Play interactive tour

Edit tour

Analysis Report anchor_x64.exe

Overview

General Information

Sample Name:	anchor_x64.exe
Analysis ID:	381816
MD5:	86fefa2e8be486a49782d4d04095015e
SHA1:	f29d6b5c8777028eeef161729b153b4d6e8ba28a
SHA256:	a8a8c66b155fcf9bfdf34ba0aca98991440c3d34b8a597c3fdebc8da251c9634
Infos:
Most interesting Screenshot:

Detection

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)

Contains functionality to inject threads in other processes

Creates files in alternative data streams (ADS)

Machine Learning detection for sample

May check the online IP address of the machine

Queries the IP of a very long domain name

Connects to many different domains

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to query CPU information (cpuid)

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Creates COM task schedule object (often to register a task for autostart)

Detected potential crypto function

Found evasive API chain (date check)

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains more sections than normal

PE file contains sections with non-standard names

Sample file is different than original file name gathered from version info

Classification

Startup

System is w10x64

anchor_x64.exe (PID: 5668 cmdline: 'C:\Users\user\Desktop\anchor_x64.exe' MD5: 86FEFA2E8BE486A49782D4D04095015E)

anchor_x64.exe (PID: 5732 cmdline: C:\Users\user\Desktop\anchor_x64.exe -u MD5: 86FEFA2E8BE486A49782D4D04095015E)

anchor_x64.exe (PID: 3756 cmdline: C:\Users\user\Desktop\anchor_x64.exe -u MD5: 86FEFA2E8BE486A49782D4D04095015E)

anchor_x64.exe (PID: 6788 cmdline: C:\Users\user\Desktop\anchor_x64.exe -u MD5: 86FEFA2E8BE486A49782D4D04095015E)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Multi AV Scanner detection for submitted file

Show sources

Source: anchor_x64.exe	Virustotal: Detection: 39%	Perma Link
Source: anchor_x64.exe	Metadefender: Detection: 13%	Perma Link
Source: anchor_x64.exe	ReversingLabs: Detection: 34%

Machine Learning detection for sample

Show sources

Source: anchor_x64.exe

Joe Sandbox ML: detected

Source: anchor_x64.exe

Static PE information: TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT, HIGH_ENTROPY_VA

Source:	Binary string: Z:\D\GIT\anchorDns.llvm\Bin\x64\Release\anchorDNS_x64.pdbt source: anchor_x64.exe
Source:	Binary string: Z:\D\GIT\anchorDns.llvm\Bin\x64\Release\anchorDNS_x64.pdb source: anchor_x64.exe

Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler32	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler32	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler32	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler32	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\LocalServer32	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\LocalServer32	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\LocalServer	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\LocalServer	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\Elevation	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\Elevation	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_CURRENT_USER_Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs	Jump to behavior

Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B44358DB FindFirstFileW,GetFileAttributesW,FindNextFileW,FindClose,	0_2_00007FF6B44358DB
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B445D404 FindFirstFileExW,	0_2_00007FF6B445D404
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64997D404 FindFirstFileExW,	32_2_00007FF64997D404

Networking:

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)

Show sources

Source: Traffic	Snort IDS: 2032216 ET TROJAN Win32/TrickBot Anchor Variant Style External IP Check 192.168.2.5:49707 -> 3.211.138.232:80
Source: Traffic	Snort IDS: 2032216 ET TROJAN Win32/TrickBot Anchor Variant Style External IP Check 192.168.2.5:49739 -> 52.20.197.7:80
Source: Traffic	Snort IDS: 2032216 ET TROJAN Win32/TrickBot Anchor Variant Style External IP Check 192.168.2.5:49740 -> 3.211.138.232:80
Source: Traffic	Snort IDS: 2032216 ET TROJAN Win32/TrickBot Anchor Variant Style External IP Check 192.168.2.5:49746 -> 52.20.197.7:80
Source: Traffic	Snort IDS: 2032216 ET TROJAN Win32/TrickBot Anchor Variant Style External IP Check 192.168.2.5:49749 -> 3.224.94.38:80

May check the online IP address of the machine

Show sources

Source: C:\Users\user\Desktop\anchor_x64.exe	DNS query: name: checkip.amazonaws.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS query: name: checkip.amazonaws.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS query: name: checkip.amazonaws.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS query: name: checkip.amazonaws.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS query: name: checkip.amazonaws.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS query: name: checkip.amazonaws.com
Source: unknown	DNS query: name: checkip.amazonaws.com
Source: unknown	DNS query: name: checkip.amazonaws.com
Source: unknown	DNS query: name: checkip.amazonaws.com
Source: unknown	DNS query: name: checkip.amazonaws.com

Queries the IP of a very long domain name

Show sources

Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: efkezwpdxpsq3lsdvnscc.nqfuhj4g5qndhshtlghjlpujhqrbvu.uipcc52icgjgfdelsc3ancaijdnacinun2l.ihvdacjoibefwddrcdfptdhnifsnkdyddddp.ddddddaacg.fgevtf3izno2skelgg3umvcrrb.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: ihidsfghzboscitfrhswgbdqgvv4guil.nmrd22lq2lrwhpqcuma2h2sqhdnq2ay.ijzlljuihupgujlqirarhhzyqulr.d2v4cugas2zsqidfwhvyidgmj.usrhzdddddcdwdgg.fgevtf3izno2skelgg3umvcrrb.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: xvc62upjjgl6duajcmrlhpyqyelq.ubdiczr62ydccfelzfsdf3ie2uljgmm6gmsjw.hdddgpmfd.fgevtf3izno2skelgg3umvcrrb.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9pldddloddddy999dddhdddddpnwd.z9crufme5l4psjjmrl4mfxfk5b.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9pldddpvddddy999dddhdddddyjyx.jwb4i2qyfbm4s6nezzdc3gtzqb.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9pldddy9ddddy999dddhdddddlw4m.kczy5vnfhmmsc9j2mycx6jz6dc.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9pldddyhgdddy999dddhdddddpswl.bgldl2g6xazfs62juwyuwlr9bk.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9pldddpcgdddy999dddhdddddl9or.3r4yo6wzmmn6cew2beavnbzbmd.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9pldddsjgdddy999dddhdddddpb5r.bpatfnu5d6sxsunyuy5ndb6ycj.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9pldddclgdddy999dddhddddddvvr.fpcnuit4lfkbs46ube5ckzvacd.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9pldddlmgdddy999dddhdddddl6ff.ynxokgamkhc4cswxtcjmqftx6k.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9pldddqngdddy999dddhdddddde3f.u5y4irinuiiesrwkb9qlmtmiqh.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9pldddcfgdddy999dddhddddddr6l.5vzidylzgvglshur9xesgqcokc.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9plddd4fgdddy999dddhdddddyzbi.dchzuulka4o5cmhvpdo6wmbu6d.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9pldddsqgdddy999dddhddddddzmw.9resjqy6ihkasmudkuvbzukjni.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9plddddrgdddy999dddhdddddyham.pgw4vhlvnueacbhu4hyzs35bxc.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9pldddqrgdddy999dddhddddddbhb.cuirp5fa2xmncm2ltapgvfpbah.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 9pldddprgdddy999dddhdddddlqbh.dfvh9cbplgoasuekjvi39sswzg.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: efkezwpdxpsq3lsdvnsccnqfuhj4g5qnd.hshtlghjlpujhqrbvuui.pcc52icgjgfdelsc3ancaijdnacinun2lihvdac.joibefwddrcdfptdhnifsnkncdcddd.djdddddptmd.gconcfadqbxmsqekmnvx59jeyd.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: sdywilcw422sswtmyeiqdy.iqx3kpudmitglnhzmhtamd3zp.jifnl22mdlzmjbupchgapulphkpedztsiomlch.2ahtglw33pjc3nj22tdqamqbudccapdddcduthd.gconcfadqbxmsqekmnvx59jeyd.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: mvchgd4r3pfehvpcdabpjvyctgmdb2gnbzawds.ycuafhhyyqmbiwzhqrulfeh.acciakczepmdddcdn6m.gconcfadqbxmsqekmnvx59jeyd.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmdddd2ddddy999dddhdddddlbod.bn6bzwu5gzzocuemrtup2mrcmj.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmdddloddddy999dddhdddddynxn.ch4rh44odulbcyhi5oxmtqmnhc.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmdddpvddddy999dddhdddddd3oc.burfjb5fdcrtsij3mjxph4t9ed.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmdddy9ddddy999dddhdddddpguj.p3xbylmctu6ssfwxm6avnqbhzc.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmdddyhgdddy999dddhddddddudj.rxwj34r3eozecpumtr9oy5knqi.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmdddpcgdddy999dddhdddddlaoq.uat5co4whrpesmwycnee4vk9ag.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmdddsjgdddy999dddhdddddltqd.vupuxtkoqfmcczhguflirjy6nb.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmdddclgdddy999dddhddddddr6k.g34zz9ptnbf6sihsnjcwe52ttb.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmdddlmgdddy999dddhdddddpteh.xifcwlwakz6zca6hmx5mhq9xhh.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmdddqngdddy999dddhddddddtfn.bjsnopybkkpqcpwpysopb933tj.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmdddcfgdddy999dddhdddddypvm.wvzauzs59pqnspjpph26suqdeh.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmddd4fgdddy999dddhdddddd6jf.wyhmh92uye33coulyqiz9wp5jb.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmdddsqgdddy999dddhdddddliox.yh4wpbolazchcmjbd3torwaipg.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmddddrgdddy999dddhdddddpkcq.gaydllyaba55cdj4tepn3tt9oi.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmdddqrgdddy999dddhdddddy2sn.qykoejju4byoszu24tflfvyivh.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6fmdddprgdddy999dddhdddddp9en.66mq25hm6m2ysvhs9avcwmegtk.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: efkezwpdxpsq3lsdvnsccnqfuhj4g5qn.dhshtlghjlpujhqrbvuuipcc52icgjgfd.elsc3ancaijdnacinun2lihvdacjoibefwd.drcdfptdhnifsnkncnddgdddygdddddh69b.n3u3bdlqy4ahsfjea4eialvygh.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: detdzpzfn22etjgnoygduy5r6dvhctsjdmm.cjmsjkgqjhvsqmgmnjgd.ijaqph3lccbvhgf4dfbcu2u4jg.zlljfsjdarwhvyqnalnuhyikzrphyyc.bfejzlddxbddyd4ddj.n3u3bdlqy4ahsfjea4eialvygh.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 3pfehvpcdabpjvyctgmdb2gnbzawdsycua.fhhyyqmbiwzhqrulfehacciakczepmdddcyznl.n3u3bdlqy4ahsfjea4eialvygh.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgddloddddy999dddhdddddlvrl.qu5iyvkvdpz9sces3nv5pbmtag.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgddpvddddy999dddhdddddp4ac.tb62ikmmdrubss6ben6alszz3i.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgddy9ddddy999dddhdddddlkph.5wpy6jl9gfrqcmuru6q2psochj.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgddyhgdddy999dddhdddddp5mq.ptnbi2fjb5xucheykuvzyy6hch.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgddpcgdddy999dddhddddddpnq.zy3hs93ubdqlsvjtibqjvkr6uj.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgddsjgdddy999dddhddddddg5k.fs95q9lqgvvbs3hm3d5f2dschb.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgddclgdddy999dddhdddddytxl.i3dpfey2qkq6svwohnugqufi3h.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgddlmgdddy999dddhddddddirn.irmi264qck2sc5jv95jhp2u4xi.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgddqngdddy999dddhdddddpi9q.dg2ljzcl4exuc3hkfogs94qjci.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgddcfgdddy999dddhdddddpivr.yzmkrxgyr3amst2sn9gvgdat6j.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgdd4fgdddy999dddhdddddp49w.um3wlc3zjfb5c4wewtbxwb6uvj.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgddsqgdddy999dddhdddddlu9b.s5nndv5ejjdvszhh6t9sa3kvvg.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgdddrgdddy999dddhdddddphck.6jcelbziy5ics42fmfs6i2qf3g.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgddqrgdddy999dddhdddddyqad.rd4qr5m4xxmushwveacwsiq23g.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: vvtgddprgdddy999dddhdddddlbkx.cbqcffdll4y4cpnhzhkpmudufh.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: efkezwpdxpsq3lsdvnsccnqfuhj4g5qndhshtl.ghjlpujhqrbvuuipcc52icgjgfdelsc3ancaijd.nacinun2lihvdacjoibefwdd.rcdfptdhnifsnkncnddgdddygdddddygad.byeui5jwtkm3cs2pz2fp9zcewh.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: detdzpzfn22etjgnoygduy5r6dvh.ctsjdmmcjmsjkgqjhvsqmgmnjgdijaqph3.lccbvhgf4dfbcu2u4jgzlljfsjdarwhvyqnaln.uhyikzrphyycbfejzlddxvc62upjjgddydljwg.byeui5jwtkm3cs2pz2fp9zcewh.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: dabpjvyctgmdb2gnbzawdsycuafhhyyqmbi.wzhqrulfehacciakczepmdddcyahy.byeui5jwtkm3cs2pz2fp9zcewh.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zdddd2ddddy999dddhddddddarq.vpy96cjixdazsbeuc9a9yhfnod.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zdddloddddy999dddhdddddlqew.qtmpn5jib3cbcdubbscas93gog.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zdddpvddddy999dddhdddddlr4f.t2qfeac3xskfcrwe9tdqagvezb.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zdddy9ddddy999dddhdddddlbaj.4cig3iqctojvcu24p5eb5sehmk.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zdddyhgdddy999dddhdddddyxlj.nmzz55pkquabcb2nq6kzvys6ad.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zdddpcgdddy999dddhdddddypfb.qz96crvbld9msvndloy5ozeudh.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zdddsjgdddy999dddhddddddzzl.zhcvpyntsm42sdesosueoqzgxh.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zdddclgdddy999dddhdddddyrsi.9ubumpefzvr2ckhuvampkfv2ik.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zdddlmgdddy999dddhdddddpadj.2favssb3n5zbsenkgiv4uskm9c.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zdddqngdddy999dddhdddddlb2r.9n5wus44j6jks92r3gnjqxgnfd.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zdddcfgdddy999dddhdddddleci.5dirqvocy59xcn6nu9jbfw9psk.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zddd4fgdddy999dddhdddddpd2h.2vl9ho6fks5psr2lacevh9cakg.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zdddsqgdddy999dddhdddddlcvb.9ktc6nf3l4eisvw3t2ratso95h.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zddddrgdddy999dddhdddddpvxh.6rtufkuzgcnys66lgqdd2xasid.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zdddqrgdddy999dddhdddddddhb.llkd5phtskl3cduotxzr2hzvbk.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: r5zdddprgdddy999dddhdddddyqdd.syft2i3xmwqacen9orpna99h2c.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: efkezwpdxpsq3lsdvnsccnqfuhj4g5qndh.shtlghjlpujhqrbvuuipcc52icgjg.fdelsc3ancaijdnacinun2lihv.dacjoibefwddrcdfptdhnifsnknc.ndlohdhddddbdddddqhgg.qhfixf5me5zysvnduapxdzi32k.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: yl4piimm5n3dtfpddfp6jxyrg2nnbys.ch3cn33djbzrnusyci3dy.h3qjqzmch2zrzyiwytgh.fmfw3ylcc3inby4jkzrljtqcifgp23pjqgll2z.ir3lcdyorhdddhyci9.qhfixf5me5zysvnduapxdzi32k.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: xmfqb3dcxdvqb2sjcgqljlrcjv.gyh2pjxmldh2irspinytahrmfc3y.sc9ycnbkgddydpcrb.qhfixf5me5zysvnduapxdzi32k.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgddd2ddddy999dddhdddddloij.m9aamelug3wlsoeqqxnhcoonzk.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgddloddddy999dddhdddddpfxx.byjoxorguw3ac56fzehj92qu4k.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgddpvddddy999dddhdddddddjn.fjp55udwucbpcehnz45pznu56h.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgddy9ddddy999dddhdddddyajk.96zgy2mmf3zack2hlrip2yj3kd.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgddyhgdddy999dddhdddddyz4k.cog9d34uwngqsg2h9wzeinkz2c.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgddpcgdddy999dddhdddddpeqh.lkql433gfg6wc6w63o4rqsnawh.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgddsjgdddy999dddhdddddpdpl.cpiv4kq4f22ss9epwfurm6btji.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgddclgdddy999dddhdddddy9yb.u3fpuydggyexcinugqsfdfiewi.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgddlmgdddy999dddhdddddykbk.adjvyvgigykts3wy9ioczcikvj.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgddqngdddy999dddhdddddlvyq.jo4xd3xri5cosl6o69qnws26pk.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgddcfgdddy999dddhdddddpdbc.taffthi3km4isr6tby4foal5kj.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgdd4fgdddy999dddhdddddplkc.i62wsex9xh3vc2n9pnwtbqhtyj.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgddsqgdddy999dddhdddddymtl.4lrirpurbck6cwuoo5znuffoqj.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgdddrgdddy999dddhdddddpmek.g2sx9dnzrky4sqegczzpo5fm9i.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgddqrgdddy999dddhdddddd4jr.aax69ti6qen6ca6qpzkyb6seth.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: 6vtgddprgdddy999dddhddddddeth.rap4j9b3ajqjs6hyewd2bfmfvd.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: efkezwpdxpsq3lsdvnsccnqfuhj4.g5qndhshtlghjlpujhqrbvuuip.cc52icgjgfdelsc3ancaijdnacinun.2lihvdacjoibefwddrcdfptdhnifsnkncnd.lohchkwgdgdddygdddddyc2d.yyzoipktrpqicnwxz3hf4icrfg.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: n22etjgnoygduy5r6dvhsoljcgllufdjcmrd2vs.qwglquhqiggr6hzqcgfew.gfsdxbcshs4jkgljufcjcgqj2esq.malljgcidzre22dccfejzf4dlvcs2.ucjcmldddcdzbwd.yyzoipktrpqicnwxz3hf4icrfg.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: xlid32ljczrcjudcj3d62ypjlgldhzarylcw.yu5hqgncb3dc9dcdbkgddyds5hb.yyzoipktrpqicnwxz3hf4icrfg.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgdddpddddy999dddhdddddyism.vf629qyj3ylocmhq4xquq2cf3j.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgdd44ddddy999dddhdddddpeoj.c6namrxtvuzysbjaycteedpryk.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgdddggdddy999dddhdddddpcvj.wxq4ylecj6m4coek2mslauz3gh.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgddqcgdddy999dddhdddddpdog.hynr9mq3j3h5cqna3xqpz63mid.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgdddkgdddy999dddhdddddystw.nz5deyfwdxlms5hz5beuytmfei.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgddlmgdddy999dddhdddddybeh.pi5ngtmy2hzkcbel3gx54yz2nh.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgddcfgdddy999dddhdddddyzkr.pcuntdnhowktchwrtl4zjmasoh.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgddsqgdddy999dddhdddddpb5b.36aqozrooscbsahbpkpzoiqbii.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgddprgdddy999dddhdddddpqxg.e4lquweuedaack2grflu5q3gab.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgddywgdddy999dddhdddddytwl.233e5jfky55kclnr4dymadymfj.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgddlxgdddy999dddhdddddppdl.waxmtqa5jc43czwoikkjs9cpyg.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgdddygdddy999dddhddddddixb.6pwsy4pexbcuc2wsneznbljdsd.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgddqygdddy999dddhddddddffw.z5duhcnkcyofsqhbq3jszy46zi.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgddpygdddy999dddhdddddlssj.lzoor32orsgqcb6rehhyu6rsxk.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgddczgdddy999dddhddddddfur.dxexglwwuftac4uqnkxvisjvbd.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: b4tgddyzgdddy999dddhdddddlvxm.qjcreyljjknesmelbuw43evwgd.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: efkezwpdxpsq3lsdvnsccnq.fuhj4g5qndhshtlghjlpujhqr.bvuuipcc52icgjgfdelsc3ancaijdna.cinun2lihvdacjoibefwddrcdfptdhnifsnkn.cndlohcdyddddpdddddd43jd.dobwitxawyf4spwnwhvz6tmgij.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: zboscitfrhswgbdqgvv4guilxzqlhyy.qodql2edcoma4hypqipnhh.e4ihalhus5hulg6jllilar.whyqqolqlhpqctma22zyqhlndhvsiigllusrho.pgyumlirmql2y4gtdqnhdddgdzkm.dobwitxawyf4spwnwhvz6tmgij.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 2gmqbzzidzacyoccugndhylqwb.chzbsrodfyhapcdakdgppmdddcy5tk.dobwitxawyf4spwnwhvz6tmgij.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 2gmqbzzidzacyoccugndhylqwb.chzbsrodfyhapcdakdgppmdddcy5tk.dobwitxawyf4spwnwhvz6tmgij.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 2gmqbzzidzacyoccugndhylqwb.chzbsrodfyhapcdakdgppmdddcy5tk.dobwitxawyf4spwnwhvz6tmgij.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: efkezwpdxpsq3lsdvnsccnqf.uhj4g5qndhshtlghjlpujhqrbvu.uipcc52icgjgfdelsc3ancaijdnaci.nun2lihvdacjoibefwddrcdfptdhnifsnk.ncndlohcdyddddpddddddjmgd.zh2kdd2bgmzds9ewlc4gdg55eb.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: zboscitfrhswgbdqgvv4guilxzqlhyyqod.ql2edcoma4hypqipnhhe4iha.lhus5hulg6jllilarwhyqqolqlhpqctma22zyqh.lndhvsiigllusrhopgyumlirmql2y4gtd.qdddcdmyyg.zh2kdd2bgmzds9ewlc4gdg55eb.sluaknhbsoe.com
Source: C:\Users\user\Desktop\anchor_x64.exe	DNS traffic detected: query: izqlhvlqqglqjg4igzryhydch.3vdzl4drviphsljjgl6gldjwhdddgpoej.zh2kdd2bgmzds9ewlc4gdg55eb.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9plddddpddddy999dddhdddddlz2b.xfy2sw3aulrgspj6deokfkkyyi.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9plddd44ddddy999dddhdddddy2id.ldfnhtzk6pjds4wvcqzm4g2leg.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9plddddggdddy999dddhdddddlj2r.swc45z3skqrysdn9bactk2wdwg.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9pldddqcgdddy999dddhdddddptiw.mzy4irkums4hci2695qx5yo6wd.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9plddddkgdddy999dddhddddddk2g.qmfpmdukjmtyssuso439owrtkd.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9pldddlmgdddy999dddhddddddv6l.n9tdulmmdzshsw24untj6g6olh.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9pldddcfgdddy999dddhddddddxjf.m6q4kshtxoq2sehrg64e2otxzb.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9pldddsqgdddy999dddhdddddl6yx.lu2b5aasjdizcb2wrrl3q9vjac.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9pldddprgdddy999dddhdddddydjr.6q9aagez63qrcu62zwfeqy3sub.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9pldddywgdddy999dddhdddddlphf.ek6mhkhossxfsmnixixa2qonpb.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9pldddlxgdddy999dddhdddddp3eb.dqhfv2j26lg5cy264byd32bsbk.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9plddddygdddy999dddhdddddpouf.tekf3etazr5qsqnv29q6vwb3ab.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9pldddqygdddy999dddhdddddyyjg.lbw6xkbpmyo2skw2ptrf6ei3fk.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9pldddpygdddy999dddhdddddpyrx.qatwix2rvj9ocb2zwain5kdijk.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9pldddczgdddy999dddhdddddl66c.4rikdsq6btancwef3jj34yx9xj.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 9pldddyzgdddy999dddhdddddl55q.xtc34ow4jyiysghm6s5r3fdg2c.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: efkezwpdxpsq3lsdvnsccnqf.uhj4g5qndhshtlghjlpujhqrbvuui.pcc52icgjgfdelsc3anca.ijdnacinun2lihvdacjoibef.wddrcdfptdhnifsnkncnddgdddygddddd2drd.4l66nxnqtu22sgjbc2zhnjwx9i.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: detdzpzfn22etjgnoygduy5.r6dvhsoljcgllufdjcmrd2vsqwglq.uhqiggr6hzqcgfewgfsdxbcshs4jkgljuf.cjcgqj2esqmalljgcidzre.22dccfejzf4dlvcdddcddv4g.4l66nxnqtu22sgjbc2zhnjwx9i.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: nmfhb2ccxlid32ljczrcjudcj3d62yp.jlgldhzarylcwyu5hqgncb3dc9dcdbkgddydqxeb.4l66nxnqtu22sgjbc2zhnjwx9i.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgdddpddddy999dddhdddddyo2l.i92vwadvuz3ecc29owsj6wdhth.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgdd44ddddy999dddhdddddpvqh.9utcvyst5vqssa6w6nd5jmyogc.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgdddggdddy999dddhddddddsqc.2ohvfyamhcptsje2w2hi9ya3rh.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgddqcgdddy999dddhdddddd94k.kfrbfdrorkybsgnxyuudbnoh9k.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgdddkgdddy999dddhdddddpcof.dvmefyszn46hc566zauitanbfd.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgddlmgdddy999dddhdddddy4uk.kabzkigpe4epci6udrzsah9gfi.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgddcfgdddy999dddhdddddpb2f.s2rkpzaqdxt5c3hjrkikmpoffi.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgddsqgdddy999dddhdddddplpd.x9zlrxu6etats5uezlp5ja5fkd.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgddprgdddy999dddhdddddp3sf.ohrx3agliueecn6dat5yuupwyi.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgddywgdddy999dddhdddddysdl.lop55mu56yulsqu6ac92lunkki.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgddlxgdddy999dddhdddddynur.i9xclwtru2ksc6eg665ub4ewwg.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgdddygdddy999dddhdddddd4qi.g2ynkufys4zxcfhxdtjomw5p4i.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgddqygdddy999dddhdddddpdom.j42asnnhapegsn6r6hbgvw4vec.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgddpygdddy999dddhdddddy3uq.v44md4zvun3kcbuy2ebpawaw6j.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgddczgdddy999dddhdddddlwdi.xhgeo2odu2tusgw5bapio9vgyh.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: i4tgddyzgdddy999dddhdddddpwur.9lgnhyu5tvvusojdrrmtqlbn9c.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: efkezwpdxpsq3lsdvnsccnqfuhj.4g5qndhshtlghjlpujhqr.bvuuipcc52icgjgfdelsc3ancaijdnacinu.n2lihvdacjoibefwddrcdfptdhnifsnkncn.dlohcdyddddpddddddh4sd.el2by9kirmlccdh29xfmxw6ycb.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: zboscitfrhswgbdqgvv4guilxzqlhyyqo.dql2edcoma4hypqipnhh.e4ihalhus5hulg6jllilarwhyqqolqlhpqctma2.2zyqhlndhvsiigllusrhopgyumlirmql2y4gtd.qnhadddldluwh.el2by9kirmlccdh29xfmxw6ycb.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: czrcjudcj3d62ypjlgldhzarylc.wyu5hqgncb3dc9dcdbkgddyd4wod.el2by9kirmlccdh29xfmxw6ycb.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zddddpddddy999dddhdddddprfh.rnsozrnfjg5ssjuzyf5g2psebh.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zddd44ddddy999dddhdddddpbgh.viyctqclbpsms2uvpjxxemrilb.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zddddggdddy999dddhdddddlhnc.wrrfhnupqjemc3ewn2cxky6wui.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zdddqcgdddy999dddhdddddluac.qufekzpeuiqvc2uhdolb4tzs4j.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zddddkgdddy999dddhddddddbkl.ahrdswy2zzhycjhnrc5dtlkjtb.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zdddlmgdddy999dddhdddddlsqm.3n36tykugh2msmneu24ldwmawg.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zdddcfgdddy999dddhddddddbgj.g2kmc25kndupc3e4dzpdgpulfg.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zdddsqgdddy999dddhddddddjkn.vd6k4imksj5vcfejmddw3evb4d.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zdddprgdddy999dddhdddddp9hi.hqsdkaqoqfeqsg2qwruf3g3zwi.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zdddywgdddy999dddhdddddlrdl.xpgvoywmmvvncrh2xxjjlgshfh.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zdddlxgdddy999dddhddddddhcx.czfwo4pukvuost6zsumtwo3qwk.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zddddygdddy999dddhdddddpj6l.ztqavv5xluilsdnitnmt3rmmbb.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zdddqygdddy999dddhdddddd4oq.slgos5hrghxtct6fjjctwuabqh.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zdddpygdddy999dddhdddddl2lf.f466gt53chj2c6ho9erpxr29th.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zdddczgdddy999dddhdddddlt9q.ky6gpbr3pdqgcdehnyc2t5umrh.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: 94zdddyzgdddy999dddhdddddlc5j.dzdsgil5wljhc22ljq2eddsowh.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: efkezwpdxpsq3lsdvnsccnq.fuhj4g5qndhshtlghjlpujhqrbvuui.pcc52icgjgfdelsc3ancai.jdnacinun2lihvdacjoibefwddrc.dfptdhnifsnkncndldlddddqdddddd2bm.izpagnu92o4ncu24frquvc2thh.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: ohchkwmmnnoecl5hjdphuo.abqfy6haycdgawgpyctglw32a.idzanytccsafc2zcqmviqz.h4ryyny2v4cdapwzpycyaln32iib.gacysdcumfnhyyqmvcwzbdr3yne2pycdddhdzlm.izpagnu92o4ncu24frquvc2thh.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: gabngpsc2gmqbzzidzacyoccu.gndhylqwbchzbsrodfyhapcdakdgppmdddcdon4.izpagnu92o4ncu24frquvc2thh.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgdddpddddy999dddhddddddgci.n2eurt5u5ewrc9hbnpldsxvfoc.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgdd44ddddy999dddhdddddlp5r.gdwq5vmj6uojsdnpqrae5wxigi.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgdddggdddy999dddhdddddd2hf.r43e9fu33m4nchwrssjevbknsi.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgddqcgdddy999dddhdddddyrgb.y2qlfk5gupk2s96e3e3kk2fpbi.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgdddkgdddy999dddhdddddy5il.q2ign3t2aj5rse6r43psplfcmi.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgddlmgdddy999dddhdddddy5jf.xti554ejkppjswwilaod54xp5i.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgddcfgdddy999dddhdddddlrcn.ityoxilmbyk9cawra5lyzbs2aj.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgddsqgdddy999dddhdddddlf4r.xvm6itkixjw5crj2svitnjhjmg.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgddprgdddy999dddhdddddybgg.uuyk2gaz4nshsejszhb2zssvyh.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgddywgdddy999dddhdddddlphc.ty3luv3ax4vusj6yru4qwtkork.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgddlxgdddy999dddhddddddhnl.ex9b3ql5tb4ccxjoqvx9izqotj.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgdddygdddy999dddhddddddufk.xfrrqmnf6eg4shnisdim3meypb.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgddqygdddy999dddhddddddffh.ynlxdlzabgq9sonkpi3mnbw49g.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgddpygdddy999dddhdddddpp6f.626igjzvbw6gs3u4s6neazuuqh.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgddczgdddy999dddhdddddppxg.xm53j6ixi6f5s62rumlc6wrjuc.sluaknhbsoe.com
Source: unknown	DNS traffic detected: query: wtfgddyzgdddy999dddhdddddyf5c.2gh3s34zvlokc4ua9gamk66mzk.sluaknhbsoe.com

Source: unknown

Network traffic detected: DNS query count 252

Source: Joe Sandbox View	IP Address: 3.211.138.232 3.211.138.232
Source: Joe Sandbox View	IP Address: 52.20.197.7 52.20.197.7

Source: Joe Sandbox View	ASN Name: AMAZON-AESUS AMAZON-AESUS
Source: Joe Sandbox View	ASN Name: AMAZON-AESUS AMAZON-AESUS

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Cache-Control: no-cacheConnection: Keep-AlivePragma: no-cacheUser-Agent: WinHTTP loader/1.0Host: checkip.amazonaws.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Cache-Control: no-cacheConnection: Keep-AlivePragma: no-cacheUser-Agent: WinHTTP loader/1.0Host: checkip.amazonaws.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Cache-Control: no-cacheConnection: Keep-AlivePragma: no-cacheUser-Agent: WinHTTP loader/1.0Host: checkip.amazonaws.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Cache-Control: no-cacheConnection: Keep-AlivePragma: no-cacheUser-Agent: WinHTTP loader/1.0Host: checkip.amazonaws.com

Source: unknown

DNS traffic detected: queries for: checkip.amazonaws.com

Source: anchor_x64.exe, 00000001.00000003.235369829.0000022B85CDC000.00000004.00000001.sdmp, anchor_x64.exe, 00000020.00000002.507309729.000001DC6466E000.00000004.00000020.sdmp, anchor_x64.exe, 00000020.00000003.476209421.000001DC64646000.00000004.00000001.sdmp, anchor_x64.exe, 00000020.00000002.507251917.000001DC64617000.00000004.00000020.sdmp, anchor_x64.exe, 00000023.00000003.735729186.0000023311ABB000.00000004.00000001.sdmp

String found in binary or memory: http://checkip.amazonaws.com/

Source: C:\Users\user\Desktop\anchor_x64.exe

Code function: 0_2_00007FF6B444048A GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueA,AdjustTokenPrivileges,CloseHandle,CreateDesktopA,Sleep,CloseDesktop,GetLastError,GetLastError,GetLastError,CloseHandle,

0_2_00007FF6B444048A

Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442A5F6	0_2_00007FF6B442A5F6
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442AED2	0_2_00007FF6B442AED2
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442F80E	0_2_00007FF6B442F80E
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4435209	0_2_00007FF6B4435209
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B44239FB	0_2_00007FF6B44239FB
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B44552C0	0_2_00007FF6B44552C0
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B44242E4	0_2_00007FF6B44242E4
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B44303FD	0_2_00007FF6B44303FD
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B44344C3	0_2_00007FF6B44344C3
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B44395A8	0_2_00007FF6B44395A8
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B444F5B0	0_2_00007FF6B444F5B0
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B443CD36	0_2_00007FF6B443CD36
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4423575	0_2_00007FF6B4423575
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4443609	0_2_00007FF6B4443609
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4428E1C	0_2_00007FF6B4428E1C
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B445EE18	0_2_00007FF6B445EE18
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442C5BE	0_2_00007FF6B442C5BE
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442B68A	0_2_00007FF6B442B68A
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442BE8E	0_2_00007FF6B442BE8E
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4427E98	0_2_00007FF6B4427E98
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4462E48	0_2_00007FF6B4462E48
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442CE64	0_2_00007FF6B442CE64
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4429F0A	0_2_00007FF6B4429F0A
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4428716	0_2_00007FF6B4428716
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B443BF22	0_2_00007FF6B443BF22
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B44416CE	0_2_00007FF6B44416CE
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B44266C4	0_2_00007FF6B44266C4
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B445CEEC	0_2_00007FF6B445CEEC
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4426EEC	0_2_00007FF6B4426EEC
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B445B6E8	0_2_00007FF6B445B6E8
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442777A	0_2_00007FF6B442777A
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B443AFAE	0_2_00007FF6B443AFAE
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4452754	0_2_00007FF6B4452754
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442176B	0_2_00007FF6B442176B
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B444FF60	0_2_00007FF6B444FF60
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B444D00C	0_2_00007FF6B444D00C
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B443D004	0_2_00007FF6B443D004
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B444908C	0_2_00007FF6B444908C
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B444E894	0_2_00007FF6B444E894
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4421094	0_2_00007FF6B4421094
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442C8B2	0_2_00007FF6B442C8B2
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B443890E	0_2_00007FF6B443890E
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442C0FC	0_2_00007FF6B442C0FC
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4448926	0_2_00007FF6B4448926
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442E8EC	0_2_00007FF6B442E8EC
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B44220D8	0_2_00007FF6B44220D8
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442E192	0_2_00007FF6B442E192
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4428992	0_2_00007FF6B4428992
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B444217C	0_2_00007FF6B444217C
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B443F148	0_2_00007FF6B443F148
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B443614C	0_2_00007FF6B443614C
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442693C	0_2_00007FF6B442693C
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442A16E	0_2_00007FF6B442A16E
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B44271F6	0_2_00007FF6B44271F6
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442F1C7	0_2_00007FF6B442F1C7
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B44479D8	0_2_00007FF6B44479D8
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4428248	0_2_00007FF6B4428248
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B444FA54	0_2_00007FF6B444FA54
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4448250	0_2_00007FF6B4448250
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442BA3A	0_2_00007FF6B442BA3A
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B443DB2C	0_2_00007FF6B443DB2C
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4427B16	0_2_00007FF6B4427B16
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B443F31E	0_2_00007FF6B443F31E
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B44212B6	0_2_00007FF6B44212B6
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442C2F2	0_2_00007FF6B442C2F2
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B443EBAA	0_2_00007FF6B443EBAA
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B443A3AE	0_2_00007FF6B443A3AE
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B443FBB4	0_2_00007FF6B443FBB4
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442AB96	0_2_00007FF6B442AB96
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B445FB64	0_2_00007FF6B445FB64
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4445414	0_2_00007FF6B4445414
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B445D404	0_2_00007FF6B445D404
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4437C28	0_2_00007FF6B4437C28
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4442C2F	0_2_00007FF6B4442C2F
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4426BCC	0_2_00007FF6B4426BCC
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B443C3C2	0_2_00007FF6B443C3C2
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B44273F4	0_2_00007FF6B44273F4
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B444048A	0_2_00007FF6B444048A
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4428476	0_2_00007FF6B4428476
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B445BC9C	0_2_00007FF6B445BC9C
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4429CA4	0_2_00007FF6B4429CA4
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442B45A	0_2_00007FF6B442B45A
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B442BC62	0_2_00007FF6B442BC62
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4447CCD	0_2_00007FF6B4447CCD
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B4447CCC	0_2_00007FF6B4447CCC
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B44374C4	0_2_00007FF6B44374C4
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B443B4E4	0_2_00007FF6B443B4E4
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF6499442E4	32_2_00007FF6499442E4
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649968250	32_2_00007FF649968250
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF6499439FB	32_2_00007FF6499439FB
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64996217C	32_2_00007FF64996217C
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF6499574C4	32_2_00007FF6499574C4
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649967CCC	32_2_00007FF649967CCC
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649957C28	32_2_00007FF649957C28
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF6499595A8	32_2_00007FF6499595A8
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994E8EC	32_2_00007FF64994E8EC
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649968926	32_2_00007FF649968926
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64995890E	32_2_00007FF64995890E
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994C2F2	32_2_00007FF64994C2F2
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF6499412B6	32_2_00007FF6499412B6
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF6499752C0	32_2_00007FF6499752C0
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649947B16	32_2_00007FF649947B16
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64995F31E	32_2_00007FF64995F31E
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64995DB2C	32_2_00007FF64995DB2C
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994BA3A	32_2_00007FF64994BA3A
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649948248	32_2_00007FF649948248
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64996FA54	32_2_00007FF64996FA54
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF6499679D8	32_2_00007FF6499679D8
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994F1C7	32_2_00007FF64994F1C7
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF6499471F6	32_2_00007FF6499471F6
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649955209	32_2_00007FF649955209
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994A16E	32_2_00007FF64994A16E
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994693C	32_2_00007FF64994693C
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64995614C	32_2_00007FF64995614C
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64995F148	32_2_00007FF64995F148
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994E192	32_2_00007FF64994E192
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649948992	32_2_00007FF649948992
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64995B4E4	32_2_00007FF64995B4E4
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF6499544C3	32_2_00007FF6499544C3
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649967CCD	32_2_00007FF649967CCD
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994B45A	32_2_00007FF64994B45A
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994BC62	32_2_00007FF64994BC62
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64997BC9C	32_2_00007FF64997BC9C
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649949CA4	32_2_00007FF649949CA4
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649948476	32_2_00007FF649948476
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64996048A	32_2_00007FF64996048A
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF6499473F4	32_2_00007FF6499473F4
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64995C3C2	32_2_00007FF64995C3C2
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649946BCC	32_2_00007FF649946BCC
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649962C2F	32_2_00007FF649962C2F
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF6499503FD	32_2_00007FF6499503FD
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64997D404	32_2_00007FF64997D404
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649965414	32_2_00007FF649965414
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64997FB64	32_2_00007FF64997FB64
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994AB96	32_2_00007FF64994AB96
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64995EBAA	32_2_00007FF64995EBAA
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64995FBB4	32_2_00007FF64995FBB4
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64995A3AE	32_2_00007FF64995A3AE
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64997CEEC	32_2_00007FF64997CEEC
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649946EEC	32_2_00007FF649946EEC
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64997B6E8	32_2_00007FF64997B6E8
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF6499466C4	32_2_00007FF6499466C4
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994AED2	32_2_00007FF64994AED2
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF6499616CE	32_2_00007FF6499616CE
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649948716	32_2_00007FF649948716
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64995BF22	32_2_00007FF64995BF22
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649949F0A	32_2_00007FF649949F0A
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994CE64	32_2_00007FF64994CE64
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649982E48	32_2_00007FF649982E48
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649947E98	32_2_00007FF649947E98
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994B68A	32_2_00007FF64994B68A
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994BE8E	32_2_00007FF64994BE8E
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994C5BE	32_2_00007FF64994C5BE
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649948E1C	32_2_00007FF649948E1C
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64997EE18	32_2_00007FF64997EE18
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994A5F6	32_2_00007FF64994A5F6
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649963609	32_2_00007FF649963609
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649943575	32_2_00007FF649943575
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64995CD36	32_2_00007FF64995CD36
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64996F5B0	32_2_00007FF64996F5B0
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF6499420D8	32_2_00007FF6499420D8
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994C0FC	32_2_00007FF64994C0FC
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994C8B2	32_2_00007FF64994C8B2
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64996908C	32_2_00007FF64996908C
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64996E894	32_2_00007FF64996E894
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649941094	32_2_00007FF649941094
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64995D004	32_2_00007FF64995D004
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64996D00C	32_2_00007FF64996D00C
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994F80E	32_2_00007FF64994F80E
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64996FF60	32_2_00007FF64996FF60
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994176B	32_2_00007FF64994176B
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF649972754	32_2_00007FF649972754
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64995AFAE	32_2_00007FF64995AFAE
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64994777A	32_2_00007FF64994777A

Source: anchor_x64.exe

Static PE information: Number of sections : 11 > 10

Source: anchor_x64.exe, 00000001.00000002.255677090.0000022B86310000.00000002.00000001.sdmp	Binary or memory string: OriginalFilenamenlsbres.dll.muij% vs anchor_x64.exe
Source: anchor_x64.exe, 00000001.00000002.255669152.0000022B86300000.00000002.00000001.sdmp	Binary or memory string: OriginalFilenamenlsbres.dllj% vs anchor_x64.exe
Source: anchor_x64.exe, 00000001.00000002.256061058.0000022B86660000.00000002.00000001.sdmp	Binary or memory string: OriginalFilenamemswsock.dll.muij% vs anchor_x64.exe
Source: anchor_x64.exe, 00000020.00000002.507360594.000001DC64BB0000.00000002.00000001.sdmp	Binary or memory string: OriginalFilenamenlsbres.dllj% vs anchor_x64.exe
Source: anchor_x64.exe, 00000020.00000002.507368457.000001DC64BC0000.00000002.00000001.sdmp	Binary or memory string: OriginalFilenamenlsbres.dll.muij% vs anchor_x64.exe
Source: anchor_x64.exe, 00000020.00000002.507378908.000001DC64BD0000.00000002.00000001.sdmp	Binary or memory string: OriginalFilenamemswsock.dll.muij% vs anchor_x64.exe
Source: anchor_x64.exe, 00000023.00000002.808208554.0000023311A20000.00000002.00000001.sdmp	Binary or memory string: OriginalFilenamemswsock.dll.muij% vs anchor_x64.exe
Source: anchor_x64.exe, 00000023.00000002.808180653.0000023311A00000.00000002.00000001.sdmp	Binary or memory string: OriginalFilenamenlsbres.dllj% vs anchor_x64.exe
Source: anchor_x64.exe, 00000023.00000002.808190266.0000023311A10000.00000002.00000001.sdmp	Binary or memory string: OriginalFilenamenlsbres.dll.muij% vs anchor_x64.exe

Source: classification engine

Classification label: mal76.troj.evad.winEXE@4/2@293/3

Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B444048A GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueA,AdjustTokenPrivileges,CloseHandle,CreateDesktopA,Sleep,CloseDesktop,GetLastError,GetLastError,GetLastError,CloseHandle,		0_2_00007FF6B444048A
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64996048A GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueA,AdjustTokenPrivileges,CloseHandle,CreateDesktopA,Sleep,CloseDesktop,GetLastError,GetLastError,GetLastError,CloseHandle,		32_2_00007FF64996048A

Source: C:\Users\user\Desktop\anchor_x64.exe

File created: C:\Users\user\Desktop\anchor_x64.exe: $data

Jump to behavior

Source: anchor_x64.exe

Static PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\anchor_x64.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\anchor_x64.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: anchor_x64.exe	Virustotal: Detection: 39%
Source: anchor_x64.exe	Metadefender: Detection: 13%
Source: anchor_x64.exe	ReversingLabs: Detection: 34%

Source: unknown	Process created: C:\Users\user\Desktop\anchor_x64.exe 'C:\Users\user\Desktop\anchor_x64.exe'
Source: unknown	Process created: C:\Users\user\Desktop\anchor_x64.exe C:\Users\user\Desktop\anchor_x64.exe -u
Source: unknown	Process created: C:\Users\user\Desktop\anchor_x64.exe C:\Users\user\Desktop\anchor_x64.exe -u
Source: unknown	Process created: C:\Users\user\Desktop\anchor_x64.exe C:\Users\user\Desktop\anchor_x64.exe -u

Source: C:\Users\user\Desktop\anchor_x64.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32

Jump to behavior

Source: anchor_x64.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: anchor_x64.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: anchor_x64.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: anchor_x64.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: anchor_x64.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: anchor_x64.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: anchor_x64.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: anchor_x64.exe

Static PE information: TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT, HIGH_ENTROPY_VA

Source: anchor_x64.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: Z:\D\GIT\anchorDns.llvm\Bin\x64\Release\anchorDNS_x64.pdbt source: anchor_x64.exe
Source:	Binary string: Z:\D\GIT\anchorDns.llvm\Bin\x64\Release\anchorDNS_x64.pdb source: anchor_x64.exe

Source: anchor_x64.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: anchor_x64.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: anchor_x64.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: anchor_x64.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: anchor_x64.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: anchor_x64.exe	Static PE information: section name: .00cfg
Source: anchor_x64.exe	Static PE information: section name: .addr
Source: anchor_x64.exe	Static PE information: section name: .rand
Source: anchor_x64.exe	Static PE information: section name: _RDATA

Hooking and other Techniques for Hiding and Protection:

Creates files in alternative data streams (ADS)

Show sources

Source: C:\Users\user\Desktop\anchor_x64.exe

File created: C:\Users\user\Desktop\anchor_x64.exe: $data

Jump to behavior

Source: C:\Users\user\Desktop\anchor_x64.exe

Evasive API call chain: GetLocalTime,DecisionNodes

graph_0-19468

Source: C:\Users\user\Desktop\anchor_x64.exe TID: 5968	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe TID: 6988	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\anchor_x64.exe TID: 3556	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B44358DB FindFirstFileW,GetFileAttributesW,FindNextFileW,FindClose,	0_2_00007FF6B44358DB
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B445D404 FindFirstFileExW,	0_2_00007FF6B445D404
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64997D404 FindFirstFileExW,	32_2_00007FF64997D404

Source: anchor_x64.exe, 00000001.00000002.255505472.0000022B85C88000.00000004.00000020.sdmp, anchor_x64.exe, 00000020.00000002.507331940.000001DC64691000.00000004.00000020.sdmp, anchor_x64.exe, 00000023.00000003.735762778.0000023311ADE000.00000004.00000001.sdmp	Binary or memory string: Hyper-V RAW
Source: anchor_x64.exe, 00000023.00000003.735762778.0000023311ADE000.00000004.00000001.sdmp	Binary or memory string: Hyper-V RAWLoopback Pseudo-Interface 1Software Loopback Interface 1{E6E9DFC2-98F2-11E9-90CE-806E6F6E6963}
Source: anchor_x64.exe, 00000020.00000002.507251917.000001DC64617000.00000004.00000020.sdmp	Binary or memory string: Hyper-V RAW

Source: C:\Users\user\Desktop\anchor_x64.exe

Code function: 0_2_00007FF6B44559E4 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_00007FF6B44559E4

Source: C:\Users\user\Desktop\anchor_x64.exe

Code function: 0_2_00007FF6B4459600 GetProcessHeap,

0_2_00007FF6B4459600

Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B444AB74 SetUnhandledExceptionFilter,_invalid_parameter_noinfo,	0_2_00007FF6B444AB74
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B444A698 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_00007FF6B444A698
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B44559E4 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00007FF6B44559E4
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B444A284 IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00007FF6B444A284
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B444A274 SetUnhandledExceptionFilter,	0_2_00007FF6B444A274
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64996AB74 SetUnhandledExceptionFilter,_invalid_parameter_noinfo,	32_2_00007FF64996AB74
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64996A274 SetUnhandledExceptionFilter,	32_2_00007FF64996A274
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64996A284 IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	32_2_00007FF64996A284
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF6499759E4 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	32_2_00007FF6499759E4
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF64996A698 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	32_2_00007FF64996A698

HIPS / PFW / Operating System Protection Evasion:

Contains functionality to inject threads in other processes

Show sources

Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 0_2_00007FF6B44416CE VirtualAllocEx,WriteProcessMemory,CreateRemoteThread,CloseHandle,GetLastError,GetLastError,GetLastError,GetLastError,CloseHandle,		0_2_00007FF6B44416CE
Source: C:\Users\user\Desktop\anchor_x64.exe	Code function: 32_2_00007FF6499616CE VirtualAllocEx,WriteProcessMemory,CreateRemoteThread,CloseHandle,GetLastError,GetLastError,GetLastError,GetLastError,CloseHandle,		32_2_00007FF6499616CE

Source: C:\Users\user\Desktop\anchor_x64.exe

Code function: 0_2_00007FF6B4462C60 cpuid

0_2_00007FF6B4462C60

Source: C:\Users\user\Desktop\anchor_x64.exe

Code function: 0_2_00007FF6B44303FD GetLocalTime,GetUserNameW,VariantInit,VariantInit,VariantInit,VariantInit,VariantInit,VariantClear,VariantClear,VariantClear,VariantClear,VariantClear,SysAllocString,SysFreeString,VariantClear,VariantClear,VariantClear,SysFreeString,VariantClear,VariantClear,SysAllocString,SysFreeString,SysAllocString,SysFreeString,SysAllocString,SysFreeString,SysAllocString,SysFreeString,SysAllocString,SysFreeString,SysAllocString,SysFreeString,SysAllocString,SysFreeString,SysFreeString,SysAllocString,VariantInit,SysAllocString,SysAllocString,VariantInit,SysAllocString,SysAllocString,SysAllocString,SysFreeString,VariantClear,VariantClear,VariantClear,VariantClear,VariantClear,VariantClear,VariantClear,VariantClear,VariantClear,

0_2_00007FF6B44303FD

Source: C:\Users\user\Desktop\anchor_x64.exe

0_2_00007FF6B44303FD

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Scheduled Task/Job1	Create Account1	Access Token Manipulation1	Masquerading1	OS Credential Dumping	System Time Discovery1	Remote Services	Archive Collected Data1	Exfiltration Over Other Network Medium	Encrypted Channel1	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Native API1	Scheduled Task/Job1	Process Injection11	Virtualization/Sandbox Evasion1	LSASS Memory	Security Software Discovery21	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Ingress Tool Transfer1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Scheduled Task/Job1	Access Token Manipulation1	Security Account Manager	Virtualization/Sandbox Evasion1	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Non-Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Process Injection11	NTDS	Account Discovery1	Distributed Component Object Model	Input Capture	Scheduled Transfer	Application Layer Protocol12	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	NTFS File Attributes1	LSA Secrets	System Owner/User Discovery1	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Steganography	Cached Domain Credentials	Remote System Discovery1	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	Compile After Delivery	DCSync	System Network Configuration Discovery1	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	File and Directory Discovery1	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	Masquerading	/etc/passwd and /etc/shadow	System Information Discovery12	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
anchor_x64.exe	40%	Virustotal		Browse
anchor_x64.exe	14%	Metadefender		Browse
anchor_x64.exe	34%	ReversingLabs	Win64.Trojan.Bingoml
anchor_x64.exe	100%	Joe Sandbox ML

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

No Antivirus matches

URLs

No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
6fmdddcfgdddy999dddhdddddypvm.wvzauzs59pqnspjpph26suqdeh.sluaknhbsoe.com	4.0.1.89	true	true	unknown
r5zdddqrgdddy999dddhdddddddhb.llkd5phtskl3cduotxzr2hzvbk.sluaknhbsoe.com	4.0.1.107	true	true	unknown
9pldddqcgdddy999dddhdddddptiw.mzy4irkums4hci2695qx5yo6wd.sluaknhbsoe.com	4.0.1.35	true	true	unknown
9pldddlmgdddy999dddhdddddl6ff.ynxokgamkhc4cswxtcjmqftx6k.sluaknhbsoe.com	4.0.1.74	true	true	unknown
94zdddcfgdddy999dddhddddddbgj.g2kmc25kndupc3e4dzpdgpulfg.sluaknhbsoe.com	4.0.1.89	true	true	unknown
gabngpsc2gmqbzzidzacyoccu.gndhylqwbchzbsrodfyhapcdakdgppmdddcdon4.izpagnu92o4ncu24frquvc2thh.sluaknhbsoe.com	129.171.43.0	true	true	unknown
9pldddqngdddy999dddhdddddde3f.u5y4irinuiiesrwkb9qlmtmiqh.sluaknhbsoe.com	4.0.1.83	true	true	unknown
b4tgddqygdddy999dddhddddddffw.z5duhcnkcyofsqhbq3jszy46zi.sluaknhbsoe.com	4.0.1.131	true	true	unknown
vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com	4.0.0.96	true	true	unknown
6fmdddsqgdddy999dddhdddddliox.yh4wpbolazchcmjbd3torwaipg.sluaknhbsoe.com	4.0.1.101	true	true	unknown
vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com	4.0.0.48	true	true	unknown
i4tgddlmgdddy999dddhdddddy4uk.kabzkigpe4epci6udrzsah9gfi.sluaknhbsoe.com	4.0.1.74	true	true	unknown
94zddddkgdddy999dddhddddddbkl.ahrdswy2zzhycjhnrc5dtlkjtb.sluaknhbsoe.com	4.0.1.56	true	true	unknown
r5zdddcfgdddy999dddhdddddleci.5dirqvocy59xcn6nu9jbfw9psk.sluaknhbsoe.com	4.0.1.89	true	true	unknown
vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com	4.0.0.144	true	true	unknown
9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com	4.0.0.48	true	true	unknown
9plddddkgdddy999dddhddddddk2g.qmfpmdukjmtyssuso439owrtkd.sluaknhbsoe.com	4.0.1.56	true	true	unknown
r5zdddpcgdddy999dddhdddddypfb.qz96crvbld9msvndloy5ozeudh.sluaknhbsoe.com	4.0.1.38	true	true	unknown
9pldddcfgdddy999dddhddddddxjf.m6q4kshtxoq2sehrg64e2otxzb.sluaknhbsoe.com	4.0.1.89	true	true	unknown
wtfgddqcgdddy999dddhdddddyrgb.y2qlfk5gupk2s96e3e3kk2fpbi.sluaknhbsoe.com	4.0.1.35	true	true	unknown
9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com	4.0.0.48	true	true	unknown
94zdddpygdddy999dddhdddddl2lf.f466gt53chj2c6ho9erpxr29th.sluaknhbsoe.com	4.0.1.134	true	true	unknown
i4tgddcfgdddy999dddhdddddpb2f.s2rkpzaqdxt5c3hjrkikmpoffi.sluaknhbsoe.com	4.0.1.89	true	true	unknown
wtfgdddygdddy999dddhddddddufk.xfrrqmnf6eg4shnisdim3meypb.sluaknhbsoe.com	4.0.1.128	true	true	unknown
i4tgdd496kddydddddduxog.fztsnxzmzuu9cnuib6lg5fzaxd.sluaknhbsoe.com	65.99.0.0	true	false	unknown
efkezwpdxpsq3lsdvnsccnqfuhj4g5qndhshtl.ghjlpujhqrbvuuipcc52icgjgfdelsc3ancaijd.nacinun2lihvdacjoibefwdd.rcdfptdhnifsnkncnddgdddygdddddygad.byeui5jwtkm3cs2pz2fp9zcewh.sluaknhbsoe.com	195.123.210.110	true	true	unknown
6vtgddlmgdddy999dddhdddddykbk.adjvyvgigykts3wy9ioczcikvj.sluaknhbsoe.com	4.0.1.74	true	true	unknown
detdzpzfn22etjgnoygduy5.r6dvhsoljcgllufdjcmrd2vsqwglq.uhqiggr6hzqcgfewgfsdxbcshs4jkgljuf.cjcgqj2esqmalljgcidzre.22dccfejzf4dlvcdddcddv4g.4l66nxnqtu22sgjbc2zhnjwx9i.sluaknhbsoe.com	195.123.210.110	true	true	unknown
r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com	4.0.0.96	true	true	unknown
6fmddd496kddyddddddn9eh.6ag4c3ktjf59cjw5fr4sde9lfb.sluaknhbsoe.com	239.255.255.255	true	false	unknown
9pldddqygdddy999dddhdddddyyjg.lbw6xkbpmyo2skw2ptrf6ei3fk.sluaknhbsoe.com	4.0.1.131	true	true	unknown
94zdddlmgdddy999dddhdddddlsqm.3n36tykugh2msmneu24ldwmawg.sluaknhbsoe.com	4.0.1.74	true	true	unknown
wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com	4.0.0.96	true	true	unknown
yl4piimm5n3dtfpddfp6jxyrg2nnbys.ch3cn33djbzrnusyci3dy.h3qjqzmch2zrzyiwytgh.fmfw3ylcc3inby4jkzrljtqcifgp23pjqgll2z.ir3lcdyorhdddhyci9.qhfixf5me5zysvnduapxdzi32k.sluaknhbsoe.com	195.123.210.110	true	true	unknown
9pldddqrgdddy999dddhddddddbhb.cuirp5fa2xmncm2ltapgvfpbah.sluaknhbsoe.com	4.0.1.107	true	true	unknown
wtfgddprgdddy999dddhdddddybgg.uuyk2gaz4nshsejszhb2zssvyh.sluaknhbsoe.com	4.0.1.110	true	true	unknown
6vtgddy9ddddy999dddhdddddyajk.96zgy2mmf3zack2hlrip2yj3kd.sluaknhbsoe.com	4.0.0.252	true	true	unknown
6vtgddloddddy999dddhdddddpfxx.byjoxorguw3ac56fzehj92qu4k.sluaknhbsoe.com	4.0.0.186	true	true	unknown
94zddd496kddyddddddwgdh.ya565w46wx6dsee66fn4okzvuc.sluaknhbsoe.com	239.255.255.255	true	false	unknown
xx2uvd496kddydddddd4ahg.uliso6ivgihysunz94o4vdawah.sluaknhbsoe.com	255.255.255.255	true	false	unknown
9pldddsjgdddy999dddhdddddpb5r.bpatfnu5d6sxsunyuy5ndb6ycj.sluaknhbsoe.com	4.0.1.53	true	true	unknown
r5zdddloddddy999dddhdddddlqew.qtmpn5jib3cbcdubbscas93gog.sluaknhbsoe.com	4.0.0.186	true	true	unknown
vvtgddprgdddy999dddhdddddlbkx.cbqcffdll4y4cpnhzhkpmudufh.sluaknhbsoe.com	4.0.1.110	true	true	unknown
i4tgdddkgdddy999dddhdddddpcof.dvmefyszn46hc566zauitanbfd.sluaknhbsoe.com	4.0.1.56	true	true	unknown
b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com	4.0.0.48	true	true	unknown
efkezwpdxpsq3lsdvnsccnqf.uhj4g5qndhshtlghjlpujhqrbvuui.pcc52icgjgfdelsc3anca.ijdnacinun2lihvdacjoibef.wddrcdfptdhnifsnkncnddgdddygddddd2drd.4l66nxnqtu22sgjbc2zhnjwx9i.sluaknhbsoe.com	195.123.210.110	true	true	unknown
94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com	4.0.0.144	true	true	unknown
b4tgdddggdddy999dddhdddddpcvj.wxq4ylecj6m4coek2mslauz3gh.sluaknhbsoe.com	4.0.1.8	true	true	unknown
9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com	4.0.0.144	true	true	unknown
vvtgdd496kddyddddddwhmg.ogt9t5ihgj3ysm22hqm5y9ri2k.sluaknhbsoe.com	1.92.0.0	true	false	unknown
n22etjgnoygduy5r6dvhsoljcgllufdjcmrd2vs.qwglquhqiggr6hzqcgfew.gfsdxbcshs4jkgljufcjcgqj2esq.malljgcidzre22dccfejzf4dlvcs2.ucjcmldddcdzbwd.yyzoipktrpqicnwxz3hf4icrfg.sluaknhbsoe.com	195.123.210.110	true	true	unknown
izqlhvlqqglqjg4igzryhydch.3vdzl4drviphsljjgl6gldjwhdddgpoej.zh2kdd2bgmzds9ewlc4gdg55eb.sluaknhbsoe.com	193.199.8.0	true	true	unknown
wtfgddlxgdddy999dddhddddddhnl.ex9b3ql5tb4ccxjoqvx9izqotj.sluaknhbsoe.com	4.0.1.122	true	true	unknown
wtfgddqygdddy999dddhddddddffh.ynlxdlzabgq9sonkpi3mnbw49g.sluaknhbsoe.com	4.0.1.131	true	true	unknown
vvtgddclgdddy999dddhdddddytxl.i3dpfey2qkq6svwohnugqufi3h.sluaknhbsoe.com	4.0.1.65	true	true	unknown
94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com	4.0.0.96	true	true	unknown
9pldddpvddddy999dddhdddddyjyx.jwb4i2qyfbm4s6nezzdc3gtzqb.sluaknhbsoe.com	4.0.0.222	true	true	unknown
b4tgdd44ddddy999dddhdddddpeoj.c6namrxtvuzysbjaycteedpryk.sluaknhbsoe.com	4.0.0.231	true	true	unknown
efkezwpdxpsq3lsdvnsccnqfuhj4g5qnd.hshtlghjlpujhqrbvuui.pcc52icgjgfdelsc3ancaijdnacinun2lihvdac.joibefwddrcdfptdhnifsnkncdcddd.djdddddptmd.gconcfadqbxmsqekmnvx59jeyd.sluaknhbsoe.com	195.123.210.110	true	true	unknown
6vtgddqngdddy999dddhdddddlvyq.jo4xd3xri5cosl6o69qnws26pk.sluaknhbsoe.com	4.0.1.83	true	true	unknown
b4tgddywgdddy999dddhdddddytwl.233e5jfky55kclnr4dymadymfj.sluaknhbsoe.com	4.0.1.116	true	true	unknown
i4tgddpygdddy999dddhdddddy3uq.v44md4zvun3kcbuy2ebpawaw6j.sluaknhbsoe.com	4.0.1.134	true	true	unknown
efkezwpdxpsq3lsdvnsccnqfuhj4g5qn.dhshtlghjlpujhqrbvuuipcc52icgjgfd.elsc3ancaijdnacinun2lihvdacjoibefwd.drcdfptdhnifsnkncnddgdddygdddddh69b.n3u3bdlqy4ahsfjea4eialvygh.sluaknhbsoe.com	195.123.210.110	true	true	unknown
i4tgddyzgdddy999dddhdddddpwur.9lgnhyu5tvvusojdrrmtqlbn9c.sluaknhbsoe.com	4.0.1.140	true	true	unknown
efkezwpdxpsq3lsdvnsccnq.fuhj4g5qndhshtlghjlpujhqrbvuui.pcc52icgjgfdelsc3ancai.jdnacinun2lihvdacjoibefwddrc.dfptdhnifsnkncndldlddddqdddddd2bm.izpagnu92o4ncu24frquvc2thh.sluaknhbsoe.com	195.123.210.110	true	true	unknown
b4tgdd496kddydddddd265d.5fvlomz9g2t6sjjvfg6nf4vmjh.sluaknhbsoe.com	65.99.0.0	true	false	unknown
efkezwpdxpsq3lsdvnsccnq.fuhj4g5qndhshtlghjlpujhqr.bvuuipcc52icgjgfdelsc3ancaijdna.cinun2lihvdacjoibefwddrcdfptdhnifsnkn.cndlohcdyddddpdddddd43jd.dobwitxawyf4spwnwhvz6tmgij.sluaknhbsoe.com	195.123.210.110	true	true	unknown
nmfhb2ccxlid32ljczrcjudcj3d62yp.jlgldhzarylcwyu5hqgncb3dc9dcdbkgddydqxeb.4l66nxnqtu22sgjbc2zhnjwx9i.sluaknhbsoe.com	65.225.53.0	true	true	unknown
b4tgddczgdddy999dddhddddddfur.dxexglwwuftac4uqnkxvisjvbd.sluaknhbsoe.com	4.0.1.137	true	true	unknown
b4tgddcfgdddy999dddhdddddyzkr.pcuntdnhowktchwrtl4zjmasoh.sluaknhbsoe.com	4.0.1.89	true	true	unknown
r5zdddy9ddddy999dddhdddddlbaj.4cig3iqctojvcu24p5eb5sehmk.sluaknhbsoe.com	4.0.0.252	true	true	unknown
b4tgdd496kddyddddddc9pd.2bzpyeldpf5qci6iuhrv44tg9i.sluaknhbsoe.com	239.255.255.255	true	false	unknown
vvtgddy9ddddy999dddhdddddlkph.5wpy6jl9gfrqcmuru6q2psochj.sluaknhbsoe.com	4.0.0.252	true	true	unknown
3pfehvpcdabpjvyctgmdb2gnbzawdsycua.fhhyyqmbiwzhqrulfehacciakczepmdddcyznl.n3u3bdlqy4ahsfjea4eialvygh.sluaknhbsoe.com	193.222.53.0	true	true	unknown
r5zdddprgdddy999dddhdddddyqdd.syft2i3xmwqacen9orpna99h2c.sluaknhbsoe.com	4.0.1.110	true	true	unknown
9pldddczgdddy999dddhdddddl66c.4rikdsq6btancwef3jj34yx9xj.sluaknhbsoe.com	4.0.1.137	true	true	unknown
94zdddlxgdddy999dddhddddddhcx.czfwo4pukvuost6zsumtwo3qwk.sluaknhbsoe.com	4.0.1.122	true	true	unknown
wtfgddywgdddy999dddhdddddlphc.ty3luv3ax4vusj6yru4qwtkork.sluaknhbsoe.com	4.0.1.116	true	true	unknown
6fmdddpvddddy999dddhdddddd3oc.burfjb5fdcrtsij3mjxph4t9ed.sluaknhbsoe.com	4.0.0.222	true	true	unknown
9pldddpcgdddy999dddhdddddl9or.3r4yo6wzmmn6cew2beavnbzbmd.sluaknhbsoe.com	4.0.1.38	true	true	unknown
efkezwpdxpsq3lsdvnsccnqfuhj4.g5qndhshtlghjlpujhqrbvuuip.cc52icgjgfdelsc3ancaijdnacinun.2lihvdacjoibefwddrcdfptdhnifsnkncnd.lohchkwgdgdddygdddddyc2d.yyzoipktrpqicnwxz3hf4icrfg.sluaknhbsoe.com	195.123.210.110	true	true	unknown
i4tgdddpddddy999dddhdddddyo2l.i92vwadvuz3ecc29owsj6wdhth.sluaknhbsoe.com	4.0.0.192	true	true	unknown
6fmdddyhgdddy999dddhddddddudj.rxwj34r3eozecpumtr9oy5knqi.sluaknhbsoe.com	4.0.1.20	true	true	unknown
9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com	4.0.0.96	true	true	unknown
zboscitfrhswgbdqgvv4guilxzqlhyy.qodql2edcoma4hypqipnhh.e4ihalhus5hulg6jllilar.whyqqolqlhpqctma22zyqhlndhvsiigllusrho.pgyumlirmql2y4gtdqnhdddgdzkm.dobwitxawyf4spwnwhvz6tmgij.sluaknhbsoe.com	195.123.210.110	true	true	unknown
6fmddd4fgdddy999dddhdddddd6jf.wyhmh92uye33coulyqiz9wp5jb.sluaknhbsoe.com	4.0.1.95	true	true	unknown
9plddddpddddy999dddhdddddlz2b.xfy2sw3aulrgspj6deokfkkyyi.sluaknhbsoe.com	4.0.0.192	true	true	unknown
i4tgddczgdddy999dddhdddddlwdi.xhgeo2odu2tusgw5bapio9vgyh.sluaknhbsoe.com	4.0.1.137	true	true	unknown
vvtgddyhgdddy999dddhdddddp5mq.ptnbi2fjb5xucheykuvzyy6hch.sluaknhbsoe.com	4.0.1.20	true	true	unknown
6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com	4.0.0.48	true	true	unknown
9pldddy9ddddy999dddhdddddlw4m.kczy5vnfhmmsc9j2mycx6jz6dc.sluaknhbsoe.com	4.0.0.252	true	true	unknown
dabpjvyctgmdb2gnbzawdsycuafhhyyqmbi.wzhqrulfehacciakczepmdddcyahy.byeui5jwtkm3cs2pz2fp9zcewh.sluaknhbsoe.com	65.235.17.0	true	true	unknown
xvc62upjjgl6duajcmrlhpyqyelq.ubdiczr62ydccfelzfsdf3ie2uljgmm6gmsjw.hdddgpmfd.fgevtf3izno2skelgg3umvcrrb.sluaknhbsoe.com	193.199.8.0	true	true	unknown
efkezwpdxpsq3lsdvnsccnqfuhj4g5qndh.shtlghjlpujhqrbvuuipcc52icgjg.fdelsc3ancaijdnacinun2lihv.dacjoibefwddrcdfptdhnifsnknc.ndlohdhddddbdddddqhgg.qhfixf5me5zysvnduapxdzi32k.sluaknhbsoe.com	195.123.210.110	true	true	unknown
6fmdddpcgdddy999dddhdddddlaoq.uat5co4whrpesmwycnee4vk9ag.sluaknhbsoe.com	4.0.1.38	true	true	unknown
9plddd496kddyddddddjzsb.uaktlw99l25bs9emx4fvt2do3d.sluaknhbsoe.com	239.255.255.255	true	false	unknown
wtfgddlmgdddy999dddhdddddy5jf.xti554ejkppjswwilaod54xp5i.sluaknhbsoe.com	4.0.1.74	true	true	unknown
wtfgdd496kddydddddd4xgb.osbmhidte5e3sah62qwva54ifi.sluaknhbsoe.com	239.255.255.255	true	false	unknown
i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com	4.0.0.96	true	true	unknown
6vtgddsqgdddy999dddhdddddymtl.4lrirpurbck6cwuoo5znuffoqj.sluaknhbsoe.com	4.0.1.101	true	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://checkip.amazonaws.com/	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
3.211.138.232	checkip.us-east-1.prod.check-ip.aws.a2z.com	United States		14618	AMAZON-AESUS	true
52.20.197.7	unknown	United States		14618	AMAZON-AESUS	true

