(00000000,00000001,00003000,00000040), ref: 00407CAB
GetModuleHandleA.KERNEL32(?), ref: 00407CFF
LoadLibraryA.KERNEL32(Advapi32.dll), ref: 00407D0D
GetProcAddress.KERNEL32(00000000,CryptGenRandomAdvapi32.dll), ref: 00407D1C
CryptReleaseContext.ADVAPI32(?,00000000), ref: 00407D65
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 00407D73
CryptReleaseContext.ADVAPI32(?,00000000), ref: 00407D87
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 00407D95

Strings

CryptGenRandomAdvapi32.dll, xrefs: 00407D17, 00407D1A
Advapi32.dll, xrefs: 00407D09, 00407D0C

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: ContextCryptVirtual$FreeRelease$AcquireAddressAllocHandleLibraryLoadModuleProc
String ID: Advapi32.dll$CryptGenRandomAdvapi32.dll
API String ID: 3996966626-2152921537
Opcode ID: 0458a47c7d0f6a737997e540b1eda647f42b02ba3f55a885d4cf6adcdbbaa127
Instruction ID: 199b4cbb89f92d6933ab86ad2097cfc69592b150d2405189e4f4276a6cc67689
Opcode Fuzzy Hash: 0458a47c7d0f6a737997e540b1eda647f42b02ba3f55a885d4cf6adcdbbaa127
Instruction Fuzzy Hash: 8931F871E04209ABEB109FE4DD49BEEBB78EF44700F204079E505B62A1E775AE01CB6D

Function 004066F0 Relevance: 13.6, APIs: 9, Instructions: 109stringfileCOMMON

Download Yara Rule

APIs

Part of subcall function 00406110: VirtualAlloc.KERNEL32(00000000,00000201,00003000,00000040,?,?,?,00406706), ref: 00406123
Part of subcall function 00406110: SHGetSpecialFolderPathW.SHELL32(00000000,00000000,0000002A,00000000,?,?,?,00406706), ref: 004061AE
Part of subcall function 00406110: SHGetSpecialFolderPathW.SHELL32(00000000,00000000,0000002B,00000000,?,?,?,00406706), ref: 004061C8
Part of subcall function 00406110: SHGetSpecialFolderPathW.SHELL32(00000000,00000000,00000024,00000000,?,?,?,00406706), ref: 004061E2
Part of subcall function 00406110: SHGetSpecialFolderPathW.SHELL32(00000000,00000000,0000001C,00000000,?,?,?,00406706), ref: 004061FC
Part of subcall function 00406110: VirtualFree.KERNEL32(00000000,00000000,00008000,?,?,?,00406706), ref: 0040621C

Part of subcall function 004064A0: lstrlenW.KERNEL32 ref: 004064B2
Part of subcall function 004064A0: lstrcatW.KERNEL32(?,00410364), ref: 004064C4
Part of subcall function 004064A0: FindFirstFileW.KERNEL32(?,?,?,00410364), ref: 004064D2
Part of subcall function 004064A0: lstrcmpW.KERNEL32(?,00410368,?,?,?,00410364), ref: 004064FC
Part of subcall function 004064A0: lstrcmpW.KERNEL32(?,0041036C,?,?,?,00410364), ref: 00406512
Part of subcall function 004064A0: lstrcatW.KERNEL32(?,?,?,?,?,00410364), ref: 00406524
Part of subcall function 004064A0: lstrlenW.KERNEL32(?,?,?,?,?,?,00410364), ref: 0040652B
Part of subcall function 004064A0: lstrcmpW.KERNEL32(-00000001,.sql,?,?,?,?,?,?,00410364), ref: 0040655A
Part of subcall function 004064A0: CreateFileW.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?,?,00410364), ref: 00406571
Part of subcall function 004064A0: GetFileSize.KERNEL32(00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?,?,00410364), ref: 0040657C
Part of subcall function 004064A0: VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004,?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?,?,?), ref: 0040659A
Part of subcall function 004064A0: ReadFile.KERNEL32(00000000,00000000,00000000,?,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000,?,?,?), ref: 004065AF

Part of subcall function 00406640: VirtualAlloc.KERNEL32(00000000,00000402,00003000,00000040), ref: 00406655
Part of subcall function 00406640: wsprintfW.USER32 ref: 00406663
Part of subcall function 00406640: CreateFileW.KERNEL32(00000000,40000000,00000000,00000000,00000001,00000080,00000000), ref: 0040667F
Part of subcall function 00406640: GetLastError.KERNEL32 ref: 0040668C
Part of subcall function 00406640: VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 004066D8

lstrlenW.KERNEL32 ref: 00406723
lstrcatW.KERNEL32(?,00410364), ref: 0040673B
FindFirstFileW.KERNEL32(?,?,?,00410364), ref: 00406745
lstrcmpW.KERNEL32(?,00410368,?,?,?,00410364), ref: 0040677C
lstrcmpW.KERNEL32(?,0041036C,?,?,?,00410364), ref: 00406796
lstrcatW.KERNEL32(?,?,?,?,?,00410364), ref: 004067A8
lstrcatW.KERNEL32(?,0041039C,?,?,?,?,?,00410364), ref: 004067B9
FindNextFileW.KERNEL32(?,?,?,?,?,00410364), ref: 0040681D
FindClose.KERNEL32(?,?,?,?,00410364), ref: 0040682E