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	31.0.0 Emerald
Analysis ID:	381816
Start date:	05.04.2021
Start time:	07:43:36
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 12m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	anchor_x64.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	40
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.troj.evad.winEXE@4/2@293/3
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 100% (good quality ratio 88.3%) Quality average: 66.6% Quality standard deviation: 33.3%
HCA Information:	Failed
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .exe
Warnings:	Show All Exclude process from analysis (whitelisted): taskhostw.exe, MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, WMIADAP.exe, MusNotifyIcon.exe, backgroundTaskHost.exe, SgrmBroker.exe, conhost.exe, svchost.exe, UsoClient.exe, wuapihost.exe Excluded IPs from analysis (whitelisted): 204.79.197.200, 13.107.21.200, 93.184.220.29, 20.82.210.154, 104.42.151.234, 92.122.145.220, 13.64.90.137, 23.218.208.56, 92.122.213.194, 92.122.213.247, 2.20.142.210, 2.20.142.209, 52.155.217.156, 20.54.26.129, 20.190.160.1, 20.190.160.68, 20.190.160.130, 20.190.160.5, 20.190.160.72, 20.190.160.3, 20.190.160.131, 20.190.160.9, 51.104.136.2, 51.11.168.232 Excluded domains from analysis (whitelisted): au.download.windowsupdate.com.edgesuite.net, cs9.wac.phicdn.net, arc.msn.com.nsatc.net, www.tm.lg.prod.aadmsa.akadns.net, store-images.s-microsoft.com-c.edgekey.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, a1449.dscg2.akamai.net, arc.msn.com, www.tm.a.prd.aadg.trafficmanager.net, db5eap.displaycatalog.md.mp.microsoft.com.akadns.net, e12564.dspb.akamaiedge.net, ocsp.digicert.com, login.live.com, www-bing-com.dual-a-0001.a-msedge.net, audownload.windowsupdate.nsatc.net, arc.trafficmanager.net, displaycatalog.mp.microsoft.com, watson.telemetry.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, prod.fs.microsoft.com.akadns.net, au-bg-shim.trafficmanager.net, www.bing.com, displaycatalog-europeeap.md.mp.microsoft.com.akadns.net, skypedataprdcolwus17.cloudapp.net, fs.microsoft.com, dual-a-0001.a-msedge.net, displaycatalog-rp-europe.md.mp.microsoft.com.akadns.net, displaycatalog.md.mp.microsoft.com.akadns.net, ris-prod.trafficmanager.net, e1723.g.akamaiedge.net, ctldl.windowsupdate.com, settings-win.data.microsoft.com, a767.dscg3.akamai.net, login.msa.msidentity.com, settingsfd-geo.trafficmanager.net, ris.api.iris.microsoft.com, a-0001.a-afdentry.net.trafficmanager.net, store-images.s-microsoft.com, blobcollector.events.data.trafficmanager.net, skypedataprdcolwus16.cloudapp.net, displaycatalog-rp.md.mp.microsoft.com.akadns.net Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
07:44:24	Task Scheduler	Run new task: Microsoft maintenance task#19911 path: C:\Users\user\Desktop\anchor_x64.exe s>-u
07:44:25	API Interceptor	3x Sleep call for process: anchor_x64.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
3.211.138.232	SH1leWoV4o.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	a98e93d07b5c5244ebd13d1070b580adcdd87a029b009.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	LjH22CRO6b.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	108.docx	Get hash	malicious	Browse	checkip.amazonaws.com/
	Rnkg3JBEPZ.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	SCM09283287263826120.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	058.docx	Get hash	malicious	Browse	checkip.amazonaws.com/
	037.docx	Get hash	malicious	Browse	checkip.amazonaws.com/
	29.12.2020_Bel68.docx	Get hash	malicious	Browse	checkip.amazonaws.com/
	28.12.2020_Bel19.docx	Get hash	malicious	Browse	checkip.amazonaws.com/
	vIPc1OtBRg.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	11.12.2020_Siparis54.docx	Get hash	malicious	Browse	checkip.amazonaws.com/
	kcBppnIWWn.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	Rh4hzNX7ry.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	T7oGIZ6TUS.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	fUhUWZAOa4.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	OrM0pS5PdK.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	hVDdUEUTYm.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	6glC21KF5o.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	PGMB8873746621102PDF.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
52.20.197.7	dAbE67VwvD.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	GMC77273992277382993PDF.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	23_03_2021_Liste258.docx	Get hash	malicious	Browse	checkip.amazonaws.com/
	037.docx	Get hash	malicious	Browse	checkip.amazonaws.com/
	002.docx	Get hash	malicious	Browse	checkip.amazonaws.com/
	SecuriteInfo.com.BehavesLike.Win32.Generic.gc.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	QUOTE_98876_566743_233.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	FglzprMBm7.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	Desktop 2020.10.03 - 13.10.08.01 (Promotion Video) (Commercial Trailer 4K60FPS).exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	b82d3VIB6C.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	O0B8ie2Wx5.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	vmvMTvfFKF.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	MkIS7EPhPl.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	Hl01odzpHM.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	ND69AViX5Q.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	QdhA0RHgZk.exe	Get hash	malicious	Browse	checkip.amazonaws.com/
	SecuriteInfo.com.Artemis6F952B81A92F.exe	Get hash	malicious	Browse	checkip.amazonaws.com/

Domains

No context

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
AMAZON-AESUS	PaymentInvoice.exe	Get hash	malicious	Browse	34.202.122.77
	SB210330034.pdf.exe	Get hash	malicious	Browse	3.223.115.185
	7919bd3d8ee49fb1803f25bd73682f5fde4164ad65230.exe	Get hash	malicious	Browse	50.19.242.215
	45ed95c173fd2df5f05f42c2121698db4484f032344c8.exe	Get hash	malicious	Browse	54.235.175.90
	L87N50MbDG.exe	Get hash	malicious	Browse	54.225.165.85
	befQY8YuZp.exe	Get hash	malicious	Browse	52.6.206.192
	38da70826e367c9808b135717c5ea31e4e69ef03eef30.exe	Get hash	malicious	Browse	52.6.206.192
	wzdu53.exe	Get hash	malicious	Browse	34.231.69.13
	dAbE67VwvD.exe	Get hash	malicious	Browse	52.20.197.7
	Pkw1tI8ki6.exe	Get hash	malicious	Browse	34.193.115.2
	swift_76567643.exe	Get hash	malicious	Browse	52.0.7.30
	Payment_03262021_jpg.exe	Get hash	malicious	Browse	54.164.22.162
	Zoom.pkg	Get hash	malicious	Browse	3.235.71.136
	msals.pumpl.dll	Get hash	malicious	Browse	23.21.48.44
	8h2VsPt6dG.exe	Get hash	malicious	Browse	3.95.194.143
	ACH REMITTANCE.xlsx	Get hash	malicious	Browse	52.55.75.50
	ACH REMITTANCE.xlsx	Get hash	malicious	Browse	52.207.146.247
	MV WAF PASSION.exe	Get hash	malicious	Browse	52.86.219.129
	#Ud83d#Udcde.htm.htm	Get hash	malicious	Browse	52.22.165.174
	RemittanceAdvice763.htm	Get hash	malicious	Browse	18.209.113.162
AMAZON-AESUS	PaymentInvoice.exe	Get hash	malicious	Browse	34.202.122.77
	SB210330034.pdf.exe	Get hash	malicious	Browse	3.223.115.185
	7919bd3d8ee49fb1803f25bd73682f5fde4164ad65230.exe	Get hash	malicious	Browse	50.19.242.215
	45ed95c173fd2df5f05f42c2121698db4484f032344c8.exe	Get hash	malicious	Browse	54.235.175.90
	L87N50MbDG.exe	Get hash	malicious	Browse	54.225.165.85
	befQY8YuZp.exe	Get hash	malicious	Browse	52.6.206.192
	38da70826e367c9808b135717c5ea31e4e69ef03eef30.exe	Get hash	malicious	Browse	52.6.206.192
	wzdu53.exe	Get hash	malicious	Browse	34.231.69.13
	dAbE67VwvD.exe	Get hash	malicious	Browse	52.20.197.7
	Pkw1tI8ki6.exe	Get hash	malicious	Browse	34.193.115.2
	swift_76567643.exe	Get hash	malicious	Browse	52.0.7.30
	Payment_03262021_jpg.exe	Get hash	malicious	Browse	54.164.22.162
	Zoom.pkg	Get hash	malicious	Browse	3.235.71.136
	msals.pumpl.dll	Get hash	malicious	Browse	23.21.48.44
	8h2VsPt6dG.exe	Get hash	malicious	Browse	3.95.194.143
	ACH REMITTANCE.xlsx	Get hash	malicious	Browse	52.55.75.50
	ACH REMITTANCE.xlsx	Get hash	malicious	Browse	52.207.146.247
	MV WAF PASSION.exe	Get hash	malicious	Browse	52.86.219.129
	#Ud83d#Udcde.htm.htm	Get hash	malicious	Browse	52.22.165.174
	RemittanceAdvice763.htm	Get hash	malicious	Browse	18.209.113.162

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\Desktop\anchor_x64.exe: $data Download File
Process:	C:\Users\user\Desktop\anchor_x64.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	43
Entropy (8bit):	4.518833359152008
Encrypted:	false
SSDEEP:	3:vHvG3N0V7N2LWMn:fvGqV7pM
MD5:	E3BFE83A750310D8442AA057A3221CE1
SHA1:	C5AD2E71D4A30D888FD5EC13CF88E6B5FD90BB99
SHA-256:	0405E620C7DE96805E69E2C9AE44819FCBAD4620C58D023FFE54E5FB58A9702C
SHA-512:	383125AAF4FCF2B350B73B755A673C326CB29090B26FE9209D5681135C51EF02B589E513BEF953AF2ABBDCB69DA0038A11F35D1BA7D180E9B8FEFF46461F953F
Malicious:	true
Reputation:	low
Preview:	TWljcm9zb2Z0IG1haW50ZW5hbmNlIHRhc2sjMTk5MTE

C:\Users\user\Desktop\anchor_x64.exe: $file Download File
Process:	C:\Users\user\Desktop\anchor_x64.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	51
Entropy (8bit):	4.74332577363318
Encrypted:	false
SSDEEP:	3:mVSJNYXmg5ARJszcci:mE4XmaARJb/
MD5:	BE7FCBD0B6F3398AD4683860B960DE10
SHA1:	3C6CB98FF0424641BB65C267E597E554BAD3451B
SHA-256:	CD56F0723BE093A6072B3E535EE83F46A4AD466D0A9E924E4A948217364314C8
SHA-512:	8D3DB15060CD842231D1949BDA76961373241D966F6DB2187758BE4B71B6334EBF66A4FDE01FEBDC1FB4E8A96FE1BE47FC0D320F3EF17E89EFFB9A2535E3B6E7
Malicious:	true
Reputation:	low
Preview:	QzpcVXNlcnNcYWxmb25zXERlc2t0b3BcYW5jaG9yX3g2NC5leGU

Static File Info

General
File type:	PE32+ executable (GUI) x86-64, for MS Windows
Entropy (8bit):	6.560639476913515
TrID:	Win64 Executable GUI (202006/5) 92.65% Win64 Executable (generic) (12005/4) 5.51% Generic Win/DOS Executable (2004/3) 0.92% DOS Executable Generic (2002/1) 0.92% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	anchor_x64.exe
File size:	347648
MD5:	86fefa2e8be486a49782d4d04095015e
SHA1:	f29d6b5c8777028eeef161729b153b4d6e8ba28a
SHA256:	a8a8c66b155fcf9bfdf34ba0aca98991440c3d34b8a597c3fdebc8da251c9634
SHA512:	272c3bcd54f580a50f1601f7a6e71a02f33be93aaf975c081ea8042d50d548c9baf8b1401c15bc1fcabcc37bbc326c3ce79037a73425cfaeff58b1afd2e6b92c
SSDEEP:	6144:eC1p/6YfIQrMRU+YqwQR/off22+IJdxKgpCzl2Ac:vb3oK+r/oX22Tb6zl
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d......_.........."......(...".................@..........................................`........................................

File Icon


Icon Hash:	00828e8e8686b000

Static PE Info

General
Entrypoint:	0x14002ad04
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x140000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT, HIGH_ENTROPY_VA
Time Stamp:	0x5FCA06FB [Fri Dec 4 09:52:59 2020 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	e2450fb3cc5b1b7305e3193fe03f3369

Entrypoint Preview

Instruction
dec eax
sub esp, 28h
call 00007F1940E075B0h
dec eax
add esp, 28h
jmp 00007F1940E0741Fh
int3
int3
dec eax
mov dword ptr [esp+20h], ebx
push ebp
dec eax
mov ebp, esp
dec eax
sub esp, 20h
dec eax
mov eax, dword ptr [000273BCh]
dec eax
mov ebx, 2DDFA232h
cdq
sub eax, dword ptr [eax]
add byte ptr [eax+3Bh], cl
ret
jne 00007F1940E07616h
dec eax
and dword ptr [ebp+18h], 00000000h
dec eax
lea ecx, dword ptr [ebp+18h]
call dword ptr [00022906h]
dec eax
mov eax, dword ptr [ebp+18h]
dec eax
mov dword ptr [ebp+10h], eax
call dword ptr [00022878h]
mov eax, eax
dec eax
xor dword ptr [ebp+10h], eax
call dword ptr [00022864h]
mov eax, eax
dec eax
lea ecx, dword ptr [ebp+20h]
dec eax
xor dword ptr [ebp+10h], eax
call dword ptr [0002296Ch]
mov eax, dword ptr [ebp+20h]
dec eax
lea ecx, dword ptr [ebp+10h]
dec eax
shl eax, 20h
dec eax
xor eax, dword ptr [ebp+20h]
dec eax
xor eax, dword ptr [ebp+10h]
dec eax
xor eax, ecx
dec eax
mov ecx, FFFFFFFFh

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x4d030	0x8c	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x5e000	0x260	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x56000	0x25e0	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5f000	0x6d0	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x4cefe	0x1c	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x4a170	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x445b0	0x130	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x4d458	0x398	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x42676	0x42800	False	0.550010279605	data	6.70629418853	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.rdata	0x44000	0xd804	0xda00	False	0.422717173165	data	5.15584786179	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x52000	0x3a28	0xc00	False	0.167317708333	data	2.31158956423	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_MEM_READ
.pdata	0x56000	0x25e0	0x2600	False	0.481907894737	data	5.68387884943	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.00cfg	0x59000	0x28	0x200	False	0.05859375	data	0.42098230856	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.addr	0x5a000	0x84	0x200	False	0.291015625	data	2.41576338303	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_MEM_READ
.rand	0x5b000	0x10	0x200	False	0.056640625	data	0.325622324313	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.tls	0x5c000	0x9	0x200	False	0.033203125	data	0.0203931352361	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_MEM_READ
_RDATA	0x5d000	0x94	0x200	False	0.208984375	data	1.42653530093	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x5e000	0x260	0x400	False	0.33203125	data	3.65313012836	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x5f000	0x6d0	0x800	False	0.55078125	data	5.07768877682	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
RT_MANIFEST	0x5e060	0x1fb	XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators	English	United States

Imports

DLL	Import
USER32.dll	CloseDesktop, CreateDesktopA
OLEAUT32.dll	SysAllocString, SysFreeString, VariantClear, VariantInit
ADVAPI32.dll	AdjustTokenPrivileges, LookupPrivilegeValueA, OpenProcessToken
WS2_32.dll	WSAGetLastError, freeaddrinfo, getaddrinfo, htonl
RPCRT4.dll	UuidCreate
KERNEL32.dll	CloseHandle, CreateEventW, CreateFileA, CreateFileW, CreateRemoteThread, CreateThread, DeleteCriticalSection, EncodePointer, EnterCriticalSection, ExitProcess, ExitThread, FileTimeToSystemTime, FindClose, FindFirstFileExW, FindNextFileW, FlushFileBuffers, FormatMessageA, FreeEnvironmentStringsW, FreeLibrary, FreeLibraryAndExitThread, GetACP, GetCPInfo, GetCommandLineA, GetCommandLineW, GetConsoleCP, GetConsoleMode, GetCurrentProcess, GetCurrentProcessId, GetCurrentThreadId, GetEnvironmentStringsW, GetFileSize, GetFileType, GetLastError, GetLocalTime, GetModuleFileNameA, GetModuleFileNameW, GetModuleHandleExW, GetModuleHandleW, GetOEMCP, GetProcAddress, GetProcessHeap, GetStartupInfoW, GetStdHandle, GetStringTypeW, GetSystemTimeAsFileTime, GetTickCount, GetTickCount64, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, InitializeCriticalSectionAndSpinCount, InitializeSListHead, IsDebuggerPresent, IsProcessorFeaturePresent, IsValidCodePage, LCMapStringW, LeaveCriticalSection, LoadLibraryExW, LocalAlloc, LocalFree, MultiByteToWideChar, QueryPerformanceCounter, RaiseException, ResetEvent, RtlCaptureContext, RtlLookupFunctionEntry, RtlPcToFileHeader, RtlUnwindEx, RtlVirtualUnwind, SetEndOfFile, SetEvent, SetFilePointer, SetFilePointerEx, SetLastError, SetStdHandle, SetUnhandledExceptionFilter, Sleep, SystemTimeToFileTime, TerminateProcess, TlsAlloc, TlsFree, TlsGetValue, TlsSetValue, UnhandledExceptionFilter, VirtualAlloc, VirtualAllocEx, VirtualFree, WTSGetActiveConsoleSessionId, WaitForSingleObjectEx, WideCharToMultiByte, WriteConsoleW, WriteFile, WriteProcessMemory, lstrcmpA

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
04/05/21-07:44:25.622715	TCP	2032216	ET TROJAN Win32/TrickBot Anchor Variant Style External IP Check	49707	80	192.168.2.5	3.211.138.232
04/05/21-07:44:31.812436	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:44:34.879778	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:44:36.100937	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:44:38.119583	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:44:39.190467	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:44:41.125632	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:44:42.145598	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:44:44.145765	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:46:23.076144	TCP	2032216	ET TROJAN Win32/TrickBot Anchor Variant Style External IP Check	49739	80	192.168.2.5	52.20.197.7
04/05/21-07:46:28.335383	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:46:30.307920	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:46:31.342617	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:46:33.474355	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:46:34.503925	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:46:36.501707	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:46:37.550048	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:46:38.548419	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:46:40.557724	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:48:23.964862	TCP	2032216	ET TROJAN Win32/TrickBot Anchor Variant Style External IP Check	49740	80	192.168.2.5	3.211.138.232
04/05/21-07:50:24.671229	TCP	2032216	ET TROJAN Win32/TrickBot Anchor Variant Style External IP Check	49746	80	192.168.2.5	52.20.197.7
04/05/21-07:50:32.574177	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:52:23.319679	TCP	2032216	ET TROJAN Win32/TrickBot Anchor Variant Style External IP Check	49749	80	192.168.2.5	3.224.94.38
04/05/21-07:52:29.495145	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:52:31.522499	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:52:33.557672	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:52:35.851743	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:52:37.647324	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:52:38.660541	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8
04/05/21-07:52:40.676233	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.5	8.8.8.8