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: File$Virtuallstrcatlstrcmp$FindFolderPathSpecial$Alloclstrlen$CreateFirstFree$CloseErrorLastNextReadSizewsprintf
String ID:
API String ID: 1112924665-0
Opcode ID: 3dbb0dbfe75d924b609b03e20368d36387d9f5ee42819884ccc0485f7efd567d
Instruction ID: e664c09a6a9c308cb7d1e0fe319252d12530e52bee12665a8dc8c6cfb3a3f5dc
Opcode Fuzzy Hash: 3dbb0dbfe75d924b609b03e20368d36387d9f5ee42819884ccc0485f7efd567d
Instruction Fuzzy Hash: 60318F71A00219ABDF10AF65DD84AAE77B8EF44314B0584B7F806F7291DB389E50CB69

Function 00402F50 Relevance: 10.6, APIs: 7, Instructions: 86memoryCOMMON

Download Yara Rule

APIs

EnumDeviceDrivers.PSAPI(?,00000004,00000000), ref: 00402F74
VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004,00000000), ref: 00402F8D

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: AllocDeviceDriversEnumVirtual
String ID:
API String ID: 4140748134-0
Opcode ID: 0a6431d7b680dec11b95763bc23b6023e0c9d24f66c7ef9fbc3c6dcadf6177f1
Instruction ID: ae1065d34e0a9f40daa088a41d748c469a9f576a3d92cbe81eb507f1f3ca9255
Opcode Fuzzy Hash: 0a6431d7b680dec11b95763bc23b6023e0c9d24f66c7ef9fbc3c6dcadf6177f1
Instruction Fuzzy Hash: 9621A43260011AABEB109B989D89FAAB7BCEB44715F1001B6EE04E61D0D7B19D05AB94

Function 0041CCC4 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c62c3cdbcfc79d9a83669abbe424b8638fc67546c6ac79033d4ea16b717aba1
Instruction ID: 12786fdf905116c0b821646dc5ea234f9ea138fa825349e3376ecebbe913eb04
Opcode Fuzzy Hash: 1c62c3cdbcfc79d9a83669abbe424b8638fc67546c6ac79033d4ea16b717aba1
Instruction Fuzzy Hash: E2D0227368D6808FC302C79084548C4BBD5EE8021035E00EAA0848F16AE240C260C382

Function 00402960 Relevance: 61.3, APIs: 5, Strings: 30, Instructions: 87
registrystringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrlenW.KERNEL32(00520050,00000041), ref: 0040299D

Part of subcall function 00407C60: CryptAcquireContextW.ADVAPI32(?,00000000,00000000,00000001,F0000000), ref: 00407C7D
Part of subcall function 00407C60: VirtualAlloc.KERNEL32(00000000,00000001,00003000,00000040), ref: 00407CAB
Part of subcall function 00407C60: GetModuleHandleA.KERNEL32(?), ref: 00407CFF
Part of subcall function 00407C60: LoadLibraryA.KERNEL32(Advapi32.dll), ref: 00407D0D
Part of subcall function 00407C60: GetProcAddress.KERNEL32(00000000,CryptGenRandomAdvapi32.dll), ref: 00407D1C
Part of subcall function 00407C60: CryptReleaseContext.ADVAPI32(?,00000000), ref: 00407D65
Part of subcall function 00407C60: VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 00407D73

RegCreateKeyExW.ADVAPI32(80000001,004F0053,00000000,00000000,00000000,000F003F,00000000,?,00000000), ref: 00402A84
lstrlenW.KERNEL32 ref: 00402A8F
RegSetValueExW.ADVAPI32(?,00520050,00000000,00000001,?,00000000), ref: 00402AA4
RegCloseKey.ADVAPI32(?,?,00000000), ref: 00402AB1