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 5, 2021 07:44:25.497543097 CEST	49707	80	192.168.2.5	3.211.138.232
Apr 5, 2021 07:44:25.622137070 CEST	80	49707	3.211.138.232	192.168.2.5
Apr 5, 2021 07:44:25.622349024 CEST	49707	80	192.168.2.5	3.211.138.232
Apr 5, 2021 07:44:25.622714996 CEST	49707	80	192.168.2.5	3.211.138.232
Apr 5, 2021 07:44:25.747275114 CEST	80	49707	3.211.138.232	192.168.2.5
Apr 5, 2021 07:44:25.747306108 CEST	80	49707	3.211.138.232	192.168.2.5
Apr 5, 2021 07:44:25.837616920 CEST	49707	80	192.168.2.5	3.211.138.232
Apr 5, 2021 07:44:40.539836884 CEST	49707	80	192.168.2.5	3.211.138.232
Apr 5, 2021 07:46:22.947628975 CEST	49739	80	192.168.2.5	52.20.197.7
Apr 5, 2021 07:46:23.074937105 CEST	80	49739	52.20.197.7	192.168.2.5
Apr 5, 2021 07:46:23.075069904 CEST	49739	80	192.168.2.5	52.20.197.7
Apr 5, 2021 07:46:23.076143980 CEST	49739	80	192.168.2.5	52.20.197.7
Apr 5, 2021 07:46:23.200845003 CEST	80	49739	52.20.197.7	192.168.2.5
Apr 5, 2021 07:46:23.200896978 CEST	80	49739	52.20.197.7	192.168.2.5
Apr 5, 2021 07:46:23.242927074 CEST	49739	80	192.168.2.5	52.20.197.7
Apr 5, 2021 07:46:37.987474918 CEST	49739	80	192.168.2.5	52.20.197.7
Apr 5, 2021 07:48:23.838202000 CEST	49740	80	192.168.2.5	3.211.138.232
Apr 5, 2021 07:48:23.963452101 CEST	80	49740	3.211.138.232	192.168.2.5
Apr 5, 2021 07:48:23.963743925 CEST	49740	80	192.168.2.5	3.211.138.232
Apr 5, 2021 07:48:23.964862108 CEST	49740	80	192.168.2.5	3.211.138.232
Apr 5, 2021 07:48:24.088721991 CEST	80	49740	3.211.138.232	192.168.2.5
Apr 5, 2021 07:48:24.088776112 CEST	80	49740	3.211.138.232	192.168.2.5
Apr 5, 2021 07:48:24.132045984 CEST	49740	80	192.168.2.5	3.211.138.232
Apr 5, 2021 07:48:58.541587114 CEST	49740	80	192.168.2.5	3.211.138.232
Apr 5, 2021 07:50:24.246634007 CEST	49746	80	192.168.2.5	52.20.197.7
Apr 5, 2021 07:50:24.372179031 CEST	80	49746	52.20.197.7	192.168.2.5
Apr 5, 2021 07:50:24.372375965 CEST	49746	80	192.168.2.5	52.20.197.7
Apr 5, 2021 07:50:24.671228886 CEST	49746	80	192.168.2.5	52.20.197.7
Apr 5, 2021 07:50:24.795737028 CEST	80	49746	52.20.197.7	192.168.2.5
Apr 5, 2021 07:50:24.796149015 CEST	80	49746	52.20.197.7	192.168.2.5
Apr 5, 2021 07:50:24.844621897 CEST	49746	80	192.168.2.5	52.20.197.7
Apr 5, 2021 07:50:57.986049891 CEST	49746	80	192.168.2.5	52.20.197.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 5, 2021 07:44:15.521572113 CEST	52704	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:15.578701973 CEST	53	52704	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:15.831890106 CEST	52212	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:15.877988100 CEST	53	52212	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:16.008497000 CEST	54302	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:16.057122946 CEST	53	54302	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:16.169622898 CEST	53784	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:16.223890066 CEST	53	53784	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:17.175488949 CEST	65307	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:17.231877089 CEST	53	65307	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:17.399890900 CEST	64344	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:17.453882933 CEST	53	64344	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:18.604028940 CEST	62060	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:18.661670923 CEST	53	62060	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:19.277379990 CEST	61805	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:19.333244085 CEST	53	61805	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:20.117727995 CEST	54795	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:20.166603088 CEST	53	54795	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:21.369261026 CEST	49557	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:21.417701960 CEST	53	49557	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:22.566540003 CEST	61733	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:22.623445988 CEST	53	61733	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:23.762536049 CEST	65447	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:23.816781998 CEST	53	65447	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:25.106036901 CEST	52441	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:25.161338091 CEST	53	52441	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:25.429493904 CEST	62176	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:25.486280918 CEST	53	62176	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:25.753462076 CEST	59596	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:26.552130938 CEST	65296	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:26.598150969 CEST	53	65296	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:26.759968042 CEST	59596	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:27.776372910 CEST	59596	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:29.829489946 CEST	59596	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:29.829813004 CEST	63183	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:29.876682997 CEST	53	63183	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:30.802676916 CEST	53	59596	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:30.990581036 CEST	60151	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:31.812280893 CEST	53	59596	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:31.853548050 CEST	53	59596	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:32.027259111 CEST	60151	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:33.073087931 CEST	60151	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:34.879631996 CEST	53	59596	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:35.119900942 CEST	60151	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:36.038599014 CEST	53	60151	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:36.045052052 CEST	56969	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:36.100795031 CEST	53	60151	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:37.057696104 CEST	56969	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:38.073177099 CEST	56969	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:38.119498014 CEST	53	60151	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:39.188849926 CEST	53	60151	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:40.073597908 CEST	56969	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:40.120778084 CEST	53	56969	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:41.125538111 CEST	53	56969	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:42.145313978 CEST	53	56969	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:44.096194029 CEST	55161	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:44.145693064 CEST	53	56969	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:44.189023018 CEST	53	55161	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:48.247917891 CEST	54757	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:48.296608925 CEST	53	54757	8.8.8.8	192.168.2.5
Apr 5, 2021 07:44:51.210134983 CEST	49992	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:44:51.256129026 CEST	53	49992	8.8.8.8	192.168.2.5
Apr 5, 2021 07:45:00.365880966 CEST	60075	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:45:00.424490929 CEST	53	60075	8.8.8.8	192.168.2.5
Apr 5, 2021 07:45:10.330981016 CEST	55016	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:45:10.386503935 CEST	53	55016	8.8.8.8	192.168.2.5
Apr 5, 2021 07:45:14.441859961 CEST	64345	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:45:14.499648094 CEST	53	64345	8.8.8.8	192.168.2.5
Apr 5, 2021 07:45:15.033513069 CEST	57128	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:45:15.087732077 CEST	53	57128	8.8.8.8	192.168.2.5
Apr 5, 2021 07:45:15.494558096 CEST	54791	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:45:15.525221109 CEST	50463	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:45:15.554234028 CEST	53	54791	8.8.8.8	192.168.2.5
Apr 5, 2021 07:45:15.586488008 CEST	53	50463	8.8.8.8	192.168.2.5
Apr 5, 2021 07:45:16.019813061 CEST	50394	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:45:16.068568945 CEST	53	50394	8.8.8.8	192.168.2.5
Apr 5, 2021 07:45:16.618566036 CEST	58530	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:45:16.675079107 CEST	53	58530	8.8.8.8	192.168.2.5
Apr 5, 2021 07:45:17.230247021 CEST	53813	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:45:17.285479069 CEST	53	53813	8.8.8.8	192.168.2.5
Apr 5, 2021 07:45:17.731774092 CEST	63732	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:45:17.786068916 CEST	53	63732	8.8.8.8	192.168.2.5
Apr 5, 2021 07:45:18.550766945 CEST	57344	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:45:18.599569082 CEST	53	57344	8.8.8.8	192.168.2.5
Apr 5, 2021 07:45:19.384691954 CEST	54450	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:45:19.674036026 CEST	53	54450	8.8.8.8	192.168.2.5
Apr 5, 2021 07:45:20.125556946 CEST	59261	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:45:20.181907892 CEST	53	59261	8.8.8.8	192.168.2.5
Apr 5, 2021 07:45:29.042638063 CEST	57151	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:45:29.090383053 CEST	53	57151	8.8.8.8	192.168.2.5
Apr 5, 2021 07:45:29.462011099 CEST	59413	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:45:29.519022942 CEST	53	59413	8.8.8.8	192.168.2.5
Apr 5, 2021 07:45:31.913696051 CEST	60516	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:45:31.974175930 CEST	53	60516	8.8.8.8	192.168.2.5
Apr 5, 2021 07:46:04.460619926 CEST	51649	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:46:04.509206057 CEST	53	51649	8.8.8.8	192.168.2.5
Apr 5, 2021 07:46:06.468787909 CEST	65086	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:46:06.523320913 CEST	53	65086	8.8.8.8	192.168.2.5
Apr 5, 2021 07:46:22.857399940 CEST	56432	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:46:22.919408083 CEST	53	56432	8.8.8.8	192.168.2.5
Apr 5, 2021 07:46:23.246515989 CEST	52929	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:46:24.258979082 CEST	52929	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:46:25.259200096 CEST	52929	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:46:27.274846077 CEST	52929	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:46:28.293313980 CEST	53	52929	8.8.8.8	192.168.2.5
Apr 5, 2021 07:46:28.335139036 CEST	53	52929	8.8.8.8	192.168.2.5
Apr 5, 2021 07:46:28.402040005 CEST	64317	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:46:29.400722027 CEST	64317	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:46:30.307782888 CEST	53	52929	8.8.8.8	192.168.2.5
Apr 5, 2021 07:46:30.431931019 CEST	64317	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:46:31.342433929 CEST	53	52929	8.8.8.8	192.168.2.5
Apr 5, 2021 07:46:32.431662083 CEST	64317	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:46:32.476556063 CEST	53	64317	8.8.8.8	192.168.2.5
Apr 5, 2021 07:46:32.490631104 CEST	61004	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:46:33.471901894 CEST	53	64317	8.8.8.8	192.168.2.5
Apr 5, 2021 07:46:33.478679895 CEST	61004	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:46:34.479064941 CEST	61004	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:46:34.503726006 CEST	53	64317	8.8.8.8	192.168.2.5
Apr 5, 2021 07:46:36.479077101 CEST	61004	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:46:36.501486063 CEST	53	64317	8.8.8.8	192.168.2.5
Apr 5, 2021 07:46:37.536771059 CEST	53	61004	8.8.8.8	192.168.2.5
Apr 5, 2021 07:46:37.549926043 CEST	53	61004	8.8.8.8	192.168.2.5
Apr 5, 2021 07:46:38.548116922 CEST	53	61004	8.8.8.8	192.168.2.5
Apr 5, 2021 07:46:40.557502031 CEST	53	61004	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:23.760942936 CEST	56895	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:23.816333055 CEST	53	56895	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:24.097127914 CEST	62372	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:24.230194092 CEST	53	62372	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:24.342003107 CEST	61515	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:24.482610941 CEST	53	61515	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:24.496212006 CEST	56675	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:24.620634079 CEST	53	56675	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:24.667191982 CEST	57172	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:24.817118883 CEST	53	57172	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:24.823895931 CEST	55267	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:24.961811066 CEST	53	55267	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:27.982212067 CEST	50969	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:28.114006042 CEST	53	50969	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:28.132510900 CEST	64362	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:28.271572113 CEST	53	64362	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:28.284475088 CEST	54766	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:28.419626951 CEST	53	54766	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:28.452290058 CEST	61446	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:28.591814995 CEST	53	61446	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:28.606410027 CEST	57515	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:28.740075111 CEST	53	57515	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:28.762665033 CEST	58199	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:28.905694962 CEST	53	58199	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:28.921608925 CEST	65221	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:29.052829981 CEST	53	65221	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:29.072006941 CEST	61573	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:29.205456018 CEST	53	61573	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:29.215132952 CEST	56562	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:29.358769894 CEST	53	56562	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:29.379121065 CEST	53591	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:29.517184973 CEST	53	53591	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:29.548633099 CEST	59688	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:29.672559023 CEST	53	59688	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:29.687697887 CEST	56032	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:29.829853058 CEST	53	56032	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:29.837271929 CEST	61150	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:29.968255043 CEST	53	61150	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:29.983505011 CEST	63458	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:30.127906084 CEST	53	63458	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:30.142719984 CEST	50422	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:30.284033060 CEST	53	50422	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:30.313869953 CEST	53247	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:30.445791006 CEST	53	53247	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:30.451874018 CEST	58544	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:30.582206964 CEST	53	58544	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:30.607230902 CEST	53814	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:30.779311895 CEST	53	53814	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:30.797462940 CEST	51305	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:30.919919014 CEST	53	51305	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:30.941489935 CEST	53670	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:31.067218065 CEST	53	53670	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:31.090547085 CEST	55160	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:31.216073990 CEST	53	55160	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:31.228981018 CEST	61414	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:31.349488020 CEST	53	61414	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:31.370255947 CEST	63847	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:31.517266989 CEST	53	63847	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:31.527219057 CEST	61523	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:31.654550076 CEST	53	61523	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:34.684809923 CEST	50551	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:34.807699919 CEST	53	50551	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:34.813467979 CEST	62847	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:34.954628944 CEST	53	62847	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:34.973402023 CEST	57712	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:35.098381996 CEST	53	57712	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:35.122374058 CEST	61064	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:35.253578901 CEST	53	61064	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:35.264795065 CEST	61891	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:35.389641047 CEST	53	61891	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:35.402359009 CEST	61585	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:35.527717113 CEST	53	61585	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:35.534708023 CEST	65163	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:35.679356098 CEST	53	65163	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:35.688179970 CEST	58969	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:35.820337057 CEST	53	58969	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:35.904503107 CEST	53977	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:36.044504881 CEST	53	53977	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:36.052767992 CEST	57147	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:36.175848961 CEST	53	57147	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:36.194844961 CEST	52381	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:36.345493078 CEST	53	52381	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:36.355082989 CEST	49231	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:36.482428074 CEST	53	49231	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:36.502445936 CEST	53217	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:36.635369062 CEST	53	53217	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:36.656559944 CEST	52554	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:36.785269022 CEST	53	52554	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:36.796808958 CEST	49603	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:36.916023970 CEST	53	49603	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:36.927719116 CEST	64476	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:37.052225113 CEST	53	64476	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:37.072901011 CEST	49975	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:37.198225975 CEST	53	49975	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:37.209364891 CEST	57701	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:37.336543083 CEST	53	57701	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:37.372283936 CEST	60334	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:37.499805927 CEST	53	60334	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:37.509176016 CEST	64958	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:37.629122972 CEST	53	64958	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:37.648938894 CEST	58504	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:37.784459114 CEST	53	58504	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:37.793886900 CEST	64971	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:37.922920942 CEST	53	64971	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:37.933382034 CEST	58041	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:38.070700884 CEST	53	58041	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:38.075854063 CEST	57764	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:38.200058937 CEST	53	57764	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:41.267466068 CEST	57973	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:41.393577099 CEST	53	57973	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:41.399935961 CEST	63286	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:41.521811962 CEST	53	63286	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:41.529974937 CEST	52589	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:41.657284975 CEST	53	52589	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:41.666016102 CEST	54875	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:41.790837049 CEST	53	54875	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:41.804641962 CEST	49862	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:41.945883036 CEST	53	49862	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:41.956855059 CEST	50119	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:42.078185081 CEST	53	50119	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:42.100286007 CEST	60159	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:42.223268032 CEST	53	60159	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:42.236232996 CEST	49464	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:42.368047953 CEST	53	49464	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:42.388699055 CEST	64650	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:42.520453930 CEST	53	64650	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:42.531559944 CEST	52633	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:42.658067942 CEST	53	52633	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:42.703227997 CEST	56124	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:42.821614027 CEST	53	56124	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:42.838327885 CEST	55552	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:42.972671032 CEST	53	55552	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:42.984512091 CEST	60813	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:43.108069897 CEST	53	60813	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:43.114145994 CEST	50930	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:43.235747099 CEST	53	50930	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:43.266443014 CEST	51582	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:43.404114962 CEST	53	51582	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:43.416250944 CEST	56831	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:43.539165020 CEST	53	56831	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:43.556911945 CEST	56981	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:43.702831984 CEST	53	56981	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:43.712337017 CEST	63599	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:43.857214928 CEST	53	63599	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:43.872215033 CEST	61009	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:43.998723030 CEST	53	61009	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:44.014692068 CEST	57676	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:44.141436100 CEST	53	57676	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:44.148437977 CEST	50687	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:44.270035028 CEST	53	50687	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:44.278352976 CEST	53246	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:44.399421930 CEST	53	53246	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:44.418199062 CEST	60242	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:44.554652929 CEST	53	60242	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:44.562882900 CEST	49674	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:44.686024904 CEST	53	49674	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:48.636905909 CEST	50811	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:48.774007082 CEST	53	50811	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:48.807121992 CEST	64331	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:48.935251951 CEST	53	64331	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:48.947602987 CEST	56789	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:49.081790924 CEST	53	56789	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:49.105412960 CEST	63680	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:49.232624054 CEST	53	63680	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:49.246714115 CEST	59706	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:49.379606962 CEST	53	59706	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:49.393089056 CEST	55029	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:49.519912004 CEST	53	55029	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:49.541352034 CEST	51986	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:49.665334940 CEST	53	51986	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:49.674707890 CEST	64913	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:49.800597906 CEST	53	64913	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:49.810271025 CEST	58438	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:49.929547071 CEST	53	58438	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:49.941963911 CEST	49414	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:50.065186024 CEST	53	49414	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:50.083597898 CEST	61135	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:50.208435059 CEST	53	61135	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:50.224315882 CEST	49373	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:50.349658012 CEST	53	49373	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:50.355246067 CEST	59258	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:50.482371092 CEST	53	59258	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:50.494083881 CEST	52434	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:50.618005037 CEST	53	52434	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:50.640499115 CEST	56456	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:50.757180929 CEST	53	56456	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:50.766715050 CEST	53715	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:50.893532038 CEST	53	53715	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:50.901773930 CEST	60677	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:51.023750067 CEST	53	60677	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:51.036664009 CEST	59658	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:51.158986092 CEST	53	59658	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:51.178235054 CEST	56873	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:51.306056023 CEST	53	56873	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:51.327198982 CEST	51402	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:51.451777935 CEST	53	51402	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:51.458411932 CEST	61487	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:51.583678007 CEST	53	61487	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:51.594064951 CEST	59026	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:51.728602886 CEST	53	59026	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:51.769721031 CEST	58616	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:51.902669907 CEST	53	58616	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:51.913492918 CEST	49232	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:52.035723925 CEST	53	49232	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:55.047036886 CEST	55390	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:55.171427965 CEST	53	55390	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:55.193700075 CEST	61057	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:55.328461885 CEST	53	61057	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:55.349270105 CEST	62975	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:55.493421078 CEST	53	62975	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:55.511328936 CEST	62623	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:55.636955976 CEST	53	62623	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:55.646142006 CEST	60626	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:55.773983955 CEST	53	60626	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:55.795643091 CEST	64199	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:55.917674065 CEST	53	64199	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:55.942747116 CEST	64289	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:56.070601940 CEST	53	64289	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:56.083662987 CEST	63509	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:56.207017899 CEST	53	63509	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:56.319199085 CEST	62707	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:56.442394972 CEST	53	62707	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:56.455997944 CEST	60328	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:56.579720020 CEST	53	60328	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:56.593698025 CEST	51927	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:56.712929010 CEST	53	51927	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:56.731281996 CEST	62279	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:56.852607012 CEST	53	62279	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:56.867067099 CEST	58156	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:56.993189096 CEST	53	58156	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:57.003292084 CEST	61329	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:57.127672911 CEST	53	61329	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:57.132411003 CEST	55689	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:57.255733013 CEST	53	55689	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:57.273725033 CEST	56804	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:57.394232988 CEST	53	56804	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:57.409651041 CEST	59651	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:57.534694910 CEST	53	59651	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:57.554770947 CEST	54342	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:57.681437016 CEST	53	54342	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:57.691684008 CEST	62853	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:57.827776909 CEST	53	62853	8.8.8.8	192.168.2.5
Apr 5, 2021 07:48:57.838284016 CEST	55957	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:48:57.959407091 CEST	53	55957	8.8.8.8	192.168.2.5
Apr 5, 2021 07:49:08.055607080 CEST	56417	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:49:08.119714022 CEST	53	56417	8.8.8.8	192.168.2.5
Apr 5, 2021 07:49:08.680864096 CEST	63649	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:49:08.739460945 CEST	53	63649	8.8.8.8	192.168.2.5
Apr 5, 2021 07:49:12.160883904 CEST	63385	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:49:12.214962006 CEST	53	63385	8.8.8.8	192.168.2.5
Apr 5, 2021 07:49:15.447511911 CEST	57985	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:49:15.502314091 CEST	53	57985	8.8.8.8	192.168.2.5
Apr 5, 2021 07:49:15.873532057 CEST	53746	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:49:15.930232048 CEST	53	53746	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:24.162801981 CEST	63772	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:24.223155022 CEST	53	63772	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:24.800081015 CEST	53339	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:24.925251961 CEST	53	53339	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:24.926810026 CEST	64282	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:25.064423084 CEST	53	64282	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:25.067038059 CEST	60790	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:25.194811106 CEST	53	60790	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:25.198340893 CEST	65223	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:25.337591887 CEST	53	65223	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:25.342169046 CEST	61463	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:25.463063955 CEST	53	61463	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:28.471311092 CEST	57450	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:28.589530945 CEST	53	57450	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:28.591816902 CEST	59162	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:28.730827093 CEST	53	59162	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:28.732616901 CEST	61752	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:28.852385998 CEST	53	61752	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:28.854574919 CEST	64745	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:28.985807896 CEST	53	64745	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:28.989466906 CEST	50720	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:29.114720106 CEST	53	50720	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:29.118253946 CEST	58046	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:29.241595984 CEST	53	58046	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:29.245280981 CEST	50299	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:29.366774082 CEST	53	50299	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:29.370820045 CEST	51951	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:29.493025064 CEST	53	51951	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:29.496958017 CEST	55037	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:29.624169111 CEST	53	55037	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:29.628108978 CEST	50823	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:29.756289959 CEST	53	50823	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:29.759125948 CEST	52439	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:29.899141073 CEST	53	52439	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:29.903338909 CEST	65003	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:30.036253929 CEST	53	65003	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:30.038940907 CEST	62613	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:30.166996956 CEST	53	62613	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:30.170332909 CEST	61280	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:30.294548035 CEST	53	61280	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:30.298139095 CEST	56205	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:30.423468113 CEST	53	56205	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:30.426971912 CEST	51129	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:30.551027060 CEST	53	51129	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:30.554883003 CEST	56571	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:30.679290056 CEST	53	56571	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:30.681617975 CEST	62923	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:30.805495024 CEST	53	62923	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:30.808947086 CEST	64231	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:30.932296038 CEST	53	64231	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:30.935674906 CEST	53021	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:31.074613094 CEST	53	53021	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:31.076476097 CEST	56546	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:31.201852083 CEST	53	56546	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:31.203968048 CEST	64112	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:31.324754000 CEST	53	64112	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:31.326297045 CEST	64254	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:31.463577032 CEST	53	64254	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:31.466579914 CEST	63226	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:32.454931974 CEST	63226	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:32.524024010 CEST	53	63226	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:32.526881933 CEST	55746	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:32.573987961 CEST	53	63226	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:32.652667999 CEST	53	55746	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:32.656225920 CEST	50459	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:32.779403925 CEST	53	50459	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:32.782071114 CEST	52789	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:32.903371096 CEST	53	52789	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:32.905801058 CEST	54396	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:33.030544043 CEST	53	54396	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:33.035423040 CEST	52929	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:33.178950071 CEST	53	52929	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:33.182249069 CEST	62682	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:33.307231903 CEST	53	62682	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:36.318564892 CEST	63287	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:36.443885088 CEST	53	63287	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:36.447621107 CEST	54561	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:36.569590092 CEST	53	54561	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:36.574103117 CEST	54241	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:36.714118958 CEST	53	54241	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:36.716104031 CEST	54694	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:36.846776009 CEST	53	54694	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:36.848351955 CEST	59529	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:36.986723900 CEST	53	59529	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:36.988408089 CEST	57609	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:37.125103951 CEST	53	57609	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:37.127232075 CEST	56901	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:37.250722885 CEST	53	56901	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:37.253845930 CEST	49284	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:37.380445957 CEST	53	49284	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:37.382929087 CEST	52266	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:37.507710934 CEST	53	52266	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:37.511872053 CEST	59227	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:37.632886887 CEST	53	59227	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:37.637856007 CEST	58369	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:37.774983883 CEST	53	58369	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:37.777455091 CEST	61315	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:37.899321079 CEST	53	61315	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:37.902753115 CEST	58287	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:38.043540955 CEST	53	58287	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:38.047811985 CEST	56207	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:38.169931889 CEST	53	56207	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:38.175021887 CEST	50843	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:38.297965050 CEST	53	50843	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:38.307594061 CEST	50946	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:38.440769911 CEST	53	50946	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:38.443067074 CEST	61217	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:38.571743965 CEST	53	61217	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:38.575615883 CEST	51502	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:38.695585966 CEST	53	51502	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:38.698820114 CEST	59557	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:38.836205006 CEST	53	59557	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:38.837977886 CEST	58902	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:38.961524963 CEST	53	58902	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:38.965821981 CEST	49637	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:39.087512970 CEST	53	49637	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:39.091274023 CEST	63961	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:39.215938091 CEST	53	63961	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:39.219443083 CEST	62420	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:39.345330000 CEST	53	62420	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:39.347920895 CEST	64375	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:39.482134104 CEST	53	64375	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:39.485447884 CEST	61811	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:39.610459089 CEST	53	61811	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:42.616971016 CEST	56775	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:42.737675905 CEST	53	56775	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:42.740976095 CEST	62877	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:42.869596958 CEST	53	62877	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:42.871202946 CEST	62081	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:43.085522890 CEST	53	62081	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:43.090841055 CEST	55668	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:43.217602015 CEST	53	55668	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:43.220736027 CEST	55470	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:43.355885029 CEST	53	55470	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:43.359457970 CEST	58891	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:43.488841057 CEST	53	58891	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:43.492917061 CEST	61620	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:43.615382910 CEST	53	61620	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:43.621834993 CEST	61780	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:43.745357037 CEST	53	61780	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:43.749066114 CEST	52120	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:43.872014999 CEST	53	52120	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:43.875489950 CEST	51760	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:43.997366905 CEST	53	51760	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:44.001431942 CEST	64371	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:44.135390043 CEST	53	64371	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:44.138690948 CEST	64345	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:44.264475107 CEST	53	64345	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:44.266581059 CEST	63758	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:44.388571978 CEST	53	63758	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:44.392008066 CEST	49882	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:44.513051987 CEST	53	49882	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:44.517173052 CEST	63122	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:44.642210960 CEST	53	63122	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:44.645278931 CEST	53599	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:44.769155979 CEST	53	53599	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:44.774548054 CEST	50902	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:44.897139072 CEST	53	50902	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:44.899082899 CEST	58112	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:45.037508011 CEST	53	58112	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:45.039292097 CEST	52140	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:45.159240961 CEST	53	52140	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:45.160800934 CEST	55888	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:45.281002045 CEST	53	55888	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:45.283082962 CEST	58931	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:45.404865980 CEST	53	58931	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:45.407176018 CEST	58328	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:45.551650047 CEST	53	58328	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:45.555447102 CEST	61398	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:45.678395987 CEST	53	61398	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:45.681869984 CEST	55796	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:45.817981005 CEST	53	55796	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:45.822176933 CEST	54112	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:45.944138050 CEST	53	54112	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:48.959024906 CEST	58370	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:49.095534086 CEST	53	58370	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:49.098493099 CEST	59266	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:49.222728014 CEST	53	59266	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:49.226294994 CEST	59880	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:49.347769022 CEST	53	59880	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:49.352001905 CEST	54483	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:49.478092909 CEST	53	54483	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:49.480550051 CEST	54219	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:49.605309010 CEST	53	54219	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:49.607376099 CEST	63168	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:49.733031988 CEST	53	63168	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:49.736969948 CEST	63607	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:49.872998953 CEST	53	63607	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:49.876507044 CEST	49271	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:49.997458935 CEST	53	49271	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:50.000241041 CEST	53553	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:50.121633053 CEST	53	53553	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:50.126715899 CEST	61315	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:50.253799915 CEST	53	61315	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:50.255855083 CEST	53078	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:50.378639936 CEST	53	53078	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:50.381450891 CEST	49651	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:50.514112949 CEST	53	49651	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:50.515832901 CEST	58449	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:50.643493891 CEST	53	58449	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:50.647948980 CEST	49519	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:50.773020983 CEST	53	49519	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:50.774478912 CEST	55884	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:50.901025057 CEST	53	55884	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:50.903599977 CEST	61715	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:51.032803059 CEST	53	61715	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:51.035243034 CEST	55925	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:51.157352924 CEST	53	55925	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:51.161001921 CEST	51205	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:51.288600922 CEST	53	51205	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:51.290642023 CEST	58771	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:51.417141914 CEST	53	58771	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:51.420557022 CEST	62803	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:51.552870989 CEST	53	62803	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:51.554814100 CEST	55349	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:51.677292109 CEST	53	55349	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:51.682961941 CEST	54796	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:51.809010029 CEST	53	54796	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:51.813549995 CEST	51925	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:51.937931061 CEST	53	51925	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:51.942648888 CEST	54805	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:52.076105118 CEST	53	54805	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:52.079431057 CEST	52827	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:52.205879927 CEST	53	52827	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:55.230833054 CEST	56292	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:55.356096983 CEST	53	56292	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:55.359831095 CEST	63810	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:55.484879971 CEST	53	63810	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:55.489546061 CEST	51610	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:55.613516092 CEST	53	51610	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:55.617057085 CEST	58684	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:55.749687910 CEST	53	58684	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:55.753288031 CEST	49943	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:55.882888079 CEST	53	49943	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:55.886276960 CEST	61846	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:56.011960983 CEST	53	61846	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:56.014002085 CEST	55855	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:56.140192986 CEST	53	55855	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:56.142813921 CEST	50731	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:56.271888018 CEST	53	50731	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:56.273703098 CEST	49200	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:56.395081043 CEST	53	49200	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:56.397931099 CEST	57433	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:56.523591042 CEST	53	57433	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:56.525249958 CEST	60197	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:56.653734922 CEST	53	60197	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:56.657119036 CEST	50200	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:56.780783892 CEST	53	50200	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:56.784193039 CEST	61743	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:56.906598091 CEST	53	61743	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:56.910521984 CEST	59122	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:57.038269997 CEST	53	59122	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:57.040628910 CEST	51686	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:57.165296078 CEST	53	51686	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:57.168723106 CEST	56658	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:57.304668903 CEST	53	56658	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:57.307971001 CEST	53694	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:57.430094004 CEST	53	53694	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:57.433573008 CEST	63775	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:57.558336973 CEST	53	63775	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:57.561992884 CEST	59351	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:57.691174030 CEST	53	59351	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:57.695013046 CEST	51816	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:57.817132950 CEST	53	51816	8.8.8.8	192.168.2.5
Apr 5, 2021 07:50:57.824420929 CEST	49602	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:50:57.972803116 CEST	53	49602	8.8.8.8	192.168.2.5
Apr 5, 2021 07:51:35.733499050 CEST	54037	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:51:35.804020882 CEST	53	54037	8.8.8.8	192.168.2.5
Apr 5, 2021 07:51:36.324767113 CEST	53644	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:51:36.373377085 CEST	53	53644	8.8.8.8	192.168.2.5
Apr 5, 2021 07:52:23.130754948 CEST	56212	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:52:23.185467005 CEST	53	56212	8.8.8.8	192.168.2.5
Apr 5, 2021 07:52:23.451141119 CEST	54792	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:52:24.448836088 CEST	54792	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:52:25.449356079 CEST	54792	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:52:27.448956966 CEST	54792	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:52:28.497823000 CEST	53	54792	8.8.8.8	192.168.2.5
Apr 5, 2021 07:52:28.502314091 CEST	60302	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:52:29.494926929 CEST	53	54792	8.8.8.8	192.168.2.5
Apr 5, 2021 07:52:29.496634007 CEST	60302	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:52:29.517997026 CEST	53	54792	8.8.8.8	192.168.2.5
Apr 5, 2021 07:52:30.805295944 CEST	60302	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:52:31.522336006 CEST	53	54792	8.8.8.8	192.168.2.5
Apr 5, 2021 07:52:32.570938110 CEST	53	60302	8.8.8.8	192.168.2.5
Apr 5, 2021 07:52:32.574757099 CEST	59481	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:52:33.557555914 CEST	53	60302	8.8.8.8	192.168.2.5
Apr 5, 2021 07:52:33.574572086 CEST	59481	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:52:34.590091944 CEST	59481	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:52:35.851516962 CEST	53	60302	8.8.8.8	192.168.2.5
Apr 5, 2021 07:52:36.605660915 CEST	59481	53	192.168.2.5	8.8.8.8
Apr 5, 2021 07:52:36.652715921 CEST	53	59481	8.8.8.8	192.168.2.5
Apr 5, 2021 07:52:37.647181988 CEST	53	59481	8.8.8.8	192.168.2.5
Apr 5, 2021 07:52:38.660361052 CEST	53	59481	8.8.8.8	192.168.2.5
Apr 5, 2021 07:52:40.675978899 CEST	53	59481	8.8.8.8	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 5, 2021 07:44:31.812436104 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:44:34.879777908 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:44:36.100936890 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:44:38.119582891 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:44:39.190466881 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:44:41.125632048 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:44:42.145597935 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:44:44.145765066 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:46:28.335382938 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:46:30.307919979 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:46:31.342617035 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:46:33.474354982 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:46:34.503925085 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:46:36.501707077 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:46:37.550048113 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:46:38.548418999 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:46:40.557723999 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:50:32.574177027 CEST	192.168.2.5	8.8.8.8	d059	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:52:29.495145082 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:52:31.522499084 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:52:33.557672024 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:52:35.851742983 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:52:37.647324085 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:52:38.660541058 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable
Apr 5, 2021 07:52:40.676233053 CEST	192.168.2.5	8.8.8.8	cff4	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Apr 5, 2021 07:44:25.429493904 CEST	192.168.2.5	8.8.8.8	0x3b9c	Standard query (0)	checkip.amazonaws.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:25.753462076 CEST	192.168.2.5	8.8.8.8	0xbb6c	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:26.759968042 CEST	192.168.2.5	8.8.8.8	0xbb6c	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:27.776372910 CEST	192.168.2.5	8.8.8.8	0xbb6c	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:29.829489946 CEST	192.168.2.5	8.8.8.8	0xbb6c	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:30.990581036 CEST	192.168.2.5	8.8.8.8	0x747b	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:32.027259111 CEST	192.168.2.5	8.8.8.8	0x747b	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:33.073087931 CEST	192.168.2.5	8.8.8.8	0x747b	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:35.119900942 CEST	192.168.2.5	8.8.8.8	0x747b	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:36.045052052 CEST	192.168.2.5	8.8.8.8	0x9636	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:37.057696104 CEST	192.168.2.5	8.8.8.8	0x9636	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:38.073177099 CEST	192.168.2.5	8.8.8.8	0x9636	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:40.073597908 CEST	192.168.2.5	8.8.8.8	0x9636	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:22.857399940 CEST	192.168.2.5	8.8.8.8	0x84dd	Standard query (0)	checkip.amazonaws.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:23.246515989 CEST	192.168.2.5	8.8.8.8	0x3b41	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:24.258979082 CEST	192.168.2.5	8.8.8.8	0x3b41	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:25.259200096 CEST	192.168.2.5	8.8.8.8	0x3b41	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:27.274846077 CEST	192.168.2.5	8.8.8.8	0x3b41	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:28.402040005 CEST	192.168.2.5	8.8.8.8	0x1c03	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:29.400722027 CEST	192.168.2.5	8.8.8.8	0x1c03	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:30.431931019 CEST	192.168.2.5	8.8.8.8	0x1c03	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:32.431662083 CEST	192.168.2.5	8.8.8.8	0x1c03	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:32.490631104 CEST	192.168.2.5	8.8.8.8	0x823f	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:33.478679895 CEST	192.168.2.5	8.8.8.8	0x823f	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:34.479064941 CEST	192.168.2.5	8.8.8.8	0x823f	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:36.479077101 CEST	192.168.2.5	8.8.8.8	0x823f	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:23.760942936 CEST	192.168.2.5	8.8.8.8	0xf686	Standard query (0)	checkip.amazonaws.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:24.097127914 CEST	192.168.2.5	8.8.8.8	0x85a1	Standard query (0)	sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:24.342003107 CEST	192.168.2.5	8.8.8.8	0xfa9d	Standard query (0)	efkezwpdxpsq3lsdvnscc.nqfuhj4g5qndhshtlghjlpujhqrbvu.uipcc52icgjgfdelsc3ancaijdnacinun2l.ihvdacjoibefwddrcdfptdhnifsnkdyddddp.ddddddaacg.fgevtf3izno2skelgg3umvcrrb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:24.496212006 CEST	192.168.2.5	8.8.8.8	0x732a	Standard query (0)	ihidsfghzboscitfrhswgbdqgvv4guil.nmrd22lq2lrwhpqcuma2h2sqhdnq2ay.ijzlljuihupgujlqirarhhzyqulr.d2v4cugas2zsqidfwhvyidgmj.usrhzdddddcdwdgg.fgevtf3izno2skelgg3umvcrrb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:24.667191982 CEST	192.168.2.5	8.8.8.8	0xd41	Standard query (0)	xvc62upjjgl6duajcmrlhpyqyelq.ubdiczr62ydccfelzfsdf3ie2uljgmm6gmsjw.hdddgpmfd.fgevtf3izno2skelgg3umvcrrb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:24.823895931 CEST	192.168.2.5	8.8.8.8	0x5455	Standard query (0)	9plddd496kddyddddddq9fh.h22c5y4pi6p6sdetpwyufottbi.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:27.982212067 CEST	192.168.2.5	8.8.8.8	0x75bf	Standard query (0)	9plddd496kddyddddddyefb.e9bvvswihas5con3qriin5auei.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.132510900 CEST	192.168.2.5	8.8.8.8	0xe1dc	Standard query (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.284475088 CEST	192.168.2.5	8.8.8.8	0xa115	Standard query (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.452290058 CEST	192.168.2.5	8.8.8.8	0x21a6	Standard query (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.606410027 CEST	192.168.2.5	8.8.8.8	0x224b	Standard query (0)	9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.762665033 CEST	192.168.2.5	8.8.8.8	0xdefa	Standard query (0)	9pldddloddddy999dddhdddddpnwd.z9crufme5l4psjjmrl4mfxfk5b.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.921608925 CEST	192.168.2.5	8.8.8.8	0x2868	Standard query (0)	9pldddpvddddy999dddhdddddyjyx.jwb4i2qyfbm4s6nezzdc3gtzqb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.072006941 CEST	192.168.2.5	8.8.8.8	0x3988	Standard query (0)	9pldddy9ddddy999dddhdddddlw4m.kczy5vnfhmmsc9j2mycx6jz6dc.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.215132952 CEST	192.168.2.5	8.8.8.8	0x5f83	Standard query (0)	9pldddyhgdddy999dddhdddddpswl.bgldl2g6xazfs62juwyuwlr9bk.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.379121065 CEST	192.168.2.5	8.8.8.8	0x7320	Standard query (0)	9pldddpcgdddy999dddhdddddl9or.3r4yo6wzmmn6cew2beavnbzbmd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.548633099 CEST	192.168.2.5	8.8.8.8	0x3acf	Standard query (0)	9pldddsjgdddy999dddhdddddpb5r.bpatfnu5d6sxsunyuy5ndb6ycj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.687697887 CEST	192.168.2.5	8.8.8.8	0x979c	Standard query (0)	9pldddclgdddy999dddhddddddvvr.fpcnuit4lfkbs46ube5ckzvacd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.837271929 CEST	192.168.2.5	8.8.8.8	0x2f81	Standard query (0)	9pldddlmgdddy999dddhdddddl6ff.ynxokgamkhc4cswxtcjmqftx6k.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.983505011 CEST	192.168.2.5	8.8.8.8	0xcea4	Standard query (0)	9pldddqngdddy999dddhdddddde3f.u5y4irinuiiesrwkb9qlmtmiqh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.142719984 CEST	192.168.2.5	8.8.8.8	0x64f9	Standard query (0)	9pldddcfgdddy999dddhddddddr6l.5vzidylzgvglshur9xesgqcokc.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.313869953 CEST	192.168.2.5	8.8.8.8	0x62e4	Standard query (0)	9plddd4fgdddy999dddhdddddyzbi.dchzuulka4o5cmhvpdo6wmbu6d.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.451874018 CEST	192.168.2.5	8.8.8.8	0x58eb	Standard query (0)	9pldddsqgdddy999dddhddddddzmw.9resjqy6ihkasmudkuvbzukjni.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.607230902 CEST	192.168.2.5	8.8.8.8	0x9e34	Standard query (0)	9plddddrgdddy999dddhdddddyham.pgw4vhlvnueacbhu4hyzs35bxc.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.797462940 CEST	192.168.2.5	8.8.8.8	0x7a34	Standard query (0)	9pldddqrgdddy999dddhddddddbhb.cuirp5fa2xmncm2ltapgvfpbah.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.941489935 CEST	192.168.2.5	8.8.8.8	0xa06f	Standard query (0)	9pldddprgdddy999dddhdddddlqbh.dfvh9cbplgoasuekjvi39sswzg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:31.090547085 CEST	192.168.2.5	8.8.8.8	0x8bc6	Standard query (0)	efkezwpdxpsq3lsdvnsccnqfuhj4g5qnd.hshtlghjlpujhqrbvuui.pcc52icgjgfdelsc3ancaijdnacinun2lihvdac.joibefwddrcdfptdhnifsnkncdcddd.djdddddptmd.gconcfadqbxmsqekmnvx59jeyd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:31.228981018 CEST	192.168.2.5	8.8.8.8	0xa746	Standard query (0)	sdywilcw422sswtmyeiqdy.iqx3kpudmitglnhzmhtamd3zp.jifnl22mdlzmjbupchgapulphkpedztsiomlch.2ahtglw33pjc3nj22tdqamqbudccapdddcduthd.gconcfadqbxmsqekmnvx59jeyd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:31.370255947 CEST	192.168.2.5	8.8.8.8	0xdc3f	Standard query (0)	mvchgd4r3pfehvpcdabpjvyctgmdb2gnbzawds.ycuafhhyyqmbiwzhqrulfeh.acciakczepmdddcdn6m.gconcfadqbxmsqekmnvx59jeyd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:31.527219057 CEST	192.168.2.5	8.8.8.8	0xabb9	Standard query (0)	6fmddd496kddyddddddn9eh.6ag4c3ktjf59cjw5fr4sde9lfb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.684809923 CEST	192.168.2.5	8.8.8.8	0x2b08	Standard query (0)	6fmddd496kddydddddd2g9b.qfriaupe9xkac9uemfgupzz4kb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.813467979 CEST	192.168.2.5	8.8.8.8	0xabc4	Standard query (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.973402023 CEST	192.168.2.5	8.8.8.8	0xaa2	Standard query (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.122374058 CEST	192.168.2.5	8.8.8.8	0xb0b2	Standard query (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.264795065 CEST	192.168.2.5	8.8.8.8	0x91cf	Standard query (0)	6fmdddd2ddddy999dddhdddddlbod.bn6bzwu5gzzocuemrtup2mrcmj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.402359009 CEST	192.168.2.5	8.8.8.8	0xaad7	Standard query (0)	6fmdddloddddy999dddhdddddynxn.ch4rh44odulbcyhi5oxmtqmnhc.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.534708023 CEST	192.168.2.5	8.8.8.8	0x7fcb	Standard query (0)	6fmdddpvddddy999dddhdddddd3oc.burfjb5fdcrtsij3mjxph4t9ed.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.688179970 CEST	192.168.2.5	8.8.8.8	0x5773	Standard query (0)	6fmdddy9ddddy999dddhdddddpguj.p3xbylmctu6ssfwxm6avnqbhzc.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.904503107 CEST	192.168.2.5	8.8.8.8	0x7d73	Standard query (0)	6fmdddyhgdddy999dddhddddddudj.rxwj34r3eozecpumtr9oy5knqi.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.052767992 CEST	192.168.2.5	8.8.8.8	0x442b	Standard query (0)	6fmdddpcgdddy999dddhdddddlaoq.uat5co4whrpesmwycnee4vk9ag.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.194844961 CEST	192.168.2.5	8.8.8.8	0x7508	Standard query (0)	6fmdddsjgdddy999dddhdddddltqd.vupuxtkoqfmcczhguflirjy6nb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.355082989 CEST	192.168.2.5	8.8.8.8	0x8739	Standard query (0)	6fmdddclgdddy999dddhddddddr6k.g34zz9ptnbf6sihsnjcwe52ttb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.502445936 CEST	192.168.2.5	8.8.8.8	0x6ec4	Standard query (0)	6fmdddlmgdddy999dddhdddddpteh.xifcwlwakz6zca6hmx5mhq9xhh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.656559944 CEST	192.168.2.5	8.8.8.8	0x1e56	Standard query (0)	6fmdddqngdddy999dddhddddddtfn.bjsnopybkkpqcpwpysopb933tj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.796808958 CEST	192.168.2.5	8.8.8.8	0x581d	Standard query (0)	6fmdddcfgdddy999dddhdddddypvm.wvzauzs59pqnspjpph26suqdeh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.927719116 CEST	192.168.2.5	8.8.8.8	0xebab	Standard query (0)	6fmddd4fgdddy999dddhdddddd6jf.wyhmh92uye33coulyqiz9wp5jb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.072901011 CEST	192.168.2.5	8.8.8.8	0xc34f	Standard query (0)	6fmdddsqgdddy999dddhdddddliox.yh4wpbolazchcmjbd3torwaipg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.209364891 CEST	192.168.2.5	8.8.8.8	0xde67	Standard query (0)	6fmddddrgdddy999dddhdddddpkcq.gaydllyaba55cdj4tepn3tt9oi.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.372283936 CEST	192.168.2.5	8.8.8.8	0x7a45	Standard query (0)	6fmdddqrgdddy999dddhdddddy2sn.qykoejju4byoszu24tflfvyivh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.509176016 CEST	192.168.2.5	8.8.8.8	0xa880	Standard query (0)	6fmdddprgdddy999dddhdddddp9en.66mq25hm6m2ysvhs9avcwmegtk.