Strings

U, xrefs: 00402984
e, xrefs: 00402A7D
w, xrefs: 00402A29
\, xrefs: 00402A30
d, xrefs: 00402A22
f, xrefs: 00402A0D
W, xrefs: 004029C7
r, xrefs: 00402A53
R, xrefs: 00402A68
\, xrefs: 00402A14
n, xrefs: 00402A6F
i, xrefs: 00402A5A
n, xrefs: 00402A76
R, xrefs: 004029CE
u, xrefs: 00402A37
P, xrefs: 0040296D
V, xrefs: 00402A4C
I, xrefs: 00402979
S, xrefs: 004029B0
n, xrefs: 00402A45
F, xrefs: 004029BD
r, xrefs: 004029FF
s, xrefs: 00402A06
i, xrefs: 004029F8
A, xrefs: 0040298C
r, xrefs: 00402A3E
i, xrefs: 00402A1B
H, xrefs: 00402993
\, xrefs: 004029EB
n, xrefs: 00402A61

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: ContextCryptVirtuallstrlen$AcquireAddressAllocCloseCreateFreeHandleLibraryLoadModuleProcReleaseValue
String ID: A$F$H$I$P$R$R$S$U$V$W$\$\$\$d$e$f$i$i$i$n$n$n$n$r$r$r$s$u$w
API String ID: 553367697-3791882466
Opcode ID: bc2aa759d9655fff48c3731314f56cd013a72bf6e49cbd10b87566378500ce0d
Instruction ID: 6d84f0b14520ef3984e43a4999751383e09c14a2564039d175e156e7e031e40b
Opcode Fuzzy Hash: bc2aa759d9655fff48c3731314f56cd013a72bf6e49cbd10b87566378500ce0d
Instruction Fuzzy Hash: A431DBB090021CDFEB20CF91E949BEDBFB5FB01709F108119D5187A292D7BA4948CF95

Function 004035E0 Relevance: 58.0, APIs: 29, Strings: 4, Instructions: 300
memoryfilestringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesW.KERNEL32 ref: 004035F4
SetFileAttributesW.KERNEL32(?,00000000), ref: 004035FF
VirtualAlloc.KERNEL32(00000000,00000401,00003000,00000040,00000000,00000000,00000000,?,?,00000000), ref: 0040363A
lstrcpyW.KERNEL32(00000000,?,?,00000000), ref: 00403658
lstrcatW.KERNEL32(00000000,0047002E,?,?,00000000), ref: 00403663

Part of subcall function 00407DB0: CryptAcquireContextW.ADVAPI32(?,00000000,00000000,00000001,F0000000,00000000,00000000,00000000,?,00000000,00000000,00000000,?,80000000,00000001,00000000), ref: 00407DD0
Part of subcall function 00407DB0: VirtualAlloc.KERNEL32(00000000,00000007,00003000,00000040,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00407DF8
Part of subcall function 00407DB0: GetModuleHandleA.KERNEL32(00000000,?,00000000,00000000), ref: 00407E4D
Part of subcall function 00407DB0: LoadLibraryA.KERNEL32(Advapi32.dll,?,00000000,00000000), ref: 00407E5B
Part of subcall function 00407DB0: GetProcAddress.KERNEL32(00000000,CryptGenRandomAdvapi32.dll), ref: 00407E6A
Part of subcall function 00407DB0: CryptReleaseContext.ADVAPI32(?,00000000,?,00000000,00000000), ref: 00407E8E
Part of subcall function 00407DB0: VirtualFree.KERNEL32(00000000,00000000,00008000,?,00000000,00000000), ref: 00407E9C

Part of subcall function 00407DB0: CryptReleaseContext.ADVAPI32(?,00000000,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00407EB0
Part of subcall function 00407DB0: VirtualFree.KERNEL32(00000000,00000000,00008000,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00407EBE

VirtualAlloc.KERNEL32(00000000,00000800,00003000,00000004), ref: 004036C6
VirtualAlloc.KERNEL32(00000000,00000800,00003000,00000004), ref: 004036F1

Part of subcall function 00406000: EnterCriticalSection.KERNEL32(00412AE8,?,00403724,00000000,00000000,00000000,?,00000800), ref: 0040600B
Part of subcall function 00406000: CryptAcquireContextW.ADVAPI32(00000000,00000000,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000000,?,00403724,00000000,00000000,00000000), ref: 0040602E
Part of subcall function 00406000: GetLastError.KERNEL32(?,00403724,00000000,00000000,00000000), ref: 00406038
Part of subcall function 00406000: CryptAcquireContextW.ADVAPI32(00000000,00000000,Microsoft Enhanced Cryptographic Provider v1.0,00000001,00000008,?,00403724,00000000,00000000,00000000), ref: 00406054