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.648938894 CEST	192.168.2.5	8.8.8.8	0x957c	Standard query (0)	efkezwpdxpsq3lsdvnsccnqfuhj4g5qn.dhshtlghjlpujhqrbvuuipcc52icgjgfd.elsc3ancaijdnacinun2lihvdacjoibefwd.drcdfptdhnifsnkncnddgdddygdddddh69b.n3u3bdlqy4ahsfjea4eialvygh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.793886900 CEST	192.168.2.5	8.8.8.8	0xfbd1	Standard query (0)	detdzpzfn22etjgnoygduy5r6dvhctsjdmm.cjmsjkgqjhvsqmgmnjgd.ijaqph3lccbvhgf4dfbcu2u4jg.zlljfsjdarwhvyqnalnuhyikzrphyyc.bfejzlddxbddyd4ddj.n3u3bdlqy4ahsfjea4eialvygh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.933382034 CEST	192.168.2.5	8.8.8.8	0x375e	Standard query (0)	3pfehvpcdabpjvyctgmdb2gnbzawdsycua.fhhyyqmbiwzhqrulfehacciakczepmdddcyznl.n3u3bdlqy4ahsfjea4eialvygh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:38.075854063 CEST	192.168.2.5	8.8.8.8	0x2486	Standard query (0)	vvtgdd496kddyddddddp9pd.t2w3pdmyyjg5syjibmrtbwafsg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.267466068 CEST	192.168.2.5	8.8.8.8	0x2ba5	Standard query (0)	vvtgdd496kddyddddddwhmg.ogt9t5ihgj3ysm22hqm5y9ri2k.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.399935961 CEST	192.168.2.5	8.8.8.8	0x29a6	Standard query (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.529974937 CEST	192.168.2.5	8.8.8.8	0xe2a	Standard query (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.666016102 CEST	192.168.2.5	8.8.8.8	0x6444	Standard query (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.804641962 CEST	192.168.2.5	8.8.8.8	0x383d	Standard query (0)	vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.956855059 CEST	192.168.2.5	8.8.8.8	0x4384	Standard query (0)	vvtgddloddddy999dddhdddddlvrl.qu5iyvkvdpz9sces3nv5pbmtag.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.100286007 CEST	192.168.2.5	8.8.8.8	0x2304	Standard query (0)	vvtgddpvddddy999dddhdddddp4ac.tb62ikmmdrubss6ben6alszz3i.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.236232996 CEST	192.168.2.5	8.8.8.8	0x4bd3	Standard query (0)	vvtgddy9ddddy999dddhdddddlkph.5wpy6jl9gfrqcmuru6q2psochj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.388699055 CEST	192.168.2.5	8.8.8.8	0xf6c3	Standard query (0)	vvtgddyhgdddy999dddhdddddp5mq.ptnbi2fjb5xucheykuvzyy6hch.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.531559944 CEST	192.168.2.5	8.8.8.8	0xa400	Standard query (0)	vvtgddpcgdddy999dddhddddddpnq.zy3hs93ubdqlsvjtibqjvkr6uj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.703227997 CEST	192.168.2.5	8.8.8.8	0xb2bf	Standard query (0)	vvtgddsjgdddy999dddhddddddg5k.fs95q9lqgvvbs3hm3d5f2dschb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.838327885 CEST	192.168.2.5	8.8.8.8	0xebb0	Standard query (0)	vvtgddclgdddy999dddhdddddytxl.i3dpfey2qkq6svwohnugqufi3h.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.984512091 CEST	192.168.2.5	8.8.8.8	0xe355	Standard query (0)	vvtgddlmgdddy999dddhddddddirn.irmi264qck2sc5jv95jhp2u4xi.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.114145994 CEST	192.168.2.5	8.8.8.8	0x7ca5	Standard query (0)	vvtgddqngdddy999dddhdddddpi9q.dg2ljzcl4exuc3hkfogs94qjci.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.266443014 CEST	192.168.2.5	8.8.8.8	0x530d	Standard query (0)	vvtgddcfgdddy999dddhdddddpivr.yzmkrxgyr3amst2sn9gvgdat6j.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.416250944 CEST	192.168.2.5	8.8.8.8	0xfe4f	Standard query (0)	vvtgdd4fgdddy999dddhdddddp49w.um3wlc3zjfb5c4wewtbxwb6uvj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.556911945 CEST	192.168.2.5	8.8.8.8	0x3c89	Standard query (0)	vvtgddsqgdddy999dddhdddddlu9b.s5nndv5ejjdvszhh6t9sa3kvvg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.712337017 CEST	192.168.2.5	8.8.8.8	0xcacc	Standard query (0)	vvtgdddrgdddy999dddhdddddphck.6jcelbziy5ics42fmfs6i2qf3g.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.872215033 CEST	192.168.2.5	8.8.8.8	0xc37b	Standard query (0)	vvtgddqrgdddy999dddhdddddyqad.rd4qr5m4xxmushwveacwsiq23g.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:44.014692068 CEST	192.168.2.5	8.8.8.8	0xeffb	Standard query (0)	vvtgddprgdddy999dddhdddddlbkx.cbqcffdll4y4cpnhzhkpmudufh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:44.148437977 CEST	192.168.2.5	8.8.8.8	0xa25a	Standard query (0)	efkezwpdxpsq3lsdvnsccnqfuhj4g5qndhshtl.ghjlpujhqrbvuuipcc52icgjgfdelsc3ancaijd.nacinun2lihvdacjoibefwdd.rcdfptdhnifsnkncnddgdddygdddddygad.byeui5jwtkm3cs2pz2fp9zcewh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:44.278352976 CEST	192.168.2.5	8.8.8.8	0xcde6	Standard query (0)	detdzpzfn22etjgnoygduy5r6dvh.ctsjdmmcjmsjkgqjhvsqmgmnjgdijaqph3.lccbvhgf4dfbcu2u4jgzlljfsjdarwhvyqnaln.uhyikzrphyycbfejzlddxvc62upjjgddydljwg.byeui5jwtkm3cs2pz2fp9zcewh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:44.418199062 CEST	192.168.2.5	8.8.8.8	0x89a	Standard query (0)	dabpjvyctgmdb2gnbzawdsycuafhhyyqmbi.wzhqrulfehacciakczepmdddcyahy.byeui5jwtkm3cs2pz2fp9zcewh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:44.562882900 CEST	192.168.2.5	8.8.8.8	0x4b92	Standard query (0)	r5zddd496kddyddddddjgwd.nu3ylfl2uelhsgn4rvfnpisdwj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.636905909 CEST	192.168.2.5	8.8.8.8	0x8482	Standard query (0)	r5zddd496kddyddddddpoyg.dyx35werowimcqwxab55dzn5kc.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.807121992 CEST	192.168.2.5	8.8.8.8	0x4119	Standard query (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.947602987 CEST	192.168.2.5	8.8.8.8	0xe4de	Standard query (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.105412960 CEST	192.168.2.5	8.8.8.8	0x802c	Standard query (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.246714115 CEST	192.168.2.5	8.8.8.8	0xcfd	Standard query (0)	r5zdddd2ddddy999dddhddddddarq.vpy96cjixdazsbeuc9a9yhfnod.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.393089056 CEST	192.168.2.5	8.8.8.8	0xdb64	Standard query (0)	r5zdddloddddy999dddhdddddlqew.qtmpn5jib3cbcdubbscas93gog.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.541352034 CEST	192.168.2.5	8.8.8.8	0x5495	Standard query (0)	r5zdddpvddddy999dddhdddddlr4f.t2qfeac3xskfcrwe9tdqagvezb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.674707890 CEST	192.168.2.5	8.8.8.8	0x9af5	Standard query (0)	r5zdddy9ddddy999dddhdddddlbaj.4cig3iqctojvcu24p5eb5sehmk.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.810271025 CEST	192.168.2.5	8.8.8.8	0x6763	Standard query (0)	r5zdddyhgdddy999dddhdddddyxlj.nmzz55pkquabcb2nq6kzvys6ad.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.941963911 CEST	192.168.2.5	8.8.8.8	0x6d13	Standard query (0)	r5zdddpcgdddy999dddhdddddypfb.qz96crvbld9msvndloy5ozeudh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.083597898 CEST	192.168.2.5	8.8.8.8	0xf4ea	Standard query (0)	r5zdddsjgdddy999dddhddddddzzl.zhcvpyntsm42sdesosueoqzgxh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.224315882 CEST	192.168.2.5	8.8.8.8	0xd1c5	Standard query (0)	r5zdddclgdddy999dddhdddddyrsi.9ubumpefzvr2ckhuvampkfv2ik.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.355246067 CEST	192.168.2.5	8.8.8.8	0x143	Standard query (0)	r5zdddlmgdddy999dddhdddddpadj.2favssb3n5zbsenkgiv4uskm9c.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.494083881 CEST	192.168.2.5	8.8.8.8	0x7ad0	Standard query (0)	r5zdddqngdddy999dddhdddddlb2r.9n5wus44j6jks92r3gnjqxgnfd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.640499115 CEST	192.168.2.5	8.8.8.8	0x15b8	Standard query (0)	r5zdddcfgdddy999dddhdddddleci.5dirqvocy59xcn6nu9jbfw9psk.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.766715050 CEST	192.168.2.5	8.8.8.8	0x5d0	Standard query (0)	r5zddd4fgdddy999dddhdddddpd2h.2vl9ho6fks5psr2lacevh9cakg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.901773930 CEST	192.168.2.5	8.8.8.8	0xcc92	Standard query (0)	r5zdddsqgdddy999dddhdddddlcvb.9ktc6nf3l4eisvw3t2ratso95h.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.036664009 CEST	192.168.2.5	8.8.8.8	0xdf14	Standard query (0)	r5zddddrgdddy999dddhdddddpvxh.6rtufkuzgcnys66lgqdd2xasid.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.178235054 CEST	192.168.2.5	8.8.8.8	0xc0e5	Standard query (0)	r5zdddqrgdddy999dddhdddddddhb.llkd5phtskl3cduotxzr2hzvbk.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.327198982 CEST	192.168.2.5	8.8.8.8	0x3e82	Standard query (0)	r5zdddprgdddy999dddhdddddyqdd.syft2i3xmwqacen9orpna99h2c.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.458411932 CEST	192.168.2.5	8.8.8.8	0x766f	Standard query (0)	efkezwpdxpsq3lsdvnsccnqfuhj4g5qndh.shtlghjlpujhqrbvuuipcc52icgjg.fdelsc3ancaijdnacinun2lihv.dacjoibefwddrcdfptdhnifsnknc.ndlohdhddddbdddddqhgg.qhfixf5me5zysvnduapxdzi32k.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.594064951 CEST	192.168.2.5	8.8.8.8	0x27b1	Standard query (0)	yl4piimm5n3dtfpddfp6jxyrg2nnbys.ch3cn33djbzrnusyci3dy.h3qjqzmch2zrzyiwytgh.fmfw3ylcc3inby4jkzrljtqcifgp23pjqgll2z.ir3lcdyorhdddhyci9.qhfixf5me5zysvnduapxdzi32k.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.769721031 CEST	192.168.2.5	8.8.8.8	0x60e7	Standard query (0)	xmfqb3dcxdvqb2sjcgqljlrcjv.gyh2pjxmldh2irspinytahrmfc3y.sc9ycnbkgddydpcrb.qhfixf5me5zysvnduapxdzi32k.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.913492918 CEST	192.168.2.5	8.8.8.8	0xb5f5	Standard query (0)	6vtgdd496kddyddddddwqwd.uixbwnnth45ocjuhxkuzoohuni.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.047036886 CEST	192.168.2.5	8.8.8.8	0xc655	Standard query (0)	6vtgdd496kddyddddddh3ug.mnpf4xlemu9pcau9pteqn34jqc.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.193700075 CEST	192.168.2.5	8.8.8.8	0x3953	Standard query (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.349270105 CEST	192.168.2.5	8.8.8.8	0x731d	Standard query (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.511328936 CEST	192.168.2.5	8.8.8.8	0xa187	Standard query (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.646142006 CEST	192.168.2.5	8.8.8.8	0x5ce3	Standard query (0)	6vtgddd2ddddy999dddhdddddloij.m9aamelug3wlsoeqqxnhcoonzk.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.795643091 CEST	192.168.2.5	8.8.8.8	0xf75b	Standard query (0)	6vtgddloddddy999dddhdddddpfxx.byjoxorguw3ac56fzehj92qu4k.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.942747116 CEST	192.168.2.5	8.8.8.8	0x5520	Standard query (0)	6vtgddpvddddy999dddhdddddddjn.fjp55udwucbpcehnz45pznu56h.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.083662987 CEST	192.168.2.5	8.8.8.8	0x2814	Standard query (0)	6vtgddy9ddddy999dddhdddddyajk.96zgy2mmf3zack2hlrip2yj3kd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.319199085 CEST	192.168.2.5	8.8.8.8	0xbc33	Standard query (0)	6vtgddyhgdddy999dddhdddddyz4k.cog9d34uwngqsg2h9wzeinkz2c.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.455997944 CEST	192.168.2.5	8.8.8.8	0x4ff7	Standard query (0)	6vtgddpcgdddy999dddhdddddpeqh.lkql433gfg6wc6w63o4rqsnawh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.593698025 CEST	192.168.2.5	8.8.8.8	0x91aa	Standard query (0)	6vtgddsjgdddy999dddhdddddpdpl.cpiv4kq4f22ss9epwfurm6btji.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.731281996 CEST	192.168.2.5	8.8.8.8	0xa6c2	Standard query (0)	6vtgddclgdddy999dddhdddddy9yb.u3fpuydggyexcinugqsfdfiewi.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.867067099 CEST	192.168.2.5	8.8.8.8	0xa972	Standard query (0)	6vtgddlmgdddy999dddhdddddykbk.adjvyvgigykts3wy9ioczcikvj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.003292084 CEST	192.168.2.5	8.8.8.8	0xaa45	Standard query (0)	6vtgddqngdddy999dddhdddddlvyq.jo4xd3xri5cosl6o69qnws26pk.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.132411003 CEST	192.168.2.5	8.8.8.8	0x2fd2	Standard query (0)	6vtgddcfgdddy999dddhdddddpdbc.taffthi3km4isr6tby4foal5kj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.273725033 CEST	192.168.2.5	8.8.8.8	0x8fea	Standard query (0)	6vtgdd4fgdddy999dddhdddddplkc.i62wsex9xh3vc2n9pnwtbqhtyj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.409651041 CEST	192.168.2.5	8.8.8.8	0xce0f	Standard query (0)	6vtgddsqgdddy999dddhdddddymtl.4lrirpurbck6cwuoo5znuffoqj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.554770947 CEST	192.168.2.5	8.8.8.8	0x4ccf	Standard query (0)	6vtgdddrgdddy999dddhdddddpmek.g2sx9dnzrky4sqegczzpo5fm9i.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.691684008 CEST	192.168.2.5	8.8.8.8	0x316b	Standard query (0)	6vtgddqrgdddy999dddhdddddd4jr.aax69ti6qen6ca6qpzkyb6seth.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.838284016 CEST	192.168.2.5	8.8.8.8	0xa9f	Standard query (0)	6vtgddprgdddy999dddhddddddeth.rap4j9b3ajqjs6hyewd2bfmfvd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:24.162801981 CEST	192.168.2.5	8.8.8.8	0xf8fc	Standard query (0)	checkip.amazonaws.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:24.800081015 CEST	192.168.2.5	8.8.8.8	0x4e2d	Standard query (0)	sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:24.926810026 CEST	192.168.2.5	8.8.8.8	0x5c72	Standard query (0)	efkezwpdxpsq3lsdvnsccnqfuhj4.g5qndhshtlghjlpujhqrbvuuip.cc52icgjgfdelsc3ancaijdnacinun.2lihvdacjoibefwddrcdfptdhnifsnkncnd.lohchkwgdgdddygdddddyc2d.yyzoipktrpqicnwxz3hf4icrfg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:25.067038059 CEST	192.168.2.5	8.8.8.8	0x5340	Standard query (0)	n22etjgnoygduy5r6dvhsoljcgllufdjcmrd2vs.qwglquhqiggr6hzqcgfew.gfsdxbcshs4jkgljufcjcgqj2esq.malljgcidzre22dccfejzf4dlvcs2.ucjcmldddcdzbwd.yyzoipktrpqicnwxz3hf4icrfg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:25.198340893 CEST	192.168.2.5	8.8.8.8	0xa115	Standard query (0)	xlid32ljczrcjudcj3d62ypjlgldhzarylcw.yu5hqgncb3dc9dcdbkgddyds5hb.yyzoipktrpqicnwxz3hf4icrfg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:25.342169046 CEST	192.168.2.5	8.8.8.8	0x70dd	Standard query (0)	b4tgdd496kddyddddddc9pd.2bzpyeldpf5qci6iuhrv44tg9i.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.471311092 CEST	192.168.2.5	8.8.8.8	0x2f71	Standard query (0)	b4tgdd496kddydddddd265d.5fvlomz9g2t6sjjvfg6nf4vmjh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.591816902 CEST	192.168.2.5	8.8.8.8	0x7541	Standard query (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.732616901 CEST	192.168.2.5	8.8.8.8	0x3117	Standard query (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.854574919 CEST	192.168.2.5	8.8.8.8	0x1688	Standard query (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.989466906 CEST	192.168.2.5	8.8.8.8	0x1e4c	Standard query (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.118253946 CEST	192.168.2.5	8.8.8.8	0xdd2	Standard query (0)	b4tgdddpddddy999dddhdddddyism.vf629qyj3ylocmhq4xquq2cf3j.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.245280981 CEST	192.168.2.5	8.8.8.8	0x47bf	Standard query (0)	b4tgdd44ddddy999dddhdddddpeoj.c6namrxtvuzysbjaycteedpryk.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.370820045 CEST	192.168.2.5	8.8.8.8	0x2278	Standard query (0)	b4tgdddggdddy999dddhdddddpcvj.wxq4ylecj6m4coek2mslauz3gh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.496958017 CEST	192.168.2.5	8.8.8.8	0xbc8f	Standard query (0)	b4tgddqcgdddy999dddhdddddpdog.hynr9mq3j3h5cqna3xqpz63mid.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.628108978 CEST	192.168.2.5	8.8.8.8	0x5040	Standard query (0)	b4tgdddkgdddy999dddhdddddystw.nz5deyfwdxlms5hz5beuytmfei.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.759125948 CEST	192.168.2.5	8.8.8.8	0x967c	Standard query (0)	b4tgddlmgdddy999dddhdddddybeh.pi5ngtmy2hzkcbel3gx54yz2nh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.903338909 CEST	192.168.2.5	8.8.8.8	0x8125	Standard query (0)	b4tgddcfgdddy999dddhdddddyzkr.pcuntdnhowktchwrtl4zjmasoh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.038940907 CEST	192.168.2.5	8.8.8.8	0x415f	Standard query (0)	b4tgddsqgdddy999dddhdddddpb5b.36aqozrooscbsahbpkpzoiqbii.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.170332909 CEST	192.168.2.5	8.8.8.8	0x6f15	Standard query (0)	b4tgddprgdddy999dddhdddddpqxg.e4lquweuedaack2grflu5q3gab.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.298139095 CEST	192.168.2.5	8.8.8.8	0x9b59	Standard query (0)	b4tgddywgdddy999dddhdddddytwl.233e5jfky55kclnr4dymadymfj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.426971912 CEST	192.168.2.5	8.8.8.8	0x5d9a	Standard query (0)	b4tgddlxgdddy999dddhdddddppdl.waxmtqa5jc43czwoikkjs9cpyg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.554883003 CEST	192.168.2.5	8.8.8.8	0x4f4c	Standard query (0)	b4tgdddygdddy999dddhddddddixb.6pwsy4pexbcuc2wsneznbljdsd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.681617975 CEST	192.168.2.5	8.8.8.8	0xd868	Standard query (0)	b4tgddqygdddy999dddhddddddffw.z5duhcnkcyofsqhbq3jszy46zi.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.808947086 CEST	192.168.2.5	8.8.8.8	0x6f87	Standard query (0)	b4tgddpygdddy999dddhdddddlssj.lzoor32orsgqcb6rehhyu6rsxk.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.935674906 CEST	192.168.2.5	8.8.8.8	0x42cb	Standard query (0)	b4tgddczgdddy999dddhddddddfur.dxexglwwuftac4uqnkxvisjvbd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:31.076476097 CEST	192.168.2.5	8.8.8.8	0x4b84	Standard query (0)	b4tgddyzgdddy999dddhdddddlvxm.qjcreyljjknesmelbuw43evwgd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:31.203968048 CEST	192.168.2.5	8.8.8.8	0x990c	Standard query (0)	efkezwpdxpsq3lsdvnsccnq.fuhj4g5qndhshtlghjlpujhqr.bvuuipcc52icgjgfdelsc3ancaijdna.cinun2lihvdacjoibefwddrcdfptdhnifsnkn.cndlohcdyddddpdddddd43jd.dobwitxawyf4spwnwhvz6tmgij.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:31.326297045 CEST	192.168.2.5	8.8.8.8	0x8213	Standard query (0)	zboscitfrhswgbdqgvv4guilxzqlhyy.qodql2edcoma4hypqipnhh.e4ihalhus5hulg6jllilar.whyqqolqlhpqctma22zyqhlndhvsiigllusrho.pgyumlirmql2y4gtdqnhdddgdzkm.dobwitxawyf4spwnwhvz6tmgij.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:31.466579914 CEST	192.168.2.5	8.8.8.8	0x602e	Standard query (0)	2gmqbzzidzacyoccugndhylqwb.chzbsrodfyhapcdakdgppmdddcy5tk.dobwitxawyf4spwnwhvz6tmgij.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:32.454931974 CEST	192.168.2.5	8.8.8.8	0x602e	Standard query (0)	2gmqbzzidzacyoccugndhylqwb.chzbsrodfyhapcdakdgppmdddcy5tk.dobwitxawyf4spwnwhvz6tmgij.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:32.526881933 CEST	192.168.2.5	8.8.8.8	0x8b68	Standard query (0)	2gmqbzzidzacyoccugndhylqwb.chzbsrodfyhapcdakdgppmdddcy5tk.dobwitxawyf4spwnwhvz6tmgij.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:32.656225920 CEST	192.168.2.5	8.8.8.8	0xcceb	Standard query (0)	xx2uvd496kddydddddd4ahg.uliso6ivgihysunz94o4vdawah.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:32.782071114 CEST	192.168.2.5	8.8.8.8	0x150a	Standard query (0)	efkezwpdxpsq3lsdvnsccnqf.uhj4g5qndhshtlghjlpujhqrbvu.uipcc52icgjgfdelsc3ancaijdnaci.nun2lihvdacjoibefwddrcdfptdhnifsnk.ncndlohcdyddddpddddddjmgd.zh2kdd2bgmzds9ewlc4gdg55eb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:32.905801058 CEST	192.168.2.5	8.8.8.8	0x3cf6	Standard query (0)	zboscitfrhswgbdqgvv4guilxzqlhyyqod.ql2edcoma4hypqipnhhe4iha.lhus5hulg6jllilarwhyqqolqlhpqctma22zyqh.lndhvsiigllusrhopgyumlirmql2y4gtd.qdddcdmyyg.zh2kdd2bgmzds9ewlc4gdg55eb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:33.035423040 CEST	192.168.2.5	8.8.8.8	0xbc1d	Standard query (0)	izqlhvlqqglqjg4igzryhydch.3vdzl4drviphsljjgl6gldjwhdddgpoej.zh2kdd2bgmzds9ewlc4gdg55eb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:33.182249069 CEST	192.168.2.5	8.8.8.8	0x86ec	Standard query (0)	9plddd496kddyddddddjzsb.uaktlw99l25bs9emx4fvt2do3d.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.318564892 CEST	192.168.2.5	8.8.8.8	0xefba	Standard query (0)	9plddd496kddydddddd25ig.wutv23xal9oys92qszwcykmphb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.447621107 CEST	192.168.2.5	8.8.8.8	0x6c2a	Standard query (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.574103117 CEST	192.168.2.5	8.8.8.8	0x47e0	Standard query (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.716104031 CEST	192.168.2.5	8.8.8.8	0xd23a	Standard query (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.848351955 CEST	192.168.2.5	8.8.8.8	0x8cb6	Standard query (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.988408089 CEST	192.168.2.5	8.8.8.8	0x9221	Standard query (0)	9plddddpddddy999dddhdddddlz2b.xfy2sw3aulrgspj6deokfkkyyi.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.127232075 CEST	192.168.2.5	8.8.8.8	0xa8e5	Standard query (0)	9plddd44ddddy999dddhdddddy2id.ldfnhtzk6pjds4wvcqzm4g2leg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.253845930 CEST	192.168.2.5	8.8.8.8	0x91ec	Standard query (0)	9plddddggdddy999dddhdddddlj2r.swc45z3skqrysdn9bactk2wdwg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.382929087 CEST	192.168.2.5	8.8.8.8	0x8bb5	Standard query (0)	9pldddqcgdddy999dddhdddddptiw.mzy4irkums4hci2695qx5yo6wd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.511872053 CEST	192.168.2.5	8.8.8.8	0xde76	Standard query (0)	9plddddkgdddy999dddhddddddk2g.qmfpmdukjmtyssuso439owrtkd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.637856007 CEST	192.168.2.5	8.8.8.8	0x60a4	Standard query (0)	9pldddlmgdddy999dddhddddddv6l.n9tdulmmdzshsw24untj6g6olh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.777455091 CEST	192.168.2.5	8.8.8.8	0xad8f	Standard query (0)	9pldddcfgdddy999dddhddddddxjf.m6q4kshtxoq2sehrg64e2otxzb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.902753115 CEST	192.168.2.5	8.8.8.8	0x7784	Standard query (0)	9pldddsqgdddy999dddhdddddl6yx.lu2b5aasjdizcb2wrrl3q9vjac.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.047811985 CEST	192.168.2.5	8.8.8.8	0x73e8	Standard query (0)	9pldddprgdddy999dddhdddddydjr.6q9aagez63qrcu62zwfeqy3sub.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.175021887 CEST	192.168.2.5	8.8.8.8	0x3844	Standard query (0)	9pldddywgdddy999dddhdddddlphf.ek6mhkhossxfsmnixixa2qonpb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.307594061 CEST	192.168.2.5	8.8.8.8	0xf691	Standard query (0)	9pldddlxgdddy999dddhdddddp3eb.dqhfv2j26lg5cy264byd32bsbk.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.443067074 CEST	192.168.2.5	8.8.8.8	0x9b9d	Standard query (0)	9plddddygdddy999dddhdddddpouf.tekf3etazr5qsqnv29q6vwb3ab.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.575615883 CEST	192.168.2.5	8.8.8.8	0x68c4	Standard query (0)	9pldddqygdddy999dddhdddddyyjg.lbw6xkbpmyo2skw2ptrf6ei3fk.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.698820114 CEST	192.168.2.5	8.8.8.8	0x98d1	Standard query (0)	9pldddpygdddy999dddhdddddpyrx.qatwix2rvj9ocb2zwain5kdijk.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.837977886 CEST	192.168.2.5	8.8.8.8	0xd645	Standard query (0)	9pldddczgdddy999dddhdddddl66c.4rikdsq6btancwef3jj34yx9xj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.965821981 CEST	192.168.2.5	8.8.8.8	0x2bc6	Standard query (0)	9pldddyzgdddy999dddhdddddl55q.xtc34ow4jyiysghm6s5r3fdg2c.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:39.091274023 CEST	192.168.2.5	8.8.8.8	0x6c0c	Standard query (0)	efkezwpdxpsq3lsdvnsccnqf.uhj4g5qndhshtlghjlpujhqrbvuui.pcc52icgjgfdelsc3anca.ijdnacinun2lihvdacjoibef.wddrcdfptdhnifsnkncnddgdddygddddd2drd.4l66nxnqtu22sgjbc2zhnjwx9i.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:39.219443083 CEST	192.168.2.5	8.8.8.8	0xc0ac	Standard query (0)	detdzpzfn22etjgnoygduy5.r6dvhsoljcgllufdjcmrd2vsqwglq.uhqiggr6hzqcgfewgfsdxbcshs4jkgljuf.cjcgqj2esqmalljgcidzre.22dccfejzf4dlvcdddcddv4g.4l66nxnqtu22sgjbc2zhnjwx9i.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:39.347920895 CEST	192.168.2.5	8.8.8.8	0xe94b	Standard query (0)	nmfhb2ccxlid32ljczrcjudcj3d62yp.jlgldhzarylcwyu5hqgncb3dc9dcdbkgddydqxeb.4l66nxnqtu22sgjbc2zhnjwx9i.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:39.485447884 CEST	192.168.2.5	8.8.8.8	0x6378	Standard query (0)	i4tgdd496kddyddddddqbmd.k2b5ciso9f9lsh2kpjlj32kqhk.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.616971016 CEST	192.168.2.5	8.8.8.8	0xfca3	Standard query (0)	i4tgdd496kddydddddduxog.fztsnxzmzuu9cnuib6lg5fzaxd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.740976095 CEST	192.168.2.5	8.8.8.8	0x6928	Standard query (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.871202946 CEST	192.168.2.5	8.8.8.8	0x2e16	Standard query (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.090841055 CEST	192.168.2.5	8.8.8.8	0x52dc	Standard query (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.220736027 CEST	192.168.2.5	8.8.8.8	0xb09	Standard query (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.359457970 CEST	192.168.2.5	8.8.8.8	0xa6df	Standard query (0)	i4tgdddpddddy999dddhdddddyo2l.i92vwadvuz3ecc29owsj6wdhth.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.492917061 CEST	192.168.2.5	8.8.8.8	0xf80	Standard query (0)	i4tgdd44ddddy999dddhdddddpvqh.9utcvyst5vqssa6w6nd5jmyogc.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.621834993 CEST	192.168.2.5	8.8.8.8	0x48bb	Standard query (0)	i4tgdddggdddy999dddhddddddsqc.2ohvfyamhcptsje2w2hi9ya3rh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.749066114 CEST	192.168.2.5	8.8.8.8	0xc963	Standard query (0)	i4tgddqcgdddy999dddhdddddd94k.kfrbfdrorkybsgnxyuudbnoh9k.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.875489950 CEST	192.168.2.5	8.8.8.8	0x9974	Standard query (0)	i4tgdddkgdddy999dddhdddddpcof.dvmefyszn46hc566zauitanbfd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.001431942 CEST	192.168.2.5	8.8.8.8	0xc4ef	Standard query (0)	i4tgddlmgdddy999dddhdddddy4uk.kabzkigpe4epci6udrzsah9gfi.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.138690948 CEST	192.168.2.5	8.8.8.8	0x5334	Standard query (0)	i4tgddcfgdddy999dddhdddddpb2f.s2rkpzaqdxt5c3hjrkikmpoffi.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.266581059 CEST	192.168.2.5	8.8.8.8	0x23d8	Standard query (0)	i4tgddsqgdddy999dddhdddddplpd.x9zlrxu6etats5uezlp5ja5fkd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.392008066 CEST	192.168.2.5	8.8.8.8	0x6c27	Standard query (0)	i4tgddprgdddy999dddhdddddp3sf.ohrx3agliueecn6dat5yuupwyi.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.517173052 CEST	192.168.2.5	8.8.8.8	0x9f85	Standard query (0)	i4tgddywgdddy999dddhdddddysdl.lop55mu56yulsqu6ac92lunkki.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.645278931 CEST	192.168.2.5	8.8.8.8	0xdd32	Standard query (0)	i4tgddlxgdddy999dddhdddddynur.i9xclwtru2ksc6eg665ub4ewwg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.774548054 CEST	192.168.2.5	8.8.8.8	0x1ef4	Standard query (0)	i4tgdddygdddy999dddhdddddd4qi.g2ynkufys4zxcfhxdtjomw5p4i.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.899082899 CEST	192.168.2.5	8.8.8.8	0xadd5	Standard query (0)	i4tgddqygdddy999dddhdddddpdom.j42asnnhapegsn6r6hbgvw4vec.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.039292097 CEST	192.168.2.5	8.8.8.8	0xf62c	Standard query (0)	i4tgddpygdddy999dddhdddddy3uq.v44md4zvun3kcbuy2ebpawaw6j.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.160800934 CEST	192.168.2.5	8.8.8.8	0x3653	Standard query (0)	i4tgddczgdddy999dddhdddddlwdi.xhgeo2odu2tusgw5bapio9vgyh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.283082962 CEST	192.168.2.5	8.8.8.8	0x78a	Standard query (0)	i4tgddyzgdddy999dddhdddddpwur.9lgnhyu5tvvusojdrrmtqlbn9c.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.407176018 CEST	192.168.2.5	8.8.8.8	0x1485	Standard query (0)	efkezwpdxpsq3lsdvnsccnqfuhj.4g5qndhshtlghjlpujhqr.bvuuipcc52icgjgfdelsc3ancaijdnacinu.n2lihvdacjoibefwddrcdfptdhnifsnkncn.dlohcdyddddpddddddh4sd.el2by9kirmlccdh29xfmxw6ycb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.555447102 CEST	192.168.2.5	8.8.8.8	0xc7f4	Standard query (0)	zboscitfrhswgbdqgvv4guilxzqlhyyqo.dql2edcoma4hypqipnhh.e4ihalhus5hulg6jllilarwhyqqolqlhpqctma2.2zyqhlndhvsiigllusrhopgyumlirmql2y4gtd.qnhadddldluwh.el2by9kirmlccdh29xfmxw6ycb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.681869984 CEST	192.168.2.5	8.8.8.8	0xd63e	Standard query (0)	czrcjudcj3d62ypjlgldhzarylc.wyu5hqgncb3dc9dcdbkgddyd4wod.el2by9kirmlccdh29xfmxw6ycb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.822176933 CEST	192.168.2.5	8.8.8.8	0x24c6	Standard query (0)	94zddd496kddyddddddwgdh.ya565w46wx6dsee66fn4okzvuc.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:48.959024906 CEST	192.168.2.5	8.8.8.8	0x7860	Standard query (0)	94zddd496kddyddddddlzld.m5eias622iyisojbu2purydujd.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.098493099 CEST	192.168.2.5	8.8.8.8	0x672e	Standard query (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.226294994 CEST	192.168.2.5	8.8.8.8	0xa0d5	Standard query (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.352001905 CEST	192.168.2.5	8.8.8.8	0xeec3	Standard query (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.480550051 CEST	192.168.2.5	8.8.8.8	0x8540	Standard query (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.607376099 CEST	192.168.2.5	8.8.8.8	0x8d4	Standard query (0)	94zddddpddddy999dddhdddddprfh.rnsozrnfjg5ssjuzyf5g2psebh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.736969948 CEST	192.168.2.5	8.8.8.8	0xd886	Standard query (0)	94zddd44ddddy999dddhdddddpbgh.viyctqclbpsms2uvpjxxemrilb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.876507044 CEST	192.168.2.5	8.8.8.8	0x7b6e	Standard query (0)	94zddddggdddy999dddhdddddlhnc.wrrfhnupqjemc3ewn2cxky6wui.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.000241041 CEST	192.168.2.5	8.8.8.8	0xfdb0	Standard query (0)	94zdddqcgdddy999dddhdddddluac.qufekzpeuiqvc2uhdolb4tzs4j.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.126715899 CEST	192.168.2.5	8.8.8.8	0x4b0	Standard query (0)	94zddddkgdddy999dddhddddddbkl.ahrdswy2zzhycjhnrc5dtlkjtb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.255855083 CEST	192.168.2.5	8.8.8.8	0x35c0	Standard query (0)	94zdddlmgdddy999dddhdddddlsqm.3n36tykugh2msmneu24ldwmawg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.381450891 CEST	192.168.2.5	8.8.8.8	0x76fb	Standard query (0)	94zdddcfgdddy999dddhddddddbgj.g2kmc25kndupc3e4dzpdgpulfg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.515832901 CEST	192.168.2.5	8.8.8.8	0x9e8b	Standard query (0)	94zdddsqgdddy999dddhddddddjkn.vd6k4imksj5vcfejmddw3evb4d.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.647948980 CEST	192.168.2.5	8.8.8.8	0x66ad	Standard query (0)	94zdddprgdddy999dddhdddddp9hi.hqsdkaqoqfeqsg2qwruf3g3zwi.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.774478912 CEST	192.168.2.5	8.8.8.8	0x96f4	Standard query (0)	94zdddywgdddy999dddhdddddlrdl.xpgvoywmmvvncrh2xxjjlgshfh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.903599977 CEST	192.168.2.5	8.8.8.8	0x423d	Standard query (0)	94zdddlxgdddy999dddhddddddhcx.czfwo4pukvuost6zsumtwo3qwk.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.035243034 CEST	192.168.2.5	8.8.8.8	0x3860	Standard query (0)	94zddddygdddy999dddhdddddpj6l.ztqavv5xluilsdnitnmt3rmmbb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.161001921 CEST	192.168.2.5	8.8.8.8	0xdf2f	Standard query (0)	94zdddqygdddy999dddhdddddd4oq.slgos5hrghxtct6fjjctwuabqh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.290642023 CEST	192.168.2.5	8.8.8.8	0xaaf8	Standard query (0)	94zdddpygdddy999dddhdddddl2lf.f466gt53chj2c6ho9erpxr29th.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.420557022 CEST	192.168.2.5	8.8.8.8	0xd6ec	Standard query (0)	94zdddczgdddy999dddhdddddlt9q.ky6gpbr3pdqgcdehnyc2t5umrh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.554814100 CEST	192.168.2.5	8.8.8.8	0x843f	Standard query (0)	94zdddyzgdddy999dddhdddddlc5j.dzdsgil5wljhc22ljq2eddsowh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.682961941 CEST	192.168.2.5	8.8.8.8	0x9e89	Standard query (0)	efkezwpdxpsq3lsdvnsccnq.fuhj4g5qndhshtlghjlpujhqrbvuui.pcc52icgjgfdelsc3ancai.jdnacinun2lihvdacjoibefwddrc.dfptdhnifsnkncndldlddddqdddddd2bm.izpagnu92o4ncu24frquvc2thh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.813549995 CEST	192.168.2.5	8.8.8.8	0x74b4	Standard query (0)	ohchkwmmnnoecl5hjdphuo.abqfy6haycdgawgpyctglw32a.idzanytccsafc2zcqmviqz.h4ryyny2v4cdapwzpycyaln32iib.gacysdcumfnhyyqmvcwzbdr3yne2pycdddhdzlm.izpagnu92o4ncu24frquvc2thh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.942648888 CEST	192.168.2.5	8.8.8.8	0xb846	Standard query (0)	gabngpsc2gmqbzzidzacyoccu.gndhylqwbchzbsrodfyhapcdakdgppmdddcdon4.izpagnu92o4ncu24frquvc2thh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:52.079431057 CEST	192.168.2.5	8.8.8.8	0x8587	Standard query (0)	wtfgdd496kddydddddd4xgb.osbmhidte5e3sah62qwva54ifi.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.230833054 CEST	192.168.2.5	8.8.8.8	0x2e88	Standard query (0)	wtfgdd496kddyddddddd55g.a9p9ocq6p3pvcde2rj44beig9i.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.359831095 CEST	192.168.2.5	8.8.8.8	0x5d35	Standard query (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.489546061 CEST	192.168.2.5	8.8.8.8	0xfddc	Standard query (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.617057085 CEST	192.168.2.5	8.8.8.8	0x4c68	Standard query (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.753288031 CEST	192.168.2.5	8.8.8.8	0x9b00	Standard query (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.886276960 CEST	192.168.2.5	8.8.8.8	0x9a76	Standard query (0)	wtfgdddpddddy999dddhddddddgci.n2eurt5u5ewrc9hbnpldsxvfoc.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.014002085 CEST	192.168.2.5	8.8.8.8	0xb48e	Standard query (0)	wtfgdd44ddddy999dddhdddddlp5r.gdwq5vmj6uojsdnpqrae5wxigi.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.142813921 CEST	192.168.2.5	8.8.8.8	0x59bd	Standard query (0)	wtfgdddggdddy999dddhdddddd2hf.r43e9fu33m4nchwrssjevbknsi.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.273703098 CEST	192.168.2.5	8.8.8.8	0xe07d	Standard query (0)	wtfgddqcgdddy999dddhdddddyrgb.y2qlfk5gupk2s96e3e3kk2fpbi.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.397931099 CEST	192.168.2.5	8.8.8.8	0xcce8	Standard query (0)	wtfgdddkgdddy999dddhdddddy5il.q2ign3t2aj5rse6r43psplfcmi.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.525249958 CEST	192.168.2.5	8.8.8.8	0x724c	Standard query (0)	wtfgddlmgdddy999dddhdddddy5jf.xti554ejkppjswwilaod54xp5i.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.657119036 CEST	192.168.2.5	8.8.8.8	0x4473	Standard query (0)	wtfgddcfgdddy999dddhdddddlrcn.ityoxilmbyk9cawra5lyzbs2aj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.784193039 CEST	192.168.2.5	8.8.8.8	0x1c4c	Standard query (0)	wtfgddsqgdddy999dddhdddddlf4r.xvm6itkixjw5crj2svitnjhjmg.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.910521984 CEST	192.168.2.5	8.8.8.8	0xa94e	Standard query (0)	wtfgddprgdddy999dddhdddddybgg.uuyk2gaz4nshsejszhb2zssvyh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.040628910 CEST	192.168.2.5	8.8.8.8	0x325f	Standard query (0)	wtfgddywgdddy999dddhdddddlphc.ty3luv3ax4vusj6yru4qwtkork.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.168723106 CEST	192.168.2.5	8.8.8.8	0x212c	Standard query (0)	wtfgddlxgdddy999dddhddddddhnl.ex9b3ql5tb4ccxjoqvx9izqotj.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.307971001 CEST	192.168.2.5	8.8.8.8	0xf848	Standard query (0)	wtfgdddygdddy999dddhddddddufk.xfrrqmnf6eg4shnisdim3meypb.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.433573008 CEST	192.168.2.5	8.8.8.8	0x32f8	Standard query (0)	wtfgddqygdddy999dddhddddddffh.ynlxdlzabgq9sonkpi3mnbw49g.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.561992884 CEST	192.168.2.5	8.8.8.8	0x9fb8	Standard query (0)	wtfgddpygdddy999dddhdddddpp6f.626igjzvbw6gs3u4s6neazuuqh.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.695013046 CEST	192.168.2.5	8.8.8.8	0xf7f7	Standard query (0)	wtfgddczgdddy999dddhdddddppxg.xm53j6ixi6f5s62rumlc6wrjuc.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.824420929 CEST	192.168.2.5	8.8.8.8	0x242d	Standard query (0)	wtfgddyzgdddy999dddhdddddyf5c.2gh3s34zvlokc4ua9gamk66mzk.sluaknhbsoe.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:23.130754948 CEST	192.168.2.5	8.8.8.8	0x39e5	Standard query (0)	checkip.amazonaws.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:23.451141119 CEST	192.168.2.5	8.8.8.8	0x4c8	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:24.448836088 CEST	192.168.2.5	8.8.8.8	0x4c8	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:25.449356079 CEST	192.168.2.5	8.8.8.8	0x4c8	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:27.448956966 CEST	192.168.2.5	8.8.8.8	0x4c8	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:28.502314091 CEST	192.168.2.5	8.8.8.8	0x9316	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:29.496634007 CEST	192.168.2.5	8.8.8.8	0x9316	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:30.805295944 CEST	192.168.2.5	8.8.8.8	0x9316	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:32.574757099 CEST	192.168.2.5	8.8.8.8	0x80b5	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:33.574572086 CEST	192.168.2.5	8.8.8.8	0x80b5	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:34.590091944 CEST	192.168.2.5	8.8.8.8	0x80b5	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:36.605660915 CEST	192.168.2.5	8.8.8.8	0x80b5	Standard query (0)	xyskencevli.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Apr 5, 2021 07:44:25.486280918 CEST	8.8.8.8	192.168.2.5	0x3b9c	No error (0)	checkip.amazonaws.com	checkip.check-ip.aws.a2z.com		CNAME (Canonical name)	IN (0x0001)
Apr 5, 2021 07:44:25.486280918 CEST	8.8.8.8	192.168.2.5	0x3b9c	No error (0)	checkip.check-ip.aws.a2z.com	checkip.us-east-1.prod.check-ip.aws.a2z.com		CNAME (Canonical name)	IN (0x0001)
Apr 5, 2021 07:44:25.486280918 CEST	8.8.8.8	192.168.2.5	0x3b9c	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		3.211.138.232	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:25.486280918 CEST	8.8.8.8	192.168.2.5	0x3b9c	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		18.233.3.145	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:25.486280918 CEST	8.8.8.8	192.168.2.5	0x3b9c	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		23.22.217.86	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:25.486280918 CEST	8.8.8.8	192.168.2.5	0x3b9c	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		52.20.197.7	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:25.486280918 CEST	8.8.8.8	192.168.2.5	0x3b9c	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		34.193.115.2	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:25.486280918 CEST	8.8.8.8	192.168.2.5	0x3b9c	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		52.204.109.97	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:25.486280918 CEST	8.8.8.8	192.168.2.5	0x3b9c	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		23.21.27.29	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:25.486280918 CEST	8.8.8.8	192.168.2.5	0x3b9c	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		3.222.126.94	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:30.802676916 CEST	8.8.8.8	192.168.2.5	0xbb6c	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:31.812280893 CEST	8.8.8.8	192.168.2.5	0xbb6c	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:31.853548050 CEST	8.8.8.8	192.168.2.5	0xbb6c	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:34.879631996 CEST	8.8.8.8	192.168.2.5	0xbb6c	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:36.038599014 CEST	8.8.8.8	192.168.2.5	0x747b	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:36.100795031 CEST	8.8.8.8	192.168.2.5	0x747b	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:38.119498014 CEST	8.8.8.8	192.168.2.5	0x747b	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:39.188849926 CEST	8.8.8.8	192.168.2.5	0x747b	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:40.120778084 CEST	8.8.8.8	192.168.2.5	0x9636	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:41.125538111 CEST	8.8.8.8	192.168.2.5	0x9636	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:42.145313978 CEST	8.8.8.8	192.168.2.5	0x9636	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:44:44.145693064 CEST	8.8.8.8	192.168.2.5	0x9636	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:22.919408083 CEST	8.8.8.8	192.168.2.5	0x84dd	No error (0)	checkip.amazonaws.com	checkip.check-ip.aws.a2z.com		CNAME (Canonical name)	IN (0x0001)
Apr 5, 2021 07:46:22.919408083 CEST	8.8.8.8	192.168.2.5	0x84dd	No error (0)	checkip.check-ip.aws.a2z.com	checkip.us-east-1.prod.check-ip.aws.a2z.com		CNAME (Canonical name)	IN (0x0001)
Apr 5, 2021 07:46:22.919408083 CEST	8.8.8.8	192.168.2.5	0x84dd	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		52.20.197.7	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:22.919408083 CEST	8.8.8.8	192.168.2.5	0x84dd	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		3.222.126.94	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:22.919408083 CEST	8.8.8.8	192.168.2.5	0x84dd	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		52.204.109.97	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:22.919408083 CEST	8.8.8.8	192.168.2.5	0x84dd	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		23.21.27.29	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:22.919408083 CEST	8.8.8.8	192.168.2.5	0x84dd	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		34.193.115.2	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:22.919408083 CEST	8.8.8.8	192.168.2.5	0x84dd	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		107.21.162.206	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:22.919408083 CEST	8.8.8.8	192.168.2.5	0x84dd	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		3.211.138.232	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:22.919408083 CEST	8.8.8.8	192.168.2.5	0x84dd	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		3.224.94.38	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:28.293313980 CEST	8.8.8.8	192.168.2.5	0x3b41	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:28.335139036 CEST	8.8.8.8	192.168.2.5	0x3b41	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:30.307782888 CEST	8.8.8.8	192.168.2.5	0x3b41	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:31.342433929 CEST	8.8.8.8	192.168.2.5	0x3b41	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:32.476556063 CEST	8.8.8.8	192.168.2.5	0x1c03	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:33.471901894 CEST	8.8.8.8	192.168.2.5	0x1c03	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:34.503726006 CEST	8.8.8.8	192.168.2.5	0x1c03	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:36.501486063 CEST	8.8.8.8	192.168.2.5	0x1c03	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:37.536771059 CEST	8.8.8.8	192.168.2.5	0x823f	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:37.549926043 CEST	8.8.8.8	192.168.2.5	0x823f	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:38.548116922 CEST	8.8.8.8	192.168.2.5	0x823f	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:46:40.557502031 CEST	8.8.8.8	192.168.2.5	0x823f	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:23.816333055 CEST	8.8.8.8	192.168.2.5	0xf686	No error (0)	checkip.amazonaws.com	checkip.check-ip.aws.a2z.com		CNAME (Canonical name)	IN (0x0001)
Apr 5, 2021 07:48:23.816333055 CEST	8.8.8.8	192.168.2.5	0xf686	No error (0)	checkip.check-ip.aws.a2z.com	checkip.us-east-1.prod.check-ip.aws.a2z.com		CNAME (Canonical name)	IN (0x0001)
Apr 5, 2021 07:48:23.816333055 CEST	8.8.8.8	192.168.2.5	0xf686	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		3.211.138.232	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:23.816333055 CEST	8.8.8.8	192.168.2.5	0xf686	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		23.21.27.29	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:23.816333055 CEST	8.8.8.8	192.168.2.5	0xf686	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		34.200.69.241	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:23.816333055 CEST	8.8.8.8	192.168.2.5	0xf686	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		52.20.197.7	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:23.816333055 CEST	8.8.8.8	192.168.2.5	0xf686	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		107.21.162.206	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:23.816333055 CEST	8.8.8.8	192.168.2.5	0xf686	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		34.192.7.28	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:23.816333055 CEST	8.8.8.8	192.168.2.5	0xf686	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		34.193.115.2	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:23.816333055 CEST	8.8.8.8	192.168.2.5	0xf686	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		18.233.3.145	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:24.230194092 CEST	8.8.8.8	192.168.2.5	0x85a1	No error (0)	sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:24.482610941 CEST	8.8.8.8	192.168.2.5	0xfa9d	No error (0)	efkezwpdxpsq3lsdvnscc.nqfuhj4g5qndhshtlghjlpujhqrbvu.uipcc52icgjgfdelsc3ancaijdnacinun2l.ihvdacjoibefwddrcdfptdhnifsnkdyddddp.ddddddaacg.fgevtf3izno2skelgg3umvcrrb.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:24.620634079 CEST	8.8.8.8	192.168.2.5	0x732a	No error (0)	ihidsfghzboscitfrhswgbdqgvv4guil.nmrd22lq2lrwhpqcuma2h2sqhdnq2ay.ijzlljuihupgujlqirarhhzyqulr.d2v4cugas2zsqidfwhvyidgmj.usrhzdddddcdwdgg.fgevtf3izno2skelgg3umvcrrb.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:24.817118883 CEST	8.8.8.8	192.168.2.5	0xd41	No error (0)	xvc62upjjgl6duajcmrlhpyqyelq.ubdiczr62ydccfelzfsdf3ie2uljgmm6gmsjw.hdddgpmfd.fgevtf3izno2skelgg3umvcrrb.sluaknhbsoe.com		193.199.8.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:24.961811066 CEST	8.8.8.8	192.168.2.5	0x5455	No error (0)	9plddd496kddyddddddq9fh.h22c5y4pi6p6sdetpwyufottbi.sluaknhbsoe.com		239.255.255.255	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.114006042 CEST	8.8.8.8	192.168.2.5	0x75bf	No error (0)	9plddd496kddyddddddyefb.e9bvvswihas5con3qriin5auei.sluaknhbsoe.com		1.92.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.271572113 CEST	8.8.8.8	192.168.2.5	0xe1dc	No error (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com		4.0.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.271572113 CEST	8.8.8.8	192.168.2.5	0xe1dc	No error (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.271572113 CEST	8.8.8.8	192.168.2.5	0xe1dc	No error (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com		12.98.88.72	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.271572113 CEST	8.8.8.8	192.168.2.5	0xe1dc	No error (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com		16.6.17.5	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.271572113 CEST	8.8.8.8	192.168.2.5	0xe1dc	No error (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com		20.67.15.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.271572113 CEST	8.8.8.8	192.168.2.5	0xe1dc	No error (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com		24.69.38.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.271572113 CEST	8.8.8.8	192.168.2.5	0xe1dc	No error (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com		28.93.66.80	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.271572113 CEST	8.8.8.8	192.168.2.5	0xe1dc	No error (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com		32.90.64.85	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.271572113 CEST	8.8.8.8	192.168.2.5	0xe1dc	No error (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com		36.75.127.4	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.271572113 CEST	8.8.8.8	192.168.2.5	0xe1dc	No error (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com		40.87.83.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.271572113 CEST	8.8.8.8	192.168.2.5	0xe1dc	No error (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com		44.87.84.66	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.271572113 CEST	8.8.8.8	192.168.2.5	0xe1dc	No error (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com		48.79.121.81	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.271572113 CEST	8.8.8.8	192.168.2.5	0xe1dc	No error (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com		52.34.55.83	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.271572113 CEST	8.8.8.8	192.168.2.5	0xe1dc	No error (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com		56.89.18.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.271572113 CEST	8.8.8.8	192.168.2.5	0xe1dc	No error (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com		60.33.25.117	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.271572113 CEST	8.8.8.8	192.168.2.5	0xe1dc	No error (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com		64.36.74.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.271572113 CEST	8.8.8.8	192.168.2.5	0xe1dc	No error (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com		68.85.40.77	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.271572113 CEST	8.8.8.8	192.168.2.5	0xe1dc	No error (0)	9pldddddddddy999dddhdddddlgor.qoomnokg945lcq6m4dz2fnwyad.sluaknhbsoe.com		72.35.74.98	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.419626951 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com		4.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.419626951 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.419626951 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com		12.100.35.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.419626951 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com		16.53.82.84	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.419626951 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com		20.52.81.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.419626951 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com		24.90.86.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.419626951 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com		28.74.67.18	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.419626951 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com		32.92.93.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.419626951 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com		36.78.111.234	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.419626951 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com		40.200.110.129	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.419626951 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com		44.121.29.99	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.419626951 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com		48.235.87.91	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.419626951 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com		52.240.65.35	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.419626951 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com		56.79.30.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.419626951 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com		60.88.129.182	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.419626951 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com		64.99.92.131	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.419626951 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com		68.0.234.157	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.419626951 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	9plddddjddddy999dddhdddddp9rf.z25ovwddcyzec225njmvvsmqxd.sluaknhbsoe.com		72.82.151.37	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.591814995 CEST	8.8.8.8	192.168.2.5	0x21a6	No error (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com		4.0.0.96	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.591814995 CEST	8.8.8.8	192.168.2.5	0x21a6	No error (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.591814995 CEST	8.8.8.8	192.168.2.5	0x21a6	No error (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com		12.140.31.187	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.591814995 CEST	8.8.8.8	192.168.2.5	0x21a6	No error (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com		16.3.204.116	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.591814995 CEST	8.8.8.8	192.168.2.5	0x21a6	No error (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com		20.232.143.58	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.591814995 CEST	8.8.8.8	192.168.2.5	0x21a6	No error (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com		24.160.171.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.591814995 CEST	8.8.8.8	192.168.2.5	0x21a6	No error (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com		28.63.0.146	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.591814995 CEST	8.8.8.8	192.168.2.5	0x21a6	No error (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com		32.96.39.14	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.591814995 CEST	8.8.8.8	192.168.2.5	0x21a6	No error (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com		36.24.84.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.591814995 CEST	8.8.8.8	192.168.2.5	0x21a6	No error (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com		40.233.116.4	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.591814995 CEST	8.8.8.8	192.168.2.5	0x21a6	No error (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com		44.187.142.204	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.591814995 CEST	8.8.8.8	192.168.2.5	0x21a6	No error (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com		48.69.251.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.591814995 CEST	8.8.8.8	192.168.2.5	0x21a6	No error (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com		52.70.121.195	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.591814995 CEST	8.8.8.8	192.168.2.5	0x21a6	No error (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com		56.9.250.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.591814995 CEST	8.8.8.8	192.168.2.5	0x21a6	No error (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com		60.204.211.143	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.591814995 CEST	8.8.8.8	192.168.2.5	0x21a6	No error (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com		64.80.232.238	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.591814995 CEST	8.8.8.8	192.168.2.5	0x21a6	No error (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com		68.3.233.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.591814995 CEST	8.8.8.8	192.168.2.5	0x21a6	No error (0)	9plddddqddddy999dddhdddddpd5w.n3blemjjd2azs3j9c52llpoybj.sluaknhbsoe.com		72.25.218.37	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.740075111 CEST	8.8.8.8	192.168.2.5	0x224b	No error (0)	9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com		4.0.0.144	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.740075111 CEST	8.8.8.8	192.168.2.5	0x224b	No error (0)	9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com		8.0.0.42	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.740075111 CEST	8.8.8.8	192.168.2.5	0x224b	No error (0)	9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com		12.82.209.155	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.740075111 CEST	8.8.8.8	192.168.2.5	0x224b	No error (0)	9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com		16.107.230.98	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.740075111 CEST	8.8.8.8	192.168.2.5	0x224b	No error (0)	9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com		20.155.127.181	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.740075111 CEST	8.8.8.8	192.168.2.5	0x224b	No error (0)	9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com		24.28.151.230	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.740075111 CEST	8.8.8.8	192.168.2.5	0x224b	No error (0)	9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com		28.88.25.176	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.740075111 CEST	8.8.8.8	192.168.2.5	0x224b	No error (0)	9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com		32.254.138.23	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.740075111 CEST	8.8.8.8	192.168.2.5	0x224b	No error (0)	9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com		36.82.171.208	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.740075111 CEST	8.8.8.8	192.168.2.5	0x224b	No error (0)	9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com		40.198.255.103	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.740075111 CEST	8.8.8.8	192.168.2.5	0x224b	No error (0)	9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com		44.192.231.244	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.740075111 CEST	8.8.8.8	192.168.2.5	0x224b	No error (0)	9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com		48.141.71.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.740075111 CEST	8.8.8.8	192.168.2.5	0x224b	No error (0)	9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com		52.249.152.178	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.740075111 CEST	8.8.8.8	192.168.2.5	0x224b	No error (0)	9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com		56.253.156.57	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.740075111 CEST	8.8.8.8	192.168.2.5	0x224b	No error (0)	9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com		60.108.245.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.740075111 CEST	8.8.8.8	192.168.2.5	0x224b	No error (0)	9pldddd2ddddy999dddhdddddds3g.xhn99ol6zi3gsvj4k9ujehmu5h.sluaknhbsoe.com		64.41.183.160	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.905694962 CEST	8.8.8.8	192.168.2.5	0xdefa	No error (0)	9pldddloddddy999dddhdddddpnwd.z9crufme5l4psjjmrl4mfxfk5b.sluaknhbsoe.com		4.0.0.186	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.905694962 CEST	8.8.8.8	192.168.2.5	0xdefa	No error (0)	9pldddloddddy999dddhdddddpnwd.z9crufme5l4psjjmrl4mfxfk5b.sluaknhbsoe.com		8.0.0.36	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.905694962 CEST	8.8.8.8	192.168.2.5	0xdefa	No error (0)	9pldddloddddy999dddhdddddpnwd.z9crufme5l4psjjmrl4mfxfk5b.sluaknhbsoe.com		12.126.134.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.905694962 CEST	8.8.8.8	192.168.2.5	0xdefa	No error (0)	9pldddloddddy999dddhdddddpnwd.z9crufme5l4psjjmrl4mfxfk5b.sluaknhbsoe.com		16.77.175.65	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.905694962 CEST	8.8.8.8	192.168.2.5	0xdefa	No error (0)	9pldddloddddy999dddhdddddpnwd.z9crufme5l4psjjmrl4mfxfk5b.sluaknhbsoe.com		20.25.145.164	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.905694962 CEST	8.8.8.8	192.168.2.5	0xdefa	No error (0)	9pldddloddddy999dddhdddddpnwd.z9crufme5l4psjjmrl4mfxfk5b.sluaknhbsoe.com		24.230.158.47	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.905694962 CEST	8.8.8.8	192.168.2.5	0xdefa	No error (0)	9pldddloddddy999dddhdddddpnwd.z9crufme5l4psjjmrl4mfxfk5b.sluaknhbsoe.com		28.151.89.76	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.905694962 CEST	8.8.8.8	192.168.2.5	0xdefa	No error (0)	9pldddloddddy999dddhdddddpnwd.z9crufme5l4psjjmrl4mfxfk5b.sluaknhbsoe.com		32.224.112.21	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.905694962 CEST	8.8.8.8	192.168.2.5	0xdefa	No error (0)	9pldddloddddy999dddhdddddpnwd.z9crufme5l4psjjmrl4mfxfk5b.sluaknhbsoe.com		36.223.150.99	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.905694962 CEST	8.8.8.8	192.168.2.5	0xdefa	No error (0)	9pldddloddddy999dddhdddddpnwd.z9crufme5l4psjjmrl4mfxfk5b.sluaknhbsoe.com		40.170.86.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.905694962 CEST	8.8.8.8	192.168.2.5	0xdefa	No error (0)	9pldddloddddy999dddhdddddpnwd.z9crufme5l4psjjmrl4mfxfk5b.sluaknhbsoe.com		44.85.15.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.905694962 CEST	8.8.8.8	192.168.2.5	0xdefa	No error (0)	9pldddloddddy999dddhdddddpnwd.z9crufme5l4psjjmrl4mfxfk5b.sluaknhbsoe.com		48.62.46.75	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.905694962 CEST	8.8.8.8	192.168.2.5	0xdefa	No error (0)	9pldddloddddy999dddhdddddpnwd.z9crufme5l4psjjmrl4mfxfk5b.sluaknhbsoe.com		52.119.77.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:28.905694962 CEST	8.8.8.8	192.168.2.5	0xdefa	No error (0)	9pldddloddddy999dddhdddddpnwd.z9crufme5l4psjjmrl4mfxfk5b.sluaknhbsoe.com		56.255.255.204	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.052829981 CEST	8.8.8.8	192.168.2.5	0x2868	No error (0)	9pldddpvddddy999dddhdddddyjyx.jwb4i2qyfbm4s6nezzdc3gtzqb.sluaknhbsoe.com		4.0.0.222	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.052829981 CEST	8.8.8.8	192.168.2.5	0x2868	No error (0)	9pldddpvddddy999dddhdddddyjyx.jwb4i2qyfbm4s6nezzdc3gtzqb.sluaknhbsoe.com		8.0.0.30	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.052829981 CEST	8.8.8.8	192.168.2.5	0x2868	No error (0)	9pldddpvddddy999dddhdddddyjyx.jwb4i2qyfbm4s6nezzdc3gtzqb.sluaknhbsoe.com		12.160.73.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.052829981 CEST	8.8.8.8	192.168.2.5	0x2868	No error (0)	9pldddpvddddy999dddhdddddyjyx.jwb4i2qyfbm4s6nezzdc3gtzqb.sluaknhbsoe.com		16.243.50.247	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.052829981 CEST	8.8.8.8	192.168.2.5	0x2868	No error (0)	9pldddpvddddy999dddhdddddyjyx.jwb4i2qyfbm4s6nezzdc3gtzqb.sluaknhbsoe.com		20.187.128.101	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.052829981 CEST	8.8.8.8	192.168.2.5	0x2868	No error (0)	9pldddpvddddy999dddhdddddyjyx.jwb4i2qyfbm4s6nezzdc3gtzqb.sluaknhbsoe.com		24.56.79.103	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.052829981 CEST	8.8.8.8	192.168.2.5	0x2868	No error (0)	9pldddpvddddy999dddhdddddyjyx.jwb4i2qyfbm4s6nezzdc3gtzqb.sluaknhbsoe.com		28.244.102.26	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.052829981 CEST	8.8.8.8	192.168.2.5	0x2868	No error (0)	9pldddpvddddy999dddhdddddyjyx.jwb4i2qyfbm4s6nezzdc3gtzqb.sluaknhbsoe.com		32.82.130.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.052829981 CEST	8.8.8.8	192.168.2.5	0x2868	No error (0)	9pldddpvddddy999dddhdddddyjyx.jwb4i2qyfbm4s6nezzdc3gtzqb.sluaknhbsoe.com		36.166.121.228	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.052829981 CEST	8.8.8.8	192.168.2.5	0x2868	No error (0)	9pldddpvddddy999dddhdddddyjyx.jwb4i2qyfbm4s6nezzdc3gtzqb.sluaknhbsoe.com		40.60.50.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.052829981 CEST	8.8.8.8	192.168.2.5	0x2868	No error (0)	9pldddpvddddy999dddhdddddyjyx.jwb4i2qyfbm4s6nezzdc3gtzqb.sluaknhbsoe.com		44.62.251.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.052829981 CEST	8.8.8.8	192.168.2.5	0x2868	No error (0)	9pldddpvddddy999dddhdddddyjyx.jwb4i2qyfbm4s6nezzdc3gtzqb.sluaknhbsoe.com		48.82.109.47	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.205456018 CEST	8.8.8.8	192.168.2.5	0x3988	No error (0)	9pldddy9ddddy999dddhdddddlw4m.kczy5vnfhmmsc9j2mycx6jz6dc.sluaknhbsoe.com		4.0.0.252	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.205456018 CEST	8.8.8.8	192.168.2.5	0x3988	No error (0)	9pldddy9ddddy999dddhdddddlw4m.kczy5vnfhmmsc9j2mycx6jz6dc.sluaknhbsoe.com		8.0.0.24	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.205456018 CEST	8.8.8.8	192.168.2.5	0x3988	No error (0)	9pldddy9ddddy999dddhdddddlw4m.kczy5vnfhmmsc9j2mycx6jz6dc.sluaknhbsoe.com		12.124.68.163	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.205456018 CEST	8.8.8.8	192.168.2.5	0x3988	No error (0)	9pldddy9ddddy999dddhdddddlw4m.kczy5vnfhmmsc9j2mycx6jz6dc.sluaknhbsoe.com		16.144.44.29	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.205456018 CEST	8.8.8.8	192.168.2.5	0x3988	No error (0)	9pldddy9ddddy999dddhdddddlw4m.kczy5vnfhmmsc9j2mycx6jz6dc.sluaknhbsoe.com		20.159.31.177	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.205456018 CEST	8.8.8.8	192.168.2.5	0x3988	No error (0)	9pldddy9ddddy999dddhdddddlw4m.kczy5vnfhmmsc9j2mycx6jz6dc.sluaknhbsoe.com		24.195.88.111	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.205456018 CEST	8.8.8.8	192.168.2.5	0x3988	No error (0)	9pldddy9ddddy999dddhdddddlw4m.kczy5vnfhmmsc9j2mycx6jz6dc.sluaknhbsoe.com		28.125.98.13	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.205456018 CEST	8.8.8.8	192.168.2.5	0x3988	No error (0)	9pldddy9ddddy999dddhdddddlw4m.kczy5vnfhmmsc9j2mycx6jz6dc.sluaknhbsoe.com		32.9.204.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.205456018 CEST	8.8.8.8	192.168.2.5	0x3988	No error (0)	9pldddy9ddddy999dddhdddddlw4m.kczy5vnfhmmsc9j2mycx6jz6dc.sluaknhbsoe.com		36.186.136.2	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.205456018 CEST	8.8.8.8	192.168.2.5	0x3988	No error (0)	9pldddy9ddddy999dddhdddddlw4m.kczy5vnfhmmsc9j2mycx6jz6dc.sluaknhbsoe.com		40.68.157.216	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.358769894 CEST	8.8.8.8	192.168.2.5	0x5f83	No error (0)	9pldddyhgdddy999dddhdddddpswl.bgldl2g6xazfs62juwyuwlr9bk.sluaknhbsoe.com		4.0.1.20	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.358769894 CEST	8.8.8.8	192.168.2.5	0x5f83	No error (0)	9pldddyhgdddy999dddhdddddpswl.bgldl2g6xazfs62juwyuwlr9bk.sluaknhbsoe.com		8.0.0.18	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.358769894 CEST	8.8.8.8	192.168.2.5	0x5f83	No error (0)	9pldddyhgdddy999dddhdddddpswl.bgldl2g6xazfs62juwyuwlr9bk.sluaknhbsoe.com		12.121.251.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.358769894 CEST	8.8.8.8	192.168.2.5	0x5f83	No error (0)	9pldddyhgdddy999dddhdddddpswl.bgldl2g6xazfs62juwyuwlr9bk.sluaknhbsoe.com		16.18.128.200	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.358769894 CEST	8.8.8.8	192.168.2.5	0x5f83	No error (0)	9pldddyhgdddy999dddhdddddpswl.bgldl2g6xazfs62juwyuwlr9bk.sluaknhbsoe.com		20.129.227.202	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.358769894 CEST	8.8.8.8	192.168.2.5	0x5f83	No error (0)	9pldddyhgdddy999dddhdddddpswl.bgldl2g6xazfs62juwyuwlr9bk.sluaknhbsoe.com		24.241.45.57	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.358769894 CEST	8.8.8.8	192.168.2.5	0x5f83	No error (0)	9pldddyhgdddy999dddhdddddpswl.bgldl2g6xazfs62juwyuwlr9bk.sluaknhbsoe.com		28.245.105.107	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.358769894 CEST	8.8.8.8	192.168.2.5	0x5f83	No error (0)	9pldddyhgdddy999dddhdddddpswl.bgldl2g6xazfs62juwyuwlr9bk.sluaknhbsoe.com		32.192.75.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.517184973 CEST	8.8.8.8	192.168.2.5	0x7320	No error (0)	9pldddpcgdddy999dddhdddddl9or.3r4yo6wzmmn6cew2beavnbzbmd.sluaknhbsoe.com		4.0.1.38	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.517184973 CEST	8.8.8.8	192.168.2.5	0x7320	No error (0)	9pldddpcgdddy999dddhdddddl9or.3r4yo6wzmmn6cew2beavnbzbmd.sluaknhbsoe.com		8.0.0.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.517184973 CEST	8.8.8.8	192.168.2.5	0x7320	No error (0)	9pldddpcgdddy999dddhdddddl9or.3r4yo6wzmmn6cew2beavnbzbmd.sluaknhbsoe.com		12.212.116.233	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.517184973 CEST	8.8.8.8	192.168.2.5	0x7320	No error (0)	9pldddpcgdddy999dddhdddddl9or.3r4yo6wzmmn6cew2beavnbzbmd.sluaknhbsoe.com		16.140.58.141	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.517184973 CEST	8.8.8.8	192.168.2.5	0x7320	No error (0)	9pldddpcgdddy999dddhdddddl9or.3r4yo6wzmmn6cew2beavnbzbmd.sluaknhbsoe.com		20.226.195.205	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.517184973 CEST	8.8.8.8	192.168.2.5	0x7320	No error (0)	9pldddpcgdddy999dddhdddddl9or.3r4yo6wzmmn6cew2beavnbzbmd.sluaknhbsoe.com		24.242.43.139	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.517184973 CEST	8.8.8.8	192.168.2.5	0x7320	No error (0)	9pldddpcgdddy999dddhdddddl9or.3r4yo6wzmmn6cew2beavnbzbmd.sluaknhbsoe.com		28.230.198.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.672559023 CEST	8.8.8.8	192.168.2.5	0x3acf	No error (0)	9pldddsjgdddy999dddhdddddpb5r.bpatfnu5d6sxsunyuy5ndb6ycj.sluaknhbsoe.com		4.0.1.53	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.672559023 CEST	8.8.8.8	192.168.2.5	0x3acf	No error (0)	9pldddsjgdddy999dddhdddddpb5r.bpatfnu5d6sxsunyuy5ndb6ycj.sluaknhbsoe.com		8.0.0.12	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.672559023 CEST	8.8.8.8	192.168.2.5	0x3acf	No error (0)	9pldddsjgdddy999dddhdddddpb5r.bpatfnu5d6sxsunyuy5ndb6ycj.sluaknhbsoe.com		12.208.26.90	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.672559023 CEST	8.8.8.8	192.168.2.5	0x3acf	No error (0)	9pldddsjgdddy999dddhdddddpb5r.bpatfnu5d6sxsunyuy5ndb6ycj.sluaknhbsoe.com		16.162.92.138	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.672559023 CEST	8.8.8.8	192.168.2.5	0x3acf	No error (0)	9pldddsjgdddy999dddhdddddpb5r.bpatfnu5d6sxsunyuy5ndb6ycj.sluaknhbsoe.com		20.102.56.144	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.672559023 CEST	8.8.8.8	192.168.2.5	0x3acf	No error (0)	9pldddsjgdddy999dddhdddddpb5r.bpatfnu5d6sxsunyuy5ndb6ycj.sluaknhbsoe.com		24.60.27.51	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.829853058 CEST	8.8.8.8	192.168.2.5	0x979c	No error (0)	9pldddclgdddy999dddhddddddvvr.fpcnuit4lfkbs46ube5ckzvacd.sluaknhbsoe.com		4.0.1.65	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.829853058 CEST	8.8.8.8	192.168.2.5	0x979c	No error (0)	9pldddclgdddy999dddhddddddvvr.fpcnuit4lfkbs46ube5ckzvacd.sluaknhbsoe.com		8.0.0.