VirtualFree.KERNEL32(?,00000000,00008000), ref: 00403998

Part of subcall function 00406000: CryptImportKey.ADVAPI32(00000000,00000000,00000000,00000000,00000000,00000000,?,00403724,00000000,00000000), ref: 00406089
Part of subcall function 00406000: CryptGetKeyParam.ADVAPI32(00000000,00000008,$7@,0000000A,00000000,?,00403724,00000000), ref: 004060AA
Part of subcall function 00406000: CryptEncrypt.ADVAPI32(00000000,00000000,00000001,00000000,0000000A,00000000,$7@,?,00403724,00000000), ref: 004060D2
Part of subcall function 00406000: GetLastError.KERNEL32(?,00403724,00000000), ref: 004060DB
Part of subcall function 00406000: CryptReleaseContext.ADVAPI32(00000000,00000000,?,00403724,00000000,00000000), ref: 004060F8
Part of subcall function 00406000: LeaveCriticalSection.KERNEL32(00412AE8,?,00403724,00000000,00000000), ref: 00406103

GetLastError.KERNEL32 ref: 00403751
CreateFileW.KERNEL32(?,C0000000,00000001,00000000,00000003,00000080,00000000), ref: 00403787
VirtualAlloc.KERNEL32(00000000,00000008,00003000,00000004), ref: 004037A6
VirtualAlloc.KERNEL32(00000000,00100001,00003000,00000004), ref: 004037C5
ReadFile.KERNEL32(00000000,00000000,00100000,?,00000000), ref: 004037E1
VirtualAlloc.KERNEL32(00000000,?,00003000,00000004), ref: 00403832
_memmove.LIBCMT ref: 00403842
VirtualAlloc.KERNEL32(00000000,?,00003000,00000004), ref: 0040385A
VirtualFree.KERNEL32(?,00000000,00008000), ref: 0040388F

Strings

., xrefs: 0040363E
, xrefs: 0040370A
B, xrefs: 00403651
D, xrefs: 0040364A

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: Virtual$Crypt$Alloc$Context$FileFree$AcquireErrorLastRelease$AttributesCriticalSection$AddressCreateEncryptEnterHandleImportLeaveLibraryLoadModuleParamProcRead_memmovelstrcatlstrcpy
String ID: $.$B$D
API String ID: 837238375-1812608335
Opcode ID: c15eb29179e97668c0832c85613b6c12b7130b63612beb6e2f5d5bab4bd3964c
Instruction ID: e6440529c24e0b0f2c5be8c2954fde7d882e22268c9ef2e78ee628bee86a44a3
Opcode Fuzzy Hash: c15eb29179e97668c0832c85613b6c12b7130b63612beb6e2f5d5bab4bd3964c
Instruction Fuzzy Hash: 28B15DB1E40309BBEB119F94CD45FEEBBB8AB48700F204125F644BA2D1DBB45E448B98

Function 00402D30 Relevance: 54.4, APIs: 19, Strings: 12, Instructions: 137windowthreadregistryCOMMON

Download Yara Rule

APIs

Part of subcall function 00402F50: EnumDeviceDrivers.PSAPI(?,00000004,00000000), ref: 00402F74

GetModuleHandleW.KERNEL32(?,?,?,?,?,?,?,?,?,00000000), ref: 00402E19
LoadCursorW.USER32(00000000,00007F00), ref: 00402E2E
LoadIconW.USER32 ref: 00402E59
RegisterClassExW.USER32(?), ref: 00402E68
ExitThread.KERNEL32 ref: 00402E75

Part of subcall function 00402F50: VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004,00000000), ref: 00402F8D

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,?,?,00007F00), ref: 00402E7B
GetModuleHandleW.KERNEL32(00000000,00000000,?,?,?,?,?,?,00007F00), ref: 00402E81
CreateWindowExW.USER32(00000000,win32app,firefox,00CF0000,80000000,80000000,00000005,00000005,00000000,00000000,00000000), ref: 00402EA7
SetWindowLongW.USER32(00000000,000000F0,00000000), ref: 00402EB4
ExitThread.KERNEL32 ref: 00402EBF

Part of subcall function 00402F50: EnumDeviceDrivers.PSAPI(00000000,00000000,?,00000000), ref: 00402FA8
Part of subcall function 00402F50: GetDeviceDriverBaseNameW.PSAPI(00000000,?,00000400), ref: 00402FCF
Part of subcall function 00402F50: lstrcmpiW.KERNEL32(?,00000000), ref: 00402FE3
Part of subcall function 00402F50: VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 00402FFA

ExitThread.KERNEL32 ref: 00402F3F

Part of subcall function 00402AD0: VirtualAlloc.KERNEL32(00000000,00000800,00003000,00000040), ref: 00402AEA
Part of subcall function 00402AD0: GetModuleFileNameW.KERNEL32(00000000,00000000,00000100), ref: 00402B2C
Part of subcall function 00402AD0: GetTempPathW.KERNEL32(00000100,00000000), ref: 00402B38
Part of subcall function 00402AD0: ExitThread.KERNEL32 ref: 00402C47