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.829853058 CEST	8.8.8.8	192.168.2.5	0x979c	No error (0)	9pldddclgdddy999dddhddddddvvr.fpcnuit4lfkbs46ube5ckzvacd.sluaknhbsoe.com		12.42.91.2	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.829853058 CEST	8.8.8.8	192.168.2.5	0x979c	No error (0)	9pldddclgdddy999dddhddddddvvr.fpcnuit4lfkbs46ube5ckzvacd.sluaknhbsoe.com		16.223.226.42	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.829853058 CEST	8.8.8.8	192.168.2.5	0x979c	No error (0)	9pldddclgdddy999dddhddddddvvr.fpcnuit4lfkbs46ube5ckzvacd.sluaknhbsoe.com		20.40.99.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.968255043 CEST	8.8.8.8	192.168.2.5	0x2f81	No error (0)	9pldddlmgdddy999dddhdddddl6ff.ynxokgamkhc4cswxtcjmqftx6k.sluaknhbsoe.com		4.0.1.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.968255043 CEST	8.8.8.8	192.168.2.5	0x2f81	No error (0)	9pldddlmgdddy999dddhdddddl6ff.ynxokgamkhc4cswxtcjmqftx6k.sluaknhbsoe.com		8.0.0.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.968255043 CEST	8.8.8.8	192.168.2.5	0x2f81	No error (0)	9pldddlmgdddy999dddhdddddl6ff.ynxokgamkhc4cswxtcjmqftx6k.sluaknhbsoe.com		12.147.245.111	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.968255043 CEST	8.8.8.8	192.168.2.5	0x2f81	No error (0)	9pldddlmgdddy999dddhdddddl6ff.ynxokgamkhc4cswxtcjmqftx6k.sluaknhbsoe.com		16.131.198.234	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:29.968255043 CEST	8.8.8.8	192.168.2.5	0x2f81	No error (0)	9pldddlmgdddy999dddhdddddl6ff.ynxokgamkhc4cswxtcjmqftx6k.sluaknhbsoe.com		20.184.246.24	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.127906084 CEST	8.8.8.8	192.168.2.5	0xcea4	No error (0)	9pldddqngdddy999dddhdddddde3f.u5y4irinuiiesrwkb9qlmtmiqh.sluaknhbsoe.com		4.0.1.83	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.127906084 CEST	8.8.8.8	192.168.2.5	0xcea4	No error (0)	9pldddqngdddy999dddhdddddde3f.u5y4irinuiiesrwkb9qlmtmiqh.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.127906084 CEST	8.8.8.8	192.168.2.5	0xcea4	No error (0)	9pldddqngdddy999dddhdddddde3f.u5y4irinuiiesrwkb9qlmtmiqh.sluaknhbsoe.com		12.63.102.218	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.127906084 CEST	8.8.8.8	192.168.2.5	0xcea4	No error (0)	9pldddqngdddy999dddhdddddde3f.u5y4irinuiiesrwkb9qlmtmiqh.sluaknhbsoe.com		16.206.198.82	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.284033060 CEST	8.8.8.8	192.168.2.5	0x64f9	No error (0)	9pldddcfgdddy999dddhddddddr6l.5vzidylzgvglshur9xesgqcokc.sluaknhbsoe.com		4.0.1.89	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.284033060 CEST	8.8.8.8	192.168.2.5	0x64f9	No error (0)	9pldddcfgdddy999dddhddddddr6l.5vzidylzgvglshur9xesgqcokc.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.284033060 CEST	8.8.8.8	192.168.2.5	0x64f9	No error (0)	9pldddcfgdddy999dddhddddddr6l.5vzidylzgvglshur9xesgqcokc.sluaknhbsoe.com		12.20.18.54	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.284033060 CEST	8.8.8.8	192.168.2.5	0x64f9	No error (0)	9pldddcfgdddy999dddhddddddr6l.5vzidylzgvglshur9xesgqcokc.sluaknhbsoe.com		16.232.239.240	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.445791006 CEST	8.8.8.8	192.168.2.5	0x62e4	No error (0)	9plddd4fgdddy999dddhdddddyzbi.dchzuulka4o5cmhvpdo6wmbu6d.sluaknhbsoe.com		4.0.1.95	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.445791006 CEST	8.8.8.8	192.168.2.5	0x62e4	No error (0)	9plddd4fgdddy999dddhdddddyzbi.dchzuulka4o5cmhvpdo6wmbu6d.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.445791006 CEST	8.8.8.8	192.168.2.5	0x62e4	No error (0)	9plddd4fgdddy999dddhdddddyzbi.dchzuulka4o5cmhvpdo6wmbu6d.sluaknhbsoe.com		12.251.181.212	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.445791006 CEST	8.8.8.8	192.168.2.5	0x62e4	No error (0)	9plddd4fgdddy999dddhdddddyzbi.dchzuulka4o5cmhvpdo6wmbu6d.sluaknhbsoe.com		16.226.48.94	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.582206964 CEST	8.8.8.8	192.168.2.5	0x58eb	No error (0)	9pldddsqgdddy999dddhddddddzmw.9resjqy6ihkasmudkuvbzukjni.sluaknhbsoe.com		4.0.1.101	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.582206964 CEST	8.8.8.8	192.168.2.5	0x58eb	No error (0)	9pldddsqgdddy999dddhddddddzmw.9resjqy6ihkasmudkuvbzukjni.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.582206964 CEST	8.8.8.8	192.168.2.5	0x58eb	No error (0)	9pldddsqgdddy999dddhddddddzmw.9resjqy6ihkasmudkuvbzukjni.sluaknhbsoe.com		12.107.80.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.779311895 CEST	8.8.8.8	192.168.2.5	0x9e34	No error (0)	9plddddrgdddy999dddhdddddyham.pgw4vhlvnueacbhu4hyzs35bxc.sluaknhbsoe.com		4.0.1.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.779311895 CEST	8.8.8.8	192.168.2.5	0x9e34	No error (0)	9plddddrgdddy999dddhdddddyham.pgw4vhlvnueacbhu4hyzs35bxc.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.779311895 CEST	8.8.8.8	192.168.2.5	0x9e34	No error (0)	9plddddrgdddy999dddhdddddyham.pgw4vhlvnueacbhu4hyzs35bxc.sluaknhbsoe.com		12.86.80.71	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.919919014 CEST	8.8.8.8	192.168.2.5	0x7a34	No error (0)	9pldddqrgdddy999dddhddddddbhb.cuirp5fa2xmncm2ltapgvfpbah.sluaknhbsoe.com		4.0.1.107	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.919919014 CEST	8.8.8.8	192.168.2.5	0x7a34	No error (0)	9pldddqrgdddy999dddhddddddbhb.cuirp5fa2xmncm2ltapgvfpbah.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:30.919919014 CEST	8.8.8.8	192.168.2.5	0x7a34	No error (0)	9pldddqrgdddy999dddhddddddbhb.cuirp5fa2xmncm2ltapgvfpbah.sluaknhbsoe.com		12.87.122.81	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:31.067218065 CEST	8.8.8.8	192.168.2.5	0xa06f	No error (0)	9pldddprgdddy999dddhdddddlqbh.dfvh9cbplgoasuekjvi39sswzg.sluaknhbsoe.com		4.0.1.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:31.067218065 CEST	8.8.8.8	192.168.2.5	0xa06f	No error (0)	9pldddprgdddy999dddhdddddlqbh.dfvh9cbplgoasuekjvi39sswzg.sluaknhbsoe.com		8.0.0.2	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:31.067218065 CEST	8.8.8.8	192.168.2.5	0xa06f	No error (0)	9pldddprgdddy999dddhdddddlqbh.dfvh9cbplgoasuekjvi39sswzg.sluaknhbsoe.com		12.94.69.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:31.216073990 CEST	8.8.8.8	192.168.2.5	0x8bc6	No error (0)	efkezwpdxpsq3lsdvnsccnqfuhj4g5qnd.hshtlghjlpujhqrbvuui.pcc52icgjgfdelsc3ancaijdnacinun2lihvdac.joibefwddrcdfptdhnifsnkncdcddd.djdddddptmd.gconcfadqbxmsqekmnvx59jeyd.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:31.349488020 CEST	8.8.8.8	192.168.2.5	0xa746	No error (0)	sdywilcw422sswtmyeiqdy.iqx3kpudmitglnhzmhtamd3zp.jifnl22mdlzmjbupchgapulphkpedztsiomlch.2ahtglw33pjc3nj22tdqamqbudccapdddcduthd.gconcfadqbxmsqekmnvx59jeyd.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:31.517266989 CEST	8.8.8.8	192.168.2.5	0xdc3f	No error (0)	mvchgd4r3pfehvpcdabpjvyctgmdb2gnbzawds.ycuafhhyyqmbiwzhqrulfeh.acciakczepmdddcdn6m.gconcfadqbxmsqekmnvx59jeyd.sluaknhbsoe.com		129.95.9.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:31.654550076 CEST	8.8.8.8	192.168.2.5	0xabb9	No error (0)	6fmddd496kddyddddddn9eh.6ag4c3ktjf59cjw5fr4sde9lfb.sluaknhbsoe.com		239.255.255.255	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.807699919 CEST	8.8.8.8	192.168.2.5	0x2b08	No error (0)	6fmddd496kddydddddd2g9b.qfriaupe9xkac9uemfgupzz4kb.sluaknhbsoe.com		1.92.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.954628944 CEST	8.8.8.8	192.168.2.5	0xabc4	No error (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com		4.0.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.954628944 CEST	8.8.8.8	192.168.2.5	0xabc4	No error (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.954628944 CEST	8.8.8.8	192.168.2.5	0xabc4	No error (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com		12.98.88.72	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.954628944 CEST	8.8.8.8	192.168.2.5	0xabc4	No error (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com		16.6.17.5	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.954628944 CEST	8.8.8.8	192.168.2.5	0xabc4	No error (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com		20.67.15.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.954628944 CEST	8.8.8.8	192.168.2.5	0xabc4	No error (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com		24.69.38.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.954628944 CEST	8.8.8.8	192.168.2.5	0xabc4	No error (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com		28.93.66.80	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.954628944 CEST	8.8.8.8	192.168.2.5	0xabc4	No error (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com		32.90.64.85	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.954628944 CEST	8.8.8.8	192.168.2.5	0xabc4	No error (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com		36.75.127.4	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.954628944 CEST	8.8.8.8	192.168.2.5	0xabc4	No error (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com		40.87.83.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.954628944 CEST	8.8.8.8	192.168.2.5	0xabc4	No error (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com		44.87.84.66	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.954628944 CEST	8.8.8.8	192.168.2.5	0xabc4	No error (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com		48.79.121.81	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.954628944 CEST	8.8.8.8	192.168.2.5	0xabc4	No error (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com		52.34.55.83	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.954628944 CEST	8.8.8.8	192.168.2.5	0xabc4	No error (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com		56.89.18.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.954628944 CEST	8.8.8.8	192.168.2.5	0xabc4	No error (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com		60.33.25.117	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.954628944 CEST	8.8.8.8	192.168.2.5	0xabc4	No error (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com		64.36.74.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.954628944 CEST	8.8.8.8	192.168.2.5	0xabc4	No error (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com		68.85.40.77	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:34.954628944 CEST	8.8.8.8	192.168.2.5	0xabc4	No error (0)	6fmdddddddddy999dddhddddddlmn.nmepgufwne9jsz2yvjuhe2gmtg.sluaknhbsoe.com		72.35.74.98	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.098381996 CEST	8.8.8.8	192.168.2.5	0xaa2	No error (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com		4.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.098381996 CEST	8.8.8.8	192.168.2.5	0xaa2	No error (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.098381996 CEST	8.8.8.8	192.168.2.5	0xaa2	No error (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com		12.100.35.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.098381996 CEST	8.8.8.8	192.168.2.5	0xaa2	No error (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com		16.53.82.84	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.098381996 CEST	8.8.8.8	192.168.2.5	0xaa2	No error (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com		20.52.81.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.098381996 CEST	8.8.8.8	192.168.2.5	0xaa2	No error (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com		24.90.86.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.098381996 CEST	8.8.8.8	192.168.2.5	0xaa2	No error (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com		28.74.67.18	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.098381996 CEST	8.8.8.8	192.168.2.5	0xaa2	No error (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com		32.92.93.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.098381996 CEST	8.8.8.8	192.168.2.5	0xaa2	No error (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com		36.78.111.234	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.098381996 CEST	8.8.8.8	192.168.2.5	0xaa2	No error (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com		40.200.110.129	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.098381996 CEST	8.8.8.8	192.168.2.5	0xaa2	No error (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com		44.121.29.99	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.098381996 CEST	8.8.8.8	192.168.2.5	0xaa2	No error (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com		48.235.87.91	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.098381996 CEST	8.8.8.8	192.168.2.5	0xaa2	No error (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com		52.240.65.35	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.098381996 CEST	8.8.8.8	192.168.2.5	0xaa2	No error (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com		56.79.30.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.098381996 CEST	8.8.8.8	192.168.2.5	0xaa2	No error (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com		60.88.129.182	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.098381996 CEST	8.8.8.8	192.168.2.5	0xaa2	No error (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com		64.99.92.131	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.098381996 CEST	8.8.8.8	192.168.2.5	0xaa2	No error (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com		68.0.234.157	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.098381996 CEST	8.8.8.8	192.168.2.5	0xaa2	No error (0)	6fmddddjddddy999dddhdddddlzjr.u5anp4jpqrzucswdho22oyaydd.sluaknhbsoe.com		72.82.151.37	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.253578901 CEST	8.8.8.8	192.168.2.5	0xb0b2	No error (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com		4.0.0.96	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.253578901 CEST	8.8.8.8	192.168.2.5	0xb0b2	No error (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.253578901 CEST	8.8.8.8	192.168.2.5	0xb0b2	No error (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com		12.140.31.187	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.253578901 CEST	8.8.8.8	192.168.2.5	0xb0b2	No error (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com		16.3.204.116	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.253578901 CEST	8.8.8.8	192.168.2.5	0xb0b2	No error (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com		20.232.143.58	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.253578901 CEST	8.8.8.8	192.168.2.5	0xb0b2	No error (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com		24.160.171.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.253578901 CEST	8.8.8.8	192.168.2.5	0xb0b2	No error (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com		28.63.0.146	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.253578901 CEST	8.8.8.8	192.168.2.5	0xb0b2	No error (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com		32.96.39.14	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.253578901 CEST	8.8.8.8	192.168.2.5	0xb0b2	No error (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com		36.24.84.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.253578901 CEST	8.8.8.8	192.168.2.5	0xb0b2	No error (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com		40.233.116.4	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.253578901 CEST	8.8.8.8	192.168.2.5	0xb0b2	No error (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com		44.187.142.204	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.253578901 CEST	8.8.8.8	192.168.2.5	0xb0b2	No error (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com		48.69.251.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.253578901 CEST	8.8.8.8	192.168.2.5	0xb0b2	No error (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com		52.70.121.195	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.253578901 CEST	8.8.8.8	192.168.2.5	0xb0b2	No error (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com		56.9.250.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.253578901 CEST	8.8.8.8	192.168.2.5	0xb0b2	No error (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com		60.204.211.143	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.253578901 CEST	8.8.8.8	192.168.2.5	0xb0b2	No error (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com		64.80.232.238	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.253578901 CEST	8.8.8.8	192.168.2.5	0xb0b2	No error (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com		68.3.233.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.253578901 CEST	8.8.8.8	192.168.2.5	0xb0b2	No error (0)	6fmddddqddddy999dddhdddddplmh.pp2v3ii6debfsh2sov6i59kpnc.sluaknhbsoe.com		72.25.218.37	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.389641047 CEST	8.8.8.8	192.168.2.5	0x91cf	No error (0)	6fmdddd2ddddy999dddhdddddlbod.bn6bzwu5gzzocuemrtup2mrcmj.sluaknhbsoe.com		4.0.0.144	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.389641047 CEST	8.8.8.8	192.168.2.5	0x91cf	No error (0)	6fmdddd2ddddy999dddhdddddlbod.bn6bzwu5gzzocuemrtup2mrcmj.sluaknhbsoe.com		8.0.0.42	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.389641047 CEST	8.8.8.8	192.168.2.5	0x91cf	No error (0)	6fmdddd2ddddy999dddhdddddlbod.bn6bzwu5gzzocuemrtup2mrcmj.sluaknhbsoe.com		12.82.209.155	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.389641047 CEST	8.8.8.8	192.168.2.5	0x91cf	No error (0)	6fmdddd2ddddy999dddhdddddlbod.bn6bzwu5gzzocuemrtup2mrcmj.sluaknhbsoe.com		16.107.230.98	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.389641047 CEST	8.8.8.8	192.168.2.5	0x91cf	No error (0)	6fmdddd2ddddy999dddhdddddlbod.bn6bzwu5gzzocuemrtup2mrcmj.sluaknhbsoe.com		20.155.127.181	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.389641047 CEST	8.8.8.8	192.168.2.5	0x91cf	No error (0)	6fmdddd2ddddy999dddhdddddlbod.bn6bzwu5gzzocuemrtup2mrcmj.sluaknhbsoe.com		24.28.151.230	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.389641047 CEST	8.8.8.8	192.168.2.5	0x91cf	No error (0)	6fmdddd2ddddy999dddhdddddlbod.bn6bzwu5gzzocuemrtup2mrcmj.sluaknhbsoe.com		28.88.25.176	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.389641047 CEST	8.8.8.8	192.168.2.5	0x91cf	No error (0)	6fmdddd2ddddy999dddhdddddlbod.bn6bzwu5gzzocuemrtup2mrcmj.sluaknhbsoe.com		32.254.138.23	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.389641047 CEST	8.8.8.8	192.168.2.5	0x91cf	No error (0)	6fmdddd2ddddy999dddhdddddlbod.bn6bzwu5gzzocuemrtup2mrcmj.sluaknhbsoe.com		36.82.171.208	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.389641047 CEST	8.8.8.8	192.168.2.5	0x91cf	No error (0)	6fmdddd2ddddy999dddhdddddlbod.bn6bzwu5gzzocuemrtup2mrcmj.sluaknhbsoe.com		40.198.255.103	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.389641047 CEST	8.8.8.8	192.168.2.5	0x91cf	No error (0)	6fmdddd2ddddy999dddhdddddlbod.bn6bzwu5gzzocuemrtup2mrcmj.sluaknhbsoe.com		44.192.231.244	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.389641047 CEST	8.8.8.8	192.168.2.5	0x91cf	No error (0)	6fmdddd2ddddy999dddhdddddlbod.bn6bzwu5gzzocuemrtup2mrcmj.sluaknhbsoe.com		48.141.71.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.389641047 CEST	8.8.8.8	192.168.2.5	0x91cf	No error (0)	6fmdddd2ddddy999dddhdddddlbod.bn6bzwu5gzzocuemrtup2mrcmj.sluaknhbsoe.com		52.249.152.178	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.389641047 CEST	8.8.8.8	192.168.2.5	0x91cf	No error (0)	6fmdddd2ddddy999dddhdddddlbod.bn6bzwu5gzzocuemrtup2mrcmj.sluaknhbsoe.com		56.253.156.57	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.389641047 CEST	8.8.8.8	192.168.2.5	0x91cf	No error (0)	6fmdddd2ddddy999dddhdddddlbod.bn6bzwu5gzzocuemrtup2mrcmj.sluaknhbsoe.com		60.108.245.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.389641047 CEST	8.8.8.8	192.168.2.5	0x91cf	No error (0)	6fmdddd2ddddy999dddhdddddlbod.bn6bzwu5gzzocuemrtup2mrcmj.sluaknhbsoe.com		64.41.183.160	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.527717113 CEST	8.8.8.8	192.168.2.5	0xaad7	No error (0)	6fmdddloddddy999dddhdddddynxn.ch4rh44odulbcyhi5oxmtqmnhc.sluaknhbsoe.com		4.0.0.186	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.527717113 CEST	8.8.8.8	192.168.2.5	0xaad7	No error (0)	6fmdddloddddy999dddhdddddynxn.ch4rh44odulbcyhi5oxmtqmnhc.sluaknhbsoe.com		8.0.0.36	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.527717113 CEST	8.8.8.8	192.168.2.5	0xaad7	No error (0)	6fmdddloddddy999dddhdddddynxn.ch4rh44odulbcyhi5oxmtqmnhc.sluaknhbsoe.com		12.126.134.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.527717113 CEST	8.8.8.8	192.168.2.5	0xaad7	No error (0)	6fmdddloddddy999dddhdddddynxn.ch4rh44odulbcyhi5oxmtqmnhc.sluaknhbsoe.com		16.77.175.65	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.527717113 CEST	8.8.8.8	192.168.2.5	0xaad7	No error (0)	6fmdddloddddy999dddhdddddynxn.ch4rh44odulbcyhi5oxmtqmnhc.sluaknhbsoe.com		20.25.145.164	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.527717113 CEST	8.8.8.8	192.168.2.5	0xaad7	No error (0)	6fmdddloddddy999dddhdddddynxn.ch4rh44odulbcyhi5oxmtqmnhc.sluaknhbsoe.com		24.230.158.47	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.527717113 CEST	8.8.8.8	192.168.2.5	0xaad7	No error (0)	6fmdddloddddy999dddhdddddynxn.ch4rh44odulbcyhi5oxmtqmnhc.sluaknhbsoe.com		28.151.89.76	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.527717113 CEST	8.8.8.8	192.168.2.5	0xaad7	No error (0)	6fmdddloddddy999dddhdddddynxn.ch4rh44odulbcyhi5oxmtqmnhc.sluaknhbsoe.com		32.224.112.21	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.527717113 CEST	8.8.8.8	192.168.2.5	0xaad7	No error (0)	6fmdddloddddy999dddhdddddynxn.ch4rh44odulbcyhi5oxmtqmnhc.sluaknhbsoe.com		36.223.150.99	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.527717113 CEST	8.8.8.8	192.168.2.5	0xaad7	No error (0)	6fmdddloddddy999dddhdddddynxn.ch4rh44odulbcyhi5oxmtqmnhc.sluaknhbsoe.com		40.170.86.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.527717113 CEST	8.8.8.8	192.168.2.5	0xaad7	No error (0)	6fmdddloddddy999dddhdddddynxn.ch4rh44odulbcyhi5oxmtqmnhc.sluaknhbsoe.com		44.85.15.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.527717113 CEST	8.8.8.8	192.168.2.5	0xaad7	No error (0)	6fmdddloddddy999dddhdddddynxn.ch4rh44odulbcyhi5oxmtqmnhc.sluaknhbsoe.com		48.62.46.75	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.527717113 CEST	8.8.8.8	192.168.2.5	0xaad7	No error (0)	6fmdddloddddy999dddhdddddynxn.ch4rh44odulbcyhi5oxmtqmnhc.sluaknhbsoe.com		52.119.77.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.527717113 CEST	8.8.8.8	192.168.2.5	0xaad7	No error (0)	6fmdddloddddy999dddhdddddynxn.ch4rh44odulbcyhi5oxmtqmnhc.sluaknhbsoe.com		56.255.255.204	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.679356098 CEST	8.8.8.8	192.168.2.5	0x7fcb	No error (0)	6fmdddpvddddy999dddhdddddd3oc.burfjb5fdcrtsij3mjxph4t9ed.sluaknhbsoe.com		4.0.0.222	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.679356098 CEST	8.8.8.8	192.168.2.5	0x7fcb	No error (0)	6fmdddpvddddy999dddhdddddd3oc.burfjb5fdcrtsij3mjxph4t9ed.sluaknhbsoe.com		8.0.0.30	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.679356098 CEST	8.8.8.8	192.168.2.5	0x7fcb	No error (0)	6fmdddpvddddy999dddhdddddd3oc.burfjb5fdcrtsij3mjxph4t9ed.sluaknhbsoe.com		12.160.73.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.679356098 CEST	8.8.8.8	192.168.2.5	0x7fcb	No error (0)	6fmdddpvddddy999dddhdddddd3oc.burfjb5fdcrtsij3mjxph4t9ed.sluaknhbsoe.com		16.243.50.247	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.679356098 CEST	8.8.8.8	192.168.2.5	0x7fcb	No error (0)	6fmdddpvddddy999dddhdddddd3oc.burfjb5fdcrtsij3mjxph4t9ed.sluaknhbsoe.com		20.187.128.101	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.679356098 CEST	8.8.8.8	192.168.2.5	0x7fcb	No error (0)	6fmdddpvddddy999dddhdddddd3oc.burfjb5fdcrtsij3mjxph4t9ed.sluaknhbsoe.com		24.56.79.103	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.679356098 CEST	8.8.8.8	192.168.2.5	0x7fcb	No error (0)	6fmdddpvddddy999dddhdddddd3oc.burfjb5fdcrtsij3mjxph4t9ed.sluaknhbsoe.com		28.244.102.26	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.679356098 CEST	8.8.8.8	192.168.2.5	0x7fcb	No error (0)	6fmdddpvddddy999dddhdddddd3oc.burfjb5fdcrtsij3mjxph4t9ed.sluaknhbsoe.com		32.82.130.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.679356098 CEST	8.8.8.8	192.168.2.5	0x7fcb	No error (0)	6fmdddpvddddy999dddhdddddd3oc.burfjb5fdcrtsij3mjxph4t9ed.sluaknhbsoe.com		36.166.121.228	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.679356098 CEST	8.8.8.8	192.168.2.5	0x7fcb	No error (0)	6fmdddpvddddy999dddhdddddd3oc.burfjb5fdcrtsij3mjxph4t9ed.sluaknhbsoe.com		40.60.50.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.679356098 CEST	8.8.8.8	192.168.2.5	0x7fcb	No error (0)	6fmdddpvddddy999dddhdddddd3oc.burfjb5fdcrtsij3mjxph4t9ed.sluaknhbsoe.com		44.62.251.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.679356098 CEST	8.8.8.8	192.168.2.5	0x7fcb	No error (0)	6fmdddpvddddy999dddhdddddd3oc.burfjb5fdcrtsij3mjxph4t9ed.sluaknhbsoe.com		48.82.109.47	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.820337057 CEST	8.8.8.8	192.168.2.5	0x5773	No error (0)	6fmdddy9ddddy999dddhdddddpguj.p3xbylmctu6ssfwxm6avnqbhzc.sluaknhbsoe.com		4.0.0.252	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.820337057 CEST	8.8.8.8	192.168.2.5	0x5773	No error (0)	6fmdddy9ddddy999dddhdddddpguj.p3xbylmctu6ssfwxm6avnqbhzc.sluaknhbsoe.com		8.0.0.24	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.820337057 CEST	8.8.8.8	192.168.2.5	0x5773	No error (0)	6fmdddy9ddddy999dddhdddddpguj.p3xbylmctu6ssfwxm6avnqbhzc.sluaknhbsoe.com		12.124.68.163	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.820337057 CEST	8.8.8.8	192.168.2.5	0x5773	No error (0)	6fmdddy9ddddy999dddhdddddpguj.p3xbylmctu6ssfwxm6avnqbhzc.sluaknhbsoe.com		16.144.44.29	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.820337057 CEST	8.8.8.8	192.168.2.5	0x5773	No error (0)	6fmdddy9ddddy999dddhdddddpguj.p3xbylmctu6ssfwxm6avnqbhzc.sluaknhbsoe.com		20.159.31.177	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.820337057 CEST	8.8.8.8	192.168.2.5	0x5773	No error (0)	6fmdddy9ddddy999dddhdddddpguj.p3xbylmctu6ssfwxm6avnqbhzc.sluaknhbsoe.com		24.195.88.111	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.820337057 CEST	8.8.8.8	192.168.2.5	0x5773	No error (0)	6fmdddy9ddddy999dddhdddddpguj.p3xbylmctu6ssfwxm6avnqbhzc.sluaknhbsoe.com		28.125.98.13	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.820337057 CEST	8.8.8.8	192.168.2.5	0x5773	No error (0)	6fmdddy9ddddy999dddhdddddpguj.p3xbylmctu6ssfwxm6avnqbhzc.sluaknhbsoe.com		32.9.204.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.820337057 CEST	8.8.8.8	192.168.2.5	0x5773	No error (0)	6fmdddy9ddddy999dddhdddddpguj.p3xbylmctu6ssfwxm6avnqbhzc.sluaknhbsoe.com		36.186.136.2	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:35.820337057 CEST	8.8.8.8	192.168.2.5	0x5773	No error (0)	6fmdddy9ddddy999dddhdddddpguj.p3xbylmctu6ssfwxm6avnqbhzc.sluaknhbsoe.com		40.68.157.216	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.044504881 CEST	8.8.8.8	192.168.2.5	0x7d73	No error (0)	6fmdddyhgdddy999dddhddddddudj.rxwj34r3eozecpumtr9oy5knqi.sluaknhbsoe.com		4.0.1.20	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.044504881 CEST	8.8.8.8	192.168.2.5	0x7d73	No error (0)	6fmdddyhgdddy999dddhddddddudj.rxwj34r3eozecpumtr9oy5knqi.sluaknhbsoe.com		8.0.0.18	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.044504881 CEST	8.8.8.8	192.168.2.5	0x7d73	No error (0)	6fmdddyhgdddy999dddhddddddudj.rxwj34r3eozecpumtr9oy5knqi.sluaknhbsoe.com		12.121.251.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.044504881 CEST	8.8.8.8	192.168.2.5	0x7d73	No error (0)	6fmdddyhgdddy999dddhddddddudj.rxwj34r3eozecpumtr9oy5knqi.sluaknhbsoe.com		16.18.128.200	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.044504881 CEST	8.8.8.8	192.168.2.5	0x7d73	No error (0)	6fmdddyhgdddy999dddhddddddudj.rxwj34r3eozecpumtr9oy5knqi.sluaknhbsoe.com		20.129.227.202	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.044504881 CEST	8.8.8.8	192.168.2.5	0x7d73	No error (0)	6fmdddyhgdddy999dddhddddddudj.rxwj34r3eozecpumtr9oy5knqi.sluaknhbsoe.com		24.241.45.57	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.044504881 CEST	8.8.8.8	192.168.2.5	0x7d73	No error (0)	6fmdddyhgdddy999dddhddddddudj.rxwj34r3eozecpumtr9oy5knqi.sluaknhbsoe.com		28.245.105.107	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.044504881 CEST	8.8.8.8	192.168.2.5	0x7d73	No error (0)	6fmdddyhgdddy999dddhddddddudj.rxwj34r3eozecpumtr9oy5knqi.sluaknhbsoe.com		32.192.75.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.175848961 CEST	8.8.8.8	192.168.2.5	0x442b	No error (0)	6fmdddpcgdddy999dddhdddddlaoq.uat5co4whrpesmwycnee4vk9ag.sluaknhbsoe.com		4.0.1.38	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.175848961 CEST	8.8.8.8	192.168.2.5	0x442b	No error (0)	6fmdddpcgdddy999dddhdddddlaoq.uat5co4whrpesmwycnee4vk9ag.sluaknhbsoe.com		8.0.0.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.175848961 CEST	8.8.8.8	192.168.2.5	0x442b	No error (0)	6fmdddpcgdddy999dddhdddddlaoq.uat5co4whrpesmwycnee4vk9ag.sluaknhbsoe.com		12.212.116.233	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.175848961 CEST	8.8.8.8	192.168.2.5	0x442b	No error (0)	6fmdddpcgdddy999dddhdddddlaoq.uat5co4whrpesmwycnee4vk9ag.sluaknhbsoe.com		16.140.58.141	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.175848961 CEST	8.8.8.8	192.168.2.5	0x442b	No error (0)	6fmdddpcgdddy999dddhdddddlaoq.uat5co4whrpesmwycnee4vk9ag.sluaknhbsoe.com		20.226.195.205	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.175848961 CEST	8.8.8.8	192.168.2.5	0x442b	No error (0)	6fmdddpcgdddy999dddhdddddlaoq.uat5co4whrpesmwycnee4vk9ag.sluaknhbsoe.com		24.242.43.139	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.175848961 CEST	8.8.8.8	192.168.2.5	0x442b	No error (0)	6fmdddpcgdddy999dddhdddddlaoq.uat5co4whrpesmwycnee4vk9ag.sluaknhbsoe.com		28.230.198.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.345493078 CEST	8.8.8.8	192.168.2.5	0x7508	No error (0)	6fmdddsjgdddy999dddhdddddltqd.vupuxtkoqfmcczhguflirjy6nb.sluaknhbsoe.com		4.0.1.53	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.345493078 CEST	8.8.8.8	192.168.2.5	0x7508	No error (0)	6fmdddsjgdddy999dddhdddddltqd.vupuxtkoqfmcczhguflirjy6nb.sluaknhbsoe.com		8.0.0.12	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.345493078 CEST	8.8.8.8	192.168.2.5	0x7508	No error (0)	6fmdddsjgdddy999dddhdddddltqd.vupuxtkoqfmcczhguflirjy6nb.sluaknhbsoe.com		12.208.26.90	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.345493078 CEST	8.8.8.8	192.168.2.5	0x7508	No error (0)	6fmdddsjgdddy999dddhdddddltqd.vupuxtkoqfmcczhguflirjy6nb.sluaknhbsoe.com		16.162.92.138	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.345493078 CEST	8.8.8.8	192.168.2.5	0x7508	No error (0)	6fmdddsjgdddy999dddhdddddltqd.vupuxtkoqfmcczhguflirjy6nb.sluaknhbsoe.com		20.102.56.144	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.345493078 CEST	8.8.8.8	192.168.2.5	0x7508	No error (0)	6fmdddsjgdddy999dddhdddddltqd.vupuxtkoqfmcczhguflirjy6nb.sluaknhbsoe.com		24.60.27.51	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.482428074 CEST	8.8.8.8	192.168.2.5	0x8739	No error (0)	6fmdddclgdddy999dddhddddddr6k.g34zz9ptnbf6sihsnjcwe52ttb.sluaknhbsoe.com		4.0.1.65	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.482428074 CEST	8.8.8.8	192.168.2.5	0x8739	No error (0)	6fmdddclgdddy999dddhddddddr6k.g34zz9ptnbf6sihsnjcwe52ttb.sluaknhbsoe.com		8.0.0.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.482428074 CEST	8.8.8.8	192.168.2.5	0x8739	No error (0)	6fmdddclgdddy999dddhddddddr6k.g34zz9ptnbf6sihsnjcwe52ttb.sluaknhbsoe.com		12.42.91.2	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.482428074 CEST	8.8.8.8	192.168.2.5	0x8739	No error (0)	6fmdddclgdddy999dddhddddddr6k.g34zz9ptnbf6sihsnjcwe52ttb.sluaknhbsoe.com		16.223.226.42	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.482428074 CEST	8.8.8.8	192.168.2.5	0x8739	No error (0)	6fmdddclgdddy999dddhddddddr6k.g34zz9ptnbf6sihsnjcwe52ttb.sluaknhbsoe.com		20.40.99.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.635369062 CEST	8.8.8.8	192.168.2.5	0x6ec4	No error (0)	6fmdddlmgdddy999dddhdddddpteh.xifcwlwakz6zca6hmx5mhq9xhh.sluaknhbsoe.com		4.0.1.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.635369062 CEST	8.8.8.8	192.168.2.5	0x6ec4	No error (0)	6fmdddlmgdddy999dddhdddddpteh.xifcwlwakz6zca6hmx5mhq9xhh.sluaknhbsoe.com		8.0.0.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.635369062 CEST	8.8.8.8	192.168.2.5	0x6ec4	No error (0)	6fmdddlmgdddy999dddhdddddpteh.xifcwlwakz6zca6hmx5mhq9xhh.sluaknhbsoe.com		12.147.245.111	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.635369062 CEST	8.8.8.8	192.168.2.5	0x6ec4	No error (0)	6fmdddlmgdddy999dddhdddddpteh.xifcwlwakz6zca6hmx5mhq9xhh.sluaknhbsoe.com		16.131.198.234	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.635369062 CEST	8.8.8.8	192.168.2.5	0x6ec4	No error (0)	6fmdddlmgdddy999dddhdddddpteh.xifcwlwakz6zca6hmx5mhq9xhh.sluaknhbsoe.com		20.184.246.24	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.785269022 CEST	8.8.8.8	192.168.2.5	0x1e56	No error (0)	6fmdddqngdddy999dddhddddddtfn.bjsnopybkkpqcpwpysopb933tj.sluaknhbsoe.com		4.0.1.83	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.785269022 CEST	8.8.8.8	192.168.2.5	0x1e56	No error (0)	6fmdddqngdddy999dddhddddddtfn.bjsnopybkkpqcpwpysopb933tj.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.785269022 CEST	8.8.8.8	192.168.2.5	0x1e56	No error (0)	6fmdddqngdddy999dddhddddddtfn.bjsnopybkkpqcpwpysopb933tj.sluaknhbsoe.com		12.63.102.218	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.785269022 CEST	8.8.8.8	192.168.2.5	0x1e56	No error (0)	6fmdddqngdddy999dddhddddddtfn.bjsnopybkkpqcpwpysopb933tj.sluaknhbsoe.com		16.206.198.82	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.916023970 CEST	8.8.8.8	192.168.2.5	0x581d	No error (0)	6fmdddcfgdddy999dddhdddddypvm.wvzauzs59pqnspjpph26suqdeh.sluaknhbsoe.com		4.0.1.89	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.916023970 CEST	8.8.8.8	192.168.2.5	0x581d	No error (0)	6fmdddcfgdddy999dddhdddddypvm.wvzauzs59pqnspjpph26suqdeh.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.916023970 CEST	8.8.8.8	192.168.2.5	0x581d	No error (0)	6fmdddcfgdddy999dddhdddddypvm.wvzauzs59pqnspjpph26suqdeh.sluaknhbsoe.com		12.20.18.54	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:36.916023970 CEST	8.8.8.8	192.168.2.5	0x581d	No error (0)	6fmdddcfgdddy999dddhdddddypvm.wvzauzs59pqnspjpph26suqdeh.sluaknhbsoe.com		16.232.239.240	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.052225113 CEST	8.8.8.8	192.168.2.5	0xebab	No error (0)	6fmddd4fgdddy999dddhdddddd6jf.wyhmh92uye33coulyqiz9wp5jb.sluaknhbsoe.com		4.0.1.95	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.052225113 CEST	8.8.8.8	192.168.2.5	0xebab	No error (0)	6fmddd4fgdddy999dddhdddddd6jf.wyhmh92uye33coulyqiz9wp5jb.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.052225113 CEST	8.8.8.8	192.168.2.5	0xebab	No error (0)	6fmddd4fgdddy999dddhdddddd6jf.wyhmh92uye33coulyqiz9wp5jb.sluaknhbsoe.com		12.251.181.212	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.052225113 CEST	8.8.8.8	192.168.2.5	0xebab	No error (0)	6fmddd4fgdddy999dddhdddddd6jf.wyhmh92uye33coulyqiz9wp5jb.sluaknhbsoe.com		16.226.48.94	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.198225975 CEST	8.8.8.8	192.168.2.5	0xc34f	No error (0)	6fmdddsqgdddy999dddhdddddliox.yh4wpbolazchcmjbd3torwaipg.sluaknhbsoe.com		4.0.1.101	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.198225975 CEST	8.8.8.8	192.168.2.5	0xc34f	No error (0)	6fmdddsqgdddy999dddhdddddliox.yh4wpbolazchcmjbd3torwaipg.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.198225975 CEST	8.8.8.8	192.168.2.5	0xc34f	No error (0)	6fmdddsqgdddy999dddhdddddliox.yh4wpbolazchcmjbd3torwaipg.sluaknhbsoe.com		12.107.80.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.336543083 CEST	8.8.8.8	192.168.2.5	0xde67	No error (0)	6fmddddrgdddy999dddhdddddpkcq.gaydllyaba55cdj4tepn3tt9oi.sluaknhbsoe.com		4.0.1.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.336543083 CEST	8.8.8.8	192.168.2.5	0xde67	No error (0)	6fmddddrgdddy999dddhdddddpkcq.gaydllyaba55cdj4tepn3tt9oi.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.336543083 CEST	8.8.8.8	192.168.2.5	0xde67	No error (0)	6fmddddrgdddy999dddhdddddpkcq.gaydllyaba55cdj4tepn3tt9oi.sluaknhbsoe.com		12.86.80.71	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.499805927 CEST	8.8.8.8	192.168.2.5	0x7a45	No error (0)	6fmdddqrgdddy999dddhdddddy2sn.qykoejju4byoszu24tflfvyivh.sluaknhbsoe.com		4.0.1.107	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.499805927 CEST	8.8.8.8	192.168.2.5	0x7a45	No error (0)	6fmdddqrgdddy999dddhdddddy2sn.qykoejju4byoszu24tflfvyivh.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.499805927 CEST	8.8.8.8	192.168.2.5	0x7a45	No error (0)	6fmdddqrgdddy999dddhdddddy2sn.qykoejju4byoszu24tflfvyivh.sluaknhbsoe.com		12.87.122.81	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.629122972 CEST	8.8.8.8	192.168.2.5	0xa880	No error (0)	6fmdddprgdddy999dddhdddddp9en.66mq25hm6m2ysvhs9avcwmegtk.sluaknhbsoe.com		4.0.1.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.629122972 CEST	8.8.8.8	192.168.2.5	0xa880	No error (0)	6fmdddprgdddy999dddhdddddp9en.66mq25hm6m2ysvhs9avcwmegtk.sluaknhbsoe.com		8.0.0.2	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.629122972 CEST	8.8.8.8	192.168.2.5	0xa880	No error (0)	6fmdddprgdddy999dddhdddddp9en.66mq25hm6m2ysvhs9avcwmegtk.sluaknhbsoe.com		12.94.69.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.784459114 CEST	8.8.8.8	192.168.2.5	0x957c	No error (0)	efkezwpdxpsq3lsdvnsccnqfuhj4g5qn.dhshtlghjlpujhqrbvuuipcc52icgjgfd.elsc3ancaijdnacinun2lihvdacjoibefwd.drcdfptdhnifsnkncnddgdddygdddddh69b.n3u3bdlqy4ahsfjea4eialvygh.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:37.922920942 CEST	8.8.8.8	192.168.2.5	0xfbd1	No error (0)	detdzpzfn22etjgnoygduy5r6dvhctsjdmm.cjmsjkgqjhvsqmgmnjgd.ijaqph3lccbvhgf4dfbcu2u4jg.zlljfsjdarwhvyqnalnuhyikzrphyyc.bfejzlddxbddyd4ddj.n3u3bdlqy4ahsfjea4eialvygh.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:38.070700884 CEST	8.8.8.8	192.168.2.5	0x375e	No error (0)	3pfehvpcdabpjvyctgmdb2gnbzawdsycua.fhhyyqmbiwzhqrulfehacciakczepmdddcyznl.n3u3bdlqy4ahsfjea4eialvygh.sluaknhbsoe.com		193.222.53.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:38.200058937 CEST	8.8.8.8	192.168.2.5	0x2486	No error (0)	vvtgdd496kddyddddddp9pd.t2w3pdmyyjg5syjibmrtbwafsg.sluaknhbsoe.com		239.255.255.255	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.393577099 CEST	8.8.8.8	192.168.2.5	0x2ba5	No error (0)	vvtgdd496kddyddddddwhmg.ogt9t5ihgj3ysm22hqm5y9ri2k.sluaknhbsoe.com		1.92.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.521811962 CEST	8.8.8.8	192.168.2.5	0x29a6	No error (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com		4.0.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.521811962 CEST	8.8.8.8	192.168.2.5	0x29a6	No error (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.521811962 CEST	8.8.8.8	192.168.2.5	0x29a6	No error (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com		12.98.88.72	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.521811962 CEST	8.8.8.8	192.168.2.5	0x29a6	No error (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com		16.6.17.5	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.521811962 CEST	8.8.8.8	192.168.2.5	0x29a6	No error (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com		20.67.15.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.521811962 CEST	8.8.8.8	192.168.2.5	0x29a6	No error (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com		24.69.38.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.521811962 CEST	8.8.8.8	192.168.2.5	0x29a6	No error (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com		28.93.66.80	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.521811962 CEST	8.8.8.8	192.168.2.5	0x29a6	No error (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com		32.90.64.85	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.521811962 CEST	8.8.8.8	192.168.2.5	0x29a6	No error (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com		36.75.127.4	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.521811962 CEST	8.8.8.8	192.168.2.5	0x29a6	No error (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com		40.87.83.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.521811962 CEST	8.8.8.8	192.168.2.5	0x29a6	No error (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com		44.87.84.66	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.521811962 CEST	8.8.8.8	192.168.2.5	0x29a6	No error (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com		48.79.121.81	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.521811962 CEST	8.8.8.8	192.168.2.5	0x29a6	No error (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com		52.34.55.83	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.521811962 CEST	8.8.8.8	192.168.2.5	0x29a6	No error (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com		56.89.18.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.521811962 CEST	8.8.8.8	192.168.2.5	0x29a6	No error (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com		60.33.25.117	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.521811962 CEST	8.8.8.8	192.168.2.5	0x29a6	No error (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com		64.36.74.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.521811962 CEST	8.8.8.8	192.168.2.5	0x29a6	No error (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com		68.85.40.77	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.521811962 CEST	8.8.8.8	192.168.2.5	0x29a6	No error (0)	vvtgddddddddy999dddhdddddlzpg.oh3hycf9pchmsye5f5msf5olxg.sluaknhbsoe.com		72.35.74.98	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.657284975 CEST	8.8.8.8	192.168.2.5	0xe2a	No error (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com		4.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.657284975 CEST	8.8.8.8	192.168.2.5	0xe2a	No error (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.657284975 CEST	8.8.8.8	192.168.2.5	0xe2a	No error (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com		12.100.35.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.657284975 CEST	8.8.8.8	192.168.2.5	0xe2a	No error (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com		16.53.82.84	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.657284975 CEST	8.8.8.8	192.168.2.5	0xe2a	No error (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com		20.52.81.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.657284975 CEST	8.8.8.8	192.168.2.5	0xe2a	No error (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com		24.90.86.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.657284975 CEST	8.8.8.8	192.168.2.5	0xe2a	No error (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com		28.74.67.18	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.657284975 CEST	8.8.8.8	192.168.2.5	0xe2a	No error (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com		32.92.93.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.657284975 CEST	8.8.8.8	192.168.2.5	0xe2a	No error (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com		36.78.111.234	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.657284975 CEST	8.8.8.8	192.168.2.5	0xe2a	No error (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com		40.200.110.129	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.657284975 CEST	8.8.8.8	192.168.2.5	0xe2a	No error (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com		44.121.29.99	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.657284975 CEST	8.8.8.8	192.168.2.5	0xe2a	No error (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com		48.235.87.91	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.657284975 CEST	8.8.8.8	192.168.2.5	0xe2a	No error (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com		52.240.65.35	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.657284975 CEST	8.8.8.8	192.168.2.5	0xe2a	No error (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com		56.79.30.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.657284975 CEST	8.8.8.8	192.168.2.5	0xe2a	No error (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com		60.88.129.182	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.657284975 CEST	8.8.8.8	192.168.2.5	0xe2a	No error (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com		64.99.92.131	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.657284975 CEST	8.8.8.8	192.168.2.5	0xe2a	No error (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com		68.0.234.157	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.657284975 CEST	8.8.8.8	192.168.2.5	0xe2a	No error (0)	vvtgdddjddddy999dddhdddddpyuj.lumvitvr9mvys6u6if4aj2z43g.sluaknhbsoe.com		72.82.151.37	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.790837049 CEST	8.8.8.8	192.168.2.5	0x6444	No error (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com		4.0.0.96	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.790837049 CEST	8.8.8.8	192.168.2.5	0x6444	No error (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.790837049 CEST	8.8.8.8	192.168.2.5	0x6444	No error (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com		12.140.31.187	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.790837049 CEST	8.8.8.8	192.168.2.5	0x6444	No error (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com		16.3.204.116	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.790837049 CEST	8.8.8.8	192.168.2.5	0x6444	No error (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com		20.232.143.58	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.790837049 CEST	8.8.8.8	192.168.2.5	0x6444	No error (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com		24.160.171.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.790837049 CEST	8.8.8.8	192.168.2.5	0x6444	No error (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com		28.63.0.146	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.790837049 CEST	8.8.8.8	192.168.2.5	0x6444	No error (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com		32.96.39.14	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.790837049 CEST	8.8.8.8	192.168.2.5	0x6444	No error (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com		36.24.84.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.790837049 CEST	8.8.8.8	192.168.2.5	0x6444	No error (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com		40.233.116.4	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.790837049 CEST	8.8.8.8	192.168.2.5	0x6444	No error (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com		44.187.142.204	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.790837049 CEST	8.8.8.8	192.168.2.5	0x6444	No error (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com		48.69.251.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.790837049 CEST	8.8.8.8	192.168.2.5	0x6444	No error (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com		52.70.121.195	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.790837049 CEST	8.8.8.8	192.168.2.5	0x6444	No error (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com		56.9.250.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.790837049 CEST	8.8.8.8	192.168.2.5	0x6444	No error (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com		60.204.211.143	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.790837049 CEST	8.8.8.8	192.168.2.5	0x6444	No error (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com		64.80.232.238	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.790837049 CEST	8.8.8.8	192.168.2.5	0x6444	No error (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com		68.3.233.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.790837049 CEST	8.8.8.8	192.168.2.5	0x6444	No error (0)	vvtgdddqddddy999dddhdddddyozd.romw9wmsaplpsvnu2xkos94gsj.sluaknhbsoe.com		72.25.218.37	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.945883036 CEST	8.8.8.8	192.168.2.5	0x383d	No error (0)	vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com		4.0.0.144	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.945883036 CEST	8.8.8.8	192.168.2.5	0x383d	No error (0)	vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com		8.0.0.42	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.945883036 CEST	8.8.8.8	192.168.2.5	0x383d	No error (0)	vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com		12.82.209.155	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.945883036 CEST	8.8.8.8	192.168.2.5	0x383d	No error (0)	vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com		16.107.230.98	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.945883036 CEST	8.8.8.8	192.168.2.5	0x383d	No error (0)	vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com		20.155.127.181	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.945883036 CEST	8.8.8.8	192.168.2.5	0x383d	No error (0)	vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com		24.28.151.230	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.945883036 CEST	8.8.8.8	192.168.2.5	0x383d	No error (0)	vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com		28.88.25.176	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.945883036 CEST	8.8.8.8	192.168.2.5	0x383d	No error (0)	vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com		32.254.138.23	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.945883036 CEST	8.8.8.8	192.168.2.5	0x383d	No error (0)	vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com		36.82.171.208	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.945883036 CEST	8.8.8.8	192.168.2.5	0x383d	No error (0)	vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com		40.198.255.103	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.945883036 CEST	8.8.8.8	192.168.2.5	0x383d	No error (0)	vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com		44.192.231.244	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.945883036 CEST	8.8.8.8	192.168.2.5	0x383d	No error (0)	vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com		48.141.71.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.945883036 CEST	8.8.8.8	192.168.2.5	0x383d	No error (0)	vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com		52.249.152.178	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.945883036 CEST	8.8.8.8	192.168.2.5	0x383d	No error (0)	vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com		56.253.156.57	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.945883036 CEST	8.8.8.8	192.168.2.5	0x383d	No error (0)	vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com		60.108.245.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:41.945883036 CEST	8.8.8.8	192.168.2.5	0x383d	No error (0)	vvtgddd2ddddy999dddhdddddpcjh.x29ziqdor3qecjhdwi3y6tqx6h.sluaknhbsoe.com		64.41.183.160	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.078185081 CEST	8.8.8.8	192.168.2.5	0x4384	No error (0)	vvtgddloddddy999dddhdddddlvrl.qu5iyvkvdpz9sces3nv5pbmtag.sluaknhbsoe.com		4.0.0.186	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.078185081 CEST	8.8.8.8	192.168.2.5	0x4384	No error (0)	vvtgddloddddy999dddhdddddlvrl.qu5iyvkvdpz9sces3nv5pbmtag.sluaknhbsoe.com		8.0.0.36	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.078185081 CEST	8.8.8.8	192.168.2.5	0x4384	No error (0)	vvtgddloddddy999dddhdddddlvrl.qu5iyvkvdpz9sces3nv5pbmtag.sluaknhbsoe.com		12.126.134.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.078185081 CEST	8.8.8.8	192.168.2.5	0x4384	No error (0)	vvtgddloddddy999dddhdddddlvrl.qu5iyvkvdpz9sces3nv5pbmtag.sluaknhbsoe.com		16.77.175.65	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.078185081 CEST	8.8.8.8	192.168.2.5	0x4384	No error (0)	vvtgddloddddy999dddhdddddlvrl.qu5iyvkvdpz9sces3nv5pbmtag.sluaknhbsoe.com		20.25.145.164	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.078185081 CEST	8.8.8.8	192.168.2.5	0x4384	No error (0)	vvtgddloddddy999dddhdddddlvrl.qu5iyvkvdpz9sces3nv5pbmtag.sluaknhbsoe.com		24.230.158.47	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.078185081 CEST	8.8.8.8	192.168.2.5	0x4384	No error (0)	vvtgddloddddy999dddhdddddlvrl.qu5iyvkvdpz9sces3nv5pbmtag.sluaknhbsoe.com		28.151.89.76	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.078185081 CEST	8.8.8.8	192.168.2.5	0x4384	No error (0)	vvtgddloddddy999dddhdddddlvrl.qu5iyvkvdpz9sces3nv5pbmtag.sluaknhbsoe.com		32.224.112.21	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.078185081 CEST	8.8.8.8	192.168.2.5	0x4384	No error (0)	vvtgddloddddy999dddhdddddlvrl.qu5iyvkvdpz9sces3nv5pbmtag.sluaknhbsoe.com		36.223.150.99	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.078185081 CEST	8.8.8.8	192.168.2.5	0x4384	No error (0)	vvtgddloddddy999dddhdddddlvrl.qu5iyvkvdpz9sces3nv5pbmtag.sluaknhbsoe.com		40.170.86.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.078185081 CEST	8.8.8.8	192.168.2.5	0x4384	No error (0)	vvtgddloddddy999dddhdddddlvrl.qu5iyvkvdpz9sces3nv5pbmtag.sluaknhbsoe.com		44.85.15.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.078185081 CEST	8.8.8.8	192.168.2.5	0x4384	No error (0)	vvtgddloddddy999dddhdddddlvrl.qu5iyvkvdpz9sces3nv5pbmtag.sluaknhbsoe.com		48.62.46.75	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.078185081 CEST	8.8.8.8	192.168.2.5	0x4384	No error (0)	vvtgddloddddy999dddhdddddlvrl.qu5iyvkvdpz9sces3nv5pbmtag.sluaknhbsoe.com		52.119.77.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.078185081 CEST	8.8.8.8	192.168.2.5	0x4384	No error (0)	vvtgddloddddy999dddhdddddlvrl.qu5iyvkvdpz9sces3nv5pbmtag.sluaknhbsoe.com		56.255.255.204	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.223268032 CEST	8.8.8.8	192.168.2.5	0x2304	No error (0)	vvtgddpvddddy999dddhdddddp4ac.tb62ikmmdrubss6ben6alszz3i.sluaknhbsoe.com		4.0.0.222	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.223268032 CEST	8.8.8.8	192.168.2.5	0x2304	No error (0)	vvtgddpvddddy999dddhdddddp4ac.tb62ikmmdrubss6ben6alszz3i.sluaknhbsoe.com		8.0.0.30	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.223268032 CEST	8.8.8.8	192.168.2.5	0x2304	No error (0)	vvtgddpvddddy999dddhdddddp4ac.tb62ikmmdrubss6ben6alszz3i.sluaknhbsoe.com		12.160.73.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.223268032 CEST	8.8.8.8	192.168.2.5	0x2304	No error (0)	vvtgddpvddddy999dddhdddddp4ac.tb62ikmmdrubss6ben6alszz3i.sluaknhbsoe.com		16.243.50.247	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.223268032 CEST	8.8.8.8	192.168.2.5	0x2304	No error (0)	vvtgddpvddddy999dddhdddddp4ac.tb62ikmmdrubss6ben6alszz3i.sluaknhbsoe.com		20.187.128.101	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.223268032 CEST	8.8.8.8	192.168.2.5	0x2304	No error (0)	vvtgddpvddddy999dddhdddddp4ac.tb62ikmmdrubss6ben6alszz3i.sluaknhbsoe.com		24.56.79.103	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.223268032 CEST	8.8.8.8	192.168.2.5	0x2304	No error (0)	vvtgddpvddddy999dddhdddddp4ac.tb62ikmmdrubss6ben6alszz3i.sluaknhbsoe.com		28.244.102.26	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.223268032 CEST	8.8.8.8	192.168.2.5	0x2304	No error (0)	vvtgddpvddddy999dddhdddddp4ac.tb62ikmmdrubss6ben6alszz3i.sluaknhbsoe.com		32.82.130.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.223268032 CEST	8.8.8.8	192.168.2.5	0x2304	No error (0)	vvtgddpvddddy999dddhdddddp4ac.tb62ikmmdrubss6ben6alszz3i.sluaknhbsoe.com		36.166.121.228	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.223268032 CEST	8.8.8.8	192.168.2.5	0x2304	No error (0)	vvtgddpvddddy999dddhdddddp4ac.tb62ikmmdrubss6ben6alszz3i.sluaknhbsoe.com		40.60.50.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.223268032 CEST	8.8.8.8	192.168.2.5	0x2304	No error (0)	vvtgddpvddddy999dddhdddddp4ac.tb62ikmmdrubss6ben6alszz3i.sluaknhbsoe.com		44.62.251.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.223268032 CEST	8.8.8.8	192.168.2.5	0x2304	No error (0)	vvtgddpvddddy999dddhdddddp4ac.tb62ikmmdrubss6ben6alszz3i.sluaknhbsoe.com		48.82.109.47	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.368047953 CEST	8.8.8.8	192.168.2.5	0x4bd3	No error (0)	vvtgddy9ddddy999dddhdddddlkph.5wpy6jl9gfrqcmuru6q2psochj.sluaknhbsoe.com		4.0.0.252	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.368047953 CEST	8.8.8.8	192.168.2.5	0x4bd3	No error (0)	vvtgddy9ddddy999dddhdddddlkph.5wpy6jl9gfrqcmuru6q2psochj.sluaknhbsoe.com		8.0.0.24	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.368047953 CEST	8.8.8.8	192.168.2.5	0x4bd3	No error (0)	vvtgddy9ddddy999dddhdddddlkph.5wpy6jl9gfrqcmuru6q2psochj.sluaknhbsoe.com		12.124.68.163	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.368047953 CEST	8.8.8.8	192.168.2.5	0x4bd3	No error (0)	vvtgddy9ddddy999dddhdddddlkph.5wpy6jl9gfrqcmuru6q2psochj.sluaknhbsoe.com		16.144.44.29	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.368047953 CEST	8.8.8.8	192.168.2.5	0x4bd3	No error (0)	vvtgddy9ddddy999dddhdddddlkph.5wpy6jl9gfrqcmuru6q2psochj.sluaknhbsoe.com		20.159.31.177	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.368047953 CEST	8.8.8.8	192.168.2.5	0x4bd3	No error (0)	vvtgddy9ddddy999dddhdddddlkph.5wpy6jl9gfrqcmuru6q2psochj.sluaknhbsoe.com		24.195.88.111	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.368047953 CEST	8.8.8.8	192.168.2.5	0x4bd3	No error (0)	vvtgddy9ddddy999dddhdddddlkph.5wpy6jl9gfrqcmuru6q2psochj.sluaknhbsoe.com		28.125.98.13	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.368047953 CEST	8.8.8.8	192.168.2.5	0x4bd3	No error (0)	vvtgddy9ddddy999dddhdddddlkph.5wpy6jl9gfrqcmuru6q2psochj.sluaknhbsoe.com		32.9.204.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.368047953 CEST	8.8.8.8	192.168.2.5	0x4bd3	No error (0)	vvtgddy9ddddy999dddhdddddlkph.5wpy6jl9gfrqcmuru6q2psochj.sluaknhbsoe.com		36.186.136.2	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.368047953 CEST	8.8.8.8	192.168.2.5	0x4bd3	No error (0)	vvtgddy9ddddy999dddhdddddlkph.5wpy6jl9gfrqcmuru6q2psochj.sluaknhbsoe.com		40.68.157.216	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.520453930 CEST	8.8.8.8	192.168.2.5	0xf6c3	No error (0)	vvtgddyhgdddy999dddhdddddp5mq.ptnbi2fjb5xucheykuvzyy6hch.sluaknhbsoe.com		4.0.1.20	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.520453930 CEST	8.8.8.8	192.168.2.5	0xf6c3	No error (0)	vvtgddyhgdddy999dddhdddddp5mq.ptnbi2fjb5xucheykuvzyy6hch.sluaknhbsoe.com		8.0.0.18	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.520453930 CEST	8.8.8.8	192.168.2.5	0xf6c3	No error (0)	vvtgddyhgdddy999dddhdddddp5mq.ptnbi2fjb5xucheykuvzyy6hch.sluaknhbsoe.com		12.121.251.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.520453930 CEST	8.8.8.8	192.168.2.5	0xf6c3	No error (0)	vvtgddyhgdddy999dddhdddddp5mq.ptnbi2fjb5xucheykuvzyy6hch.sluaknhbsoe.com		16.18.128.200	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.520453930 CEST	8.8.8.8	192.168.2.5	0xf6c3	No error (0)	vvtgddyhgdddy999dddhdddddp5mq.ptnbi2fjb5xucheykuvzyy6hch.sluaknhbsoe.com		20.129.227.202	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.520453930 CEST	8.8.8.8	192.168.2.5	0xf6c3	No error (0)	vvtgddyhgdddy999dddhdddddp5mq.ptnbi2fjb5xucheykuvzyy6hch.sluaknhbsoe.com		24.241.45.57	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.520453930 CEST	8.8.8.8	192.168.2.5	0xf6c3	No error (0)	vvtgddyhgdddy999dddhdddddp5mq.ptnbi2fjb5xucheykuvzyy6hch.sluaknhbsoe.com		28.245.105.107	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.520453930 CEST	8.8.8.8	192.168.2.5	0xf6c3	No error (0)	vvtgddyhgdddy999dddhdddddp5mq.ptnbi2fjb5xucheykuvzyy6hch.sluaknhbsoe.com		32.192.75.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.658067942 CEST	8.8.8.8	192.168.2.5	0xa400	No error (0)	vvtgddpcgdddy999dddhddddddpnq.zy3hs93ubdqlsvjtibqjvkr6uj.sluaknhbsoe.com		4.0.1.38	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.658067942 CEST	8.8.8.8	192.168.2.5	0xa400	No error (0)	vvtgddpcgdddy999dddhddddddpnq.zy3hs93ubdqlsvjtibqjvkr6uj.sluaknhbsoe.com		8.0.0.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.658067942 CEST	8.8.8.8	192.168.2.5	0xa400	No error (0)	vvtgddpcgdddy999dddhddddddpnq.zy3hs93ubdqlsvjtibqjvkr6uj.sluaknhbsoe.com		12.212.116.233	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.658067942 CEST	8.8.8.8	192.168.2.5	0xa400	No error (0)	vvtgddpcgdddy999dddhddddddpnq.zy3hs93ubdqlsvjtibqjvkr6uj.sluaknhbsoe.com		16.140.58.141	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.658067942 CEST	8.8.8.8	192.168.2.5	0xa400	No error (0)	vvtgddpcgdddy999dddhddddddpnq.zy3hs93ubdqlsvjtibqjvkr6uj.sluaknhbsoe.com		20.226.195.205	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.658067942 CEST	8.8.8.8	192.168.2.5	0xa400	No error (0)	vvtgddpcgdddy999dddhddddddpnq.zy3hs93ubdqlsvjtibqjvkr6uj.sluaknhbsoe.com		24.242.43.139	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.658067942 CEST	8.8.8.8	192.168.2.5	0xa400	No error (0)	vvtgddpcgdddy999dddhddddddpnq.zy3hs93ubdqlsvjtibqjvkr6uj.sluaknhbsoe.com		28.230.198.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.821614027 CEST	8.8.8.8	192.168.2.5	0xb2bf	No error (0)	vvtgddsjgdddy999dddhddddddg5k.fs95q9lqgvvbs3hm3d5f2dschb.sluaknhbsoe.com		4.0.1.53	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.821614027 CEST	8.8.8.8	192.168.2.5	0xb2bf	No error (0)	vvtgddsjgdddy999dddhddddddg5k.fs95q9lqgvvbs3hm3d5f2dschb.sluaknhbsoe.com		8.0.0.12	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.821614027 CEST	8.8.8.8	192.168.2.5	0xb2bf	No error (0)	vvtgddsjgdddy999dddhddddddg5k.fs95q9lqgvvbs3hm3d5f2dschb.sluaknhbsoe.com		12.208.26.90	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.821614027 CEST	8.8.8.8	192.168.2.5	0xb2bf	No error (0)	vvtgddsjgdddy999dddhddddddg5k.fs95q9lqgvvbs3hm3d5f2dschb.sluaknhbsoe.com		16.162.92.138	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.821614027 CEST	8.8.8.8	192.168.2.5	0xb2bf	No error (0)	vvtgddsjgdddy999dddhddddddg5k.fs95q9lqgvvbs3hm3d5f2dschb.sluaknhbsoe.com		20.102.56.144	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.821614027 CEST	8.8.8.8	192.168.2.5	0xb2bf	No error (0)	vvtgddsjgdddy999dddhddddddg5k.fs95q9lqgvvbs3hm3d5f2dschb.sluaknhbsoe.com		24.60.27.51	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.972671032 CEST	8.8.8.8	192.168.2.5	0xebb0	No error (0)	vvtgddclgdddy999dddhdddddytxl.i3dpfey2qkq6svwohnugqufi3h.sluaknhbsoe.com		4.0.1.65	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.972671032 CEST	8.8.8.8	192.168.2.5	0xebb0	No error (0)	vvtgddclgdddy999dddhdddddytxl.i3dpfey2qkq6svwohnugqufi3h.sluaknhbsoe.com		8.0.0.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.972671032 CEST	8.8.8.8	192.168.2.5	0xebb0	No error (0)	vvtgddclgdddy999dddhdddddytxl.i3dpfey2qkq6svwohnugqufi3h.sluaknhbsoe.com		12.42.91.2	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.972671032 CEST	8.8.8.8	192.168.2.5	0xebb0	No error (0)	vvtgddclgdddy999dddhdddddytxl.i3dpfey2qkq6svwohnugqufi3h.sluaknhbsoe.com		16.223.226.42	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:42.972671032 CEST	8.8.8.8	192.168.2.5	0xebb0	No error (0)	vvtgddclgdddy999dddhdddddytxl.i3dpfey2qkq6svwohnugqufi3h.sluaknhbsoe.com		20.40.99.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.108069897 CEST	8.8.8.8	192.168.2.5	0xe355	No error (0)	vvtgddlmgdddy999dddhddddddirn.irmi264qck2sc5jv95jhp2u4xi.sluaknhbsoe.com		4.0.1.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.108069897 CEST	8.8.8.8	192.168.2.5	0xe355	No error (0)	vvtgddlmgdddy999dddhddddddirn.irmi264qck2sc5jv95jhp2u4xi.sluaknhbsoe.com		8.0.0.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.108069897 CEST	8.8.8.8	192.168.2.5	0xe355	No error (0)	vvtgddlmgdddy999dddhddddddirn.irmi264qck2sc5jv95jhp2u4xi.sluaknhbsoe.com		12.147.245.111	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.108069897 CEST	8.8.8.8	192.168.2.5	0xe355	No error (0)	vvtgddlmgdddy999dddhddddddirn.irmi264qck2sc5jv95jhp2u4xi.sluaknhbsoe.com		16.131.198.234	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.108069897 CEST	8.8.8.8	192.168.2.5	0xe355	No error (0)	vvtgddlmgdddy999dddhddddddirn.irmi264qck2sc5jv95jhp2u4xi.sluaknhbsoe.com		20.184.246.24	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.235747099 CEST	8.8.8.8	192.168.2.5	0x7ca5	No error (0)	vvtgddqngdddy999dddhdddddpi9q.dg2ljzcl4exuc3hkfogs94qjci.sluaknhbsoe.com		4.0.1.83	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.235747099 CEST	8.8.8.8	192.168.2.5	0x7ca5	No error (0)	vvtgddqngdddy999dddhdddddpi9q.dg2ljzcl4exuc3hkfogs94qjci.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.235747099 CEST	8.8.8.8	192.168.2.5	0x7ca5	No error (0)	vvtgddqngdddy999dddhdddddpi9q.dg2ljzcl4exuc3hkfogs94qjci.sluaknhbsoe.com		12.63.102.218	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.235747099 CEST	8.8.8.8	192.168.2.5	0x7ca5	No error (0)	vvtgddqngdddy999dddhdddddpi9q.dg2ljzcl4exuc3hkfogs94qjci.sluaknhbsoe.com		16.206.198.82	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.404114962 CEST	8.8.8.8	192.168.2.5	0x530d	No error (0)	vvtgddcfgdddy999dddhdddddpivr.yzmkrxgyr3amst2sn9gvgdat6j.sluaknhbsoe.com		4.0.1.89	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.404114962 CEST	8.8.8.8	192.168.2.5	0x530d	No error (0)	vvtgddcfgdddy999dddhdddddpivr.yzmkrxgyr3amst2sn9gvgdat6j.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.404114962 CEST	8.8.8.8	192.168.2.5	0x530d	No error (0)	vvtgddcfgdddy999dddhdddddpivr.yzmkrxgyr3amst2sn9gvgdat6j.sluaknhbsoe.com		12.20.18.54	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.404114962 CEST	8.8.8.8	192.168.2.5	0x530d	No error (0)	vvtgddcfgdddy999dddhdddddpivr.yzmkrxgyr3amst2sn9gvgdat6j.sluaknhbsoe.com		16.232.239.240	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.539165020 CEST	8.8.8.8	192.168.2.5	0xfe4f	No error (0)	vvtgdd4fgdddy999dddhdddddp49w.um3wlc3zjfb5c4wewtbxwb6uvj.sluaknhbsoe.com		4.0.1.95	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.539165020 CEST	8.8.8.8	192.168.2.5	0xfe4f	No error (0)	vvtgdd4fgdddy999dddhdddddp49w.um3wlc3zjfb5c4wewtbxwb6uvj.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.539165020 CEST	8.8.8.8	192.168.2.5	0xfe4f	No error (0)	vvtgdd4fgdddy999dddhdddddp49w.um3wlc3zjfb5c4wewtbxwb6uvj.sluaknhbsoe.com		12.251.181.212	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.539165020 CEST	8.8.8.8	192.168.2.5	0xfe4f	No error (0)	vvtgdd4fgdddy999dddhdddddp49w.um3wlc3zjfb5c4wewtbxwb6uvj.sluaknhbsoe.com		16.226.48.94	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.702831984 CEST	8.8.8.8	192.168.2.5	0x3c89	No error (0)	vvtgddsqgdddy999dddhdddddlu9b.s5nndv5ejjdvszhh6t9sa3kvvg.sluaknhbsoe.com		4.0.1.101	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.702831984 CEST	8.8.8.8	192.168.2.5	0x3c89	No error (0)	vvtgddsqgdddy999dddhdddddlu9b.s5nndv5ejjdvszhh6t9sa3kvvg.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.702831984 CEST	8.8.8.8	192.168.2.5	0x3c89	No error (0)	vvtgddsqgdddy999dddhdddddlu9b.s5nndv5ejjdvszhh6t9sa3kvvg.sluaknhbsoe.com		12.107.80.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.857214928 CEST	8.8.8.8	192.168.2.5	0xcacc	No error (0)	vvtgdddrgdddy999dddhdddddphck.6jcelbziy5ics42fmfs6i2qf3g.sluaknhbsoe.com		4.0.1.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.857214928 CEST	8.8.8.8	192.168.2.5	0xcacc	No error (0)	vvtgdddrgdddy999dddhdddddphck.6jcelbziy5ics42fmfs6i2qf3g.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.857214928 CEST	8.8.8.8	192.168.2.5	0xcacc	No error (0)	vvtgdddrgdddy999dddhdddddphck.6jcelbziy5ics42fmfs6i2qf3g.sluaknhbsoe.com		12.86.80.71	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.998723030 CEST	8.8.8.8	192.168.2.5	0xc37b	No error (0)	vvtgddqrgdddy999dddhdddddyqad.rd4qr5m4xxmushwveacwsiq23g.sluaknhbsoe.com		4.0.1.107	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.998723030 CEST	8.8.8.8	192.168.2.5	0xc37b	No error (0)	vvtgddqrgdddy999dddhdddddyqad.rd4qr5m4xxmushwveacwsiq23g.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:43.998723030 CEST	8.8.8.8	192.168.2.5	0xc37b	No error (0)	vvtgddqrgdddy999dddhdddddyqad.rd4qr5m4xxmushwveacwsiq23g.sluaknhbsoe.com		12.87.122.81	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:44.141436100 CEST	8.8.8.8	192.168.2.5	0xeffb	No error (0)	vvtgddprgdddy999dddhdddddlbkx.cbqcffdll4y4cpnhzhkpmudufh.sluaknhbsoe.com		4.0.1.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:44.141436100 CEST	8.8.8.8	192.168.2.5	0xeffb	No error (0)	vvtgddprgdddy999dddhdddddlbkx.cbqcffdll4y4cpnhzhkpmudufh.sluaknhbsoe.com		8.0.0.2	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:44.141436100 CEST	8.8.8.8	192.168.2.5	0xeffb	No error (0)	vvtgddprgdddy999dddhdddddlbkx.cbqcffdll4y4cpnhzhkpmudufh.sluaknhbsoe.com		12.94.69.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:44.270035028 CEST	8.8.8.8	192.168.2.5	0xa25a	No error (0)	efkezwpdxpsq3lsdvnsccnqfuhj4g5qndhshtl.ghjlpujhqrbvuuipcc52icgjgfdelsc3ancaijd.nacinun2lihvdacjoibefwdd.rcdfptdhnifsnkncnddgdddygdddddygad.byeui5jwtkm3cs2pz2fp9zcewh.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:44.399421930 CEST	8.8.8.8	192.168.2.5	0xcde6	No error (0)	detdzpzfn22etjgnoygduy5r6dvh.ctsjdmmcjmsjkgqjhvsqmgmnjgdijaqph3.lccbvhgf4dfbcu2u4jgzlljfsjdarwhvyqnaln.uhyikzrphyycbfejzlddxvc62upjjgddydljwg.byeui5jwtkm3cs2pz2fp9zcewh.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:44.554652929 CEST	8.8.8.8	192.168.2.5	0x89a	No error (0)	dabpjvyctgmdb2gnbzawdsycuafhhyyqmbi.wzhqrulfehacciakczepmdddcyahy.byeui5jwtkm3cs2pz2fp9zcewh.sluaknhbsoe.com		65.235.17.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:44.686024904 CEST	8.8.8.8	192.168.2.5	0x4b92	No error (0)	r5zddd496kddyddddddjgwd.nu3ylfl2uelhsgn4rvfnpisdwj.sluaknhbsoe.com		239.255.255.255	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.774007082 CEST	8.8.8.8	192.168.2.5	0x8482	No error (0)	r5zddd496kddyddddddpoyg.dyx35werowimcqwxab55dzn5kc.sluaknhbsoe.com		1.92.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.935251951 CEST	8.8.8.8	192.168.2.5	0x4119	No error (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com		4.0.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.935251951 CEST	8.8.8.8	192.168.2.5	0x4119	No error (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.935251951 CEST	8.8.8.8	192.168.2.5	0x4119	No error (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com		12.98.88.72	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.935251951 CEST	8.8.8.8	192.168.2.5	0x4119	No error (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com		16.6.17.5	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.935251951 CEST	8.8.8.8	192.168.2.5	0x4119	No error (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com		20.67.15.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.935251951 CEST	8.8.8.8	192.168.2.5	0x4119	No error (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com		24.69.38.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.935251951 CEST	8.8.8.8	192.168.2.5	0x4119	No error (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com		28.93.66.80	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.935251951 CEST	8.8.8.8	192.168.2.5	0x4119	No error (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com		32.90.64.85	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.935251951 CEST	8.8.8.8	192.168.2.5	0x4119	No error (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com		36.75.127.4	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.935251951 CEST	8.8.8.8	192.168.2.5	0x4119	No error (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com		40.87.83.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.935251951 CEST	8.8.8.8	192.168.2.5	0x4119	No error (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com		44.87.84.66	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.935251951 CEST	8.8.8.8	192.168.2.5	0x4119	No error (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com		48.79.121.81	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.935251951 CEST	8.8.8.8	192.168.2.5	0x4119	No error (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com		52.34.55.83	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.935251951 CEST	8.8.8.8	192.168.2.5	0x4119	No error (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com		56.89.18.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.935251951 CEST	8.8.8.8	192.168.2.5	0x4119	No error (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com		60.33.25.117	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.935251951 CEST	8.8.8.8	192.168.2.5	0x4119	No error (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com		64.36.74.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.935251951 CEST	8.8.8.8	192.168.2.5	0x4119	No error (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com		68.85.40.77	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:48.935251951 CEST	8.8.8.8	192.168.2.5	0x4119	No error (0)	r5zdddddddddy999dddhdddddlh9l.zryd4rb23loesdus6nh3dvcmfd.sluaknhbsoe.com		72.35.74.98	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.081790924 CEST	8.8.8.8	192.168.2.5	0xe4de	No error (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com		4.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.081790924 CEST	8.8.8.8	192.168.2.5	0xe4de	No error (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.081790924 CEST	8.8.8.8	192.168.2.5	0xe4de	No error (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com		12.100.35.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.081790924 CEST	8.8.8.8	192.168.2.5	0xe4de	No error (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com		16.53.82.84	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.081790924 CEST	8.8.8.8	192.168.2.5	0xe4de	No error (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com		20.52.81.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.081790924 CEST	8.8.8.8	192.168.2.5	0xe4de	No error (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com		24.90.86.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.081790924 CEST	8.8.8.8	192.168.2.5	0xe4de	No error (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com		28.74.67.18	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.081790924 CEST	8.8.8.8	192.168.2.5	0xe4de	No error (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com		32.92.93.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.081790924 CEST	8.8.8.8	192.168.2.5	0xe4de	No error (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com		36.78.111.234	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.081790924 CEST	8.8.8.8	192.168.2.5	0xe4de	No error (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com		40.200.110.129	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.081790924 CEST	8.8.8.8	192.168.2.5	0xe4de	No error (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com		44.121.29.99	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.081790924 CEST	8.8.8.8	192.168.2.5	0xe4de	No error (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com		48.235.87.91	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.081790924 CEST	8.8.8.8	192.168.2.5	0xe4de	No error (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com		52.240.65.35	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.081790924 CEST	8.8.8.8	192.168.2.5	0xe4de	No error (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com		56.79.30.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.081790924 CEST	8.8.8.8	192.168.2.5	0xe4de	No error (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com		60.88.129.182	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.081790924 CEST	8.8.8.8	192.168.2.5	0xe4de	No error (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com		64.99.92.131	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.081790924 CEST	8.8.8.8	192.168.2.5	0xe4de	No error (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com		68.0.234.157	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.081790924 CEST	8.8.8.8	192.168.2.5	0xe4de	No error (0)	r5zddddjddddy999dddhdddddyk3n.dk3nrynwbx9mctukfca9qydlwg.sluaknhbsoe.com		72.82.151.37	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.232624054 CEST	8.8.8.8	192.168.2.5	0x802c	No error (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com		4.0.0.96	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.232624054 CEST	8.8.8.8	192.168.2.5	0x802c	No error (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.232624054 CEST	8.8.8.8	192.168.2.5	0x802c	No error (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com		12.140.31.187	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.232624054 CEST	8.8.8.8	192.168.2.5	0x802c	No error (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com		16.3.204.116	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.232624054 CEST	8.8.8.8	192.168.2.5	0x802c	No error (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com		20.232.143.58	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.232624054 CEST	8.8.8.8	192.168.2.5	0x802c	No error (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com		24.160.171.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.232624054 CEST	8.8.8.8	192.168.2.5	0x802c	No error (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com		28.63.0.146	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.232624054 CEST	8.8.8.8	192.168.2.5	0x802c	No error (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com		32.96.39.14	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.232624054 CEST	8.8.8.8	192.168.2.5	0x802c	No error (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com		36.24.84.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.232624054 CEST	8.8.8.8	192.168.2.5	0x802c	No error (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com		40.233.116.4	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.232624054 CEST	8.8.8.8	192.168.2.5	0x802c	No error (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com		44.187.142.204	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.232624054 CEST	8.8.8.8	192.168.2.5	0x802c	No error (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com		48.69.251.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.232624054 CEST	8.8.8.8	192.168.2.5	0x802c	No error (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com		52.70.121.195	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.232624054 CEST	8.8.8.8	192.168.2.5	0x802c	No error (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com		56.9.250.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.232624054 CEST	8.8.8.8	192.168.2.5	0x802c	No error (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com		60.204.211.143	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.232624054 CEST	8.8.8.8	192.168.2.5	0x802c	No error (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com		64.80.232.238	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.232624054 CEST	8.8.8.8	192.168.2.5	0x802c	No error (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com		68.3.233.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.232624054 CEST	8.8.8.8	192.168.2.5	0x802c	No error (0)	r5zddddqddddy999dddhdddddywei.hndmjkctud3xs4jdrg5fuqf2wj.sluaknhbsoe.com		72.25.218.37	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.379606962 CEST	8.8.8.8	192.168.2.5	0xcfd	No error (0)	r5zdddd2ddddy999dddhddddddarq.vpy96cjixdazsbeuc9a9yhfnod.sluaknhbsoe.com		4.0.0.144	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.379606962 CEST	8.8.8.8	192.168.2.5	0xcfd	No error (0)	r5zdddd2ddddy999dddhddddddarq.vpy96cjixdazsbeuc9a9yhfnod.sluaknhbsoe.com		8.0.0.42	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.379606962 CEST	8.8.8.8	192.168.2.5	0xcfd	No error (0)	r5zdddd2ddddy999dddhddddddarq.vpy96cjixdazsbeuc9a9yhfnod.sluaknhbsoe.com		12.82.209.155	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.379606962 CEST	8.8.8.8	192.168.2.5	0xcfd	No error (0)	r5zdddd2ddddy999dddhddddddarq.vpy96cjixdazsbeuc9a9yhfnod.sluaknhbsoe.com		16.107.230.98	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.379606962 CEST	8.8.8.8	192.168.2.5	0xcfd	No error (0)	r5zdddd2ddddy999dddhddddddarq.vpy96cjixdazsbeuc9a9yhfnod.sluaknhbsoe.com		20.155.127.181	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.379606962 CEST	8.8.8.8	192.168.2.5	0xcfd	No error (0)	r5zdddd2ddddy999dddhddddddarq.vpy96cjixdazsbeuc9a9yhfnod.sluaknhbsoe.com		24.28.151.230	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.379606962 CEST	8.8.8.8	192.168.2.5	0xcfd	No error (0)	r5zdddd2ddddy999dddhddddddarq.vpy96cjixdazsbeuc9a9yhfnod.sluaknhbsoe.com		28.88.25.176	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.379606962 CEST	8.8.8.8	192.168.2.5	0xcfd	No error (0)	r5zdddd2ddddy999dddhddddddarq.vpy96cjixdazsbeuc9a9yhfnod.sluaknhbsoe.com		32.254.138.23	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.379606962 CEST	8.8.8.8	192.168.2.5	0xcfd	No error (0)	r5zdddd2ddddy999dddhddddddarq.vpy96cjixdazsbeuc9a9yhfnod.sluaknhbsoe.com		36.82.171.208	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.379606962 CEST	8.8.8.8	192.168.2.5	0xcfd	No error (0)	r5zdddd2ddddy999dddhddddddarq.vpy96cjixdazsbeuc9a9yhfnod.sluaknhbsoe.com		40.198.255.103	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.379606962 CEST	8.8.8.8	192.168.2.5	0xcfd	No error (0)	r5zdddd2ddddy999dddhddddddarq.vpy96cjixdazsbeuc9a9yhfnod.sluaknhbsoe.com		44.192.231.244	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.379606962 CEST	8.8.8.8	192.168.2.5	0xcfd	No error (0)	r5zdddd2ddddy999dddhddddddarq.vpy96cjixdazsbeuc9a9yhfnod.sluaknhbsoe.com		48.141.71.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.379606962 CEST	8.8.8.8	192.168.2.5	0xcfd	No error (0)	r5zdddd2ddddy999dddhddddddarq.vpy96cjixdazsbeuc9a9yhfnod.sluaknhbsoe.com		52.249.152.178	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.379606962 CEST	8.8.8.8	192.168.2.5	0xcfd	No error (0)	r5zdddd2ddddy999dddhddddddarq.vpy96cjixdazsbeuc9a9yhfnod.sluaknhbsoe.com		56.253.156.57	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.379606962 CEST	8.8.8.8	192.168.2.5	0xcfd	No error (0)	r5zdddd2ddddy999dddhddddddarq.vpy96cjixdazsbeuc9a9yhfnod.sluaknhbsoe.com		60.108.245.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.379606962 CEST	8.8.8.8	192.168.2.5	0xcfd	No error (0)	r5zdddd2ddddy999dddhddddddarq.vpy96cjixdazsbeuc9a9yhfnod.sluaknhbsoe.com		64.41.183.160	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.519912004 CEST	8.8.8.8	192.168.2.5	0xdb64	No error (0)	r5zdddloddddy999dddhdddddlqew.qtmpn5jib3cbcdubbscas93gog.sluaknhbsoe.com		4.0.0.186	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.519912004 CEST	8.8.8.8	192.168.2.5	0xdb64	No error (0)	r5zdddloddddy999dddhdddddlqew.qtmpn5jib3cbcdubbscas93gog.sluaknhbsoe.com		8.0.0.36	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.519912004 CEST	8.8.8.8	192.168.2.5	0xdb64	No error (0)	r5zdddloddddy999dddhdddddlqew.qtmpn5jib3cbcdubbscas93gog.sluaknhbsoe.com		12.126.134.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.519912004 CEST	8.8.8.8	192.168.2.5	0xdb64	No error (0)	r5zdddloddddy999dddhdddddlqew.qtmpn5jib3cbcdubbscas93gog.sluaknhbsoe.com		16.77.175.65	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.519912004 CEST	8.8.8.8	192.168.2.5	0xdb64	No error (0)	r5zdddloddddy999dddhdddddlqew.qtmpn5jib3cbcdubbscas93gog.sluaknhbsoe.com		20.25.145.164	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.519912004 CEST	8.8.8.8	192.168.2.5	0xdb64	No error (0)	r5zdddloddddy999dddhdddddlqew.qtmpn5jib3cbcdubbscas93gog.sluaknhbsoe.com		24.230.158.47	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.519912004 CEST	8.8.8.8	192.168.2.5	0xdb64	No error (0)	r5zdddloddddy999dddhdddddlqew.qtmpn5jib3cbcdubbscas93gog.sluaknhbsoe.com		28.151.89.76	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.519912004 CEST	8.8.8.8	192.168.2.5	0xdb64	No error (0)	r5zdddloddddy999dddhdddddlqew.qtmpn5jib3cbcdubbscas93gog.sluaknhbsoe.com		32.224.112.21	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.519912004 CEST	8.8.8.8	192.168.2.5	0xdb64	No error (0)	r5zdddloddddy999dddhdddddlqew.qtmpn5jib3cbcdubbscas93gog.sluaknhbsoe.com		36.223.150.99	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.519912004 CEST	8.8.8.8	192.168.2.5	0xdb64	No error (0)	r5zdddloddddy999dddhdddddlqew.qtmpn5jib3cbcdubbscas93gog.sluaknhbsoe.com		40.170.86.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.519912004 CEST	8.8.8.8	192.168.2.5	0xdb64	No error (0)	r5zdddloddddy999dddhdddddlqew.qtmpn5jib3cbcdubbscas93gog.sluaknhbsoe.com		44.85.15.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.519912004 CEST	8.8.8.8	192.168.2.5	0xdb64	No error (0)	r5zdddloddddy999dddhdddddlqew.qtmpn5jib3cbcdubbscas93gog.sluaknhbsoe.com		48.62.46.75	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.519912004 CEST	8.8.8.8	192.168.2.5	0xdb64	No error (0)	r5zdddloddddy999dddhdddddlqew.qtmpn5jib3cbcdubbscas93gog.sluaknhbsoe.com		52.119.77.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.519912004 CEST	8.8.8.8	192.168.2.5	0xdb64	No error (0)	r5zdddloddddy999dddhdddddlqew.qtmpn5jib3cbcdubbscas93gog.sluaknhbsoe.com		56.255.255.204	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.665334940 CEST	8.8.8.8	192.168.2.5	0x5495	No error (0)	r5zdddpvddddy999dddhdddddlr4f.t2qfeac3xskfcrwe9tdqagvezb.sluaknhbsoe.com		4.0.0.222	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.665334940 CEST	8.8.8.8	192.168.2.5	0x5495	No error (0)	r5zdddpvddddy999dddhdddddlr4f.t2qfeac3xskfcrwe9tdqagvezb.sluaknhbsoe.com		8.0.0.30	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.665334940 CEST	8.8.8.8	192.168.2.5	0x5495	No error (0)	r5zdddpvddddy999dddhdddddlr4f.t2qfeac3xskfcrwe9tdqagvezb.sluaknhbsoe.com		12.160.73.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.665334940 CEST	8.8.8.8	192.168.2.5	0x5495	No error (0)	r5zdddpvddddy999dddhdddddlr4f.t2qfeac3xskfcrwe9tdqagvezb.sluaknhbsoe.com		16.243.50.247	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.665334940 CEST	8.8.8.8	192.168.2.5	0x5495	No error (0)	r5zdddpvddddy999dddhdddddlr4f.t2qfeac3xskfcrwe9tdqagvezb.sluaknhbsoe.com		20.187.128.101	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.665334940 CEST	8.8.8.8	192.168.2.5	0x5495	No error (0)	r5zdddpvddddy999dddhdddddlr4f.t2qfeac3xskfcrwe9tdqagvezb.sluaknhbsoe.com		24.56.79.103	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.665334940 CEST	8.8.8.8	192.168.2.5	0x5495	No error (0)	r5zdddpvddddy999dddhdddddlr4f.t2qfeac3xskfcrwe9tdqagvezb.sluaknhbsoe.com		28.244.102.26	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.665334940 CEST	8.8.8.8	192.168.2.5	0x5495	No error (0)	r5zdddpvddddy999dddhdddddlr4f.t2qfeac3xskfcrwe9tdqagvezb.sluaknhbsoe.com		32.82.130.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.665334940 CEST	8.8.8.8	192.168.2.5	0x5495	No error (0)	r5zdddpvddddy999dddhdddddlr4f.t2qfeac3xskfcrwe9tdqagvezb.sluaknhbsoe.com		36.166.121.228	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.665334940 CEST	8.8.8.8	192.168.2.5	0x5495	No error (0)	r5zdddpvddddy999dddhdddddlr4f.t2qfeac3xskfcrwe9tdqagvezb.sluaknhbsoe.com		40.60.50.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.665334940 CEST	8.8.8.8	192.168.2.5	0x5495	No error (0)	r5zdddpvddddy999dddhdddddlr4f.t2qfeac3xskfcrwe9tdqagvezb.sluaknhbsoe.com		44.62.251.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.665334940 CEST	8.8.8.8	192.168.2.5	0x5495	No error (0)	r5zdddpvddddy999dddhdddddlr4f.t2qfeac3xskfcrwe9tdqagvezb.sluaknhbsoe.com		48.82.109.47	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.800597906 CEST	8.8.8.8	192.168.2.5	0x9af5	No error (0)	r5zdddy9ddddy999dddhdddddlbaj.4cig3iqctojvcu24p5eb5sehmk.sluaknhbsoe.com		4.0.0.252	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.800597906 CEST	8.8.8.8	192.168.2.5	0x9af5	No error (0)	r5zdddy9ddddy999dddhdddddlbaj.4cig3iqctojvcu24p5eb5sehmk.sluaknhbsoe.com		8.0.0.24	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.800597906 CEST	8.8.8.8	192.168.2.5	0x9af5	No error (0)	r5zdddy9ddddy999dddhdddddlbaj.4cig3iqctojvcu24p5eb5sehmk.sluaknhbsoe.com		12.124.68.163	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.800597906 CEST	8.8.8.8	192.168.2.5	0x9af5	No error (0)	r5zdddy9ddddy999dddhdddddlbaj.4cig3iqctojvcu24p5eb5sehmk.sluaknhbsoe.com		16.144.44.29	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.800597906 CEST	8.8.8.8	192.168.2.5	0x9af5	No error (0)	r5zdddy9ddddy999dddhdddddlbaj.4cig3iqctojvcu24p5eb5sehmk.sluaknhbsoe.com		20.159.31.177	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.800597906 CEST	8.8.8.8	192.168.2.5	0x9af5	No error (0)	r5zdddy9ddddy999dddhdddddlbaj.4cig3iqctojvcu24p5eb5sehmk.sluaknhbsoe.com		24.195.88.111	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.800597906 CEST	8.8.8.8	192.168.2.5	0x9af5	No error (0)	r5zdddy9ddddy999dddhdddddlbaj.4cig3iqctojvcu24p5eb5sehmk.sluaknhbsoe.com		28.125.98.13	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.800597906 CEST	8.8.8.8	192.168.2.5	0x9af5	No error (0)	r5zdddy9ddddy999dddhdddddlbaj.4cig3iqctojvcu24p5eb5sehmk.sluaknhbsoe.com		32.9.204.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.800597906 CEST	8.8.8.8	192.168.2.5	0x9af5	No error (0)	r5zdddy9ddddy999dddhdddddlbaj.4cig3iqctojvcu24p5eb5sehmk.sluaknhbsoe.com		36.186.136.2	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.800597906 CEST	8.8.8.8	192.168.2.5	0x9af5	No error (0)	r5zdddy9ddddy999dddhdddddlbaj.4cig3iqctojvcu24p5eb5sehmk.sluaknhbsoe.com		40.68.157.216	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.929547071 CEST	8.8.8.8	192.168.2.5	0x6763	No error (0)	r5zdddyhgdddy999dddhdddddyxlj.nmzz55pkquabcb2nq6kzvys6ad.sluaknhbsoe.com		4.0.1.20	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.929547071 CEST	8.8.8.8	192.168.2.5	0x6763	No error (0)	r5zdddyhgdddy999dddhdddddyxlj.nmzz55pkquabcb2nq6kzvys6ad.sluaknhbsoe.com		8.0.0.18	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.929547071 CEST	8.8.8.8	192.168.2.5	0x6763	No error (0)	r5zdddyhgdddy999dddhdddddyxlj.nmzz55pkquabcb2nq6kzvys6ad.sluaknhbsoe.com		12.121.251.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.929547071 CEST	8.8.8.8	192.168.2.5	0x6763	No error (0)	r5zdddyhgdddy999dddhdddddyxlj.nmzz55pkquabcb2nq6kzvys6ad.sluaknhbsoe.com		16.18.128.200	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.929547071 CEST	8.8.8.8	192.168.2.5	0x6763	No error (0)	r5zdddyhgdddy999dddhdddddyxlj.nmzz55pkquabcb2nq6kzvys6ad.sluaknhbsoe.com		20.129.227.202	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.929547071 CEST	8.8.8.8	192.168.2.5	0x6763	No error (0)	r5zdddyhgdddy999dddhdddddyxlj.nmzz55pkquabcb2nq6kzvys6ad.sluaknhbsoe.com		24.241.45.57	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.929547071 CEST	8.8.8.8	192.168.2.5	0x6763	No error (0)	r5zdddyhgdddy999dddhdddddyxlj.nmzz55pkquabcb2nq6kzvys6ad.sluaknhbsoe.com		28.245.105.107	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:49.929547071 CEST	8.8.8.8	192.168.2.5	0x6763	No error (0)	r5zdddyhgdddy999dddhdddddyxlj.nmzz55pkquabcb2nq6kzvys6ad.sluaknhbsoe.com		32.192.75.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.065186024 CEST	8.8.8.8	192.168.2.5	0x6d13	No error (0)	r5zdddpcgdddy999dddhdddddypfb.qz96crvbld9msvndloy5ozeudh.sluaknhbsoe.com		4.0.1.38	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.065186024 CEST	8.8.8.8	192.168.2.5	0x6d13	No error (0)	r5zdddpcgdddy999dddhdddddypfb.qz96crvbld9msvndloy5ozeudh.sluaknhbsoe.com		8.0.0.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.065186024 CEST	8.8.8.8	192.168.2.5	0x6d13	No error (0)	r5zdddpcgdddy999dddhdddddypfb.qz96crvbld9msvndloy5ozeudh.sluaknhbsoe.com		12.212.116.233	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.065186024 CEST	8.8.8.8	192.168.2.5	0x6d13	No error (0)	r5zdddpcgdddy999dddhdddddypfb.qz96crvbld9msvndloy5ozeudh.sluaknhbsoe.com		16.140.58.141	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.065186024 CEST	8.8.8.8	192.168.2.5	0x6d13	No error (0)	r5zdddpcgdddy999dddhdddddypfb.qz96crvbld9msvndloy5ozeudh.sluaknhbsoe.com		20.226.195.205	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.065186024 CEST	8.8.8.8	192.168.2.5	0x6d13	No error (0)	r5zdddpcgdddy999dddhdddddypfb.qz96crvbld9msvndloy5ozeudh.sluaknhbsoe.com		24.242.43.139	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.065186024 CEST	8.8.8.8	192.168.2.5	0x6d13	No error (0)	r5zdddpcgdddy999dddhdddddypfb.qz96crvbld9msvndloy5ozeudh.sluaknhbsoe.com		28.230.198.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.208435059 CEST	8.8.8.8	192.168.2.5	0xf4ea	No error (0)	r5zdddsjgdddy999dddhddddddzzl.zhcvpyntsm42sdesosueoqzgxh.sluaknhbsoe.com		4.0.1.53	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.208435059 CEST	8.8.8.8	192.168.2.5	0xf4ea	No error (0)	r5zdddsjgdddy999dddhddddddzzl.zhcvpyntsm42sdesosueoqzgxh.sluaknhbsoe.com		8.0.0.12	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.208435059 CEST	8.8.8.8	192.168.2.5	0xf4ea	No error (0)	r5zdddsjgdddy999dddhddddddzzl.zhcvpyntsm42sdesosueoqzgxh.sluaknhbsoe.com		12.208.26.90	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.208435059 CEST	8.8.8.8	192.168.2.5	0xf4ea	No error (0)	r5zdddsjgdddy999dddhddddddzzl.zhcvpyntsm42sdesosueoqzgxh.sluaknhbsoe.com		16.162.92.138	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.208435059 CEST	8.8.8.8	192.168.2.5	0xf4ea	No error (0)	r5zdddsjgdddy999dddhddddddzzl.zhcvpyntsm42sdesosueoqzgxh.sluaknhbsoe.com		20.102.56.144	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.208435059 CEST	8.8.8.8	192.168.2.5	0xf4ea	No error (0)	r5zdddsjgdddy999dddhddddddzzl.zhcvpyntsm42sdesosueoqzgxh.sluaknhbsoe.com		24.60.27.51	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.349658012 CEST	8.8.8.8	192.168.2.5	0xd1c5	No error (0)	r5zdddclgdddy999dddhdddddyrsi.9ubumpefzvr2ckhuvampkfv2ik.sluaknhbsoe.com		4.0.1.65	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.349658012 CEST	8.8.8.8	192.168.2.5	0xd1c5	No error (0)	r5zdddclgdddy999dddhdddddyrsi.9ubumpefzvr2ckhuvampkfv2ik.sluaknhbsoe.com		8.0.0.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.349658012 CEST	8.8.8.8	192.168.2.5	0xd1c5	No error (0)	r5zdddclgdddy999dddhdddddyrsi.9ubumpefzvr2ckhuvampkfv2ik.sluaknhbsoe.com		12.42.91.2	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.349658012 CEST	8.8.8.8	192.168.2.5	0xd1c5	No error (0)	r5zdddclgdddy999dddhdddddyrsi.9ubumpefzvr2ckhuvampkfv2ik.sluaknhbsoe.com		16.223.226.42	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.349658012 CEST	8.8.8.8	192.168.2.5	0xd1c5	No error (0)	r5zdddclgdddy999dddhdddddyrsi.9ubumpefzvr2ckhuvampkfv2ik.sluaknhbsoe.com		20.40.99.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.482371092 CEST	8.8.8.8	192.168.2.5	0x143	No error (0)	r5zdddlmgdddy999dddhdddddpadj.2favssb3n5zbsenkgiv4uskm9c.sluaknhbsoe.com		4.0.1.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.482371092 CEST	8.8.8.8	192.168.2.5	0x143	No error (0)	r5zdddlmgdddy999dddhdddddpadj.2favssb3n5zbsenkgiv4uskm9c.sluaknhbsoe.com		8.0.0.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.482371092 CEST	8.8.8.8	192.168.2.5	0x143	No error (0)	r5zdddlmgdddy999dddhdddddpadj.2favssb3n5zbsenkgiv4uskm9c.sluaknhbsoe.com		12.147.245.111	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.482371092 CEST	8.8.8.8	192.168.2.5	0x143	No error (0)	r5zdddlmgdddy999dddhdddddpadj.2favssb3n5zbsenkgiv4uskm9c.sluaknhbsoe.com		16.131.198.234	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.482371092 CEST	8.8.8.8	192.168.2.5	0x143	No error (0)	r5zdddlmgdddy999dddhdddddpadj.2favssb3n5zbsenkgiv4uskm9c.sluaknhbsoe.com		20.184.246.24	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.618005037 CEST	8.8.8.8	192.168.2.5	0x7ad0	No error (0)	r5zdddqngdddy999dddhdddddlb2r.9n5wus44j6jks92r3gnjqxgnfd.sluaknhbsoe.com		4.0.1.83	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.618005037 CEST	8.8.8.8	192.168.2.5	0x7ad0	No error (0)	r5zdddqngdddy999dddhdddddlb2r.9n5wus44j6jks92r3gnjqxgnfd.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.618005037 CEST	8.8.8.8	192.168.2.5	0x7ad0	No error (0)	r5zdddqngdddy999dddhdddddlb2r.9n5wus44j6jks92r3gnjqxgnfd.sluaknhbsoe.com		12.63.102.218	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.618005037 CEST	8.8.8.8	192.168.2.5	0x7ad0	No error (0)	r5zdddqngdddy999dddhdddddlb2r.9n5wus44j6jks92r3gnjqxgnfd.sluaknhbsoe.com		16.206.198.82	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.757180929 CEST	8.8.8.8	192.168.2.5	0x15b8	No error (0)	r5zdddcfgdddy999dddhdddddleci.5dirqvocy59xcn6nu9jbfw9psk.sluaknhbsoe.com		4.0.1.89	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.757180929 CEST	8.8.8.8	192.168.2.5	0x15b8	No error (0)	r5zdddcfgdddy999dddhdddddleci.5dirqvocy59xcn6nu9jbfw9psk.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.757180929 CEST	8.8.8.8	192.168.2.5	0x15b8	No error (0)	r5zdddcfgdddy999dddhdddddleci.5dirqvocy59xcn6nu9jbfw9psk.sluaknhbsoe.com		12.20.18.54	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.757180929 CEST	8.8.8.8	192.168.2.5	0x15b8	No error (0)	r5zdddcfgdddy999dddhdddddleci.5dirqvocy59xcn6nu9jbfw9psk.sluaknhbsoe.com		16.232.239.240	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.893532038 CEST	8.8.8.8	192.168.2.5	0x5d0	No error (0)	r5zddd4fgdddy999dddhdddddpd2h.2vl9ho6fks5psr2lacevh9cakg.sluaknhbsoe.com		4.0.1.95	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.893532038 CEST	8.8.8.8	192.168.2.5	0x5d0	No error (0)	r5zddd4fgdddy999dddhdddddpd2h.2vl9ho6fks5psr2lacevh9cakg.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.893532038 CEST	8.8.8.8	192.168.2.5	0x5d0	No error (0)	r5zddd4fgdddy999dddhdddddpd2h.2vl9ho6fks5psr2lacevh9cakg.sluaknhbsoe.com		12.251.181.212	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:50.893532038 CEST	8.8.8.8	192.168.2.5	0x5d0	No error (0)	r5zddd4fgdddy999dddhdddddpd2h.2vl9ho6fks5psr2lacevh9cakg.sluaknhbsoe.com		16.226.48.94	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.023750067 CEST	8.8.8.8	192.168.2.5	0xcc92	No error (0)	r5zdddsqgdddy999dddhdddddlcvb.9ktc6nf3l4eisvw3t2ratso95h.sluaknhbsoe.com		4.0.1.101	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.023750067 CEST	8.8.8.8	192.168.2.5	0xcc92	No error (0)	r5zdddsqgdddy999dddhdddddlcvb.9ktc6nf3l4eisvw3t2ratso95h.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.023750067 CEST	8.8.8.8	192.168.2.5	0xcc92	No error (0)	r5zdddsqgdddy999dddhdddddlcvb.9ktc6nf3l4eisvw3t2ratso95h.sluaknhbsoe.com		12.107.80.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.158986092 CEST	8.8.8.8	192.168.2.5	0xdf14	No error (0)	r5zddddrgdddy999dddhdddddpvxh.6rtufkuzgcnys66lgqdd2xasid.sluaknhbsoe.com		4.0.1.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.158986092 CEST	8.8.8.8	192.168.2.5	0xdf14	No error (0)	r5zddddrgdddy999dddhdddddpvxh.6rtufkuzgcnys66lgqdd2xasid.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.158986092 CEST	8.8.8.8	192.168.2.5	0xdf14	No error (0)	r5zddddrgdddy999dddhdddddpvxh.6rtufkuzgcnys66lgqdd2xasid.sluaknhbsoe.com		12.86.80.71	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.306056023 CEST	8.8.8.8	192.168.2.5	0xc0e5	No error (0)	r5zdddqrgdddy999dddhdddddddhb.llkd5phtskl3cduotxzr2hzvbk.sluaknhbsoe.com		4.0.1.107	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.306056023 CEST	8.8.8.8	192.168.2.5	0xc0e5	No error (0)	r5zdddqrgdddy999dddhdddddddhb.llkd5phtskl3cduotxzr2hzvbk.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.306056023 CEST	8.8.8.8	192.168.2.5	0xc0e5	No error (0)	r5zdddqrgdddy999dddhdddddddhb.llkd5phtskl3cduotxzr2hzvbk.sluaknhbsoe.com		12.87.122.81	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.451777935 CEST	8.8.8.8	192.168.2.5	0x3e82	No error (0)	r5zdddprgdddy999dddhdddddyqdd.syft2i3xmwqacen9orpna99h2c.sluaknhbsoe.com		4.0.1.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.451777935 CEST	8.8.8.8	192.168.2.5	0x3e82	No error (0)	r5zdddprgdddy999dddhdddddyqdd.syft2i3xmwqacen9orpna99h2c.sluaknhbsoe.com		8.0.0.2	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.451777935 CEST	8.8.8.8	192.168.2.5	0x3e82	No error (0)	r5zdddprgdddy999dddhdddddyqdd.syft2i3xmwqacen9orpna99h2c.sluaknhbsoe.com		12.94.69.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.583678007 CEST	8.8.8.8	192.168.2.5	0x766f	No error (0)	efkezwpdxpsq3lsdvnsccnqfuhj4g5qndh.shtlghjlpujhqrbvuuipcc52icgjg.fdelsc3ancaijdnacinun2lihv.dacjoibefwddrcdfptdhnifsnknc.ndlohdhddddbdddddqhgg.qhfixf5me5zysvnduapxdzi32k.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.728602886 CEST	8.8.8.8	192.168.2.5	0x27b1	No error (0)	yl4piimm5n3dtfpddfp6jxyrg2nnbys.ch3cn33djbzrnusyci3dy.h3qjqzmch2zrzyiwytgh.fmfw3ylcc3inby4jkzrljtqcifgp23pjqgll2z.ir3lcdyorhdddhyci9.qhfixf5me5zysvnduapxdzi32k.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:51.902669907 CEST	8.8.8.8	192.168.2.5	0x60e7	No error (0)	xmfqb3dcxdvqb2sjcgqljlrcjv.gyh2pjxmldh2irspinytahrmfc3y.sc9ycnbkgddydpcrb.qhfixf5me5zysvnduapxdzi32k.sluaknhbsoe.com		129.223.53.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:52.035723925 CEST	8.8.8.8	192.168.2.5	0xb5f5	No error (0)	6vtgdd496kddyddddddwqwd.uixbwnnth45ocjuhxkuzoohuni.sluaknhbsoe.com		239.255.255.255	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.171427965 CEST	8.8.8.8	192.168.2.5	0xc655	No error (0)	6vtgdd496kddyddddddh3ug.mnpf4xlemu9pcau9pteqn34jqc.sluaknhbsoe.com		1.92.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.328461885 CEST	8.8.8.8	192.168.2.5	0x3953	No error (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com		4.0.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.328461885 CEST	8.8.8.8	192.168.2.5	0x3953	No error (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.328461885 CEST	8.8.8.8	192.168.2.5	0x3953	No error (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com		12.98.88.72	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.328461885 CEST	8.8.8.8	192.168.2.5	0x3953	No error (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com		16.6.17.5	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.328461885 CEST	8.8.8.8	192.168.2.5	0x3953	No error (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com		20.67.15.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.328461885 CEST	8.8.8.8	192.168.2.5	0x3953	No error (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com		24.69.38.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.328461885 CEST	8.8.8.8	192.168.2.5	0x3953	No error (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com		28.93.66.80	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.328461885 CEST	8.8.8.8	192.168.2.5	0x3953	No error (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com		32.90.64.85	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.328461885 CEST	8.8.8.8	192.168.2.5	0x3953	No error (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com		36.75.127.4	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.328461885 CEST	8.8.8.8	192.168.2.5	0x3953	No error (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com		40.87.83.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.328461885 CEST	8.8.8.8	192.168.2.5	0x3953	No error (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com		44.87.84.66	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.328461885 CEST	8.8.8.8	192.168.2.5	0x3953	No error (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com		48.79.121.81	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.328461885 CEST	8.8.8.8	192.168.2.5	0x3953	No error (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com		52.34.55.83	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.328461885 CEST	8.8.8.8	192.168.2.5	0x3953	No error (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com		56.89.18.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.328461885 CEST	8.8.8.8	192.168.2.5	0x3953	No error (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com		60.33.25.117	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.328461885 CEST	8.8.8.8	192.168.2.5	0x3953	No error (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com		64.36.74.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.328461885 CEST	8.8.8.8	192.168.2.5	0x3953	No error (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com		68.85.40.77	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.328461885 CEST	8.8.8.8	192.168.2.5	0x3953	No error (0)	6vtgddddddddy999dddhdddddlghc.rslfn3xxw4zespusful6qzyhth.sluaknhbsoe.com		72.35.74.98	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.493421078 CEST	8.8.8.8	192.168.2.5	0x731d	No error (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com		4.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.493421078 CEST	8.8.8.8	192.168.2.5	0x731d	No error (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.493421078 CEST	8.8.8.8	192.168.2.5	0x731d	No error (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com		12.100.35.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.493421078 CEST	8.8.8.8	192.168.2.5	0x731d	No error (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com		16.53.82.84	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.493421078 CEST	8.8.8.8	192.168.2.5	0x731d	No error (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com		20.52.81.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.493421078 CEST	8.8.8.8	192.168.2.5	0x731d	No error (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com		24.90.86.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.493421078 CEST	8.8.8.8	192.168.2.5	0x731d	No error (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com		28.74.67.18	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.493421078 CEST	8.8.8.8	192.168.2.5	0x731d	No error (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com		32.92.93.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.493421078 CEST	8.8.8.8	192.168.2.5	0x731d	No error (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com		36.78.111.234	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.493421078 CEST	8.8.8.8	192.168.2.5	0x731d	No error (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com		40.200.110.129	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.493421078 CEST	8.8.8.8	192.168.2.5	0x731d	No error (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com		44.121.29.99	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.493421078 CEST	8.8.8.8	192.168.2.5	0x731d	No error (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com		48.235.87.91	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.493421078 CEST	8.8.8.8	192.168.2.5	0x731d	No error (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com		52.240.65.35	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.493421078 CEST	8.8.8.8	192.168.2.5	0x731d	No error (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com		56.79.30.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.493421078 CEST	8.8.8.8	192.168.2.5	0x731d	No error (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com		60.88.129.182	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.493421078 CEST	8.8.8.8	192.168.2.5	0x731d	No error (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com		64.99.92.131	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.493421078 CEST	8.8.8.8	192.168.2.5	0x731d	No error (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com		68.0.234.157	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.493421078 CEST	8.8.8.8	192.168.2.5	0x731d	No error (0)	6vtgdddjddddy999dddhdddddy2wm.zc9ttow9npizcj2oo4ej5do5vd.sluaknhbsoe.com		72.82.151.37	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.636955976 CEST	8.8.8.8	192.168.2.5	0xa187	No error (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com		4.0.0.96	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.636955976 CEST	8.8.8.8	192.168.2.5	0xa187	No error (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.636955976 CEST	8.8.8.8	192.168.2.5	0xa187	No error (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com		12.140.31.187	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.636955976 CEST	8.8.8.8	192.168.2.5	0xa187	No error (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com		16.3.204.116	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.636955976 CEST	8.8.8.8	192.168.2.5	0xa187	No error (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com		20.232.143.58	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.636955976 CEST	8.8.8.8	192.168.2.5	0xa187	No error (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com		24.160.171.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.636955976 CEST	8.8.8.8	192.168.2.5	0xa187	No error (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com		28.63.0.146	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.636955976 CEST	8.8.8.8	192.168.2.5	0xa187	No error (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com		32.96.39.14	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.636955976 CEST	8.8.8.8	192.168.2.5	0xa187	No error (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com		36.24.84.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.636955976 CEST	8.8.8.8	192.168.2.5	0xa187	No error (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com		40.233.116.4	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.636955976 CEST	8.8.8.8	192.168.2.5	0xa187	No error (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com		44.187.142.204	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.636955976 CEST	8.8.8.8	192.168.2.5	0xa187	No error (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com		48.69.251.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.636955976 CEST	8.8.8.8	192.168.2.5	0xa187	No error (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com		52.70.121.195	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.636955976 CEST	8.8.8.8	192.168.2.5	0xa187	No error (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com		56.9.250.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.636955976 CEST	8.8.8.8	192.168.2.5	0xa187	No error (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com		60.204.211.143	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.636955976 CEST	8.8.8.8	192.168.2.5	0xa187	No error (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com		64.80.232.238	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.636955976 CEST	8.8.8.8	192.168.2.5	0xa187	No error (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com		68.3.233.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.636955976 CEST	8.8.8.8	192.168.2.5	0xa187	No error (0)	6vtgdddqddddy999dddhdddddpaij.yc3n5w2vmg5xcw2g9lzfpeyyzk.sluaknhbsoe.com		72.25.218.37	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.773983955 CEST	8.8.8.8	192.168.2.5	0x5ce3	No error (0)	6vtgddd2ddddy999dddhdddddloij.m9aamelug3wlsoeqqxnhcoonzk.sluaknhbsoe.com		4.0.0.144	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.773983955 CEST	8.8.8.8	192.168.2.5	0x5ce3	No error (0)	6vtgddd2ddddy999dddhdddddloij.m9aamelug3wlsoeqqxnhcoonzk.sluaknhbsoe.com		8.0.0.42	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.773983955 CEST	8.8.8.8	192.168.2.5	0x5ce3	No error (0)	6vtgddd2ddddy999dddhdddddloij.m9aamelug3wlsoeqqxnhcoonzk.sluaknhbsoe.com		12.82.209.155	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.773983955 CEST	8.8.8.8	192.168.2.5	0x5ce3	No error (0)	6vtgddd2ddddy999dddhdddddloij.m9aamelug3wlsoeqqxnhcoonzk.sluaknhbsoe.com		16.107.230.98	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.773983955 CEST	8.8.8.8	192.168.2.5	0x5ce3	No error (0)	6vtgddd2ddddy999dddhdddddloij.m9aamelug3wlsoeqqxnhcoonzk.sluaknhbsoe.com		20.155.127.181	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.773983955 CEST	8.8.8.8	192.168.2.5	0x5ce3	No error (0)	6vtgddd2ddddy999dddhdddddloij.m9aamelug3wlsoeqqxnhcoonzk.sluaknhbsoe.com		24.28.151.230	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.773983955 CEST	8.8.8.8	192.168.2.5	0x5ce3	No error (0)	6vtgddd2ddddy999dddhdddddloij.m9aamelug3wlsoeqqxnhcoonzk.sluaknhbsoe.com		28.88.25.176	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.773983955 CEST	8.8.8.8	192.168.2.5	0x5ce3	No error (0)	6vtgddd2ddddy999dddhdddddloij.m9aamelug3wlsoeqqxnhcoonzk.sluaknhbsoe.com		32.254.138.23	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.773983955 CEST	8.8.8.8	192.168.2.5	0x5ce3	No error (0)	6vtgddd2ddddy999dddhdddddloij.m9aamelug3wlsoeqqxnhcoonzk.sluaknhbsoe.com		36.82.171.208	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.773983955 CEST	8.8.8.8	192.168.2.5	0x5ce3	No error (0)	6vtgddd2ddddy999dddhdddddloij.m9aamelug3wlsoeqqxnhcoonzk.sluaknhbsoe.com		40.198.255.103	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.773983955 CEST	8.8.8.8	192.168.2.5	0x5ce3	No error (0)	6vtgddd2ddddy999dddhdddddloij.m9aamelug3wlsoeqqxnhcoonzk.sluaknhbsoe.com		44.192.231.244	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.773983955 CEST	8.8.8.8	192.168.2.5	0x5ce3	No error (0)	6vtgddd2ddddy999dddhdddddloij.m9aamelug3wlsoeqqxnhcoonzk.sluaknhbsoe.com		48.141.71.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.773983955 CEST	8.8.8.8	192.168.2.5	0x5ce3	No error (0)	6vtgddd2ddddy999dddhdddddloij.m9aamelug3wlsoeqqxnhcoonzk.sluaknhbsoe.com		52.249.152.178	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.773983955 CEST	8.8.8.8	192.168.2.5	0x5ce3	No error (0)	6vtgddd2ddddy999dddhdddddloij.m9aamelug3wlsoeqqxnhcoonzk.sluaknhbsoe.com		56.253.156.57	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.773983955 CEST	8.8.8.8	192.168.2.5	0x5ce3	No error (0)	6vtgddd2ddddy999dddhdddddloij.m9aamelug3wlsoeqqxnhcoonzk.sluaknhbsoe.com		60.108.245.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.773983955 CEST	8.8.8.8	192.168.2.5	0x5ce3	No error (0)	6vtgddd2ddddy999dddhdddddloij.m9aamelug3wlsoeqqxnhcoonzk.sluaknhbsoe.com		64.41.183.160	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.917674065 CEST	8.8.8.8	192.168.2.5	0xf75b	No error (0)	6vtgddloddddy999dddhdddddpfxx.byjoxorguw3ac56fzehj92qu4k.sluaknhbsoe.com		4.0.0.186	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.917674065 CEST	8.8.8.8	192.168.2.5	0xf75b	No error (0)	6vtgddloddddy999dddhdddddpfxx.byjoxorguw3ac56fzehj92qu4k.sluaknhbsoe.com		8.0.0.36	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.917674065 CEST	8.8.8.8	192.168.2.5	0xf75b	No error (0)	6vtgddloddddy999dddhdddddpfxx.byjoxorguw3ac56fzehj92qu4k.sluaknhbsoe.com		12.126.134.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.917674065 CEST	8.8.8.8	192.168.2.5	0xf75b	No error (0)	6vtgddloddddy999dddhdddddpfxx.byjoxorguw3ac56fzehj92qu4k.sluaknhbsoe.com		16.77.175.65	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.917674065 CEST	8.8.8.8	192.168.2.5	0xf75b	No error (0)	6vtgddloddddy999dddhdddddpfxx.byjoxorguw3ac56fzehj92qu4k.sluaknhbsoe.com		20.25.145.164	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.917674065 CEST	8.8.8.8	192.168.2.5	0xf75b	No error (0)	6vtgddloddddy999dddhdddddpfxx.byjoxorguw3ac56fzehj92qu4k.sluaknhbsoe.com		24.230.158.47	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.917674065 CEST	8.8.8.8	192.168.2.5	0xf75b	No error (0)	6vtgddloddddy999dddhdddddpfxx.byjoxorguw3ac56fzehj92qu4k.sluaknhbsoe.com		28.151.89.76	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.917674065 CEST	8.8.8.8	192.168.2.5	0xf75b	No error (0)	6vtgddloddddy999dddhdddddpfxx.byjoxorguw3ac56fzehj92qu4k.sluaknhbsoe.com		32.224.112.21	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.917674065 CEST	8.8.8.8	192.168.2.5	0xf75b	No error (0)	6vtgddloddddy999dddhdddddpfxx.byjoxorguw3ac56fzehj92qu4k.sluaknhbsoe.com		36.223.150.99	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.917674065 CEST	8.8.8.8	192.168.2.5	0xf75b	No error (0)	6vtgddloddddy999dddhdddddpfxx.byjoxorguw3ac56fzehj92qu4k.sluaknhbsoe.com		40.170.86.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.917674065 CEST	8.8.8.8	192.168.2.5	0xf75b	No error (0)	6vtgddloddddy999dddhdddddpfxx.byjoxorguw3ac56fzehj92qu4k.sluaknhbsoe.com		44.85.15.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.917674065 CEST	8.8.8.8	192.168.2.5	0xf75b	No error (0)	6vtgddloddddy999dddhdddddpfxx.byjoxorguw3ac56fzehj92qu4k.sluaknhbsoe.com		48.62.46.75	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.917674065 CEST	8.8.8.8	192.168.2.5	0xf75b	No error (0)	6vtgddloddddy999dddhdddddpfxx.byjoxorguw3ac56fzehj92qu4k.sluaknhbsoe.com		52.119.77.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:55.917674065 CEST	8.8.8.8	192.168.2.5	0xf75b	No error (0)	6vtgddloddddy999dddhdddddpfxx.byjoxorguw3ac56fzehj92qu4k.sluaknhbsoe.com		56.255.255.204	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.070601940 CEST	8.8.8.8	192.168.2.5	0x5520	No error (0)	6vtgddpvddddy999dddhdddddddjn.fjp55udwucbpcehnz45pznu56h.sluaknhbsoe.com		4.0.0.222	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.070601940 CEST	8.8.8.8	192.168.2.5	0x5520	No error (0)	6vtgddpvddddy999dddhdddddddjn.fjp55udwucbpcehnz45pznu56h.sluaknhbsoe.com		8.0.0.30	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.070601940 CEST	8.8.8.8	192.168.2.5	0x5520	No error (0)	6vtgddpvddddy999dddhdddddddjn.fjp55udwucbpcehnz45pznu56h.sluaknhbsoe.com		12.160.73.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.070601940 CEST	8.8.8.8	192.168.2.5	0x5520	No error (0)	6vtgddpvddddy999dddhdddddddjn.fjp55udwucbpcehnz45pznu56h.sluaknhbsoe.com		16.243.50.247	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.070601940 CEST	8.8.8.8	192.168.2.5	0x5520	No error (0)	6vtgddpvddddy999dddhdddddddjn.fjp55udwucbpcehnz45pznu56h.sluaknhbsoe.com		20.187.128.101	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.070601940 CEST	8.8.8.8	192.168.2.5	0x5520	No error (0)	6vtgddpvddddy999dddhdddddddjn.fjp55udwucbpcehnz45pznu56h.sluaknhbsoe.com		24.56.79.103	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.070601940 CEST	8.8.8.8	192.168.2.5	0x5520	No error (0)	6vtgddpvddddy999dddhdddddddjn.fjp55udwucbpcehnz45pznu56h.sluaknhbsoe.com		28.244.102.26	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.070601940 CEST	8.8.8.8	192.168.2.5	0x5520	No error (0)	6vtgddpvddddy999dddhdddddddjn.fjp55udwucbpcehnz45pznu56h.sluaknhbsoe.com		32.82.130.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.070601940 CEST	8.8.8.8	192.168.2.5	0x5520	No error (0)	6vtgddpvddddy999dddhdddddddjn.fjp55udwucbpcehnz45pznu56h.sluaknhbsoe.com		36.166.121.228	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.070601940 CEST	8.8.8.8	192.168.2.5	0x5520	No error (0)	6vtgddpvddddy999dddhdddddddjn.fjp55udwucbpcehnz45pznu56h.sluaknhbsoe.com		40.60.50.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.070601940 CEST	8.8.8.8	192.168.2.5	0x5520	No error (0)	6vtgddpvddddy999dddhdddddddjn.fjp55udwucbpcehnz45pznu56h.sluaknhbsoe.com		44.62.251.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.070601940 CEST	8.8.8.8	192.168.2.5	0x5520	No error (0)	6vtgddpvddddy999dddhdddddddjn.fjp55udwucbpcehnz45pznu56h.sluaknhbsoe.com		48.82.109.47	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.207017899 CEST	8.8.8.8	192.168.2.5	0x2814	No error (0)	6vtgddy9ddddy999dddhdddddyajk.96zgy2mmf3zack2hlrip2yj3kd.sluaknhbsoe.com		4.0.0.252	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.207017899 CEST	8.8.8.8	192.168.2.5	0x2814	No error (0)	6vtgddy9ddddy999dddhdddddyajk.96zgy2mmf3zack2hlrip2yj3kd.sluaknhbsoe.com		8.0.0.24	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.207017899 CEST	8.8.8.8	192.168.2.5	0x2814	No error (0)	6vtgddy9ddddy999dddhdddddyajk.96zgy2mmf3zack2hlrip2yj3kd.sluaknhbsoe.com		12.124.68.163	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.207017899 CEST	8.8.8.8	192.168.2.5	0x2814	No error (0)	6vtgddy9ddddy999dddhdddddyajk.96zgy2mmf3zack2hlrip2yj3kd.sluaknhbsoe.com		16.144.44.29	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.207017899 CEST	8.8.8.8	192.168.2.5	0x2814	No error (0)	6vtgddy9ddddy999dddhdddddyajk.96zgy2mmf3zack2hlrip2yj3kd.sluaknhbsoe.com		20.159.31.177	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.207017899 CEST	8.8.8.8	192.168.2.5	0x2814	No error (0)	6vtgddy9ddddy999dddhdddddyajk.96zgy2mmf3zack2hlrip2yj3kd.sluaknhbsoe.com		24.195.88.111	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.207017899 CEST	8.8.8.8	192.168.2.5	0x2814	No error (0)	6vtgddy9ddddy999dddhdddddyajk.96zgy2mmf3zack2hlrip2yj3kd.sluaknhbsoe.com		28.125.98.13	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.207017899 CEST	8.8.8.8	192.168.2.5	0x2814	No error (0)	6vtgddy9ddddy999dddhdddddyajk.96zgy2mmf3zack2hlrip2yj3kd.sluaknhbsoe.com		32.9.204.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.207017899 CEST	8.8.8.8	192.168.2.5	0x2814	No error (0)	6vtgddy9ddddy999dddhdddddyajk.96zgy2mmf3zack2hlrip2yj3kd.sluaknhbsoe.com		36.186.136.2	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.207017899 CEST	8.8.8.8	192.168.2.5	0x2814	No error (0)	6vtgddy9ddddy999dddhdddddyajk.96zgy2mmf3zack2hlrip2yj3kd.sluaknhbsoe.com		40.68.157.216	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.442394972 CEST	8.8.8.8	192.168.2.5	0xbc33	No error (0)	6vtgddyhgdddy999dddhdddddyz4k.cog9d34uwngqsg2h9wzeinkz2c.sluaknhbsoe.com		4.0.1.20	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.442394972 CEST	8.8.8.8	192.168.2.5	0xbc33	No error (0)	6vtgddyhgdddy999dddhdddddyz4k.cog9d34uwngqsg2h9wzeinkz2c.sluaknhbsoe.com		8.0.0.18	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.442394972 CEST	8.8.8.8	192.168.2.5	0xbc33	No error (0)	6vtgddyhgdddy999dddhdddddyz4k.cog9d34uwngqsg2h9wzeinkz2c.sluaknhbsoe.com		12.121.251.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.442394972 CEST	8.8.8.8	192.168.2.5	0xbc33	No error (0)	6vtgddyhgdddy999dddhdddddyz4k.cog9d34uwngqsg2h9wzeinkz2c.sluaknhbsoe.com		16.18.128.200	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.442394972 CEST	8.8.8.8	192.168.2.5	0xbc33	No error (0)	6vtgddyhgdddy999dddhdddddyz4k.cog9d34uwngqsg2h9wzeinkz2c.sluaknhbsoe.com		20.129.227.202	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.442394972 CEST	8.8.8.8	192.168.2.5	0xbc33	No error (0)	6vtgddyhgdddy999dddhdddddyz4k.cog9d34uwngqsg2h9wzeinkz2c.sluaknhbsoe.com		24.241.45.57	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.442394972 CEST	8.8.8.8	192.168.2.5	0xbc33	No error (0)	6vtgddyhgdddy999dddhdddddyz4k.cog9d34uwngqsg2h9wzeinkz2c.sluaknhbsoe.com		28.245.105.107	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.442394972 CEST	8.8.8.8	192.168.2.5	0xbc33	No error (0)	6vtgddyhgdddy999dddhdddddyz4k.cog9d34uwngqsg2h9wzeinkz2c.sluaknhbsoe.com		32.192.75.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.579720020 CEST	8.8.8.8	192.168.2.5	0x4ff7	No error (0)	6vtgddpcgdddy999dddhdddddpeqh.lkql433gfg6wc6w63o4rqsnawh.sluaknhbsoe.com		4.0.1.38	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.579720020 CEST	8.8.8.8	192.168.2.5	0x4ff7	No error (0)	6vtgddpcgdddy999dddhdddddpeqh.lkql433gfg6wc6w63o4rqsnawh.sluaknhbsoe.com		8.0.0.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.579720020 CEST	8.8.8.8	192.168.2.5	0x4ff7	No error (0)	6vtgddpcgdddy999dddhdddddpeqh.lkql433gfg6wc6w63o4rqsnawh.sluaknhbsoe.com		12.212.116.233	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.579720020 CEST	8.8.8.8	192.168.2.5	0x4ff7	No error (0)	6vtgddpcgdddy999dddhdddddpeqh.lkql433gfg6wc6w63o4rqsnawh.sluaknhbsoe.com		16.140.58.141	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.579720020 CEST	8.8.8.8	192.168.2.5	0x4ff7	No error (0)	6vtgddpcgdddy999dddhdddddpeqh.lkql433gfg6wc6w63o4rqsnawh.sluaknhbsoe.com		20.226.195.205	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.579720020 CEST	8.8.8.8	192.168.2.5	0x4ff7	No error (0)	6vtgddpcgdddy999dddhdddddpeqh.lkql433gfg6wc6w63o4rqsnawh.sluaknhbsoe.com		24.242.43.139	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.579720020 CEST	8.8.8.8	192.168.2.5	0x4ff7	No error (0)	6vtgddpcgdddy999dddhdddddpeqh.lkql433gfg6wc6w63o4rqsnawh.sluaknhbsoe.com		28.230.198.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.712929010 CEST	8.8.8.8	192.168.2.5	0x91aa	No error (0)	6vtgddsjgdddy999dddhdddddpdpl.cpiv4kq4f22ss9epwfurm6btji.sluaknhbsoe.com		4.0.1.53	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.712929010 CEST	8.8.8.8	192.168.2.5	0x91aa	No error (0)	6vtgddsjgdddy999dddhdddddpdpl.cpiv4kq4f22ss9epwfurm6btji.sluaknhbsoe.com		8.0.0.12	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.712929010 CEST	8.8.8.8	192.168.2.5	0x91aa	No error (0)	6vtgddsjgdddy999dddhdddddpdpl.cpiv4kq4f22ss9epwfurm6btji.sluaknhbsoe.com		12.208.26.90	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.712929010 CEST	8.8.8.8	192.168.2.5	0x91aa	No error (0)	6vtgddsjgdddy999dddhdddddpdpl.cpiv4kq4f22ss9epwfurm6btji.sluaknhbsoe.com		16.162.92.138	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.712929010 CEST	8.8.8.8	192.168.2.5	0x91aa	No error (0)	6vtgddsjgdddy999dddhdddddpdpl.cpiv4kq4f22ss9epwfurm6btji.sluaknhbsoe.com		20.102.56.144	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.712929010 CEST	8.8.8.8	192.168.2.5	0x91aa	No error (0)	6vtgddsjgdddy999dddhdddddpdpl.cpiv4kq4f22ss9epwfurm6btji.sluaknhbsoe.com		24.60.27.51	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.852607012 CEST	8.8.8.8	192.168.2.5	0xa6c2	No error (0)	6vtgddclgdddy999dddhdddddy9yb.u3fpuydggyexcinugqsfdfiewi.sluaknhbsoe.com		4.0.1.65	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.852607012 CEST	8.8.8.8	192.168.2.5	0xa6c2	No error (0)	6vtgddclgdddy999dddhdddddy9yb.u3fpuydggyexcinugqsfdfiewi.sluaknhbsoe.com		8.0.0.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.852607012 CEST	8.8.8.8	192.168.2.5	0xa6c2	No error (0)	6vtgddclgdddy999dddhdddddy9yb.u3fpuydggyexcinugqsfdfiewi.sluaknhbsoe.com		12.42.91.2	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.852607012 CEST	8.8.8.8	192.168.2.5	0xa6c2	No error (0)	6vtgddclgdddy999dddhdddddy9yb.u3fpuydggyexcinugqsfdfiewi.sluaknhbsoe.com		16.223.226.42	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.852607012 CEST	8.8.8.8	192.168.2.5	0xa6c2	No error (0)	6vtgddclgdddy999dddhdddddy9yb.u3fpuydggyexcinugqsfdfiewi.sluaknhbsoe.com		20.40.99.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.993189096 CEST	8.8.8.8	192.168.2.5	0xa972	No error (0)	6vtgddlmgdddy999dddhdddddykbk.adjvyvgigykts3wy9ioczcikvj.sluaknhbsoe.com		4.0.1.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.993189096 CEST	8.8.8.8	192.168.2.5	0xa972	No error (0)	6vtgddlmgdddy999dddhdddddykbk.adjvyvgigykts3wy9ioczcikvj.sluaknhbsoe.com		8.0.0.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.993189096 CEST	8.8.8.8	192.168.2.5	0xa972	No error (0)	6vtgddlmgdddy999dddhdddddykbk.adjvyvgigykts3wy9ioczcikvj.sluaknhbsoe.com		12.147.245.111	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.993189096 CEST	8.8.8.8	192.168.2.5	0xa972	No error (0)	6vtgddlmgdddy999dddhdddddykbk.adjvyvgigykts3wy9ioczcikvj.sluaknhbsoe.com		16.131.198.234	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:56.993189096 CEST	8.8.8.8	192.168.2.5	0xa972	No error (0)	6vtgddlmgdddy999dddhdddddykbk.adjvyvgigykts3wy9ioczcikvj.sluaknhbsoe.com		20.184.246.24	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.127672911 CEST	8.8.8.8	192.168.2.5	0xaa45	No error (0)	6vtgddqngdddy999dddhdddddlvyq.jo4xd3xri5cosl6o69qnws26pk.sluaknhbsoe.com		4.0.1.83	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.127672911 CEST	8.8.8.8	192.168.2.5	0xaa45	No error (0)	6vtgddqngdddy999dddhdddddlvyq.jo4xd3xri5cosl6o69qnws26pk.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.127672911 CEST	8.8.8.8	192.168.2.5	0xaa45	No error (0)	6vtgddqngdddy999dddhdddddlvyq.jo4xd3xri5cosl6o69qnws26pk.sluaknhbsoe.com		12.63.102.218	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.127672911 CEST	8.8.8.8	192.168.2.5	0xaa45	No error (0)	6vtgddqngdddy999dddhdddddlvyq.jo4xd3xri5cosl6o69qnws26pk.sluaknhbsoe.com		16.206.198.82	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.255733013 CEST	8.8.8.8	192.168.2.5	0x2fd2	No error (0)	6vtgddcfgdddy999dddhdddddpdbc.taffthi3km4isr6tby4foal5kj.sluaknhbsoe.com		4.0.1.89	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.255733013 CEST	8.8.8.8	192.168.2.5	0x2fd2	No error (0)	6vtgddcfgdddy999dddhdddddpdbc.taffthi3km4isr6tby4foal5kj.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.255733013 CEST	8.8.8.8	192.168.2.5	0x2fd2	No error (0)	6vtgddcfgdddy999dddhdddddpdbc.taffthi3km4isr6tby4foal5kj.sluaknhbsoe.com		12.20.18.54	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.255733013 CEST	8.8.8.8	192.168.2.5	0x2fd2	No error (0)	6vtgddcfgdddy999dddhdddddpdbc.taffthi3km4isr6tby4foal5kj.sluaknhbsoe.com		16.232.239.240	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.394232988 CEST	8.8.8.8	192.168.2.5	0x8fea	No error (0)	6vtgdd4fgdddy999dddhdddddplkc.i62wsex9xh3vc2n9pnwtbqhtyj.sluaknhbsoe.com		4.0.1.95	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.394232988 CEST	8.8.8.8	192.168.2.5	0x8fea	No error (0)	6vtgdd4fgdddy999dddhdddddplkc.i62wsex9xh3vc2n9pnwtbqhtyj.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.394232988 CEST	8.8.8.8	192.168.2.5	0x8fea	No error (0)	6vtgdd4fgdddy999dddhdddddplkc.i62wsex9xh3vc2n9pnwtbqhtyj.sluaknhbsoe.com		12.251.181.212	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.394232988 CEST	8.8.8.8	192.168.2.5	0x8fea	No error (0)	6vtgdd4fgdddy999dddhdddddplkc.i62wsex9xh3vc2n9pnwtbqhtyj.sluaknhbsoe.com		16.226.48.94	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.534694910 CEST	8.8.8.8	192.168.2.5	0xce0f	No error (0)	6vtgddsqgdddy999dddhdddddymtl.4lrirpurbck6cwuoo5znuffoqj.sluaknhbsoe.com		4.0.1.101	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.534694910 CEST	8.8.8.8	192.168.2.5	0xce0f	No error (0)	6vtgddsqgdddy999dddhdddddymtl.4lrirpurbck6cwuoo5znuffoqj.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.534694910 CEST	8.8.8.8	192.168.2.5	0xce0f	No error (0)	6vtgddsqgdddy999dddhdddddymtl.4lrirpurbck6cwuoo5znuffoqj.sluaknhbsoe.com		12.107.80.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.681437016 CEST	8.8.8.8	192.168.2.5	0x4ccf	No error (0)	6vtgdddrgdddy999dddhdddddpmek.g2sx9dnzrky4sqegczzpo5fm9i.sluaknhbsoe.com		4.0.1.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.681437016 CEST	8.8.8.8	192.168.2.5	0x4ccf	No error (0)	6vtgdddrgdddy999dddhdddddpmek.g2sx9dnzrky4sqegczzpo5fm9i.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.681437016 CEST	8.8.8.8	192.168.2.5	0x4ccf	No error (0)	6vtgdddrgdddy999dddhdddddpmek.g2sx9dnzrky4sqegczzpo5fm9i.sluaknhbsoe.com		12.86.80.71	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.827776909 CEST	8.8.8.8	192.168.2.5	0x316b	No error (0)	6vtgddqrgdddy999dddhdddddd4jr.aax69ti6qen6ca6qpzkyb6seth.sluaknhbsoe.com		4.0.1.107	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.827776909 CEST	8.8.8.8	192.168.2.5	0x316b	No error (0)	6vtgddqrgdddy999dddhdddddd4jr.aax69ti6qen6ca6qpzkyb6seth.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.827776909 CEST	8.8.8.8	192.168.2.5	0x316b	No error (0)	6vtgddqrgdddy999dddhdddddd4jr.aax69ti6qen6ca6qpzkyb6seth.sluaknhbsoe.com		12.87.122.81	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.959407091 CEST	8.8.8.8	192.168.2.5	0xa9f	No error (0)	6vtgddprgdddy999dddhddddddeth.rap4j9b3ajqjs6hyewd2bfmfvd.sluaknhbsoe.com		4.0.1.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.959407091 CEST	8.8.8.8	192.168.2.5	0xa9f	No error (0)	6vtgddprgdddy999dddhddddddeth.rap4j9b3ajqjs6hyewd2bfmfvd.sluaknhbsoe.com		8.0.0.2	A (IP address)	IN (0x0001)
Apr 5, 2021 07:48:57.959407091 CEST	8.8.8.8	192.168.2.5	0xa9f	No error (0)	6vtgddprgdddy999dddhddddddeth.rap4j9b3ajqjs6hyewd2bfmfvd.sluaknhbsoe.com		12.94.69.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:49:08.119714022 CEST	8.8.8.8	192.168.2.5	0x9ca5	No error (0)	prda.aadg.msidentity.com	www.tm.a.prd.aadg.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Apr 5, 2021 07:50:24.223155022 CEST	8.8.8.8	192.168.2.5	0xf8fc	No error (0)	checkip.amazonaws.com	checkip.check-ip.aws.a2z.com		CNAME (Canonical name)	IN (0x0001)
Apr 5, 2021 07:50:24.223155022 CEST	8.8.8.8	192.168.2.5	0xf8fc	No error (0)	checkip.check-ip.aws.a2z.com	checkip.us-east-1.prod.check-ip.aws.a2z.com		CNAME (Canonical name)	IN (0x0001)