ShowWindow.USER32(00000000,00000005,?,?,?,?,?,?,00007F00), ref: 00402EC8
UpdateWindow.USER32(00000000), ref: 00402ECF
CreateThread.KERNEL32(00000000,00000000,Function_00002D10,00000000,00000000,00000000), ref: 00402EE3
CloseHandle.KERNEL32(00000000,?,?,?,?,?,?,00007F00), ref: 00402EEE
GetMessageW.USER32(?,00000000,00000000,00000000), ref: 00402F05
TranslateMessage.USER32(?), ref: 00402F1C
DispatchMessageW.USER32(?), ref: 00402F23
GetMessageW.USER32(?,00000000,00000000,00000000), ref: 00402F37

Strings

k, xrefs: 00402D67
1, xrefs: 00402D6F
w, xrefs: 00402DB1
win32app, xrefs: 00402E51, 00402EA0
s, xrefs: 00402DC1
f, xrefs: 00402DA1
s, xrefs: 00402DB9
firefox, xrefs: 00402E9B
s, xrefs: 00402D7F
s, xrefs: 00402D77
0, xrefs: 00402DF1
d, xrefs: 00402DA9

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: Thread$ExitHandleMessageModuleWindow$DeviceVirtual$AllocCreateDriversEnumLoadName$BaseClassCloseCursorDispatchDriverFileFreeIconLongPathRegisterShowTempTranslateUpdatelstrcmpi
String ID: 0$1$d$f$firefox$k$s$s$s$s$w$win32app
API String ID: 3011903443-520298170
Opcode ID: b86405dce58d181b4d3317d6f75a4f68ae9045c1818c46f3ec090eeecc568db7
Instruction ID: 6dadb659047271fd80ce1d130f626f3db599e38ffd86fa9de69c1f1ec4dcf306
Opcode Fuzzy Hash: b86405dce58d181b4d3317d6f75a4f68ae9045c1818c46f3ec090eeecc568db7
Instruction Fuzzy Hash: 0F515070248302AFF7109F618D0DB5B7AE4AF44748F10092DF684BA2D1D7F99945CB9E

Function 00406240 Relevance: 30.1, APIs: 11, Strings: 9, Instructions: 78stringCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32(00000000,?,?,00000000,00406403), ref: 0040624C
lstrlenW.KERNEL32(00000000,?,?,00000000,00406403), ref: 00406251
lstrcmpiW.KERNEL32(-00000004,desktop.ini,?,?,00000000,00406403), ref: 0040627D
lstrcmpiW.KERNEL32(-00000004,autorun.inf,?,?,00000000,00406403), ref: 00406292
lstrcmpiW.KERNEL32(-00000004,ntuser.dat,?,?,00000000,00406403), ref: 0040629E
lstrcmpiW.KERNEL32(-00000004,iconcache.db,?,?,00000000,00406403), ref: 004062AA
lstrcmpiW.KERNEL32(-00000004,bootsect.bak,?,?,00000000,00406403), ref: 004062B6
lstrcmpiW.KERNEL32(-00000004,boot.ini,?,?,00000000,00406403), ref: 004062C2
lstrcmpiW.KERNEL32(-00000004,ntuser.dat.log,?,?,00000000,00406403), ref: 004062CE
lstrcmpiW.KERNEL32(-00000004,thumbs.db,?,?,00000000,00406403), ref: 004062DA
lstrcmpiW.KERNEL32(-00000004,GDCB-DECRYPT.txt,?,?,00000000,00406403), ref: 004062E6

Strings

ntuser.dat, xrefs: 00406298
autorun.inf, xrefs: 0040628C
thumbs.db, xrefs: 004062D4
iconcache.db, xrefs: 004062A4
bootsect.bak, xrefs: 004062B0
boot.ini, xrefs: 004062BC
desktop.ini, xrefs: 00406277
ntuser.dat.log, xrefs: 004062C8
GDCB-DECRYPT.txt, xrefs: 004062E0

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: lstrcmpi$lstrlen
String ID: GDCB-DECRYPT.txt$autorun.inf$boot.ini$bootsect.bak$desktop.ini$iconcache.db$ntuser.dat$ntuser.dat.log$thumbs.db
API String ID: 203586893-634406045
Opcode ID: 39cfe28d139bfd9c5cd1eab42733880a64dfed75e44f9506df37686ff5eafa02
Instruction ID: 048d6f8e0bde4782f578bbb55f50fa0ba415c8db6f5f272e4d17ab509b81b6c5
Opcode Fuzzy Hash: 39cfe28d139bfd9c5cd1eab42733880a64dfed75e44f9506df37686ff5eafa02
Instruction Fuzzy Hash: 3D11546264262A2ADA6072799C05EEB129C4D91F5031603BBFC05F21C4DFFDDEA285BD

Function 00402AD0 Relevance: 29.9, APIs: 10, Strings: 7, Instructions: 114stringmemorythreadCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00000800,00003000,00000040), ref: 00402AEA
GetModuleFileNameW.KERNEL32(00000000,00000000,00000100), ref: 00402B2C
GetTempPathW.KERNEL32(00000100,00000000), ref: 00402B38
lstrlenW.KERNEL32(?,?,?,00000052), ref: 00402B7D

Part of subcall function 00407C60: CryptAcquireContextW.ADVAPI32(?,00000000,00000000,00000001,F0000000), ref: 00407C7D
Part of subcall function 00407C60: VirtualAlloc.KERNEL32(00000000,00000001,00003000,00000040), ref: 00407CAB
Part of subcall function 00407C60: GetModuleHandleA.KERNEL32(?), ref: 00407CFF
Part of subcall function 00407C60: LoadLibraryA.KERNEL32(Advapi32.dll), ref: 00407D0D
Part of subcall function 00407C60: GetProcAddress.KERNEL32(00000000,CryptGenRandomAdvapi32.dll), ref: 00407D1C
Part of subcall function 00407C60: CryptReleaseContext.ADVAPI32(?,00000000), ref: 00407D65
Part of subcall function 00407C60: VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 00407D73

GetEnvironmentVariableW.KERNEL32(AppData,00000000,00000100), ref: 00402B9C
lstrcatW.KERNEL32(00000000,\Microsoft\), ref: 00402BE4
lstrcatW.KERNEL32(00000000,?), ref: 00402BEC
lstrcatW.KERNEL32(00000000,.exe), ref: 00402BF4
wsprintfW.USER32 ref: 00402C35
ExitThread.KERNEL32 ref: 00402C47

Strings

"%s", xrefs: 00402C2F
.exe, xrefs: 00402BEE
AppData, xrefs: 00402B97
U, xrefs: 00402B75
P, xrefs: 00402B55
\Microsoft\, xrefs: 00402BDE
I, xrefs: 00402B6C

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: Virtuallstrcat$AllocContextCryptModule$AcquireAddressEnvironmentExitFileFreeHandleLibraryLoadNamePathProcReleaseTempThreadVariablelstrlenwsprintf
String ID: "%s"$.exe$AppData$I$P$U$\Microsoft\
API String ID: 139215849-2398311915
Opcode ID: 6e6a8f62b256392a6330cb3d11e6480f682840227812e37f6e34e8b9bfe8e280
Instruction ID: 1f7025583fece4150ab6efb2fb4095bab450847bdb3333ccf3c22af7b910d208
Opcode Fuzzy Hash: 6e6a8f62b256392a6330cb3d11e6480f682840227812e37f6e34e8b9bfe8e280
Instruction Fuzzy Hash: 0841A771204311ABE304EF219E4DB5F77A8AF84704F04443EB555B62D2DBB8A908CBAF

Function 00406110 Relevance: 22.9, APIs: 7, Strings: 6, Instructions: 109memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00000201,00003000,00000040,?,?,?,00406706), ref: 00406123
SHGetSpecialFolderPathW.SHELL32(00000000,00000000,0000002A,00000000,?,?,?,00406706), ref: 004061AE
SHGetSpecialFolderPathW.SHELL32(00000000,00000000,0000002B,00000000,?,?,?,00406706), ref: 004061C8
SHGetSpecialFolderPathW.SHELL32(00000000,00000000,00000024,00000000,?,?,?,00406706), ref: 004061E2
SHGetSpecialFolderPathW.SHELL32(00000000,00000000,0000001C,00000000,?,?,?,00406706), ref: 004061FC
VirtualFree.KERNEL32(00000000,00000000,00008000,?,?,?,00406706), ref: 0040621C
VirtualFree.KERNEL32(00000000,00000000,00008000,?,?,?,00406706), ref: 00406231

Strings

\Local Settings\, xrefs: 0040618F
\All Users\, xrefs: 0040617B
\Program Files\, xrefs: 0040613F
\Tor Browser\, xrefs: 00406153
\ProgramData\, xrefs: 00406129
Ransomware, xrefs: 00406167

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: FolderPathSpecial$Virtual$Free$Alloc
String ID: Ransomware$\All Users\$\Local Settings\$\Program Files\$\ProgramData\$\Tor Browser\
API String ID: 1363212851-106008693
Opcode ID: 91ce4ec0e944e65af3891a9e7947b844704eccb218a88635625be501b693bd95
Instruction ID: f4f5e37f6e05bfd3754b73729b88660f17dd9cd9e6b304112d3c6a2927df81c1
Opcode Fuzzy Hash: 91ce4ec0e944e65af3891a9e7947b844704eccb218a88635625be501b693bd95
Instruction Fuzzy Hash: F4213D3078021233EA2031662D6AB7F299E8BD5749F55447BBA02FA3C5FEBCEC15425D