Apr 5, 2021 07:50:24.223155022 CEST	8.8.8.8	192.168.2.5	0xf8fc	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		52.20.197.7	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:24.223155022 CEST	8.8.8.8	192.168.2.5	0xf8fc	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		34.200.69.241	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:24.223155022 CEST	8.8.8.8	192.168.2.5	0xf8fc	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		3.224.94.38	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:24.223155022 CEST	8.8.8.8	192.168.2.5	0xf8fc	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		34.192.7.28	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:24.223155022 CEST	8.8.8.8	192.168.2.5	0xf8fc	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		3.211.138.232	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:24.223155022 CEST	8.8.8.8	192.168.2.5	0xf8fc	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		52.204.109.97	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:24.223155022 CEST	8.8.8.8	192.168.2.5	0xf8fc	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		3.222.126.94	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:24.223155022 CEST	8.8.8.8	192.168.2.5	0xf8fc	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		18.233.3.145	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:24.925251961 CEST	8.8.8.8	192.168.2.5	0x4e2d	No error (0)	sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:25.064423084 CEST	8.8.8.8	192.168.2.5	0x5c72	No error (0)	efkezwpdxpsq3lsdvnsccnqfuhj4.g5qndhshtlghjlpujhqrbvuuip.cc52icgjgfdelsc3ancaijdnacinun.2lihvdacjoibefwddrcdfptdhnifsnkncnd.lohchkwgdgdddygdddddyc2d.yyzoipktrpqicnwxz3hf4icrfg.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:25.194811106 CEST	8.8.8.8	192.168.2.5	0x5340	No error (0)	n22etjgnoygduy5r6dvhsoljcgllufdjcmrd2vs.qwglquhqiggr6hzqcgfew.gfsdxbcshs4jkgljufcjcgqj2esq.malljgcidzre22dccfejzf4dlvcs2.ucjcmldddcdzbwd.yyzoipktrpqicnwxz3hf4icrfg.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:25.337591887 CEST	8.8.8.8	192.168.2.5	0xa115	No error (0)	xlid32ljczrcjudcj3d62ypjlgldhzarylcw.yu5hqgncb3dc9dcdbkgddyds5hb.yyzoipktrpqicnwxz3hf4icrfg.sluaknhbsoe.com		193.224.53.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:25.463063955 CEST	8.8.8.8	192.168.2.5	0x70dd	No error (0)	b4tgdd496kddyddddddc9pd.2bzpyeldpf5qci6iuhrv44tg9i.sluaknhbsoe.com		239.255.255.255	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.589530945 CEST	8.8.8.8	192.168.2.5	0x2f71	No error (0)	b4tgdd496kddydddddd265d.5fvlomz9g2t6sjjvfg6nf4vmjh.sluaknhbsoe.com		65.99.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.730827093 CEST	8.8.8.8	192.168.2.5	0x7541	No error (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com		4.0.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.730827093 CEST	8.8.8.8	192.168.2.5	0x7541	No error (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.730827093 CEST	8.8.8.8	192.168.2.5	0x7541	No error (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com		12.98.88.72	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.730827093 CEST	8.8.8.8	192.168.2.5	0x7541	No error (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com		16.6.17.5	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.730827093 CEST	8.8.8.8	192.168.2.5	0x7541	No error (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com		20.67.15.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.730827093 CEST	8.8.8.8	192.168.2.5	0x7541	No error (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com		24.69.38.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.730827093 CEST	8.8.8.8	192.168.2.5	0x7541	No error (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com		28.93.66.80	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.730827093 CEST	8.8.8.8	192.168.2.5	0x7541	No error (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com		32.90.64.85	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.730827093 CEST	8.8.8.8	192.168.2.5	0x7541	No error (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com		36.75.127.4	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.730827093 CEST	8.8.8.8	192.168.2.5	0x7541	No error (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com		40.87.83.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.730827093 CEST	8.8.8.8	192.168.2.5	0x7541	No error (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com		44.87.84.66	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.730827093 CEST	8.8.8.8	192.168.2.5	0x7541	No error (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com		48.79.121.81	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.730827093 CEST	8.8.8.8	192.168.2.5	0x7541	No error (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com		52.34.55.83	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.730827093 CEST	8.8.8.8	192.168.2.5	0x7541	No error (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com		56.89.18.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.730827093 CEST	8.8.8.8	192.168.2.5	0x7541	No error (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com		60.33.25.117	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.730827093 CEST	8.8.8.8	192.168.2.5	0x7541	No error (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com		64.36.74.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.730827093 CEST	8.8.8.8	192.168.2.5	0x7541	No error (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com		68.85.40.77	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.730827093 CEST	8.8.8.8	192.168.2.5	0x7541	No error (0)	b4tgddddddddy999dddhdddddpiqr.jteukxy5rmqzcrupnseuugr3tk.sluaknhbsoe.com		72.35.74.98	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.852385998 CEST	8.8.8.8	192.168.2.5	0x3117	No error (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com		4.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.852385998 CEST	8.8.8.8	192.168.2.5	0x3117	No error (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.852385998 CEST	8.8.8.8	192.168.2.5	0x3117	No error (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com		12.100.35.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.852385998 CEST	8.8.8.8	192.168.2.5	0x3117	No error (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com		16.53.82.84	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.852385998 CEST	8.8.8.8	192.168.2.5	0x3117	No error (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com		20.52.81.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.852385998 CEST	8.8.8.8	192.168.2.5	0x3117	No error (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com		24.90.86.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.852385998 CEST	8.8.8.8	192.168.2.5	0x3117	No error (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com		28.74.42.100	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.852385998 CEST	8.8.8.8	192.168.2.5	0x3117	No error (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com		32.32.35.97	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.852385998 CEST	8.8.8.8	192.168.2.5	0x3117	No error (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com		36.6.39.49	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.852385998 CEST	8.8.8.8	192.168.2.5	0x3117	No error (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com		40.48.39.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.852385998 CEST	8.8.8.8	192.168.2.5	0x3117	No error (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com		44.54.33.55	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.852385998 CEST	8.8.8.8	192.168.2.5	0x3117	No error (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com		48.97.16.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.852385998 CEST	8.8.8.8	192.168.2.5	0x3117	No error (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com		52.35.48.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.852385998 CEST	8.8.8.8	192.168.2.5	0x3117	No error (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com		56.38.52.37	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.852385998 CEST	8.8.8.8	192.168.2.5	0x3117	No error (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com		60.15.43.38	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.852385998 CEST	8.8.8.8	192.168.2.5	0x3117	No error (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com		64.51.38.40	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.852385998 CEST	8.8.8.8	192.168.2.5	0x3117	No error (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com		68.15.86.93	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.852385998 CEST	8.8.8.8	192.168.2.5	0x3117	No error (0)	b4tgdddjddddy999dddhddddddrvj.4h4z3b6vdqkzckjcvifdxg25hi.sluaknhbsoe.com		72.24.108.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.985807896 CEST	8.8.8.8	192.168.2.5	0x1688	No error (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com		4.0.0.96	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.985807896 CEST	8.8.8.8	192.168.2.5	0x1688	No error (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.985807896 CEST	8.8.8.8	192.168.2.5	0x1688	No error (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com		12.120.238.223	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.985807896 CEST	8.8.8.8	192.168.2.5	0x1688	No error (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com		16.97.155.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.985807896 CEST	8.8.8.8	192.168.2.5	0x1688	No error (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com		20.11.48.152	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.985807896 CEST	8.8.8.8	192.168.2.5	0x1688	No error (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com		24.101.91.231	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.985807896 CEST	8.8.8.8	192.168.2.5	0x1688	No error (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com		28.82.34.89	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.985807896 CEST	8.8.8.8	192.168.2.5	0x1688	No error (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com		32.13.35.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.985807896 CEST	8.8.8.8	192.168.2.5	0x1688	No error (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com		36.143.164.115	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.985807896 CEST	8.8.8.8	192.168.2.5	0x1688	No error (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com		40.85.207.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.985807896 CEST	8.8.8.8	192.168.2.5	0x1688	No error (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com		44.235.216.49	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.985807896 CEST	8.8.8.8	192.168.2.5	0x1688	No error (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com		48.177.50.136	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.985807896 CEST	8.8.8.8	192.168.2.5	0x1688	No error (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com		52.8.180.25	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.985807896 CEST	8.8.8.8	192.168.2.5	0x1688	No error (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com		56.221.98.187	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.985807896 CEST	8.8.8.8	192.168.2.5	0x1688	No error (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com		60.252.8.160	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.985807896 CEST	8.8.8.8	192.168.2.5	0x1688	No error (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com		64.188.35.62	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.985807896 CEST	8.8.8.8	192.168.2.5	0x1688	No error (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com		68.22.129.76	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:28.985807896 CEST	8.8.8.8	192.168.2.5	0x1688	No error (0)	b4tgdddqddddy999dddhddddddijk.mduacydqxnfes264u2aqiffmbc.sluaknhbsoe.com		72.3.0.10	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.114720106 CEST	8.8.8.8	192.168.2.5	0x1e4c	No error (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com		4.0.0.144	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.114720106 CEST	8.8.8.8	192.168.2.5	0x1e4c	No error (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.114720106 CEST	8.8.8.8	192.168.2.5	0x1e4c	No error (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com		12.68.77.165	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.114720106 CEST	8.8.8.8	192.168.2.5	0x1e4c	No error (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com		16.48.5.254	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.114720106 CEST	8.8.8.8	192.168.2.5	0x1e4c	No error (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com		20.237.234.82	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.114720106 CEST	8.8.8.8	192.168.2.5	0x1e4c	No error (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com		24.255.58.73	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.114720106 CEST	8.8.8.8	192.168.2.5	0x1e4c	No error (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com		28.99.210.31	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.114720106 CEST	8.8.8.8	192.168.2.5	0x1e4c	No error (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com		32.169.29.254	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.114720106 CEST	8.8.8.8	192.168.2.5	0x1e4c	No error (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com		36.211.152.67	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.114720106 CEST	8.8.8.8	192.168.2.5	0x1e4c	No error (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com		40.233.248.16	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.114720106 CEST	8.8.8.8	192.168.2.5	0x1e4c	No error (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com		44.197.124.23	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.114720106 CEST	8.8.8.8	192.168.2.5	0x1e4c	No error (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com		48.200.53.91	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.114720106 CEST	8.8.8.8	192.168.2.5	0x1e4c	No error (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com		52.157.223.106	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.114720106 CEST	8.8.8.8	192.168.2.5	0x1e4c	No error (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com		56.163.1.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.114720106 CEST	8.8.8.8	192.168.2.5	0x1e4c	No error (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com		60.104.177.11	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.114720106 CEST	8.8.8.8	192.168.2.5	0x1e4c	No error (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com		64.152.252.73	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.114720106 CEST	8.8.8.8	192.168.2.5	0x1e4c	No error (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com		68.15.227.141	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.114720106 CEST	8.8.8.8	192.168.2.5	0x1e4c	No error (0)	b4tgddd2ddddy999dddhdddddlpcc.skhg95ahnhazsvufjs9pj5w6bb.sluaknhbsoe.com		72.184.23.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.241595984 CEST	8.8.8.8	192.168.2.5	0xdd2	No error (0)	b4tgdddpddddy999dddhdddddyism.vf629qyj3ylocmhq4xquq2cf3j.sluaknhbsoe.com		4.0.0.192	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.241595984 CEST	8.8.8.8	192.168.2.5	0xdd2	No error (0)	b4tgdddpddddy999dddhdddddyism.vf629qyj3ylocmhq4xquq2cf3j.sluaknhbsoe.com		8.0.0.39	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.241595984 CEST	8.8.8.8	192.168.2.5	0xdd2	No error (0)	b4tgdddpddddy999dddhdddddyism.vf629qyj3ylocmhq4xquq2cf3j.sluaknhbsoe.com		12.184.209.208	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.241595984 CEST	8.8.8.8	192.168.2.5	0xdd2	No error (0)	b4tgdddpddddy999dddhdddddyism.vf629qyj3ylocmhq4xquq2cf3j.sluaknhbsoe.com		16.236.75.228	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.241595984 CEST	8.8.8.8	192.168.2.5	0xdd2	No error (0)	b4tgdddpddddy999dddhdddddyism.vf629qyj3ylocmhq4xquq2cf3j.sluaknhbsoe.com		20.233.230.157	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.241595984 CEST	8.8.8.8	192.168.2.5	0xdd2	No error (0)	b4tgdddpddddy999dddhdddddyism.vf629qyj3ylocmhq4xquq2cf3j.sluaknhbsoe.com		24.78.74.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.241595984 CEST	8.8.8.8	192.168.2.5	0xdd2	No error (0)	b4tgdddpddddy999dddhdddddyism.vf629qyj3ylocmhq4xquq2cf3j.sluaknhbsoe.com		28.153.247.158	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.241595984 CEST	8.8.8.8	192.168.2.5	0xdd2	No error (0)	b4tgdddpddddy999dddhdddddyism.vf629qyj3ylocmhq4xquq2cf3j.sluaknhbsoe.com		32.186.46.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.241595984 CEST	8.8.8.8	192.168.2.5	0xdd2	No error (0)	b4tgdddpddddy999dddhdddddyism.vf629qyj3ylocmhq4xquq2cf3j.sluaknhbsoe.com		36.226.97.51	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.241595984 CEST	8.8.8.8	192.168.2.5	0xdd2	No error (0)	b4tgdddpddddy999dddhdddddyism.vf629qyj3ylocmhq4xquq2cf3j.sluaknhbsoe.com		40.166.182.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.241595984 CEST	8.8.8.8	192.168.2.5	0xdd2	No error (0)	b4tgdddpddddy999dddhdddddyism.vf629qyj3ylocmhq4xquq2cf3j.sluaknhbsoe.com		44.245.120.77	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.241595984 CEST	8.8.8.8	192.168.2.5	0xdd2	No error (0)	b4tgdddpddddy999dddhdddddyism.vf629qyj3ylocmhq4xquq2cf3j.sluaknhbsoe.com		48.184.82.24	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.241595984 CEST	8.8.8.8	192.168.2.5	0xdd2	No error (0)	b4tgdddpddddy999dddhdddddyism.vf629qyj3ylocmhq4xquq2cf3j.sluaknhbsoe.com		52.135.183.202	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.241595984 CEST	8.8.8.8	192.168.2.5	0xdd2	No error (0)	b4tgdddpddddy999dddhdddddyism.vf629qyj3ylocmhq4xquq2cf3j.sluaknhbsoe.com		56.186.33.133	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.241595984 CEST	8.8.8.8	192.168.2.5	0xdd2	No error (0)	b4tgdddpddddy999dddhdddddyism.vf629qyj3ylocmhq4xquq2cf3j.sluaknhbsoe.com		60.73.69.172	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.366774082 CEST	8.8.8.8	192.168.2.5	0x47bf	No error (0)	b4tgdd44ddddy999dddhdddddpeoj.c6namrxtvuzysbjaycteedpryk.sluaknhbsoe.com		4.0.0.231	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.366774082 CEST	8.8.8.8	192.168.2.5	0x47bf	No error (0)	b4tgdd44ddddy999dddhdddddpeoj.c6namrxtvuzysbjaycteedpryk.sluaknhbsoe.com		8.0.0.33	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.366774082 CEST	8.8.8.8	192.168.2.5	0x47bf	No error (0)	b4tgdd44ddddy999dddhdddddpeoj.c6namrxtvuzysbjaycteedpryk.sluaknhbsoe.com		12.52.20.154	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.366774082 CEST	8.8.8.8	192.168.2.5	0x47bf	No error (0)	b4tgdd44ddddy999dddhdddddpeoj.c6namrxtvuzysbjaycteedpryk.sluaknhbsoe.com		16.245.69.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.366774082 CEST	8.8.8.8	192.168.2.5	0x47bf	No error (0)	b4tgdd44ddddy999dddhdddddpeoj.c6namrxtvuzysbjaycteedpryk.sluaknhbsoe.com		20.82.82.90	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.366774082 CEST	8.8.8.8	192.168.2.5	0x47bf	No error (0)	b4tgdd44ddddy999dddhdddddpeoj.c6namrxtvuzysbjaycteedpryk.sluaknhbsoe.com		24.21.60.40	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.366774082 CEST	8.8.8.8	192.168.2.5	0x47bf	No error (0)	b4tgdd44ddddy999dddhdddddpeoj.c6namrxtvuzysbjaycteedpryk.sluaknhbsoe.com		28.125.56.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.366774082 CEST	8.8.8.8	192.168.2.5	0x47bf	No error (0)	b4tgdd44ddddy999dddhdddddpeoj.c6namrxtvuzysbjaycteedpryk.sluaknhbsoe.com		32.77.107.236	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.366774082 CEST	8.8.8.8	192.168.2.5	0x47bf	No error (0)	b4tgdd44ddddy999dddhdddddpeoj.c6namrxtvuzysbjaycteedpryk.sluaknhbsoe.com		36.254.218.179	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.366774082 CEST	8.8.8.8	192.168.2.5	0x47bf	No error (0)	b4tgdd44ddddy999dddhdddddpeoj.c6namrxtvuzysbjaycteedpryk.sluaknhbsoe.com		40.101.107.253	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.366774082 CEST	8.8.8.8	192.168.2.5	0x47bf	No error (0)	b4tgdd44ddddy999dddhdddddpeoj.c6namrxtvuzysbjaycteedpryk.sluaknhbsoe.com		44.32.231.178	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.366774082 CEST	8.8.8.8	192.168.2.5	0x47bf	No error (0)	b4tgdd44ddddy999dddhdddddpeoj.c6namrxtvuzysbjaycteedpryk.sluaknhbsoe.com		48.204.33.57	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.366774082 CEST	8.8.8.8	192.168.2.5	0x47bf	No error (0)	b4tgdd44ddddy999dddhdddddpeoj.c6namrxtvuzysbjaycteedpryk.sluaknhbsoe.com		52.10.4.210	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.493025064 CEST	8.8.8.8	192.168.2.5	0x2278	No error (0)	b4tgdddggdddy999dddhdddddpcvj.wxq4ylecj6m4coek2mslauz3gh.sluaknhbsoe.com		4.0.1.8	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.493025064 CEST	8.8.8.8	192.168.2.5	0x2278	No error (0)	b4tgdddggdddy999dddhdddddpcvj.wxq4ylecj6m4coek2mslauz3gh.sluaknhbsoe.com		8.0.0.27	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.493025064 CEST	8.8.8.8	192.168.2.5	0x2278	No error (0)	b4tgdddggdddy999dddhdddddpcvj.wxq4ylecj6m4coek2mslauz3gh.sluaknhbsoe.com		12.113.30.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.493025064 CEST	8.8.8.8	192.168.2.5	0x2278	No error (0)	b4tgdddggdddy999dddhdddddpcvj.wxq4ylecj6m4coek2mslauz3gh.sluaknhbsoe.com		16.141.12.183	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.493025064 CEST	8.8.8.8	192.168.2.5	0x2278	No error (0)	b4tgdddggdddy999dddhdddddpcvj.wxq4ylecj6m4coek2mslauz3gh.sluaknhbsoe.com		20.111.183.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.493025064 CEST	8.8.8.8	192.168.2.5	0x2278	No error (0)	b4tgdddggdddy999dddhdddddpcvj.wxq4ylecj6m4coek2mslauz3gh.sluaknhbsoe.com		24.0.1.41	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.493025064 CEST	8.8.8.8	192.168.2.5	0x2278	No error (0)	b4tgdddggdddy999dddhdddddpcvj.wxq4ylecj6m4coek2mslauz3gh.sluaknhbsoe.com		28.232.75.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.493025064 CEST	8.8.8.8	192.168.2.5	0x2278	No error (0)	b4tgdddggdddy999dddhdddddpcvj.wxq4ylecj6m4coek2mslauz3gh.sluaknhbsoe.com		32.126.3.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.493025064 CEST	8.8.8.8	192.168.2.5	0x2278	No error (0)	b4tgdddggdddy999dddhdddddpcvj.wxq4ylecj6m4coek2mslauz3gh.sluaknhbsoe.com		36.74.177.128	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.493025064 CEST	8.8.8.8	192.168.2.5	0x2278	No error (0)	b4tgdddggdddy999dddhdddddpcvj.wxq4ylecj6m4coek2mslauz3gh.sluaknhbsoe.com		40.37.81.219	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.493025064 CEST	8.8.8.8	192.168.2.5	0x2278	No error (0)	b4tgdddggdddy999dddhdddddpcvj.wxq4ylecj6m4coek2mslauz3gh.sluaknhbsoe.com		44.30.244.160	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.624169111 CEST	8.8.8.8	192.168.2.5	0xbc8f	No error (0)	b4tgddqcgdddy999dddhdddddpdog.hynr9mq3j3h5cqna3xqpz63mid.sluaknhbsoe.com		4.0.1.35	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.624169111 CEST	8.8.8.8	192.168.2.5	0xbc8f	No error (0)	b4tgddqcgdddy999dddhdddddpdog.hynr9mq3j3h5cqna3xqpz63mid.sluaknhbsoe.com		8.0.0.21	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.624169111 CEST	8.8.8.8	192.168.2.5	0xbc8f	No error (0)	b4tgddqcgdddy999dddhdddddpdog.hynr9mq3j3h5cqna3xqpz63mid.sluaknhbsoe.com		12.126.120.121	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.624169111 CEST	8.8.8.8	192.168.2.5	0xbc8f	No error (0)	b4tgddqcgdddy999dddhdddddpdog.hynr9mq3j3h5cqna3xqpz63mid.sluaknhbsoe.com		16.117.2.19	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.624169111 CEST	8.8.8.8	192.168.2.5	0xbc8f	No error (0)	b4tgddqcgdddy999dddhdddddpdog.hynr9mq3j3h5cqna3xqpz63mid.sluaknhbsoe.com		20.221.106.233	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.624169111 CEST	8.8.8.8	192.168.2.5	0xbc8f	No error (0)	b4tgddqcgdddy999dddhdddddpdog.hynr9mq3j3h5cqna3xqpz63mid.sluaknhbsoe.com		24.251.48.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.624169111 CEST	8.8.8.8	192.168.2.5	0xbc8f	No error (0)	b4tgddqcgdddy999dddhdddddpdog.hynr9mq3j3h5cqna3xqpz63mid.sluaknhbsoe.com		28.138.203.120	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.624169111 CEST	8.8.8.8	192.168.2.5	0xbc8f	No error (0)	b4tgddqcgdddy999dddhdddddpdog.hynr9mq3j3h5cqna3xqpz63mid.sluaknhbsoe.com		32.237.62.62	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.624169111 CEST	8.8.8.8	192.168.2.5	0xbc8f	No error (0)	b4tgddqcgdddy999dddhdddddpdog.hynr9mq3j3h5cqna3xqpz63mid.sluaknhbsoe.com		36.164.198.147	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.756289959 CEST	8.8.8.8	192.168.2.5	0x5040	No error (0)	b4tgdddkgdddy999dddhdddddystw.nz5deyfwdxlms5hz5beuytmfei.sluaknhbsoe.com		4.0.1.56	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.756289959 CEST	8.8.8.8	192.168.2.5	0x5040	No error (0)	b4tgdddkgdddy999dddhdddddystw.nz5deyfwdxlms5hz5beuytmfei.sluaknhbsoe.com		8.0.0.18	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.756289959 CEST	8.8.8.8	192.168.2.5	0x5040	No error (0)	b4tgdddkgdddy999dddhdddddystw.nz5deyfwdxlms5hz5beuytmfei.sluaknhbsoe.com		12.243.195.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.756289959 CEST	8.8.8.8	192.168.2.5	0x5040	No error (0)	b4tgdddkgdddy999dddhdddddystw.nz5deyfwdxlms5hz5beuytmfei.sluaknhbsoe.com		16.105.56.176	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.756289959 CEST	8.8.8.8	192.168.2.5	0x5040	No error (0)	b4tgdddkgdddy999dddhdddddystw.nz5deyfwdxlms5hz5beuytmfei.sluaknhbsoe.com		20.10.77.215	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.756289959 CEST	8.8.8.8	192.168.2.5	0x5040	No error (0)	b4tgdddkgdddy999dddhdddddystw.nz5deyfwdxlms5hz5beuytmfei.sluaknhbsoe.com		24.79.1.219	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.756289959 CEST	8.8.8.8	192.168.2.5	0x5040	No error (0)	b4tgdddkgdddy999dddhdddddystw.nz5deyfwdxlms5hz5beuytmfei.sluaknhbsoe.com		28.110.248.154	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.756289959 CEST	8.8.8.8	192.168.2.5	0x5040	No error (0)	b4tgdddkgdddy999dddhdddddystw.nz5deyfwdxlms5hz5beuytmfei.sluaknhbsoe.com		32.105.254.208	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.899141073 CEST	8.8.8.8	192.168.2.5	0x967c	No error (0)	b4tgddlmgdddy999dddhdddddybeh.pi5ngtmy2hzkcbel3gx54yz2nh.sluaknhbsoe.com		4.0.1.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.899141073 CEST	8.8.8.8	192.168.2.5	0x967c	No error (0)	b4tgddlmgdddy999dddhdddddybeh.pi5ngtmy2hzkcbel3gx54yz2nh.sluaknhbsoe.com		8.0.0.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.899141073 CEST	8.8.8.8	192.168.2.5	0x967c	No error (0)	b4tgddlmgdddy999dddhdddddybeh.pi5ngtmy2hzkcbel3gx54yz2nh.sluaknhbsoe.com		12.195.218.225	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.899141073 CEST	8.8.8.8	192.168.2.5	0x967c	No error (0)	b4tgddlmgdddy999dddhdddddybeh.pi5ngtmy2hzkcbel3gx54yz2nh.sluaknhbsoe.com		16.42.157.245	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.899141073 CEST	8.8.8.8	192.168.2.5	0x967c	No error (0)	b4tgddlmgdddy999dddhdddddybeh.pi5ngtmy2hzkcbel3gx54yz2nh.sluaknhbsoe.com		20.234.45.222	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.899141073 CEST	8.8.8.8	192.168.2.5	0x967c	No error (0)	b4tgddlmgdddy999dddhdddddybeh.pi5ngtmy2hzkcbel3gx54yz2nh.sluaknhbsoe.com		24.8.74.171	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:29.899141073 CEST	8.8.8.8	192.168.2.5	0x967c	No error (0)	b4tgddlmgdddy999dddhdddddybeh.pi5ngtmy2hzkcbel3gx54yz2nh.sluaknhbsoe.com		28.16.206.103	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.036253929 CEST	8.8.8.8	192.168.2.5	0x8125	No error (0)	b4tgddcfgdddy999dddhdddddyzkr.pcuntdnhowktchwrtl4zjmasoh.sluaknhbsoe.com		4.0.1.89	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.036253929 CEST	8.8.8.8	192.168.2.5	0x8125	No error (0)	b4tgddcfgdddy999dddhdddddyzkr.pcuntdnhowktchwrtl4zjmasoh.sluaknhbsoe.com		8.0.0.12	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.036253929 CEST	8.8.8.8	192.168.2.5	0x8125	No error (0)	b4tgddcfgdddy999dddhdddddyzkr.pcuntdnhowktchwrtl4zjmasoh.sluaknhbsoe.com		12.125.243.26	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.036253929 CEST	8.8.8.8	192.168.2.5	0x8125	No error (0)	b4tgddcfgdddy999dddhdddddyzkr.pcuntdnhowktchwrtl4zjmasoh.sluaknhbsoe.com		16.12.55.61	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.036253929 CEST	8.8.8.8	192.168.2.5	0x8125	No error (0)	b4tgddcfgdddy999dddhdddddyzkr.pcuntdnhowktchwrtl4zjmasoh.sluaknhbsoe.com		20.84.24.206	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.036253929 CEST	8.8.8.8	192.168.2.5	0x8125	No error (0)	b4tgddcfgdddy999dddhdddddyzkr.pcuntdnhowktchwrtl4zjmasoh.sluaknhbsoe.com		24.244.121.91	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.166996956 CEST	8.8.8.8	192.168.2.5	0x415f	No error (0)	b4tgddsqgdddy999dddhdddddpb5b.36aqozrooscbsahbpkpzoiqbii.sluaknhbsoe.com		4.0.1.101	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.166996956 CEST	8.8.8.8	192.168.2.5	0x415f	No error (0)	b4tgddsqgdddy999dddhdddddpb5b.36aqozrooscbsahbpkpzoiqbii.sluaknhbsoe.com		8.0.0.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.166996956 CEST	8.8.8.8	192.168.2.5	0x415f	No error (0)	b4tgddsqgdddy999dddhdddddpb5b.36aqozrooscbsahbpkpzoiqbii.sluaknhbsoe.com		12.81.1.132	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.166996956 CEST	8.8.8.8	192.168.2.5	0x415f	No error (0)	b4tgddsqgdddy999dddhdddddpb5b.36aqozrooscbsahbpkpzoiqbii.sluaknhbsoe.com		16.230.110.149	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.166996956 CEST	8.8.8.8	192.168.2.5	0x415f	No error (0)	b4tgddsqgdddy999dddhdddddpb5b.36aqozrooscbsahbpkpzoiqbii.sluaknhbsoe.com		20.213.198.156	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.294548035 CEST	8.8.8.8	192.168.2.5	0x6f15	No error (0)	b4tgddprgdddy999dddhdddddpqxg.e4lquweuedaack2grflu5q3gab.sluaknhbsoe.com		4.0.1.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.294548035 CEST	8.8.8.8	192.168.2.5	0x6f15	No error (0)	b4tgddprgdddy999dddhdddddpqxg.e4lquweuedaack2grflu5q3gab.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.294548035 CEST	8.8.8.8	192.168.2.5	0x6f15	No error (0)	b4tgddprgdddy999dddhdddddpqxg.e4lquweuedaack2grflu5q3gab.sluaknhbsoe.com		12.248.10.47	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.294548035 CEST	8.8.8.8	192.168.2.5	0x6f15	No error (0)	b4tgddprgdddy999dddhdddddpqxg.e4lquweuedaack2grflu5q3gab.sluaknhbsoe.com		16.111.150.138	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.423468113 CEST	8.8.8.8	192.168.2.5	0x9b59	No error (0)	b4tgddywgdddy999dddhdddddytwl.233e5jfky55kclnr4dymadymfj.sluaknhbsoe.com		4.0.1.116	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.423468113 CEST	8.8.8.8	192.168.2.5	0x9b59	No error (0)	b4tgddywgdddy999dddhdddddytwl.233e5jfky55kclnr4dymadymfj.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.423468113 CEST	8.8.8.8	192.168.2.5	0x9b59	No error (0)	b4tgddywgdddy999dddhdddddytwl.233e5jfky55kclnr4dymadymfj.sluaknhbsoe.com		12.199.23.119	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.423468113 CEST	8.8.8.8	192.168.2.5	0x9b59	No error (0)	b4tgddywgdddy999dddhdddddytwl.233e5jfky55kclnr4dymadymfj.sluaknhbsoe.com		16.52.33.236	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.551027060 CEST	8.8.8.8	192.168.2.5	0x5d9a	No error (0)	b4tgddlxgdddy999dddhdddddppdl.waxmtqa5jc43czwoikkjs9cpyg.sluaknhbsoe.com		4.0.1.122	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.551027060 CEST	8.8.8.8	192.168.2.5	0x5d9a	No error (0)	b4tgddlxgdddy999dddhdddddppdl.waxmtqa5jc43czwoikkjs9cpyg.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.551027060 CEST	8.8.8.8	192.168.2.5	0x5d9a	No error (0)	b4tgddlxgdddy999dddhdddddppdl.waxmtqa5jc43czwoikkjs9cpyg.sluaknhbsoe.com		12.248.255.225	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.551027060 CEST	8.8.8.8	192.168.2.5	0x5d9a	No error (0)	b4tgddlxgdddy999dddhdddddppdl.waxmtqa5jc43czwoikkjs9cpyg.sluaknhbsoe.com		16.164.194.177	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.679290056 CEST	8.8.8.8	192.168.2.5	0x4f4c	No error (0)	b4tgdddygdddy999dddhddddddixb.6pwsy4pexbcuc2wsneznbljdsd.sluaknhbsoe.com		4.0.1.128	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.679290056 CEST	8.8.8.8	192.168.2.5	0x4f4c	No error (0)	b4tgdddygdddy999dddhddddddixb.6pwsy4pexbcuc2wsneznbljdsd.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.679290056 CEST	8.8.8.8	192.168.2.5	0x4f4c	No error (0)	b4tgdddygdddy999dddhddddddixb.6pwsy4pexbcuc2wsneznbljdsd.sluaknhbsoe.com		12.67.108.107	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.805495024 CEST	8.8.8.8	192.168.2.5	0xd868	No error (0)	b4tgddqygdddy999dddhddddddffw.z5duhcnkcyofsqhbq3jszy46zi.sluaknhbsoe.com		4.0.1.131	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.805495024 CEST	8.8.8.8	192.168.2.5	0xd868	No error (0)	b4tgddqygdddy999dddhddddddffw.z5duhcnkcyofsqhbq3jszy46zi.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.805495024 CEST	8.8.8.8	192.168.2.5	0xd868	No error (0)	b4tgddqygdddy999dddhddddddffw.z5duhcnkcyofsqhbq3jszy46zi.sluaknhbsoe.com		12.71.87.87	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.932296038 CEST	8.8.8.8	192.168.2.5	0x6f87	No error (0)	b4tgddpygdddy999dddhdddddlssj.lzoor32orsgqcb6rehhyu6rsxk.sluaknhbsoe.com		4.0.1.134	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.932296038 CEST	8.8.8.8	192.168.2.5	0x6f87	No error (0)	b4tgddpygdddy999dddhdddddlssj.lzoor32orsgqcb6rehhyu6rsxk.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:30.932296038 CEST	8.8.8.8	192.168.2.5	0x6f87	No error (0)	b4tgddpygdddy999dddhdddddlssj.lzoor32orsgqcb6rehhyu6rsxk.sluaknhbsoe.com		12.70.84.123	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:31.074613094 CEST	8.8.8.8	192.168.2.5	0x42cb	No error (0)	b4tgddczgdddy999dddhddddddfur.dxexglwwuftac4uqnkxvisjvbd.sluaknhbsoe.com		4.0.1.137	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:31.074613094 CEST	8.8.8.8	192.168.2.5	0x42cb	No error (0)	b4tgddczgdddy999dddhddddddfur.dxexglwwuftac4uqnkxvisjvbd.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:31.074613094 CEST	8.8.8.8	192.168.2.5	0x42cb	No error (0)	b4tgddczgdddy999dddhddddddfur.dxexglwwuftac4uqnkxvisjvbd.sluaknhbsoe.com		12.94.95.76	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:31.201852083 CEST	8.8.8.8	192.168.2.5	0x4b84	No error (0)	b4tgddyzgdddy999dddhdddddlvxm.qjcreyljjknesmelbuw43evwgd.sluaknhbsoe.com		4.0.1.140	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:31.201852083 CEST	8.8.8.8	192.168.2.5	0x4b84	No error (0)	b4tgddyzgdddy999dddhdddddlvxm.qjcreyljjknesmelbuw43evwgd.sluaknhbsoe.com		8.0.0.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:31.201852083 CEST	8.8.8.8	192.168.2.5	0x4b84	No error (0)	b4tgddyzgdddy999dddhdddddlvxm.qjcreyljjknesmelbuw43evwgd.sluaknhbsoe.com		12.85.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:31.324754000 CEST	8.8.8.8	192.168.2.5	0x990c	No error (0)	efkezwpdxpsq3lsdvnsccnq.fuhj4g5qndhshtlghjlpujhqr.bvuuipcc52icgjgfdelsc3ancaijdna.cinun2lihvdacjoibefwddrcdfptdhnifsnkn.cndlohcdyddddpdddddd43jd.dobwitxawyf4spwnwhvz6tmgij.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:31.463577032 CEST	8.8.8.8	192.168.2.5	0x8213	No error (0)	zboscitfrhswgbdqgvv4guilxzqlhyy.qodql2edcoma4hypqipnhh.e4ihalhus5hulg6jllilar.whyqqolqlhpqctma22zyqhlndhvsiigllusrho.pgyumlirmql2y4gtdqnhdddgdzkm.dobwitxawyf4spwnwhvz6tmgij.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:32.524024010 CEST	8.8.8.8	192.168.2.5	0x602e	Server failure (2)	2gmqbzzidzacyoccugndhylqwb.chzbsrodfyhapcdakdgppmdddcy5tk.dobwitxawyf4spwnwhvz6tmgij.sluaknhbsoe.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:32.573987961 CEST	8.8.8.8	192.168.2.5	0x602e	No error (0)	2gmqbzzidzacyoccugndhylqwb.chzbsrodfyhapcdakdgppmdddcy5tk.dobwitxawyf4spwnwhvz6tmgij.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:32.652667999 CEST	8.8.8.8	192.168.2.5	0x8b68	No error (0)	2gmqbzzidzacyoccugndhylqwb.chzbsrodfyhapcdakdgppmdddcy5tk.dobwitxawyf4spwnwhvz6tmgij.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:32.779403925 CEST	8.8.8.8	192.168.2.5	0xcceb	No error (0)	xx2uvd496kddydddddd4ahg.uliso6ivgihysunz94o4vdawah.sluaknhbsoe.com		255.255.255.255	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:32.903371096 CEST	8.8.8.8	192.168.2.5	0x150a	No error (0)	efkezwpdxpsq3lsdvnsccnqf.uhj4g5qndhshtlghjlpujhqrbvu.uipcc52icgjgfdelsc3ancaijdnaci.nun2lihvdacjoibefwddrcdfptdhnifsnk.ncndlohcdyddddpddddddjmgd.zh2kdd2bgmzds9ewlc4gdg55eb.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:33.030544043 CEST	8.8.8.8	192.168.2.5	0x3cf6	No error (0)	zboscitfrhswgbdqgvv4guilxzqlhyyqod.ql2edcoma4hypqipnhhe4iha.lhus5hulg6jllilarwhyqqolqlhpqctma22zyqh.lndhvsiigllusrhopgyumlirmql2y4gtd.qdddcdmyyg.zh2kdd2bgmzds9ewlc4gdg55eb.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:33.178950071 CEST	8.8.8.8	192.168.2.5	0xbc1d	No error (0)	izqlhvlqqglqjg4igzryhydch.3vdzl4drviphsljjgl6gldjwhdddgpoej.zh2kdd2bgmzds9ewlc4gdg55eb.sluaknhbsoe.com		193.199.8.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:33.307231903 CEST	8.8.8.8	192.168.2.5	0x86ec	No error (0)	9plddd496kddyddddddjzsb.uaktlw99l25bs9emx4fvt2do3d.sluaknhbsoe.com		239.255.255.255	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.443885088 CEST	8.8.8.8	192.168.2.5	0xefba	No error (0)	9plddd496kddydddddd25ig.wutv23xal9oys92qszwcykmphb.sluaknhbsoe.com		65.99.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.569590092 CEST	8.8.8.8	192.168.2.5	0x6c2a	No error (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com		4.0.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.569590092 CEST	8.8.8.8	192.168.2.5	0x6c2a	No error (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.569590092 CEST	8.8.8.8	192.168.2.5	0x6c2a	No error (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com		12.98.88.72	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.569590092 CEST	8.8.8.8	192.168.2.5	0x6c2a	No error (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com		16.6.17.5	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.569590092 CEST	8.8.8.8	192.168.2.5	0x6c2a	No error (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com		20.67.15.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.569590092 CEST	8.8.8.8	192.168.2.5	0x6c2a	No error (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com		24.69.38.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.569590092 CEST	8.8.8.8	192.168.2.5	0x6c2a	No error (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com		28.93.66.80	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.569590092 CEST	8.8.8.8	192.168.2.5	0x6c2a	No error (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com		32.90.64.85	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.569590092 CEST	8.8.8.8	192.168.2.5	0x6c2a	No error (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com		36.75.127.4	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.569590092 CEST	8.8.8.8	192.168.2.5	0x6c2a	No error (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com		40.87.83.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.569590092 CEST	8.8.8.8	192.168.2.5	0x6c2a	No error (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com		44.87.84.66	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.569590092 CEST	8.8.8.8	192.168.2.5	0x6c2a	No error (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com		48.79.121.81	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.569590092 CEST	8.8.8.8	192.168.2.5	0x6c2a	No error (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com		52.34.55.83	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.569590092 CEST	8.8.8.8	192.168.2.5	0x6c2a	No error (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com		56.89.18.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.569590092 CEST	8.8.8.8	192.168.2.5	0x6c2a	No error (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com		60.33.25.117	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.569590092 CEST	8.8.8.8	192.168.2.5	0x6c2a	No error (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com		64.36.74.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.569590092 CEST	8.8.8.8	192.168.2.5	0x6c2a	No error (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com		68.85.40.77	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.569590092 CEST	8.8.8.8	192.168.2.5	0x6c2a	No error (0)	9pldddddddddy999dddhdddddl5qq.wkp3o5uammqtcojgatxxnzfluh.sluaknhbsoe.com		72.35.74.98	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.714118958 CEST	8.8.8.8	192.168.2.5	0x47e0	No error (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com		4.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.714118958 CEST	8.8.8.8	192.168.2.5	0x47e0	No error (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.714118958 CEST	8.8.8.8	192.168.2.5	0x47e0	No error (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com		12.100.35.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.714118958 CEST	8.8.8.8	192.168.2.5	0x47e0	No error (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com		16.53.82.84	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.714118958 CEST	8.8.8.8	192.168.2.5	0x47e0	No error (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com		20.52.81.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.714118958 CEST	8.8.8.8	192.168.2.5	0x47e0	No error (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com		24.90.86.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.714118958 CEST	8.8.8.8	192.168.2.5	0x47e0	No error (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com		28.74.42.100	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.714118958 CEST	8.8.8.8	192.168.2.5	0x47e0	No error (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com		32.32.35.97	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.714118958 CEST	8.8.8.8	192.168.2.5	0x47e0	No error (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com		36.6.39.49	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.714118958 CEST	8.8.8.8	192.168.2.5	0x47e0	No error (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com		40.48.39.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.714118958 CEST	8.8.8.8	192.168.2.5	0x47e0	No error (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com		44.54.33.55	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.714118958 CEST	8.8.8.8	192.168.2.5	0x47e0	No error (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com		48.97.16.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.714118958 CEST	8.8.8.8	192.168.2.5	0x47e0	No error (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com		52.35.48.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.714118958 CEST	8.8.8.8	192.168.2.5	0x47e0	No error (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com		56.38.52.37	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.714118958 CEST	8.8.8.8	192.168.2.5	0x47e0	No error (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com		60.15.43.38	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.714118958 CEST	8.8.8.8	192.168.2.5	0x47e0	No error (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com		64.51.38.40	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.714118958 CEST	8.8.8.8	192.168.2.5	0x47e0	No error (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com		68.15.86.93	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.714118958 CEST	8.8.8.8	192.168.2.5	0x47e0	No error (0)	9plddddjddddy999dddhdddddys6f.x4w5u2c6hu4ncq2ds3lsfoowlj.sluaknhbsoe.com		72.24.108.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.846776009 CEST	8.8.8.8	192.168.2.5	0xd23a	No error (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com		4.0.0.96	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.846776009 CEST	8.8.8.8	192.168.2.5	0xd23a	No error (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.846776009 CEST	8.8.8.8	192.168.2.5	0xd23a	No error (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com		12.120.238.223	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.846776009 CEST	8.8.8.8	192.168.2.5	0xd23a	No error (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com		16.97.155.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.846776009 CEST	8.8.8.8	192.168.2.5	0xd23a	No error (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com		20.11.48.152	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.846776009 CEST	8.8.8.8	192.168.2.5	0xd23a	No error (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com		24.101.91.231	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.846776009 CEST	8.8.8.8	192.168.2.5	0xd23a	No error (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com		28.82.34.89	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.846776009 CEST	8.8.8.8	192.168.2.5	0xd23a	No error (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com		32.13.35.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.846776009 CEST	8.8.8.8	192.168.2.5	0xd23a	No error (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com		36.143.164.115	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.846776009 CEST	8.8.8.8	192.168.2.5	0xd23a	No error (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com		40.85.207.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.846776009 CEST	8.8.8.8	192.168.2.5	0xd23a	No error (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com		44.235.216.49	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.846776009 CEST	8.8.8.8	192.168.2.5	0xd23a	No error (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com		48.177.50.136	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.846776009 CEST	8.8.8.8	192.168.2.5	0xd23a	No error (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com		52.8.180.25	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.846776009 CEST	8.8.8.8	192.168.2.5	0xd23a	No error (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com		56.221.98.187	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.846776009 CEST	8.8.8.8	192.168.2.5	0xd23a	No error (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com		60.252.8.160	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.846776009 CEST	8.8.8.8	192.168.2.5	0xd23a	No error (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com		64.188.35.62	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.846776009 CEST	8.8.8.8	192.168.2.5	0xd23a	No error (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com		68.22.129.76	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.846776009 CEST	8.8.8.8	192.168.2.5	0xd23a	No error (0)	9plddddqddddy999dddhdddddykdb.is5b2wg6pdgjc3hiwxesv2mxzi.sluaknhbsoe.com		72.3.0.10	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.986723900 CEST	8.8.8.8	192.168.2.5	0x8cb6	No error (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com		4.0.0.144	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.986723900 CEST	8.8.8.8	192.168.2.5	0x8cb6	No error (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.986723900 CEST	8.8.8.8	192.168.2.5	0x8cb6	No error (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com		12.68.77.165	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.986723900 CEST	8.8.8.8	192.168.2.5	0x8cb6	No error (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com		16.48.5.254	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.986723900 CEST	8.8.8.8	192.168.2.5	0x8cb6	No error (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com		20.237.234.82	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.986723900 CEST	8.8.8.8	192.168.2.5	0x8cb6	No error (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com		24.255.58.73	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.986723900 CEST	8.8.8.8	192.168.2.5	0x8cb6	No error (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com		28.99.210.31	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.986723900 CEST	8.8.8.8	192.168.2.5	0x8cb6	No error (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com		32.169.29.254	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.986723900 CEST	8.8.8.8	192.168.2.5	0x8cb6	No error (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com		36.211.152.67	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.986723900 CEST	8.8.8.8	192.168.2.5	0x8cb6	No error (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com		40.233.248.16	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.986723900 CEST	8.8.8.8	192.168.2.5	0x8cb6	No error (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com		44.197.124.23	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.986723900 CEST	8.8.8.8	192.168.2.5	0x8cb6	No error (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com		48.200.53.91	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.986723900 CEST	8.8.8.8	192.168.2.5	0x8cb6	No error (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com		52.157.223.106	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.986723900 CEST	8.8.8.8	192.168.2.5	0x8cb6	No error (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com		56.163.1.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.986723900 CEST	8.8.8.8	192.168.2.5	0x8cb6	No error (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com		60.104.177.11	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.986723900 CEST	8.8.8.8	192.168.2.5	0x8cb6	No error (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com		64.152.252.73	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.986723900 CEST	8.8.8.8	192.168.2.5	0x8cb6	No error (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com		68.15.227.141	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:36.986723900 CEST	8.8.8.8	192.168.2.5	0x8cb6	No error (0)	9pldddd2ddddy999dddhdddddpwdf.nzvwqfrqanmxsmhqcjwwgcczec.sluaknhbsoe.com		72.184.23.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.125103951 CEST	8.8.8.8	192.168.2.5	0x9221	No error (0)	9plddddpddddy999dddhdddddlz2b.xfy2sw3aulrgspj6deokfkkyyi.sluaknhbsoe.com		4.0.0.192	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.125103951 CEST	8.8.8.8	192.168.2.5	0x9221	No error (0)	9plddddpddddy999dddhdddddlz2b.xfy2sw3aulrgspj6deokfkkyyi.sluaknhbsoe.com		8.0.0.39	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.125103951 CEST	8.8.8.8	192.168.2.5	0x9221	No error (0)	9plddddpddddy999dddhdddddlz2b.xfy2sw3aulrgspj6deokfkkyyi.sluaknhbsoe.com		12.184.209.208	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.125103951 CEST	8.8.8.8	192.168.2.5	0x9221	No error (0)	9plddddpddddy999dddhdddddlz2b.xfy2sw3aulrgspj6deokfkkyyi.sluaknhbsoe.com		16.236.75.228	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.125103951 CEST	8.8.8.8	192.168.2.5	0x9221	No error (0)	9plddddpddddy999dddhdddddlz2b.xfy2sw3aulrgspj6deokfkkyyi.sluaknhbsoe.com		20.233.230.157	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.125103951 CEST	8.8.8.8	192.168.2.5	0x9221	No error (0)	9plddddpddddy999dddhdddddlz2b.xfy2sw3aulrgspj6deokfkkyyi.sluaknhbsoe.com		24.78.74.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.125103951 CEST	8.8.8.8	192.168.2.5	0x9221	No error (0)	9plddddpddddy999dddhdddddlz2b.xfy2sw3aulrgspj6deokfkkyyi.sluaknhbsoe.com		28.153.247.158	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.125103951 CEST	8.8.8.8	192.168.2.5	0x9221	No error (0)	9plddddpddddy999dddhdddddlz2b.xfy2sw3aulrgspj6deokfkkyyi.sluaknhbsoe.com		32.186.46.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.125103951 CEST	8.8.8.8	192.168.2.5	0x9221	No error (0)	9plddddpddddy999dddhdddddlz2b.xfy2sw3aulrgspj6deokfkkyyi.sluaknhbsoe.com		36.226.97.51	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.125103951 CEST	8.8.8.8	192.168.2.5	0x9221	No error (0)	9plddddpddddy999dddhdddddlz2b.xfy2sw3aulrgspj6deokfkkyyi.sluaknhbsoe.com		40.166.182.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.125103951 CEST	8.8.8.8	192.168.2.5	0x9221	No error (0)	9plddddpddddy999dddhdddddlz2b.xfy2sw3aulrgspj6deokfkkyyi.sluaknhbsoe.com		44.245.120.77	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.125103951 CEST	8.8.8.8	192.168.2.5	0x9221	No error (0)	9plddddpddddy999dddhdddddlz2b.xfy2sw3aulrgspj6deokfkkyyi.sluaknhbsoe.com		48.184.82.24	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.125103951 CEST	8.8.8.8	192.168.2.5	0x9221	No error (0)	9plddddpddddy999dddhdddddlz2b.xfy2sw3aulrgspj6deokfkkyyi.sluaknhbsoe.com		52.135.183.202	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.125103951 CEST	8.8.8.8	192.168.2.5	0x9221	No error (0)	9plddddpddddy999dddhdddddlz2b.xfy2sw3aulrgspj6deokfkkyyi.sluaknhbsoe.com		56.186.33.133	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.125103951 CEST	8.8.8.8	192.168.2.5	0x9221	No error (0)	9plddddpddddy999dddhdddddlz2b.xfy2sw3aulrgspj6deokfkkyyi.sluaknhbsoe.com		60.73.69.172	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.250722885 CEST	8.8.8.8	192.168.2.5	0xa8e5	No error (0)	9plddd44ddddy999dddhdddddy2id.ldfnhtzk6pjds4wvcqzm4g2leg.sluaknhbsoe.com		4.0.0.231	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.250722885 CEST	8.8.8.8	192.168.2.5	0xa8e5	No error (0)	9plddd44ddddy999dddhdddddy2id.ldfnhtzk6pjds4wvcqzm4g2leg.sluaknhbsoe.com		8.0.0.33	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.250722885 CEST	8.8.8.8	192.168.2.5	0xa8e5	No error (0)	9plddd44ddddy999dddhdddddy2id.ldfnhtzk6pjds4wvcqzm4g2leg.sluaknhbsoe.com		12.52.20.154	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.250722885 CEST	8.8.8.8	192.168.2.5	0xa8e5	No error (0)	9plddd44ddddy999dddhdddddy2id.ldfnhtzk6pjds4wvcqzm4g2leg.sluaknhbsoe.com		16.245.69.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.250722885 CEST	8.8.8.8	192.168.2.5	0xa8e5	No error (0)	9plddd44ddddy999dddhdddddy2id.ldfnhtzk6pjds4wvcqzm4g2leg.sluaknhbsoe.com		20.82.82.90	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.250722885 CEST	8.8.8.8	192.168.2.5	0xa8e5	No error (0)	9plddd44ddddy999dddhdddddy2id.ldfnhtzk6pjds4wvcqzm4g2leg.sluaknhbsoe.com		24.21.60.40	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.250722885 CEST	8.8.8.8	192.168.2.5	0xa8e5	No error (0)	9plddd44ddddy999dddhdddddy2id.ldfnhtzk6pjds4wvcqzm4g2leg.sluaknhbsoe.com		28.125.56.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.250722885 CEST	8.8.8.8	192.168.2.5	0xa8e5	No error (0)	9plddd44ddddy999dddhdddddy2id.ldfnhtzk6pjds4wvcqzm4g2leg.sluaknhbsoe.com		32.77.107.236	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.250722885 CEST	8.8.8.8	192.168.2.5	0xa8e5	No error (0)	9plddd44ddddy999dddhdddddy2id.ldfnhtzk6pjds4wvcqzm4g2leg.sluaknhbsoe.com		36.254.218.179	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.250722885 CEST	8.8.8.8	192.168.2.5	0xa8e5	No error (0)	9plddd44ddddy999dddhdddddy2id.ldfnhtzk6pjds4wvcqzm4g2leg.sluaknhbsoe.com		40.101.107.253	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.250722885 CEST	8.8.8.8	192.168.2.5	0xa8e5	No error (0)	9plddd44ddddy999dddhdddddy2id.ldfnhtzk6pjds4wvcqzm4g2leg.sluaknhbsoe.com		44.32.231.178	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.250722885 CEST	8.8.8.8	192.168.2.5	0xa8e5	No error (0)	9plddd44ddddy999dddhdddddy2id.ldfnhtzk6pjds4wvcqzm4g2leg.sluaknhbsoe.com		48.204.33.57	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.250722885 CEST	8.8.8.8	192.168.2.5	0xa8e5	No error (0)	9plddd44ddddy999dddhdddddy2id.ldfnhtzk6pjds4wvcqzm4g2leg.sluaknhbsoe.com		52.10.4.210	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.380445957 CEST	8.8.8.8	192.168.2.5	0x91ec	No error (0)	9plddddggdddy999dddhdddddlj2r.swc45z3skqrysdn9bactk2wdwg.sluaknhbsoe.com		4.0.1.8	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.380445957 CEST	8.8.8.8	192.168.2.5	0x91ec	No error (0)	9plddddggdddy999dddhdddddlj2r.swc45z3skqrysdn9bactk2wdwg.sluaknhbsoe.com		8.0.0.27	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.380445957 CEST	8.8.8.8	192.168.2.5	0x91ec	No error (0)	9plddddggdddy999dddhdddddlj2r.swc45z3skqrysdn9bactk2wdwg.sluaknhbsoe.com		12.113.30.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.380445957 CEST	8.8.8.8	192.168.2.5	0x91ec	No error (0)	9plddddggdddy999dddhdddddlj2r.swc45z3skqrysdn9bactk2wdwg.sluaknhbsoe.com		16.141.12.183	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.380445957 CEST	8.8.8.8	192.168.2.5	0x91ec	No error (0)	9plddddggdddy999dddhdddddlj2r.swc45z3skqrysdn9bactk2wdwg.sluaknhbsoe.com		20.111.183.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.380445957 CEST	8.8.8.8	192.168.2.5	0x91ec	No error (0)	9plddddggdddy999dddhdddddlj2r.swc45z3skqrysdn9bactk2wdwg.sluaknhbsoe.com		24.0.1.41	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.380445957 CEST	8.8.8.8	192.168.2.5	0x91ec	No error (0)	9plddddggdddy999dddhdddddlj2r.swc45z3skqrysdn9bactk2wdwg.sluaknhbsoe.com		28.232.75.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.380445957 CEST	8.8.8.8	192.168.2.5	0x91ec	No error (0)	9plddddggdddy999dddhdddddlj2r.swc45z3skqrysdn9bactk2wdwg.sluaknhbsoe.com		32.126.3.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.380445957 CEST	8.8.8.8	192.168.2.5	0x91ec	No error (0)	9plddddggdddy999dddhdddddlj2r.swc45z3skqrysdn9bactk2wdwg.sluaknhbsoe.com		36.74.177.128	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.380445957 CEST	8.8.8.8	192.168.2.5	0x91ec	No error (0)	9plddddggdddy999dddhdddddlj2r.swc45z3skqrysdn9bactk2wdwg.sluaknhbsoe.com		40.37.81.219	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.380445957 CEST	8.8.8.8	192.168.2.5	0x91ec	No error (0)	9plddddggdddy999dddhdddddlj2r.swc45z3skqrysdn9bactk2wdwg.sluaknhbsoe.com		44.30.244.160	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.507710934 CEST	8.8.8.8	192.168.2.5	0x8bb5	No error (0)	9pldddqcgdddy999dddhdddddptiw.mzy4irkums4hci2695qx5yo6wd.sluaknhbsoe.com		4.0.1.35	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.507710934 CEST	8.8.8.8	192.168.2.5	0x8bb5	No error (0)	9pldddqcgdddy999dddhdddddptiw.mzy4irkums4hci2695qx5yo6wd.sluaknhbsoe.com		8.0.0.21	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.507710934 CEST	8.8.8.8	192.168.2.5	0x8bb5	No error (0)	9pldddqcgdddy999dddhdddddptiw.mzy4irkums4hci2695qx5yo6wd.sluaknhbsoe.com		12.126.120.121	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.507710934 CEST	8.8.8.8	192.168.2.5	0x8bb5	No error (0)	9pldddqcgdddy999dddhdddddptiw.mzy4irkums4hci2695qx5yo6wd.sluaknhbsoe.com		16.117.2.19	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.507710934 CEST	8.8.8.8	192.168.2.5	0x8bb5	No error (0)	9pldddqcgdddy999dddhdddddptiw.mzy4irkums4hci2695qx5yo6wd.sluaknhbsoe.com		20.221.106.233	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.507710934 CEST	8.8.8.8	192.168.2.5	0x8bb5	No error (0)	9pldddqcgdddy999dddhdddddptiw.mzy4irkums4hci2695qx5yo6wd.sluaknhbsoe.com		24.251.48.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.507710934 CEST	8.8.8.8	192.168.2.5	0x8bb5	No error (0)	9pldddqcgdddy999dddhdddddptiw.mzy4irkums4hci2695qx5yo6wd.sluaknhbsoe.com		28.138.203.120	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.507710934 CEST	8.8.8.8	192.168.2.5	0x8bb5	No error (0)	9pldddqcgdddy999dddhdddddptiw.mzy4irkums4hci2695qx5yo6wd.sluaknhbsoe.com		32.237.62.62	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.507710934 CEST	8.8.8.8	192.168.2.5	0x8bb5	No error (0)	9pldddqcgdddy999dddhdddddptiw.mzy4irkums4hci2695qx5yo6wd.sluaknhbsoe.com		36.164.198.147	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.632886887 CEST	8.8.8.8	192.168.2.5	0xde76	No error (0)	9plddddkgdddy999dddhddddddk2g.qmfpmdukjmtyssuso439owrtkd.sluaknhbsoe.com		4.0.1.56	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.632886887 CEST	8.8.8.8	192.168.2.5	0xde76	No error (0)	9plddddkgdddy999dddhddddddk2g.qmfpmdukjmtyssuso439owrtkd.sluaknhbsoe.com		8.0.0.18	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.632886887 CEST	8.8.8.8	192.168.2.5	0xde76	No error (0)	9plddddkgdddy999dddhddddddk2g.qmfpmdukjmtyssuso439owrtkd.sluaknhbsoe.com		12.243.195.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.632886887 CEST	8.8.8.8	192.168.2.5	0xde76	No error (0)	9plddddkgdddy999dddhddddddk2g.qmfpmdukjmtyssuso439owrtkd.sluaknhbsoe.com		16.105.56.176	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.632886887 CEST	8.8.8.8	192.168.2.5	0xde76	No error (0)	9plddddkgdddy999dddhddddddk2g.qmfpmdukjmtyssuso439owrtkd.sluaknhbsoe.com		20.10.77.215	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.632886887 CEST	8.8.8.8	192.168.2.5	0xde76	No error (0)	9plddddkgdddy999dddhddddddk2g.qmfpmdukjmtyssuso439owrtkd.sluaknhbsoe.com		24.79.1.219	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.632886887 CEST	8.8.8.8	192.168.2.5	0xde76	No error (0)	9plddddkgdddy999dddhddddddk2g.qmfpmdukjmtyssuso439owrtkd.sluaknhbsoe.com		28.110.248.154	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.632886887 CEST	8.8.8.8	192.168.2.5	0xde76	No error (0)	9plddddkgdddy999dddhddddddk2g.qmfpmdukjmtyssuso439owrtkd.sluaknhbsoe.com		32.105.254.208	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.774983883 CEST	8.8.8.8	192.168.2.5	0x60a4	No error (0)	9pldddlmgdddy999dddhddddddv6l.n9tdulmmdzshsw24untj6g6olh.sluaknhbsoe.com		4.0.1.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.774983883 CEST	8.8.8.8	192.168.2.5	0x60a4	No error (0)	9pldddlmgdddy999dddhddddddv6l.n9tdulmmdzshsw24untj6g6olh.sluaknhbsoe.com		8.0.0.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.774983883 CEST	8.8.8.8	192.168.2.5	0x60a4	No error (0)	9pldddlmgdddy999dddhddddddv6l.n9tdulmmdzshsw24untj6g6olh.sluaknhbsoe.com		12.195.218.225	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.774983883 CEST	8.8.8.8	192.168.2.5	0x60a4	No error (0)	9pldddlmgdddy999dddhddddddv6l.n9tdulmmdzshsw24untj6g6olh.sluaknhbsoe.com		16.42.157.245	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.774983883 CEST	8.8.8.8	192.168.2.5	0x60a4	No error (0)	9pldddlmgdddy999dddhddddddv6l.n9tdulmmdzshsw24untj6g6olh.sluaknhbsoe.com		20.234.45.222	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.774983883 CEST	8.8.8.8	192.168.2.5	0x60a4	No error (0)	9pldddlmgdddy999dddhddddddv6l.n9tdulmmdzshsw24untj6g6olh.sluaknhbsoe.com		24.8.74.171	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.774983883 CEST	8.8.8.8	192.168.2.5	0x60a4	No error (0)	9pldddlmgdddy999dddhddddddv6l.n9tdulmmdzshsw24untj6g6olh.sluaknhbsoe.com		28.16.206.103	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.899321079 CEST	8.8.8.8	192.168.2.5	0xad8f	No error (0)	9pldddcfgdddy999dddhddddddxjf.m6q4kshtxoq2sehrg64e2otxzb.sluaknhbsoe.com		4.0.1.89	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.899321079 CEST	8.8.8.8	192.168.2.5	0xad8f	No error (0)	9pldddcfgdddy999dddhddddddxjf.m6q4kshtxoq2sehrg64e2otxzb.sluaknhbsoe.com		8.0.0.12	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.899321079 CEST	8.8.8.8	192.168.2.5	0xad8f	No error (0)	9pldddcfgdddy999dddhddddddxjf.m6q4kshtxoq2sehrg64e2otxzb.sluaknhbsoe.com		12.125.243.26	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.899321079 CEST	8.8.8.8	192.168.2.5	0xad8f	No error (0)	9pldddcfgdddy999dddhddddddxjf.m6q4kshtxoq2sehrg64e2otxzb.sluaknhbsoe.com		16.12.55.61	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.899321079 CEST	8.8.8.8	192.168.2.5	0xad8f	No error (0)	9pldddcfgdddy999dddhddddddxjf.m6q4kshtxoq2sehrg64e2otxzb.sluaknhbsoe.com		20.84.24.206	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:37.899321079 CEST	8.8.8.8	192.168.2.5	0xad8f	No error (0)	9pldddcfgdddy999dddhddddddxjf.m6q4kshtxoq2sehrg64e2otxzb.sluaknhbsoe.com		24.244.121.91	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.043540955 CEST	8.8.8.8	192.168.2.5	0x7784	No error (0)	9pldddsqgdddy999dddhdddddl6yx.lu2b5aasjdizcb2wrrl3q9vjac.sluaknhbsoe.com		4.0.1.101	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.043540955 CEST	8.8.8.8	192.168.2.5	0x7784	No error (0)	9pldddsqgdddy999dddhdddddl6yx.lu2b5aasjdizcb2wrrl3q9vjac.sluaknhbsoe.com		8.0.0.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.043540955 CEST	8.8.8.8	192.168.2.5	0x7784	No error (0)	9pldddsqgdddy999dddhdddddl6yx.lu2b5aasjdizcb2wrrl3q9vjac.sluaknhbsoe.com		12.81.1.132	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.043540955 CEST	8.8.8.8	192.168.2.5	0x7784	No error (0)	9pldddsqgdddy999dddhdddddl6yx.lu2b5aasjdizcb2wrrl3q9vjac.sluaknhbsoe.com		16.230.110.149	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.043540955 CEST	8.8.8.8	192.168.2.5	0x7784	No error (0)	9pldddsqgdddy999dddhdddddl6yx.lu2b5aasjdizcb2wrrl3q9vjac.sluaknhbsoe.com		20.213.198.156	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.169931889 CEST	8.8.8.8	192.168.2.5	0x73e8	No error (0)	9pldddprgdddy999dddhdddddydjr.6q9aagez63qrcu62zwfeqy3sub.sluaknhbsoe.com		4.0.1.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.169931889 CEST	8.8.8.8	192.168.2.5	0x73e8	No error (0)	9pldddprgdddy999dddhdddddydjr.6q9aagez63qrcu62zwfeqy3sub.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.169931889 CEST	8.8.8.8	192.168.2.5	0x73e8	No error (0)	9pldddprgdddy999dddhdddddydjr.6q9aagez63qrcu62zwfeqy3sub.sluaknhbsoe.com		12.248.10.47	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.169931889 CEST	8.8.8.8	192.168.2.5	0x73e8	No error (0)	9pldddprgdddy999dddhdddddydjr.6q9aagez63qrcu62zwfeqy3sub.sluaknhbsoe.com		16.111.150.138	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.297965050 CEST	8.8.8.8	192.168.2.5	0x3844	No error (0)	9pldddywgdddy999dddhdddddlphf.ek6mhkhossxfsmnixixa2qonpb.sluaknhbsoe.com		4.0.1.116	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.297965050 CEST	8.8.8.8	192.168.2.5	0x3844	No error (0)	9pldddywgdddy999dddhdddddlphf.ek6mhkhossxfsmnixixa2qonpb.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.297965050 CEST	8.8.8.8	192.168.2.5	0x3844	No error (0)	9pldddywgdddy999dddhdddddlphf.ek6mhkhossxfsmnixixa2qonpb.sluaknhbsoe.com		12.199.23.119	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.297965050 CEST	8.8.8.8	192.168.2.5	0x3844	No error (0)	9pldddywgdddy999dddhdddddlphf.ek6mhkhossxfsmnixixa2qonpb.sluaknhbsoe.com		16.52.33.236	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.440769911 CEST	8.8.8.8	192.168.2.5	0xf691	No error (0)	9pldddlxgdddy999dddhdddddp3eb.dqhfv2j26lg5cy264byd32bsbk.sluaknhbsoe.com		4.0.1.122	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.440769911 CEST	8.8.8.8	192.168.2.5	0xf691	No error (0)	9pldddlxgdddy999dddhdddddp3eb.dqhfv2j26lg5cy264byd32bsbk.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.440769911 CEST	8.8.8.8	192.168.2.5	0xf691	No error (0)	9pldddlxgdddy999dddhdddddp3eb.dqhfv2j26lg5cy264byd32bsbk.sluaknhbsoe.com		12.248.255.225	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.440769911 CEST	8.8.8.8	192.168.2.5	0xf691	No error (0)	9pldddlxgdddy999dddhdddddp3eb.dqhfv2j26lg5cy264byd32bsbk.sluaknhbsoe.com		16.164.194.177	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.571743965 CEST	8.8.8.8	192.168.2.5	0x9b9d	No error (0)	9plddddygdddy999dddhdddddpouf.tekf3etazr5qsqnv29q6vwb3ab.sluaknhbsoe.com		4.0.1.128	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.571743965 CEST	8.8.8.8	192.168.2.5	0x9b9d	No error (0)	9plddddygdddy999dddhdddddpouf.tekf3etazr5qsqnv29q6vwb3ab.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.571743965 CEST	8.8.8.8	192.168.2.5	0x9b9d	No error (0)	9plddddygdddy999dddhdddddpouf.tekf3etazr5qsqnv29q6vwb3ab.sluaknhbsoe.com		12.67.108.107	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.695585966 CEST	8.8.8.8	192.168.2.5	0x68c4	No error (0)	9pldddqygdddy999dddhdddddyyjg.lbw6xkbpmyo2skw2ptrf6ei3fk.sluaknhbsoe.com		4.0.1.131	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.695585966 CEST	8.8.8.8	192.168.2.5	0x68c4	No error (0)	9pldddqygdddy999dddhdddddyyjg.lbw6xkbpmyo2skw2ptrf6ei3fk.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.695585966 CEST	8.8.8.8	192.168.2.5	0x68c4	No error (0)	9pldddqygdddy999dddhdddddyyjg.lbw6xkbpmyo2skw2ptrf6ei3fk.sluaknhbsoe.com		12.71.87.87	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.836205006 CEST	8.8.8.8	192.168.2.5	0x98d1	No error (0)	9pldddpygdddy999dddhdddddpyrx.qatwix2rvj9ocb2zwain5kdijk.sluaknhbsoe.com		4.0.1.134	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.836205006 CEST	8.8.8.8	192.168.2.5	0x98d1	No error (0)	9pldddpygdddy999dddhdddddpyrx.qatwix2rvj9ocb2zwain5kdijk.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.836205006 CEST	8.8.8.8	192.168.2.5	0x98d1	No error (0)	9pldddpygdddy999dddhdddddpyrx.qatwix2rvj9ocb2zwain5kdijk.sluaknhbsoe.com		12.70.84.123	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.961524963 CEST	8.8.8.8	192.168.2.5	0xd645	No error (0)	9pldddczgdddy999dddhdddddl66c.4rikdsq6btancwef3jj34yx9xj.sluaknhbsoe.com		4.0.1.137	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.961524963 CEST	8.8.8.8	192.168.2.5	0xd645	No error (0)	9pldddczgdddy999dddhdddddl66c.4rikdsq6btancwef3jj34yx9xj.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:38.961524963 CEST	8.8.8.8	192.168.2.5	0xd645	No error (0)	9pldddczgdddy999dddhdddddl66c.4rikdsq6btancwef3jj34yx9xj.sluaknhbsoe.com		12.94.95.76	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:39.087512970 CEST	8.8.8.8	192.168.2.5	0x2bc6	No error (0)	9pldddyzgdddy999dddhdddddl55q.xtc34ow4jyiysghm6s5r3fdg2c.sluaknhbsoe.com		4.0.1.140	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:39.087512970 CEST	8.8.8.8	192.168.2.5	0x2bc6	No error (0)	9pldddyzgdddy999dddhdddddl55q.xtc34ow4jyiysghm6s5r3fdg2c.sluaknhbsoe.com		8.0.0.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:39.087512970 CEST	8.8.8.8	192.168.2.5	0x2bc6	No error (0)	9pldddyzgdddy999dddhdddddl55q.xtc34ow4jyiysghm6s5r3fdg2c.sluaknhbsoe.com		12.85.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:39.215938091 CEST	8.8.8.8	192.168.2.5	0x6c0c	No error (0)	efkezwpdxpsq3lsdvnsccnqf.uhj4g5qndhshtlghjlpujhqrbvuui.pcc52icgjgfdelsc3anca.ijdnacinun2lihvdacjoibef.wddrcdfptdhnifsnkncnddgdddygddddd2drd.4l66nxnqtu22sgjbc2zhnjwx9i.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:39.345330000 CEST	8.8.8.8	192.168.2.5	0xc0ac	No error (0)	detdzpzfn22etjgnoygduy5.r6dvhsoljcgllufdjcmrd2vsqwglq.uhqiggr6hzqcgfewgfsdxbcshs4jkgljuf.cjcgqj2esqmalljgcidzre.22dccfejzf4dlvcdddcddv4g.4l66nxnqtu22sgjbc2zhnjwx9i.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:39.482134104 CEST	8.8.8.8	192.168.2.5	0xe94b	No error (0)	nmfhb2ccxlid32ljczrcjudcj3d62yp.jlgldhzarylcwyu5hqgncb3dc9dcdbkgddydqxeb.4l66nxnqtu22sgjbc2zhnjwx9i.sluaknhbsoe.com		65.225.53.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:39.610459089 CEST	8.8.8.8	192.168.2.5	0x6378	No error (0)	i4tgdd496kddyddddddqbmd.k2b5ciso9f9lsh2kpjlj32kqhk.sluaknhbsoe.com		239.255.255.255	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.737675905 CEST	8.8.8.8	192.168.2.5	0xfca3	No error (0)	i4tgdd496kddydddddduxog.fztsnxzmzuu9cnuib6lg5fzaxd.sluaknhbsoe.com		65.99.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.869596958 CEST	8.8.8.8	192.168.2.5	0x6928	No error (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com		4.0.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.869596958 CEST	8.8.8.8	192.168.2.5	0x6928	No error (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.869596958 CEST	8.8.8.8	192.168.2.5	0x6928	No error (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com		12.98.88.72	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.869596958 CEST	8.8.8.8	192.168.2.5	0x6928	No error (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com		16.6.17.5	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.869596958 CEST	8.8.8.8	192.168.2.5	0x6928	No error (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com		20.67.15.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.869596958 CEST	8.8.8.8	192.168.2.5	0x6928	No error (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com		24.69.38.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.869596958 CEST	8.8.8.8	192.168.2.5	0x6928	No error (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com		28.93.66.80	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.869596958 CEST	8.8.8.8	192.168.2.5	0x6928	No error (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com		32.90.64.85	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.869596958 CEST	8.8.8.8	192.168.2.5	0x6928	No error (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com		36.75.127.4	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.869596958 CEST	8.8.8.8	192.168.2.5	0x6928	No error (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com		40.87.83.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.869596958 CEST	8.8.8.8	192.168.2.5	0x6928	No error (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com		44.87.84.66	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.869596958 CEST	8.8.8.8	192.168.2.5	0x6928	No error (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com		48.79.121.81	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.869596958 CEST	8.8.8.8	192.168.2.5	0x6928	No error (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com		52.34.55.83	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.869596958 CEST	8.8.8.8	192.168.2.5	0x6928	No error (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com		56.89.18.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.869596958 CEST	8.8.8.8	192.168.2.5	0x6928	No error (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com		60.33.25.117	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.869596958 CEST	8.8.8.8	192.168.2.5	0x6928	No error (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com		64.36.74.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.869596958 CEST	8.8.8.8	192.168.2.5	0x6928	No error (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com		68.85.40.77	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:42.869596958 CEST	8.8.8.8	192.168.2.5	0x6928	No error (0)	i4tgddddddddy999dddhdddddljvw.apz2losl4khqcrwcrof4tnvxwk.sluaknhbsoe.com		72.35.74.98	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.085522890 CEST	8.8.8.8	192.168.2.5	0x2e16	No error (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com		4.