Function 00406640 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 59filememorystringCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00000402,00003000,00000040), ref: 00406655
wsprintfW.USER32 ref: 00406663
CreateFileW.KERNEL32(00000000,40000000,00000000,00000000,00000001,00000080,00000000), ref: 0040667F
GetLastError.KERNEL32 ref: 0040668C
lstrlenW.KERNEL32(00000000,?,00000000), ref: 004066AE
WriteFile.KERNEL32(00000000,00000000), ref: 004066BE
CloseHandle.KERNEL32(00000000), ref: 004066C5
VirtualFree.KERNEL32(00000000,00000000,00008000), ref: 004066D8

Strings

%s\GDCB-DECRYPT.txt, xrefs: 0040665D

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: FileVirtual$AllocCloseCreateErrorFreeHandleLastWritelstrlenwsprintf
String ID: %s\GDCB-DECRYPT.txt
API String ID: 2985722263-4054134092
Opcode ID: bc3a2ebfe9eeb877b40095771c2eb21f56d946499f613914195d7b6821dfde9f
Instruction ID: 9b1f1ee7684b205ce34ce946b48542e85b02e5c2206a3fbb18e6830c08f85e02
Opcode Fuzzy Hash: bc3a2ebfe9eeb877b40095771c2eb21f56d946499f613914195d7b6821dfde9f
Instruction Fuzzy Hash: 2D0171753802107BF7205B64AE4EFAA3A6CEB49B15F100135FB05F91E1DBF96C11866D

Function 00406840 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 47memorythreadCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00000401,00003000,00000040), ref: 00406859
wsprintfW.USER32 ref: 0040686E
InitializeCriticalSection.KERNEL32(?), ref: 0040687C
VirtualAlloc.KERNEL32 ref: 004068B0

Part of subcall function 004066F0: lstrlenW.KERNEL32 ref: 00406723
Part of subcall function 004066F0: lstrcatW.KERNEL32(?,00410364), ref: 0040673B
Part of subcall function 004066F0: FindFirstFileW.KERNEL32(?,?,?,00410364), ref: 00406745

VirtualFree.KERNEL32(?,00000000,00008000,00009C40,00003000,00000004), ref: 004068DB
ExitThread.KERNEL32 ref: 004068E3

Strings

%c:\, xrefs: 00406868

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: Virtual$Alloc$CriticalExitFileFindFirstFreeInitializeSectionThreadlstrcatlstrlenwsprintf
String ID: %c:\
API String ID: 1988002015-3142399695
Opcode ID: 604f28413c3e706cb58562e1e36b7165b908614f6844f0bfde30679f29a18d1a
Instruction ID: d88b45d10d8f236cef520cbec221070cd426d639c7b6d1ffd4d7ad39dfd3f75c
Opcode Fuzzy Hash: 604f28413c3e706cb58562e1e36b7165b908614f6844f0bfde30679f29a18d1a
Instruction Fuzzy Hash: 800196B5244300BFE7109F50CD8EF577BA8AB84B14F004628FB65AD1E2D7B09904CB59

Function 00402890 Relevance: 12.1, APIs: 8, Instructions: 90fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 004028AB
GetFileSize.KERNEL32(00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 004028BA
CreateFileMappingW.KERNEL32(00000000,00000000,-00000008,00000000,00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 004028E5
CloseHandle.KERNEL32(00000000,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 004028F3
MapViewOfFile.KERNEL32(00000000,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 0040290A
UnmapViewOfFile.KERNEL32(00000000), ref: 00402942
CloseHandle.KERNEL32(?,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00402951
CloseHandle.KERNEL32(00000000,?,00000000,00000000,00000000,?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 00402954

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: File$CloseHandle$CreateView$MappingSizeUnmap
String ID:
API String ID: 265113797-0
Opcode ID: 4a3bd338fa8f98e6ea1ce6eff48d1651597d918e060f7fce2cadfb8332af991f
Instruction ID: c7753fadabc3ce0f8503889d90d66a1a67b62c86d4c9c93fbc6d336bdc04640e
Opcode Fuzzy Hash: 4a3bd338fa8f98e6ea1ce6eff48d1651597d918e060f7fce2cadfb8332af991f
Instruction Fuzzy Hash: 8A2134B2B011197FE7106B749D8AF7F7B6CEB45225F00423AFC01B22C1E6789D0045A8

Function 00402C50 Relevance: 10.6, APIs: 7, Instructions: 62stringthreadCOMMON

Download Yara Rule

APIs

DefWindowProcW.USER32(?,?,?,?), ref: 00402C8A
BeginPaint.USER32(?,?), ref: 00402C9F
lstrlenW.KERNEL32(?), ref: 00402CAC
TextOutW.GDI32(00000000,00000005,00000005,?,00000000), ref: 00402CBD
EndPaint.USER32(?,?), ref: 00402CCB
CreateThread.KERNEL32(00000000,00000000,Function_00002AD0,00000000,00000000,00000000), ref: 00402CE9
DestroyWindow.USER32(?), ref: 00402CF2

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: PaintWindow$BeginCreateDestroyProcTextThreadlstrlen
String ID:
API String ID: 572880375-0
Opcode ID: c81bb7d4f7cc3b0479ad99f25df51467dc5e8c815c493290e282321582db75ec
Instruction ID: 316be470bdb16b495eaa6a8a4de42634492684a59cc3721c0e018fd81b09cf01
Opcode Fuzzy Hash: c81bb7d4f7cc3b0479ad99f25df51467dc5e8c815c493290e282321582db75ec
Instruction Fuzzy Hash: D5116332604209ABE711DF54EE0DFAA7B6CFB48311F000626FD45E91E1E7B19D24DB99

Function 00406769 Relevance: 9.0, APIs: 6, Instructions: 48stringfileCOMMON

Download Yara Rule

APIs

lstrcmpW.KERNEL32(?,00410368,?,?,?,00410364), ref: 0040677C
lstrcmpW.KERNEL32(?,0041036C,?,?,?,00410364), ref: 00406796
lstrcatW.KERNEL32(?,?,?,?,?,00410364), ref: 004067A8
lstrcatW.KERNEL32(?,0041039C,?,?,?,?,?,00410364), ref: 004067B9

Part of subcall function 004066F0: lstrlenW.KERNEL32 ref: 00406723
Part of subcall function 004066F0: lstrcatW.KERNEL32(?,00410364), ref: 0040673B
Part of subcall function 004066F0: FindFirstFileW.KERNEL32(?,?,?,00410364), ref: 00406745

FindNextFileW.KERNEL32(?,?,?,?,?,00410364), ref: 0040681D
FindClose.KERNEL32(?,?,?,?,00410364), ref: 0040682E

Memory Dump Source

Source File: 0000001F.00000002.1731348658.0000000000401000.00000020.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Associated: 0000001F.00000002.1731329875.0000000000400000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731369521.0000000000409000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731390902.0000000000412000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731413165.0000000000414000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731434277.0000000000416000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731452197.0000000000417000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731470295.0000000000418000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731489962.000000000041D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000001F.00000002.1731513145.0000000000427000.00000040.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_31_2_400000_ubrrkv.jbxd

Similarity

API ID: Findlstrcat$Filelstrcmp$CloseFirstNextlstrlen
String ID:
API String ID: 2032009209-0
Opcode ID: 0f5836726a8da98c3cbf7c47a1779c47cee0d607164868c718d4f6be4fbb4468
Instruction ID: 9b87114a5c2e2fa11aec6284b95cd243dd4daa46cd42d80c1a26711d7dff17e5
Opcode Fuzzy Hash: 0f5836726a8da98c3cbf7c47a1779c47cee0d607164868c718d4f6be4fbb4468
Instruction Fuzzy Hash: 6F012D31A0021DABDF21AB60DC48BEE7BB8EF44704F0444B6F806E61A1D7798A91CB65

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a connection proxy to direct network traffic between systems or act as an intermediary for network communications to a command and control server to avoid direct connections to their infrastructure. Many tools exist that enable traffic redirection through proxies or port redirection, including HTRAN , ZXProxy, and ZXPortMap. Adversaries use these types of proxies to manage command and control communications, reduce the number of simultaneous outbound network connections, provide resiliency in the face of connection loss, or to ride over existing trusted communications paths between victims to avoid suspicion. Adversaries may chain together multiple proxies to further disguise the source of malicious traffic.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources. They can attempt to render stored data inaccessible by encrypting files or data on local and remote drives and withholding access to a decryption key. This may be done in order to extract monetary compensation from a victim in exchange for decryption or a decryption key (ransomware) or to render data permanently inaccessible in cases where the key is not saved or transmitted.
Tactics:	Impact
Data Sources:	Cloud Storage: Cloud Storage Modification, Command: Command Execution, File: File Creation, File: File Modification, Network Share: Network Share Access, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

Initial Sample

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

Spam, unwanted Advertisements and Ransom Demands

DDoS

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2246122658-3693405117-2476756634-1003\7ec63eecc011967c28496572961d2a7c_9e146be9-c76a-4720-bcdb-53011b87bd06

C:\Users\user\AppData\Roaming\Microsoft\ubrrkv.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Rich Headers

Data Directories

Sections

Resources

Imports

Possible Origin

Windows Analysis Report
file.exe