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.085522890 CEST	8.8.8.8	192.168.2.5	0x2e16	No error (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.085522890 CEST	8.8.8.8	192.168.2.5	0x2e16	No error (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com		12.100.35.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.085522890 CEST	8.8.8.8	192.168.2.5	0x2e16	No error (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com		16.53.82.84	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.085522890 CEST	8.8.8.8	192.168.2.5	0x2e16	No error (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com		20.52.81.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.085522890 CEST	8.8.8.8	192.168.2.5	0x2e16	No error (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com		24.90.86.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.085522890 CEST	8.8.8.8	192.168.2.5	0x2e16	No error (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com		28.74.42.100	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.085522890 CEST	8.8.8.8	192.168.2.5	0x2e16	No error (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com		32.32.35.97	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.085522890 CEST	8.8.8.8	192.168.2.5	0x2e16	No error (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com		36.6.39.49	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.085522890 CEST	8.8.8.8	192.168.2.5	0x2e16	No error (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com		40.48.39.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.085522890 CEST	8.8.8.8	192.168.2.5	0x2e16	No error (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com		44.54.33.55	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.085522890 CEST	8.8.8.8	192.168.2.5	0x2e16	No error (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com		48.97.16.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.085522890 CEST	8.8.8.8	192.168.2.5	0x2e16	No error (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com		52.35.48.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.085522890 CEST	8.8.8.8	192.168.2.5	0x2e16	No error (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com		56.38.52.37	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.085522890 CEST	8.8.8.8	192.168.2.5	0x2e16	No error (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com		60.15.43.38	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.085522890 CEST	8.8.8.8	192.168.2.5	0x2e16	No error (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com		64.51.38.40	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.085522890 CEST	8.8.8.8	192.168.2.5	0x2e16	No error (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com		68.15.86.93	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.085522890 CEST	8.8.8.8	192.168.2.5	0x2e16	No error (0)	i4tgdddjddddy999dddhdddddppeg.epiyro6xbaafco2o53y3svivmd.sluaknhbsoe.com		72.24.108.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.217602015 CEST	8.8.8.8	192.168.2.5	0x52dc	No error (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com		4.0.0.96	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.217602015 CEST	8.8.8.8	192.168.2.5	0x52dc	No error (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.217602015 CEST	8.8.8.8	192.168.2.5	0x52dc	No error (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com		12.120.238.223	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.217602015 CEST	8.8.8.8	192.168.2.5	0x52dc	No error (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com		16.97.155.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.217602015 CEST	8.8.8.8	192.168.2.5	0x52dc	No error (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com		20.11.48.152	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.217602015 CEST	8.8.8.8	192.168.2.5	0x52dc	No error (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com		24.101.91.231	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.217602015 CEST	8.8.8.8	192.168.2.5	0x52dc	No error (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com		28.82.34.89	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.217602015 CEST	8.8.8.8	192.168.2.5	0x52dc	No error (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com		32.13.35.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.217602015 CEST	8.8.8.8	192.168.2.5	0x52dc	No error (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com		36.143.164.115	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.217602015 CEST	8.8.8.8	192.168.2.5	0x52dc	No error (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com		40.85.207.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.217602015 CEST	8.8.8.8	192.168.2.5	0x52dc	No error (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com		44.235.216.49	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.217602015 CEST	8.8.8.8	192.168.2.5	0x52dc	No error (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com		48.177.50.136	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.217602015 CEST	8.8.8.8	192.168.2.5	0x52dc	No error (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com		52.8.180.25	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.217602015 CEST	8.8.8.8	192.168.2.5	0x52dc	No error (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com		56.221.98.187	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.217602015 CEST	8.8.8.8	192.168.2.5	0x52dc	No error (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com		60.252.8.160	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.217602015 CEST	8.8.8.8	192.168.2.5	0x52dc	No error (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com		64.188.35.62	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.217602015 CEST	8.8.8.8	192.168.2.5	0x52dc	No error (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com		68.22.129.76	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.217602015 CEST	8.8.8.8	192.168.2.5	0x52dc	No error (0)	i4tgdddqddddy999dddhdddddpsli.criibaypmg2tsvucxfp53qrrhh.sluaknhbsoe.com		72.3.0.10	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.355885029 CEST	8.8.8.8	192.168.2.5	0xb09	No error (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com		4.0.0.144	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.355885029 CEST	8.8.8.8	192.168.2.5	0xb09	No error (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.355885029 CEST	8.8.8.8	192.168.2.5	0xb09	No error (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com		12.68.77.165	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.355885029 CEST	8.8.8.8	192.168.2.5	0xb09	No error (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com		16.48.5.254	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.355885029 CEST	8.8.8.8	192.168.2.5	0xb09	No error (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com		20.237.234.82	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.355885029 CEST	8.8.8.8	192.168.2.5	0xb09	No error (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com		24.255.58.73	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.355885029 CEST	8.8.8.8	192.168.2.5	0xb09	No error (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com		28.99.210.31	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.355885029 CEST	8.8.8.8	192.168.2.5	0xb09	No error (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com		32.169.29.254	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.355885029 CEST	8.8.8.8	192.168.2.5	0xb09	No error (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com		36.211.152.67	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.355885029 CEST	8.8.8.8	192.168.2.5	0xb09	No error (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com		40.233.248.16	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.355885029 CEST	8.8.8.8	192.168.2.5	0xb09	No error (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com		44.197.124.23	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.355885029 CEST	8.8.8.8	192.168.2.5	0xb09	No error (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com		48.200.53.91	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.355885029 CEST	8.8.8.8	192.168.2.5	0xb09	No error (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com		52.157.223.106	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.355885029 CEST	8.8.8.8	192.168.2.5	0xb09	No error (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com		56.163.1.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.355885029 CEST	8.8.8.8	192.168.2.5	0xb09	No error (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com		60.104.177.11	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.355885029 CEST	8.8.8.8	192.168.2.5	0xb09	No error (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com		64.152.252.73	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.355885029 CEST	8.8.8.8	192.168.2.5	0xb09	No error (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com		68.15.227.141	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.355885029 CEST	8.8.8.8	192.168.2.5	0xb09	No error (0)	i4tgddd2ddddy999dddhdddddp4yb.n3p9g4w234qjcc2u445brw6jsj.sluaknhbsoe.com		72.184.23.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.488841057 CEST	8.8.8.8	192.168.2.5	0xa6df	No error (0)	i4tgdddpddddy999dddhdddddyo2l.i92vwadvuz3ecc29owsj6wdhth.sluaknhbsoe.com		4.0.0.192	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.488841057 CEST	8.8.8.8	192.168.2.5	0xa6df	No error (0)	i4tgdddpddddy999dddhdddddyo2l.i92vwadvuz3ecc29owsj6wdhth.sluaknhbsoe.com		8.0.0.39	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.488841057 CEST	8.8.8.8	192.168.2.5	0xa6df	No error (0)	i4tgdddpddddy999dddhdddddyo2l.i92vwadvuz3ecc29owsj6wdhth.sluaknhbsoe.com		12.184.209.208	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.488841057 CEST	8.8.8.8	192.168.2.5	0xa6df	No error (0)	i4tgdddpddddy999dddhdddddyo2l.i92vwadvuz3ecc29owsj6wdhth.sluaknhbsoe.com		16.236.75.228	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.488841057 CEST	8.8.8.8	192.168.2.5	0xa6df	No error (0)	i4tgdddpddddy999dddhdddddyo2l.i92vwadvuz3ecc29owsj6wdhth.sluaknhbsoe.com		20.233.230.157	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.488841057 CEST	8.8.8.8	192.168.2.5	0xa6df	No error (0)	i4tgdddpddddy999dddhdddddyo2l.i92vwadvuz3ecc29owsj6wdhth.sluaknhbsoe.com		24.78.74.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.488841057 CEST	8.8.8.8	192.168.2.5	0xa6df	No error (0)	i4tgdddpddddy999dddhdddddyo2l.i92vwadvuz3ecc29owsj6wdhth.sluaknhbsoe.com		28.153.247.158	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.488841057 CEST	8.8.8.8	192.168.2.5	0xa6df	No error (0)	i4tgdddpddddy999dddhdddddyo2l.i92vwadvuz3ecc29owsj6wdhth.sluaknhbsoe.com		32.186.46.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.488841057 CEST	8.8.8.8	192.168.2.5	0xa6df	No error (0)	i4tgdddpddddy999dddhdddddyo2l.i92vwadvuz3ecc29owsj6wdhth.sluaknhbsoe.com		36.226.97.51	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.488841057 CEST	8.8.8.8	192.168.2.5	0xa6df	No error (0)	i4tgdddpddddy999dddhdddddyo2l.i92vwadvuz3ecc29owsj6wdhth.sluaknhbsoe.com		40.166.182.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.488841057 CEST	8.8.8.8	192.168.2.5	0xa6df	No error (0)	i4tgdddpddddy999dddhdddddyo2l.i92vwadvuz3ecc29owsj6wdhth.sluaknhbsoe.com		44.245.120.77	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.488841057 CEST	8.8.8.8	192.168.2.5	0xa6df	No error (0)	i4tgdddpddddy999dddhdddddyo2l.i92vwadvuz3ecc29owsj6wdhth.sluaknhbsoe.com		48.184.82.24	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.488841057 CEST	8.8.8.8	192.168.2.5	0xa6df	No error (0)	i4tgdddpddddy999dddhdddddyo2l.i92vwadvuz3ecc29owsj6wdhth.sluaknhbsoe.com		52.135.183.202	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.488841057 CEST	8.8.8.8	192.168.2.5	0xa6df	No error (0)	i4tgdddpddddy999dddhdddddyo2l.i92vwadvuz3ecc29owsj6wdhth.sluaknhbsoe.com		56.186.33.133	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.488841057 CEST	8.8.8.8	192.168.2.5	0xa6df	No error (0)	i4tgdddpddddy999dddhdddddyo2l.i92vwadvuz3ecc29owsj6wdhth.sluaknhbsoe.com		60.73.69.172	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.615382910 CEST	8.8.8.8	192.168.2.5	0xf80	No error (0)	i4tgdd44ddddy999dddhdddddpvqh.9utcvyst5vqssa6w6nd5jmyogc.sluaknhbsoe.com		4.0.0.231	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.615382910 CEST	8.8.8.8	192.168.2.5	0xf80	No error (0)	i4tgdd44ddddy999dddhdddddpvqh.9utcvyst5vqssa6w6nd5jmyogc.sluaknhbsoe.com		8.0.0.33	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.615382910 CEST	8.8.8.8	192.168.2.5	0xf80	No error (0)	i4tgdd44ddddy999dddhdddddpvqh.9utcvyst5vqssa6w6nd5jmyogc.sluaknhbsoe.com		12.52.20.154	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.615382910 CEST	8.8.8.8	192.168.2.5	0xf80	No error (0)	i4tgdd44ddddy999dddhdddddpvqh.9utcvyst5vqssa6w6nd5jmyogc.sluaknhbsoe.com		16.245.69.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.615382910 CEST	8.8.8.8	192.168.2.5	0xf80	No error (0)	i4tgdd44ddddy999dddhdddddpvqh.9utcvyst5vqssa6w6nd5jmyogc.sluaknhbsoe.com		20.82.82.90	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.615382910 CEST	8.8.8.8	192.168.2.5	0xf80	No error (0)	i4tgdd44ddddy999dddhdddddpvqh.9utcvyst5vqssa6w6nd5jmyogc.sluaknhbsoe.com		24.21.60.40	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.615382910 CEST	8.8.8.8	192.168.2.5	0xf80	No error (0)	i4tgdd44ddddy999dddhdddddpvqh.9utcvyst5vqssa6w6nd5jmyogc.sluaknhbsoe.com		28.125.56.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.615382910 CEST	8.8.8.8	192.168.2.5	0xf80	No error (0)	i4tgdd44ddddy999dddhdddddpvqh.9utcvyst5vqssa6w6nd5jmyogc.sluaknhbsoe.com		32.77.107.236	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.615382910 CEST	8.8.8.8	192.168.2.5	0xf80	No error (0)	i4tgdd44ddddy999dddhdddddpvqh.9utcvyst5vqssa6w6nd5jmyogc.sluaknhbsoe.com		36.254.218.179	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.615382910 CEST	8.8.8.8	192.168.2.5	0xf80	No error (0)	i4tgdd44ddddy999dddhdddddpvqh.9utcvyst5vqssa6w6nd5jmyogc.sluaknhbsoe.com		40.101.107.253	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.615382910 CEST	8.8.8.8	192.168.2.5	0xf80	No error (0)	i4tgdd44ddddy999dddhdddddpvqh.9utcvyst5vqssa6w6nd5jmyogc.sluaknhbsoe.com		44.32.231.178	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.615382910 CEST	8.8.8.8	192.168.2.5	0xf80	No error (0)	i4tgdd44ddddy999dddhdddddpvqh.9utcvyst5vqssa6w6nd5jmyogc.sluaknhbsoe.com		48.204.33.57	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.615382910 CEST	8.8.8.8	192.168.2.5	0xf80	No error (0)	i4tgdd44ddddy999dddhdddddpvqh.9utcvyst5vqssa6w6nd5jmyogc.sluaknhbsoe.com		52.10.4.210	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.745357037 CEST	8.8.8.8	192.168.2.5	0x48bb	No error (0)	i4tgdddggdddy999dddhddddddsqc.2ohvfyamhcptsje2w2hi9ya3rh.sluaknhbsoe.com		4.0.1.8	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.745357037 CEST	8.8.8.8	192.168.2.5	0x48bb	No error (0)	i4tgdddggdddy999dddhddddddsqc.2ohvfyamhcptsje2w2hi9ya3rh.sluaknhbsoe.com		8.0.0.27	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.745357037 CEST	8.8.8.8	192.168.2.5	0x48bb	No error (0)	i4tgdddggdddy999dddhddddddsqc.2ohvfyamhcptsje2w2hi9ya3rh.sluaknhbsoe.com		12.113.30.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.745357037 CEST	8.8.8.8	192.168.2.5	0x48bb	No error (0)	i4tgdddggdddy999dddhddddddsqc.2ohvfyamhcptsje2w2hi9ya3rh.sluaknhbsoe.com		16.141.12.183	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.745357037 CEST	8.8.8.8	192.168.2.5	0x48bb	No error (0)	i4tgdddggdddy999dddhddddddsqc.2ohvfyamhcptsje2w2hi9ya3rh.sluaknhbsoe.com		20.111.183.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.745357037 CEST	8.8.8.8	192.168.2.5	0x48bb	No error (0)	i4tgdddggdddy999dddhddddddsqc.2ohvfyamhcptsje2w2hi9ya3rh.sluaknhbsoe.com		24.0.1.41	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.745357037 CEST	8.8.8.8	192.168.2.5	0x48bb	No error (0)	i4tgdddggdddy999dddhddddddsqc.2ohvfyamhcptsje2w2hi9ya3rh.sluaknhbsoe.com		28.232.75.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.745357037 CEST	8.8.8.8	192.168.2.5	0x48bb	No error (0)	i4tgdddggdddy999dddhddddddsqc.2ohvfyamhcptsje2w2hi9ya3rh.sluaknhbsoe.com		32.126.3.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.745357037 CEST	8.8.8.8	192.168.2.5	0x48bb	No error (0)	i4tgdddggdddy999dddhddddddsqc.2ohvfyamhcptsje2w2hi9ya3rh.sluaknhbsoe.com		36.74.177.128	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.745357037 CEST	8.8.8.8	192.168.2.5	0x48bb	No error (0)	i4tgdddggdddy999dddhddddddsqc.2ohvfyamhcptsje2w2hi9ya3rh.sluaknhbsoe.com		40.37.81.219	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.745357037 CEST	8.8.8.8	192.168.2.5	0x48bb	No error (0)	i4tgdddggdddy999dddhddddddsqc.2ohvfyamhcptsje2w2hi9ya3rh.sluaknhbsoe.com		44.30.244.160	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.872014999 CEST	8.8.8.8	192.168.2.5	0xc963	No error (0)	i4tgddqcgdddy999dddhdddddd94k.kfrbfdrorkybsgnxyuudbnoh9k.sluaknhbsoe.com		4.0.1.35	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.872014999 CEST	8.8.8.8	192.168.2.5	0xc963	No error (0)	i4tgddqcgdddy999dddhdddddd94k.kfrbfdrorkybsgnxyuudbnoh9k.sluaknhbsoe.com		8.0.0.21	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.872014999 CEST	8.8.8.8	192.168.2.5	0xc963	No error (0)	i4tgddqcgdddy999dddhdddddd94k.kfrbfdrorkybsgnxyuudbnoh9k.sluaknhbsoe.com		12.126.120.121	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.872014999 CEST	8.8.8.8	192.168.2.5	0xc963	No error (0)	i4tgddqcgdddy999dddhdddddd94k.kfrbfdrorkybsgnxyuudbnoh9k.sluaknhbsoe.com		16.117.2.19	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.872014999 CEST	8.8.8.8	192.168.2.5	0xc963	No error (0)	i4tgddqcgdddy999dddhdddddd94k.kfrbfdrorkybsgnxyuudbnoh9k.sluaknhbsoe.com		20.221.106.233	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.872014999 CEST	8.8.8.8	192.168.2.5	0xc963	No error (0)	i4tgddqcgdddy999dddhdddddd94k.kfrbfdrorkybsgnxyuudbnoh9k.sluaknhbsoe.com		24.251.48.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.872014999 CEST	8.8.8.8	192.168.2.5	0xc963	No error (0)	i4tgddqcgdddy999dddhdddddd94k.kfrbfdrorkybsgnxyuudbnoh9k.sluaknhbsoe.com		28.138.203.120	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.872014999 CEST	8.8.8.8	192.168.2.5	0xc963	No error (0)	i4tgddqcgdddy999dddhdddddd94k.kfrbfdrorkybsgnxyuudbnoh9k.sluaknhbsoe.com		32.237.62.62	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.872014999 CEST	8.8.8.8	192.168.2.5	0xc963	No error (0)	i4tgddqcgdddy999dddhdddddd94k.kfrbfdrorkybsgnxyuudbnoh9k.sluaknhbsoe.com		36.164.198.147	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.997366905 CEST	8.8.8.8	192.168.2.5	0x9974	No error (0)	i4tgdddkgdddy999dddhdddddpcof.dvmefyszn46hc566zauitanbfd.sluaknhbsoe.com		4.0.1.56	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.997366905 CEST	8.8.8.8	192.168.2.5	0x9974	No error (0)	i4tgdddkgdddy999dddhdddddpcof.dvmefyszn46hc566zauitanbfd.sluaknhbsoe.com		8.0.0.18	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.997366905 CEST	8.8.8.8	192.168.2.5	0x9974	No error (0)	i4tgdddkgdddy999dddhdddddpcof.dvmefyszn46hc566zauitanbfd.sluaknhbsoe.com		12.243.195.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.997366905 CEST	8.8.8.8	192.168.2.5	0x9974	No error (0)	i4tgdddkgdddy999dddhdddddpcof.dvmefyszn46hc566zauitanbfd.sluaknhbsoe.com		16.105.56.176	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.997366905 CEST	8.8.8.8	192.168.2.5	0x9974	No error (0)	i4tgdddkgdddy999dddhdddddpcof.dvmefyszn46hc566zauitanbfd.sluaknhbsoe.com		20.10.77.215	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.997366905 CEST	8.8.8.8	192.168.2.5	0x9974	No error (0)	i4tgdddkgdddy999dddhdddddpcof.dvmefyszn46hc566zauitanbfd.sluaknhbsoe.com		24.79.1.219	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.997366905 CEST	8.8.8.8	192.168.2.5	0x9974	No error (0)	i4tgdddkgdddy999dddhdddddpcof.dvmefyszn46hc566zauitanbfd.sluaknhbsoe.com		28.110.248.154	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:43.997366905 CEST	8.8.8.8	192.168.2.5	0x9974	No error (0)	i4tgdddkgdddy999dddhdddddpcof.dvmefyszn46hc566zauitanbfd.sluaknhbsoe.com		32.105.254.208	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.135390043 CEST	8.8.8.8	192.168.2.5	0xc4ef	No error (0)	i4tgddlmgdddy999dddhdddddy4uk.kabzkigpe4epci6udrzsah9gfi.sluaknhbsoe.com		4.0.1.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.135390043 CEST	8.8.8.8	192.168.2.5	0xc4ef	No error (0)	i4tgddlmgdddy999dddhdddddy4uk.kabzkigpe4epci6udrzsah9gfi.sluaknhbsoe.com		8.0.0.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.135390043 CEST	8.8.8.8	192.168.2.5	0xc4ef	No error (0)	i4tgddlmgdddy999dddhdddddy4uk.kabzkigpe4epci6udrzsah9gfi.sluaknhbsoe.com		12.195.218.225	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.135390043 CEST	8.8.8.8	192.168.2.5	0xc4ef	No error (0)	i4tgddlmgdddy999dddhdddddy4uk.kabzkigpe4epci6udrzsah9gfi.sluaknhbsoe.com		16.42.157.245	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.135390043 CEST	8.8.8.8	192.168.2.5	0xc4ef	No error (0)	i4tgddlmgdddy999dddhdddddy4uk.kabzkigpe4epci6udrzsah9gfi.sluaknhbsoe.com		20.234.45.222	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.135390043 CEST	8.8.8.8	192.168.2.5	0xc4ef	No error (0)	i4tgddlmgdddy999dddhdddddy4uk.kabzkigpe4epci6udrzsah9gfi.sluaknhbsoe.com		24.8.74.171	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.135390043 CEST	8.8.8.8	192.168.2.5	0xc4ef	No error (0)	i4tgddlmgdddy999dddhdddddy4uk.kabzkigpe4epci6udrzsah9gfi.sluaknhbsoe.com		28.16.206.103	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.264475107 CEST	8.8.8.8	192.168.2.5	0x5334	No error (0)	i4tgddcfgdddy999dddhdddddpb2f.s2rkpzaqdxt5c3hjrkikmpoffi.sluaknhbsoe.com		4.0.1.89	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.264475107 CEST	8.8.8.8	192.168.2.5	0x5334	No error (0)	i4tgddcfgdddy999dddhdddddpb2f.s2rkpzaqdxt5c3hjrkikmpoffi.sluaknhbsoe.com		8.0.0.12	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.264475107 CEST	8.8.8.8	192.168.2.5	0x5334	No error (0)	i4tgddcfgdddy999dddhdddddpb2f.s2rkpzaqdxt5c3hjrkikmpoffi.sluaknhbsoe.com		12.125.243.26	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.264475107 CEST	8.8.8.8	192.168.2.5	0x5334	No error (0)	i4tgddcfgdddy999dddhdddddpb2f.s2rkpzaqdxt5c3hjrkikmpoffi.sluaknhbsoe.com		16.12.55.61	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.264475107 CEST	8.8.8.8	192.168.2.5	0x5334	No error (0)	i4tgddcfgdddy999dddhdddddpb2f.s2rkpzaqdxt5c3hjrkikmpoffi.sluaknhbsoe.com		20.84.24.206	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.264475107 CEST	8.8.8.8	192.168.2.5	0x5334	No error (0)	i4tgddcfgdddy999dddhdddddpb2f.s2rkpzaqdxt5c3hjrkikmpoffi.sluaknhbsoe.com		24.244.121.91	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.388571978 CEST	8.8.8.8	192.168.2.5	0x23d8	No error (0)	i4tgddsqgdddy999dddhdddddplpd.x9zlrxu6etats5uezlp5ja5fkd.sluaknhbsoe.com		4.0.1.101	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.388571978 CEST	8.8.8.8	192.168.2.5	0x23d8	No error (0)	i4tgddsqgdddy999dddhdddddplpd.x9zlrxu6etats5uezlp5ja5fkd.sluaknhbsoe.com		8.0.0.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.388571978 CEST	8.8.8.8	192.168.2.5	0x23d8	No error (0)	i4tgddsqgdddy999dddhdddddplpd.x9zlrxu6etats5uezlp5ja5fkd.sluaknhbsoe.com		12.81.1.132	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.388571978 CEST	8.8.8.8	192.168.2.5	0x23d8	No error (0)	i4tgddsqgdddy999dddhdddddplpd.x9zlrxu6etats5uezlp5ja5fkd.sluaknhbsoe.com		16.230.110.149	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.388571978 CEST	8.8.8.8	192.168.2.5	0x23d8	No error (0)	i4tgddsqgdddy999dddhdddddplpd.x9zlrxu6etats5uezlp5ja5fkd.sluaknhbsoe.com		20.213.198.156	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.513051987 CEST	8.8.8.8	192.168.2.5	0x6c27	No error (0)	i4tgddprgdddy999dddhdddddp3sf.ohrx3agliueecn6dat5yuupwyi.sluaknhbsoe.com		4.0.1.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.513051987 CEST	8.8.8.8	192.168.2.5	0x6c27	No error (0)	i4tgddprgdddy999dddhdddddp3sf.ohrx3agliueecn6dat5yuupwyi.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.513051987 CEST	8.8.8.8	192.168.2.5	0x6c27	No error (0)	i4tgddprgdddy999dddhdddddp3sf.ohrx3agliueecn6dat5yuupwyi.sluaknhbsoe.com		12.248.10.47	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.513051987 CEST	8.8.8.8	192.168.2.5	0x6c27	No error (0)	i4tgddprgdddy999dddhdddddp3sf.ohrx3agliueecn6dat5yuupwyi.sluaknhbsoe.com		16.111.150.138	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.642210960 CEST	8.8.8.8	192.168.2.5	0x9f85	No error (0)	i4tgddywgdddy999dddhdddddysdl.lop55mu56yulsqu6ac92lunkki.sluaknhbsoe.com		4.0.1.116	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.642210960 CEST	8.8.8.8	192.168.2.5	0x9f85	No error (0)	i4tgddywgdddy999dddhdddddysdl.lop55mu56yulsqu6ac92lunkki.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.642210960 CEST	8.8.8.8	192.168.2.5	0x9f85	No error (0)	i4tgddywgdddy999dddhdddddysdl.lop55mu56yulsqu6ac92lunkki.sluaknhbsoe.com		12.199.23.119	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.642210960 CEST	8.8.8.8	192.168.2.5	0x9f85	No error (0)	i4tgddywgdddy999dddhdddddysdl.lop55mu56yulsqu6ac92lunkki.sluaknhbsoe.com		16.52.33.236	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.769155979 CEST	8.8.8.8	192.168.2.5	0xdd32	No error (0)	i4tgddlxgdddy999dddhdddddynur.i9xclwtru2ksc6eg665ub4ewwg.sluaknhbsoe.com		4.0.1.122	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.769155979 CEST	8.8.8.8	192.168.2.5	0xdd32	No error (0)	i4tgddlxgdddy999dddhdddddynur.i9xclwtru2ksc6eg665ub4ewwg.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.769155979 CEST	8.8.8.8	192.168.2.5	0xdd32	No error (0)	i4tgddlxgdddy999dddhdddddynur.i9xclwtru2ksc6eg665ub4ewwg.sluaknhbsoe.com		12.248.255.225	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.769155979 CEST	8.8.8.8	192.168.2.5	0xdd32	No error (0)	i4tgddlxgdddy999dddhdddddynur.i9xclwtru2ksc6eg665ub4ewwg.sluaknhbsoe.com		16.164.194.177	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.897139072 CEST	8.8.8.8	192.168.2.5	0x1ef4	No error (0)	i4tgdddygdddy999dddhdddddd4qi.g2ynkufys4zxcfhxdtjomw5p4i.sluaknhbsoe.com		4.0.1.128	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.897139072 CEST	8.8.8.8	192.168.2.5	0x1ef4	No error (0)	i4tgdddygdddy999dddhdddddd4qi.g2ynkufys4zxcfhxdtjomw5p4i.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:44.897139072 CEST	8.8.8.8	192.168.2.5	0x1ef4	No error (0)	i4tgdddygdddy999dddhdddddd4qi.g2ynkufys4zxcfhxdtjomw5p4i.sluaknhbsoe.com		12.67.108.107	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.037508011 CEST	8.8.8.8	192.168.2.5	0xadd5	No error (0)	i4tgddqygdddy999dddhdddddpdom.j42asnnhapegsn6r6hbgvw4vec.sluaknhbsoe.com		4.0.1.131	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.037508011 CEST	8.8.8.8	192.168.2.5	0xadd5	No error (0)	i4tgddqygdddy999dddhdddddpdom.j42asnnhapegsn6r6hbgvw4vec.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.037508011 CEST	8.8.8.8	192.168.2.5	0xadd5	No error (0)	i4tgddqygdddy999dddhdddddpdom.j42asnnhapegsn6r6hbgvw4vec.sluaknhbsoe.com		12.71.87.87	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.159240961 CEST	8.8.8.8	192.168.2.5	0xf62c	No error (0)	i4tgddpygdddy999dddhdddddy3uq.v44md4zvun3kcbuy2ebpawaw6j.sluaknhbsoe.com		4.0.1.134	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.159240961 CEST	8.8.8.8	192.168.2.5	0xf62c	No error (0)	i4tgddpygdddy999dddhdddddy3uq.v44md4zvun3kcbuy2ebpawaw6j.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.159240961 CEST	8.8.8.8	192.168.2.5	0xf62c	No error (0)	i4tgddpygdddy999dddhdddddy3uq.v44md4zvun3kcbuy2ebpawaw6j.sluaknhbsoe.com		12.70.84.123	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.281002045 CEST	8.8.8.8	192.168.2.5	0x3653	No error (0)	i4tgddczgdddy999dddhdddddlwdi.xhgeo2odu2tusgw5bapio9vgyh.sluaknhbsoe.com		4.0.1.137	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.281002045 CEST	8.8.8.8	192.168.2.5	0x3653	No error (0)	i4tgddczgdddy999dddhdddddlwdi.xhgeo2odu2tusgw5bapio9vgyh.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.281002045 CEST	8.8.8.8	192.168.2.5	0x3653	No error (0)	i4tgddczgdddy999dddhdddddlwdi.xhgeo2odu2tusgw5bapio9vgyh.sluaknhbsoe.com		12.94.95.76	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.404865980 CEST	8.8.8.8	192.168.2.5	0x78a	No error (0)	i4tgddyzgdddy999dddhdddddpwur.9lgnhyu5tvvusojdrrmtqlbn9c.sluaknhbsoe.com		4.0.1.140	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.404865980 CEST	8.8.8.8	192.168.2.5	0x78a	No error (0)	i4tgddyzgdddy999dddhdddddpwur.9lgnhyu5tvvusojdrrmtqlbn9c.sluaknhbsoe.com		8.0.0.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.404865980 CEST	8.8.8.8	192.168.2.5	0x78a	No error (0)	i4tgddyzgdddy999dddhdddddpwur.9lgnhyu5tvvusojdrrmtqlbn9c.sluaknhbsoe.com		12.85.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.551650047 CEST	8.8.8.8	192.168.2.5	0x1485	No error (0)	efkezwpdxpsq3lsdvnsccnqfuhj.4g5qndhshtlghjlpujhqr.bvuuipcc52icgjgfdelsc3ancaijdnacinu.n2lihvdacjoibefwddrcdfptdhnifsnkncn.dlohcdyddddpddddddh4sd.el2by9kirmlccdh29xfmxw6ycb.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.678395987 CEST	8.8.8.8	192.168.2.5	0xc7f4	No error (0)	zboscitfrhswgbdqgvv4guilxzqlhyyqo.dql2edcoma4hypqipnhh.e4ihalhus5hulg6jllilarwhyqqolqlhpqctma2.2zyqhlndhvsiigllusrhopgyumlirmql2y4gtd.qnhadddldluwh.el2by9kirmlccdh29xfmxw6ycb.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.817981005 CEST	8.8.8.8	192.168.2.5	0xd63e	No error (0)	czrcjudcj3d62ypjlgldhzarylc.wyu5hqgncb3dc9dcdbkgddyd4wod.el2by9kirmlccdh29xfmxw6ycb.sluaknhbsoe.com		193.231.17.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:45.944138050 CEST	8.8.8.8	192.168.2.5	0x24c6	No error (0)	94zddd496kddyddddddwgdh.ya565w46wx6dsee66fn4okzvuc.sluaknhbsoe.com		239.255.255.255	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.095534086 CEST	8.8.8.8	192.168.2.5	0x7860	No error (0)	94zddd496kddyddddddlzld.m5eias622iyisojbu2purydujd.sluaknhbsoe.com		65.99.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.222728014 CEST	8.8.8.8	192.168.2.5	0x672e	No error (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com		4.0.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.222728014 CEST	8.8.8.8	192.168.2.5	0x672e	No error (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.222728014 CEST	8.8.8.8	192.168.2.5	0x672e	No error (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com		12.98.88.72	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.222728014 CEST	8.8.8.8	192.168.2.5	0x672e	No error (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com		16.6.17.5	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.222728014 CEST	8.8.8.8	192.168.2.5	0x672e	No error (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com		20.67.15.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.222728014 CEST	8.8.8.8	192.168.2.5	0x672e	No error (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com		24.69.38.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.222728014 CEST	8.8.8.8	192.168.2.5	0x672e	No error (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com		28.93.66.80	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.222728014 CEST	8.8.8.8	192.168.2.5	0x672e	No error (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com		32.90.64.85	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.222728014 CEST	8.8.8.8	192.168.2.5	0x672e	No error (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com		36.75.127.4	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.222728014 CEST	8.8.8.8	192.168.2.5	0x672e	No error (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com		40.87.83.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.222728014 CEST	8.8.8.8	192.168.2.5	0x672e	No error (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com		44.87.84.66	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.222728014 CEST	8.8.8.8	192.168.2.5	0x672e	No error (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com		48.79.121.81	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.222728014 CEST	8.8.8.8	192.168.2.5	0x672e	No error (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com		52.34.55.83	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.222728014 CEST	8.8.8.8	192.168.2.5	0x672e	No error (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com		56.89.18.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.222728014 CEST	8.8.8.8	192.168.2.5	0x672e	No error (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com		60.33.25.117	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.222728014 CEST	8.8.8.8	192.168.2.5	0x672e	No error (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com		64.36.74.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.222728014 CEST	8.8.8.8	192.168.2.5	0x672e	No error (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com		68.85.40.77	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.222728014 CEST	8.8.8.8	192.168.2.5	0x672e	No error (0)	94zdddddddddy999dddhdddddlb6d.sxa33wbygdznsr6dnmktxwgffc.sluaknhbsoe.com		72.35.74.98	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.347769022 CEST	8.8.8.8	192.168.2.5	0xa0d5	No error (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com		4.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.347769022 CEST	8.8.8.8	192.168.2.5	0xa0d5	No error (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.347769022 CEST	8.8.8.8	192.168.2.5	0xa0d5	No error (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com		12.100.35.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.347769022 CEST	8.8.8.8	192.168.2.5	0xa0d5	No error (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com		16.53.82.84	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.347769022 CEST	8.8.8.8	192.168.2.5	0xa0d5	No error (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com		20.52.81.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.347769022 CEST	8.8.8.8	192.168.2.5	0xa0d5	No error (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com		24.90.86.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.347769022 CEST	8.8.8.8	192.168.2.5	0xa0d5	No error (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com		28.74.42.100	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.347769022 CEST	8.8.8.8	192.168.2.5	0xa0d5	No error (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com		32.32.35.97	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.347769022 CEST	8.8.8.8	192.168.2.5	0xa0d5	No error (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com		36.6.39.49	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.347769022 CEST	8.8.8.8	192.168.2.5	0xa0d5	No error (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com		40.48.39.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.347769022 CEST	8.8.8.8	192.168.2.5	0xa0d5	No error (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com		44.54.33.55	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.347769022 CEST	8.8.8.8	192.168.2.5	0xa0d5	No error (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com		48.97.16.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.347769022 CEST	8.8.8.8	192.168.2.5	0xa0d5	No error (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com		52.35.48.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.347769022 CEST	8.8.8.8	192.168.2.5	0xa0d5	No error (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com		56.38.52.37	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.347769022 CEST	8.8.8.8	192.168.2.5	0xa0d5	No error (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com		60.15.43.38	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.347769022 CEST	8.8.8.8	192.168.2.5	0xa0d5	No error (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com		64.51.38.40	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.347769022 CEST	8.8.8.8	192.168.2.5	0xa0d5	No error (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com		68.15.86.93	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.347769022 CEST	8.8.8.8	192.168.2.5	0xa0d5	No error (0)	94zddddjddddy999dddhdddddlhtf.4wgxjxsjmsyqsxevaxh95qrqac.sluaknhbsoe.com		72.24.108.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.478092909 CEST	8.8.8.8	192.168.2.5	0xeec3	No error (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com		4.0.0.96	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.478092909 CEST	8.8.8.8	192.168.2.5	0xeec3	No error (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.478092909 CEST	8.8.8.8	192.168.2.5	0xeec3	No error (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com		12.120.238.223	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.478092909 CEST	8.8.8.8	192.168.2.5	0xeec3	No error (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com		16.97.155.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.478092909 CEST	8.8.8.8	192.168.2.5	0xeec3	No error (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com		20.11.48.152	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.478092909 CEST	8.8.8.8	192.168.2.5	0xeec3	No error (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com		24.101.91.231	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.478092909 CEST	8.8.8.8	192.168.2.5	0xeec3	No error (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com		28.82.34.89	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.478092909 CEST	8.8.8.8	192.168.2.5	0xeec3	No error (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com		32.13.35.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.478092909 CEST	8.8.8.8	192.168.2.5	0xeec3	No error (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com		36.143.164.115	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.478092909 CEST	8.8.8.8	192.168.2.5	0xeec3	No error (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com		40.85.207.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.478092909 CEST	8.8.8.8	192.168.2.5	0xeec3	No error (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com		44.235.216.49	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.478092909 CEST	8.8.8.8	192.168.2.5	0xeec3	No error (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com		48.177.50.136	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.478092909 CEST	8.8.8.8	192.168.2.5	0xeec3	No error (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com		52.8.180.25	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.478092909 CEST	8.8.8.8	192.168.2.5	0xeec3	No error (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com		56.221.98.187	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.478092909 CEST	8.8.8.8	192.168.2.5	0xeec3	No error (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com		60.252.8.160	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.478092909 CEST	8.8.8.8	192.168.2.5	0xeec3	No error (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com		64.188.35.62	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.478092909 CEST	8.8.8.8	192.168.2.5	0xeec3	No error (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com		68.22.129.76	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.478092909 CEST	8.8.8.8	192.168.2.5	0xeec3	No error (0)	94zddddqddddy999dddhdddddlinx.afvfn9f92g62sm2co3eu35avwc.sluaknhbsoe.com		72.3.0.10	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.605309010 CEST	8.8.8.8	192.168.2.5	0x8540	No error (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com		4.0.0.144	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.605309010 CEST	8.8.8.8	192.168.2.5	0x8540	No error (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.605309010 CEST	8.8.8.8	192.168.2.5	0x8540	No error (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com		12.68.77.165	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.605309010 CEST	8.8.8.8	192.168.2.5	0x8540	No error (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com		16.48.5.254	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.605309010 CEST	8.8.8.8	192.168.2.5	0x8540	No error (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com		20.237.234.82	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.605309010 CEST	8.8.8.8	192.168.2.5	0x8540	No error (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com		24.255.58.73	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.605309010 CEST	8.8.8.8	192.168.2.5	0x8540	No error (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com		28.99.210.31	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.605309010 CEST	8.8.8.8	192.168.2.5	0x8540	No error (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com		32.169.29.254	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.605309010 CEST	8.8.8.8	192.168.2.5	0x8540	No error (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com		36.211.152.67	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.605309010 CEST	8.8.8.8	192.168.2.5	0x8540	No error (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com		40.233.248.16	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.605309010 CEST	8.8.8.8	192.168.2.5	0x8540	No error (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com		44.197.124.23	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.605309010 CEST	8.8.8.8	192.168.2.5	0x8540	No error (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com		48.200.53.91	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.605309010 CEST	8.8.8.8	192.168.2.5	0x8540	No error (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com		52.157.223.106	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.605309010 CEST	8.8.8.8	192.168.2.5	0x8540	No error (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com		56.163.1.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.605309010 CEST	8.8.8.8	192.168.2.5	0x8540	No error (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com		60.104.177.11	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.605309010 CEST	8.8.8.8	192.168.2.5	0x8540	No error (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com		64.152.252.73	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.605309010 CEST	8.8.8.8	192.168.2.5	0x8540	No error (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com		68.15.227.141	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.605309010 CEST	8.8.8.8	192.168.2.5	0x8540	No error (0)	94zdddd2ddddy999dddhddddddafb.4fyru9at54c9swnwwuzjln6ccg.sluaknhbsoe.com		72.184.23.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.733031988 CEST	8.8.8.8	192.168.2.5	0x8d4	No error (0)	94zddddpddddy999dddhdddddprfh.rnsozrnfjg5ssjuzyf5g2psebh.sluaknhbsoe.com		4.0.0.192	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.733031988 CEST	8.8.8.8	192.168.2.5	0x8d4	No error (0)	94zddddpddddy999dddhdddddprfh.rnsozrnfjg5ssjuzyf5g2psebh.sluaknhbsoe.com		8.0.0.39	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.733031988 CEST	8.8.8.8	192.168.2.5	0x8d4	No error (0)	94zddddpddddy999dddhdddddprfh.rnsozrnfjg5ssjuzyf5g2psebh.sluaknhbsoe.com		12.184.209.208	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.733031988 CEST	8.8.8.8	192.168.2.5	0x8d4	No error (0)	94zddddpddddy999dddhdddddprfh.rnsozrnfjg5ssjuzyf5g2psebh.sluaknhbsoe.com		16.236.75.228	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.733031988 CEST	8.8.8.8	192.168.2.5	0x8d4	No error (0)	94zddddpddddy999dddhdddddprfh.rnsozrnfjg5ssjuzyf5g2psebh.sluaknhbsoe.com		20.233.230.157	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.733031988 CEST	8.8.8.8	192.168.2.5	0x8d4	No error (0)	94zddddpddddy999dddhdddddprfh.rnsozrnfjg5ssjuzyf5g2psebh.sluaknhbsoe.com		24.78.74.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.733031988 CEST	8.8.8.8	192.168.2.5	0x8d4	No error (0)	94zddddpddddy999dddhdddddprfh.rnsozrnfjg5ssjuzyf5g2psebh.sluaknhbsoe.com		28.153.247.158	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.733031988 CEST	8.8.8.8	192.168.2.5	0x8d4	No error (0)	94zddddpddddy999dddhdddddprfh.rnsozrnfjg5ssjuzyf5g2psebh.sluaknhbsoe.com		32.186.46.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.733031988 CEST	8.8.8.8	192.168.2.5	0x8d4	No error (0)	94zddddpddddy999dddhdddddprfh.rnsozrnfjg5ssjuzyf5g2psebh.sluaknhbsoe.com		36.226.97.51	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.733031988 CEST	8.8.8.8	192.168.2.5	0x8d4	No error (0)	94zddddpddddy999dddhdddddprfh.rnsozrnfjg5ssjuzyf5g2psebh.sluaknhbsoe.com		40.166.182.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.733031988 CEST	8.8.8.8	192.168.2.5	0x8d4	No error (0)	94zddddpddddy999dddhdddddprfh.rnsozrnfjg5ssjuzyf5g2psebh.sluaknhbsoe.com		44.245.120.77	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.733031988 CEST	8.8.8.8	192.168.2.5	0x8d4	No error (0)	94zddddpddddy999dddhdddddprfh.rnsozrnfjg5ssjuzyf5g2psebh.sluaknhbsoe.com		48.184.82.24	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.733031988 CEST	8.8.8.8	192.168.2.5	0x8d4	No error (0)	94zddddpddddy999dddhdddddprfh.rnsozrnfjg5ssjuzyf5g2psebh.sluaknhbsoe.com		52.135.183.202	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.733031988 CEST	8.8.8.8	192.168.2.5	0x8d4	No error (0)	94zddddpddddy999dddhdddddprfh.rnsozrnfjg5ssjuzyf5g2psebh.sluaknhbsoe.com		56.186.33.133	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.733031988 CEST	8.8.8.8	192.168.2.5	0x8d4	No error (0)	94zddddpddddy999dddhdddddprfh.rnsozrnfjg5ssjuzyf5g2psebh.sluaknhbsoe.com		60.73.69.172	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.872998953 CEST	8.8.8.8	192.168.2.5	0xd886	No error (0)	94zddd44ddddy999dddhdddddpbgh.viyctqclbpsms2uvpjxxemrilb.sluaknhbsoe.com		4.0.0.231	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.872998953 CEST	8.8.8.8	192.168.2.5	0xd886	No error (0)	94zddd44ddddy999dddhdddddpbgh.viyctqclbpsms2uvpjxxemrilb.sluaknhbsoe.com		8.0.0.33	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.872998953 CEST	8.8.8.8	192.168.2.5	0xd886	No error (0)	94zddd44ddddy999dddhdddddpbgh.viyctqclbpsms2uvpjxxemrilb.sluaknhbsoe.com		12.52.20.154	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.872998953 CEST	8.8.8.8	192.168.2.5	0xd886	No error (0)	94zddd44ddddy999dddhdddddpbgh.viyctqclbpsms2uvpjxxemrilb.sluaknhbsoe.com		16.245.69.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.872998953 CEST	8.8.8.8	192.168.2.5	0xd886	No error (0)	94zddd44ddddy999dddhdddddpbgh.viyctqclbpsms2uvpjxxemrilb.sluaknhbsoe.com		20.82.82.90	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.872998953 CEST	8.8.8.8	192.168.2.5	0xd886	No error (0)	94zddd44ddddy999dddhdddddpbgh.viyctqclbpsms2uvpjxxemrilb.sluaknhbsoe.com		24.21.60.40	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.872998953 CEST	8.8.8.8	192.168.2.5	0xd886	No error (0)	94zddd44ddddy999dddhdddddpbgh.viyctqclbpsms2uvpjxxemrilb.sluaknhbsoe.com		28.125.56.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.872998953 CEST	8.8.8.8	192.168.2.5	0xd886	No error (0)	94zddd44ddddy999dddhdddddpbgh.viyctqclbpsms2uvpjxxemrilb.sluaknhbsoe.com		32.77.107.236	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.872998953 CEST	8.8.8.8	192.168.2.5	0xd886	No error (0)	94zddd44ddddy999dddhdddddpbgh.viyctqclbpsms2uvpjxxemrilb.sluaknhbsoe.com		36.254.218.179	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.872998953 CEST	8.8.8.8	192.168.2.5	0xd886	No error (0)	94zddd44ddddy999dddhdddddpbgh.viyctqclbpsms2uvpjxxemrilb.sluaknhbsoe.com		40.101.107.253	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.872998953 CEST	8.8.8.8	192.168.2.5	0xd886	No error (0)	94zddd44ddddy999dddhdddddpbgh.viyctqclbpsms2uvpjxxemrilb.sluaknhbsoe.com		44.32.231.178	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.872998953 CEST	8.8.8.8	192.168.2.5	0xd886	No error (0)	94zddd44ddddy999dddhdddddpbgh.viyctqclbpsms2uvpjxxemrilb.sluaknhbsoe.com		48.204.33.57	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.872998953 CEST	8.8.8.8	192.168.2.5	0xd886	No error (0)	94zddd44ddddy999dddhdddddpbgh.viyctqclbpsms2uvpjxxemrilb.sluaknhbsoe.com		52.10.4.210	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.997458935 CEST	8.8.8.8	192.168.2.5	0x7b6e	No error (0)	94zddddggdddy999dddhdddddlhnc.wrrfhnupqjemc3ewn2cxky6wui.sluaknhbsoe.com		4.0.1.8	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.997458935 CEST	8.8.8.8	192.168.2.5	0x7b6e	No error (0)	94zddddggdddy999dddhdddddlhnc.wrrfhnupqjemc3ewn2cxky6wui.sluaknhbsoe.com		8.0.0.27	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.997458935 CEST	8.8.8.8	192.168.2.5	0x7b6e	No error (0)	94zddddggdddy999dddhdddddlhnc.wrrfhnupqjemc3ewn2cxky6wui.sluaknhbsoe.com		12.113.30.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.997458935 CEST	8.8.8.8	192.168.2.5	0x7b6e	No error (0)	94zddddggdddy999dddhdddddlhnc.wrrfhnupqjemc3ewn2cxky6wui.sluaknhbsoe.com		16.141.12.183	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.997458935 CEST	8.8.8.8	192.168.2.5	0x7b6e	No error (0)	94zddddggdddy999dddhdddddlhnc.wrrfhnupqjemc3ewn2cxky6wui.sluaknhbsoe.com		20.111.183.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.997458935 CEST	8.8.8.8	192.168.2.5	0x7b6e	No error (0)	94zddddggdddy999dddhdddddlhnc.wrrfhnupqjemc3ewn2cxky6wui.sluaknhbsoe.com		24.0.1.41	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.997458935 CEST	8.8.8.8	192.168.2.5	0x7b6e	No error (0)	94zddddggdddy999dddhdddddlhnc.wrrfhnupqjemc3ewn2cxky6wui.sluaknhbsoe.com		28.232.75.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.997458935 CEST	8.8.8.8	192.168.2.5	0x7b6e	No error (0)	94zddddggdddy999dddhdddddlhnc.wrrfhnupqjemc3ewn2cxky6wui.sluaknhbsoe.com		32.126.3.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.997458935 CEST	8.8.8.8	192.168.2.5	0x7b6e	No error (0)	94zddddggdddy999dddhdddddlhnc.wrrfhnupqjemc3ewn2cxky6wui.sluaknhbsoe.com		36.74.177.128	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.997458935 CEST	8.8.8.8	192.168.2.5	0x7b6e	No error (0)	94zddddggdddy999dddhdddddlhnc.wrrfhnupqjemc3ewn2cxky6wui.sluaknhbsoe.com		40.37.81.219	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:49.997458935 CEST	8.8.8.8	192.168.2.5	0x7b6e	No error (0)	94zddddggdddy999dddhdddddlhnc.wrrfhnupqjemc3ewn2cxky6wui.sluaknhbsoe.com		44.30.244.160	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.121633053 CEST	8.8.8.8	192.168.2.5	0xfdb0	No error (0)	94zdddqcgdddy999dddhdddddluac.qufekzpeuiqvc2uhdolb4tzs4j.sluaknhbsoe.com		4.0.1.35	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.121633053 CEST	8.8.8.8	192.168.2.5	0xfdb0	No error (0)	94zdddqcgdddy999dddhdddddluac.qufekzpeuiqvc2uhdolb4tzs4j.sluaknhbsoe.com		8.0.0.21	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.121633053 CEST	8.8.8.8	192.168.2.5	0xfdb0	No error (0)	94zdddqcgdddy999dddhdddddluac.qufekzpeuiqvc2uhdolb4tzs4j.sluaknhbsoe.com		12.126.120.121	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.121633053 CEST	8.8.8.8	192.168.2.5	0xfdb0	No error (0)	94zdddqcgdddy999dddhdddddluac.qufekzpeuiqvc2uhdolb4tzs4j.sluaknhbsoe.com		16.117.2.19	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.121633053 CEST	8.8.8.8	192.168.2.5	0xfdb0	No error (0)	94zdddqcgdddy999dddhdddddluac.qufekzpeuiqvc2uhdolb4tzs4j.sluaknhbsoe.com		20.221.106.233	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.121633053 CEST	8.8.8.8	192.168.2.5	0xfdb0	No error (0)	94zdddqcgdddy999dddhdddddluac.qufekzpeuiqvc2uhdolb4tzs4j.sluaknhbsoe.com		24.251.48.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.121633053 CEST	8.8.8.8	192.168.2.5	0xfdb0	No error (0)	94zdddqcgdddy999dddhdddddluac.qufekzpeuiqvc2uhdolb4tzs4j.sluaknhbsoe.com		28.138.203.120	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.121633053 CEST	8.8.8.8	192.168.2.5	0xfdb0	No error (0)	94zdddqcgdddy999dddhdddddluac.qufekzpeuiqvc2uhdolb4tzs4j.sluaknhbsoe.com		32.237.62.62	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.121633053 CEST	8.8.8.8	192.168.2.5	0xfdb0	No error (0)	94zdddqcgdddy999dddhdddddluac.qufekzpeuiqvc2uhdolb4tzs4j.sluaknhbsoe.com		36.164.198.147	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.253799915 CEST	8.8.8.8	192.168.2.5	0x4b0	No error (0)	94zddddkgdddy999dddhddddddbkl.ahrdswy2zzhycjhnrc5dtlkjtb.sluaknhbsoe.com		4.0.1.56	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.253799915 CEST	8.8.8.8	192.168.2.5	0x4b0	No error (0)	94zddddkgdddy999dddhddddddbkl.ahrdswy2zzhycjhnrc5dtlkjtb.sluaknhbsoe.com		8.0.0.18	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.253799915 CEST	8.8.8.8	192.168.2.5	0x4b0	No error (0)	94zddddkgdddy999dddhddddddbkl.ahrdswy2zzhycjhnrc5dtlkjtb.sluaknhbsoe.com		12.243.195.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.253799915 CEST	8.8.8.8	192.168.2.5	0x4b0	No error (0)	94zddddkgdddy999dddhddddddbkl.ahrdswy2zzhycjhnrc5dtlkjtb.sluaknhbsoe.com		16.105.56.176	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.253799915 CEST	8.8.8.8	192.168.2.5	0x4b0	No error (0)	94zddddkgdddy999dddhddddddbkl.ahrdswy2zzhycjhnrc5dtlkjtb.sluaknhbsoe.com		20.10.77.215	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.253799915 CEST	8.8.8.8	192.168.2.5	0x4b0	No error (0)	94zddddkgdddy999dddhddddddbkl.ahrdswy2zzhycjhnrc5dtlkjtb.sluaknhbsoe.com		24.79.1.219	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.253799915 CEST	8.8.8.8	192.168.2.5	0x4b0	No error (0)	94zddddkgdddy999dddhddddddbkl.ahrdswy2zzhycjhnrc5dtlkjtb.sluaknhbsoe.com		28.110.248.154	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.253799915 CEST	8.8.8.8	192.168.2.5	0x4b0	No error (0)	94zddddkgdddy999dddhddddddbkl.ahrdswy2zzhycjhnrc5dtlkjtb.sluaknhbsoe.com		32.105.254.208	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.378639936 CEST	8.8.8.8	192.168.2.5	0x35c0	No error (0)	94zdddlmgdddy999dddhdddddlsqm.3n36tykugh2msmneu24ldwmawg.sluaknhbsoe.com		4.0.1.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.378639936 CEST	8.8.8.8	192.168.2.5	0x35c0	No error (0)	94zdddlmgdddy999dddhdddddlsqm.3n36tykugh2msmneu24ldwmawg.sluaknhbsoe.com		8.0.0.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.378639936 CEST	8.8.8.8	192.168.2.5	0x35c0	No error (0)	94zdddlmgdddy999dddhdddddlsqm.3n36tykugh2msmneu24ldwmawg.sluaknhbsoe.com		12.195.218.225	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.378639936 CEST	8.8.8.8	192.168.2.5	0x35c0	No error (0)	94zdddlmgdddy999dddhdddddlsqm.3n36tykugh2msmneu24ldwmawg.sluaknhbsoe.com		16.42.157.245	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.378639936 CEST	8.8.8.8	192.168.2.5	0x35c0	No error (0)	94zdddlmgdddy999dddhdddddlsqm.3n36tykugh2msmneu24ldwmawg.sluaknhbsoe.com		20.234.45.222	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.378639936 CEST	8.8.8.8	192.168.2.5	0x35c0	No error (0)	94zdddlmgdddy999dddhdddddlsqm.3n36tykugh2msmneu24ldwmawg.sluaknhbsoe.com		24.8.74.171	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.378639936 CEST	8.8.8.8	192.168.2.5	0x35c0	No error (0)	94zdddlmgdddy999dddhdddddlsqm.3n36tykugh2msmneu24ldwmawg.sluaknhbsoe.com		28.16.206.103	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.514112949 CEST	8.8.8.8	192.168.2.5	0x76fb	No error (0)	94zdddcfgdddy999dddhddddddbgj.g2kmc25kndupc3e4dzpdgpulfg.sluaknhbsoe.com		4.0.1.89	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.514112949 CEST	8.8.8.8	192.168.2.5	0x76fb	No error (0)	94zdddcfgdddy999dddhddddddbgj.g2kmc25kndupc3e4dzpdgpulfg.sluaknhbsoe.com		8.0.0.12	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.514112949 CEST	8.8.8.8	192.168.2.5	0x76fb	No error (0)	94zdddcfgdddy999dddhddddddbgj.g2kmc25kndupc3e4dzpdgpulfg.sluaknhbsoe.com		12.125.243.26	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.514112949 CEST	8.8.8.8	192.168.2.5	0x76fb	No error (0)	94zdddcfgdddy999dddhddddddbgj.g2kmc25kndupc3e4dzpdgpulfg.sluaknhbsoe.com		16.12.55.61	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.514112949 CEST	8.8.8.8	192.168.2.5	0x76fb	No error (0)	94zdddcfgdddy999dddhddddddbgj.g2kmc25kndupc3e4dzpdgpulfg.sluaknhbsoe.com		20.84.24.206	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.514112949 CEST	8.8.8.8	192.168.2.5	0x76fb	No error (0)	94zdddcfgdddy999dddhddddddbgj.g2kmc25kndupc3e4dzpdgpulfg.sluaknhbsoe.com		24.244.121.91	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.643493891 CEST	8.8.8.8	192.168.2.5	0x9e8b	No error (0)	94zdddsqgdddy999dddhddddddjkn.vd6k4imksj5vcfejmddw3evb4d.sluaknhbsoe.com		4.0.1.101	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.643493891 CEST	8.8.8.8	192.168.2.5	0x9e8b	No error (0)	94zdddsqgdddy999dddhddddddjkn.vd6k4imksj5vcfejmddw3evb4d.sluaknhbsoe.com		8.0.0.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.643493891 CEST	8.8.8.8	192.168.2.5	0x9e8b	No error (0)	94zdddsqgdddy999dddhddddddjkn.vd6k4imksj5vcfejmddw3evb4d.sluaknhbsoe.com		12.81.1.132	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.643493891 CEST	8.8.8.8	192.168.2.5	0x9e8b	No error (0)	94zdddsqgdddy999dddhddddddjkn.vd6k4imksj5vcfejmddw3evb4d.sluaknhbsoe.com		16.230.110.149	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.643493891 CEST	8.8.8.8	192.168.2.5	0x9e8b	No error (0)	94zdddsqgdddy999dddhddddddjkn.vd6k4imksj5vcfejmddw3evb4d.sluaknhbsoe.com		20.213.198.156	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.773020983 CEST	8.8.8.8	192.168.2.5	0x66ad	No error (0)	94zdddprgdddy999dddhdddddp9hi.hqsdkaqoqfeqsg2qwruf3g3zwi.sluaknhbsoe.com		4.0.1.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.773020983 CEST	8.8.8.8	192.168.2.5	0x66ad	No error (0)	94zdddprgdddy999dddhdddddp9hi.hqsdkaqoqfeqsg2qwruf3g3zwi.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.773020983 CEST	8.8.8.8	192.168.2.5	0x66ad	No error (0)	94zdddprgdddy999dddhdddddp9hi.hqsdkaqoqfeqsg2qwruf3g3zwi.sluaknhbsoe.com		12.248.10.47	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.773020983 CEST	8.8.8.8	192.168.2.5	0x66ad	No error (0)	94zdddprgdddy999dddhdddddp9hi.hqsdkaqoqfeqsg2qwruf3g3zwi.sluaknhbsoe.com		16.111.150.138	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.901025057 CEST	8.8.8.8	192.168.2.5	0x96f4	No error (0)	94zdddywgdddy999dddhdddddlrdl.xpgvoywmmvvncrh2xxjjlgshfh.sluaknhbsoe.com		4.0.1.116	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.901025057 CEST	8.8.8.8	192.168.2.5	0x96f4	No error (0)	94zdddywgdddy999dddhdddddlrdl.xpgvoywmmvvncrh2xxjjlgshfh.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.901025057 CEST	8.8.8.8	192.168.2.5	0x96f4	No error (0)	94zdddywgdddy999dddhdddddlrdl.xpgvoywmmvvncrh2xxjjlgshfh.sluaknhbsoe.com		12.199.23.119	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:50.901025057 CEST	8.8.8.8	192.168.2.5	0x96f4	No error (0)	94zdddywgdddy999dddhdddddlrdl.xpgvoywmmvvncrh2xxjjlgshfh.sluaknhbsoe.com		16.52.33.236	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.032803059 CEST	8.8.8.8	192.168.2.5	0x423d	No error (0)	94zdddlxgdddy999dddhddddddhcx.czfwo4pukvuost6zsumtwo3qwk.sluaknhbsoe.com		4.0.1.122	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.032803059 CEST	8.8.8.8	192.168.2.5	0x423d	No error (0)	94zdddlxgdddy999dddhddddddhcx.czfwo4pukvuost6zsumtwo3qwk.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.032803059 CEST	8.8.8.8	192.168.2.5	0x423d	No error (0)	94zdddlxgdddy999dddhddddddhcx.czfwo4pukvuost6zsumtwo3qwk.sluaknhbsoe.com		12.248.255.225	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.032803059 CEST	8.8.8.8	192.168.2.5	0x423d	No error (0)	94zdddlxgdddy999dddhddddddhcx.czfwo4pukvuost6zsumtwo3qwk.sluaknhbsoe.com		16.164.194.177	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.157352924 CEST	8.8.8.8	192.168.2.5	0x3860	No error (0)	94zddddygdddy999dddhdddddpj6l.ztqavv5xluilsdnitnmt3rmmbb.sluaknhbsoe.com		4.0.1.128	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.157352924 CEST	8.8.8.8	192.168.2.5	0x3860	No error (0)	94zddddygdddy999dddhdddddpj6l.ztqavv5xluilsdnitnmt3rmmbb.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.157352924 CEST	8.8.8.8	192.168.2.5	0x3860	No error (0)	94zddddygdddy999dddhdddddpj6l.ztqavv5xluilsdnitnmt3rmmbb.sluaknhbsoe.com		12.67.108.107	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.288600922 CEST	8.8.8.8	192.168.2.5	0xdf2f	No error (0)	94zdddqygdddy999dddhdddddd4oq.slgos5hrghxtct6fjjctwuabqh.sluaknhbsoe.com		4.0.1.131	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.288600922 CEST	8.8.8.8	192.168.2.5	0xdf2f	No error (0)	94zdddqygdddy999dddhdddddd4oq.slgos5hrghxtct6fjjctwuabqh.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.288600922 CEST	8.8.8.8	192.168.2.5	0xdf2f	No error (0)	94zdddqygdddy999dddhdddddd4oq.slgos5hrghxtct6fjjctwuabqh.sluaknhbsoe.com		12.71.87.87	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.417141914 CEST	8.8.8.8	192.168.2.5	0xaaf8	No error (0)	94zdddpygdddy999dddhdddddl2lf.f466gt53chj2c6ho9erpxr29th.sluaknhbsoe.com		4.0.1.134	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.417141914 CEST	8.8.8.8	192.168.2.5	0xaaf8	No error (0)	94zdddpygdddy999dddhdddddl2lf.f466gt53chj2c6ho9erpxr29th.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.417141914 CEST	8.8.8.8	192.168.2.5	0xaaf8	No error (0)	94zdddpygdddy999dddhdddddl2lf.f466gt53chj2c6ho9erpxr29th.sluaknhbsoe.com		12.70.84.123	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.552870989 CEST	8.8.8.8	192.168.2.5	0xd6ec	No error (0)	94zdddczgdddy999dddhdddddlt9q.ky6gpbr3pdqgcdehnyc2t5umrh.sluaknhbsoe.com		4.0.1.137	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.552870989 CEST	8.8.8.8	192.168.2.5	0xd6ec	No error (0)	94zdddczgdddy999dddhdddddlt9q.ky6gpbr3pdqgcdehnyc2t5umrh.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.552870989 CEST	8.8.8.8	192.168.2.5	0xd6ec	No error (0)	94zdddczgdddy999dddhdddddlt9q.ky6gpbr3pdqgcdehnyc2t5umrh.sluaknhbsoe.com		12.94.95.76	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.677292109 CEST	8.8.8.8	192.168.2.5	0x843f	No error (0)	94zdddyzgdddy999dddhdddddlc5j.dzdsgil5wljhc22ljq2eddsowh.sluaknhbsoe.com		4.0.1.140	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.677292109 CEST	8.8.8.8	192.168.2.5	0x843f	No error (0)	94zdddyzgdddy999dddhdddddlc5j.dzdsgil5wljhc22ljq2eddsowh.sluaknhbsoe.com		8.0.0.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.677292109 CEST	8.8.8.8	192.168.2.5	0x843f	No error (0)	94zdddyzgdddy999dddhdddddlc5j.dzdsgil5wljhc22ljq2eddsowh.sluaknhbsoe.com		12.85.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.809010029 CEST	8.8.8.8	192.168.2.5	0x9e89	No error (0)	efkezwpdxpsq3lsdvnsccnq.fuhj4g5qndhshtlghjlpujhqrbvuui.pcc52icgjgfdelsc3ancai.jdnacinun2lihvdacjoibefwddrc.dfptdhnifsnkncndldlddddqdddddd2bm.izpagnu92o4ncu24frquvc2thh.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:51.937931061 CEST	8.8.8.8	192.168.2.5	0x74b4	No error (0)	ohchkwmmnnoecl5hjdphuo.abqfy6haycdgawgpyctglw32a.idzanytccsafc2zcqmviqz.h4ryyny2v4cdapwzpycyaln32iib.gacysdcumfnhyyqmvcwzbdr3yne2pycdddhdzlm.izpagnu92o4ncu24frquvc2thh.sluaknhbsoe.com		195.123.210.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:52.076105118 CEST	8.8.8.8	192.168.2.5	0xb846	No error (0)	gabngpsc2gmqbzzidzacyoccu.gndhylqwbchzbsrodfyhapcdakdgppmdddcdon4.izpagnu92o4ncu24frquvc2thh.sluaknhbsoe.com		129.171.43.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:52.205879927 CEST	8.8.8.8	192.168.2.5	0x8587	No error (0)	wtfgdd496kddydddddd4xgb.osbmhidte5e3sah62qwva54ifi.sluaknhbsoe.com		239.255.255.255	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.356096983 CEST	8.8.8.8	192.168.2.5	0x2e88	No error (0)	wtfgdd496kddyddddddd55g.a9p9ocq6p3pvcde2rj44beig9i.sluaknhbsoe.com		65.99.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.484879971 CEST	8.8.8.8	192.168.2.5	0x5d35	No error (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com		4.0.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.484879971 CEST	8.8.8.8	192.168.2.5	0x5d35	No error (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.484879971 CEST	8.8.8.8	192.168.2.5	0x5d35	No error (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com		12.98.88.72	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.484879971 CEST	8.8.8.8	192.168.2.5	0x5d35	No error (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com		16.6.17.5	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.484879971 CEST	8.8.8.8	192.168.2.5	0x5d35	No error (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com		20.67.15.22	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.484879971 CEST	8.8.8.8	192.168.2.5	0x5d35	No error (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com		24.69.38.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.484879971 CEST	8.8.8.8	192.168.2.5	0x5d35	No error (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com		28.93.66.80	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.484879971 CEST	8.8.8.8	192.168.2.5	0x5d35	No error (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com		32.90.64.85	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.484879971 CEST	8.8.8.8	192.168.2.5	0x5d35	No error (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com		36.75.127.4	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.484879971 CEST	8.8.8.8	192.168.2.5	0x5d35	No error (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com		40.87.83.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.484879971 CEST	8.8.8.8	192.168.2.5	0x5d35	No error (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com		44.87.84.66	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.484879971 CEST	8.8.8.8	192.168.2.5	0x5d35	No error (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com		48.79.121.81	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.484879971 CEST	8.8.8.8	192.168.2.5	0x5d35	No error (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com		52.34.55.83	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.484879971 CEST	8.8.8.8	192.168.2.5	0x5d35	No error (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com		56.89.18.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.484879971 CEST	8.8.8.8	192.168.2.5	0x5d35	No error (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com		60.33.25.117	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.484879971 CEST	8.8.8.8	192.168.2.5	0x5d35	No error (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com		64.36.74.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.484879971 CEST	8.8.8.8	192.168.2.5	0x5d35	No error (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com		68.85.40.77	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.484879971 CEST	8.8.8.8	192.168.2.5	0x5d35	No error (0)	wtfgddddddddy999dddhdddddytrn.rkm2jvlxrt6ncy69ih5sig3xld.sluaknhbsoe.com		72.35.74.98	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.613516092 CEST	8.8.8.8	192.168.2.5	0xfddc	No error (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com		4.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.613516092 CEST	8.8.8.8	192.168.2.5	0xfddc	No error (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.613516092 CEST	8.8.8.8	192.168.2.5	0xfddc	No error (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com		12.100.35.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.613516092 CEST	8.8.8.8	192.168.2.5	0xfddc	No error (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com		16.53.82.84	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.613516092 CEST	8.8.8.8	192.168.2.5	0xfddc	No error (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com		20.52.81.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.613516092 CEST	8.8.8.8	192.168.2.5	0xfddc	No error (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com		24.90.86.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.613516092 CEST	8.8.8.8	192.168.2.5	0xfddc	No error (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com		28.74.42.100	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.613516092 CEST	8.8.8.8	192.168.2.5	0xfddc	No error (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com		32.32.35.97	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.613516092 CEST	8.8.8.8	192.168.2.5	0xfddc	No error (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com		36.6.39.49	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.613516092 CEST	8.8.8.8	192.168.2.5	0xfddc	No error (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com		40.48.39.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.613516092 CEST	8.8.8.8	192.168.2.5	0xfddc	No error (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com		44.54.33.55	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.613516092 CEST	8.8.8.8	192.168.2.5	0xfddc	No error (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com		48.97.16.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.613516092 CEST	8.8.8.8	192.168.2.5	0xfddc	No error (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com		52.35.48.32	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.613516092 CEST	8.8.8.8	192.168.2.5	0xfddc	No error (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com		56.38.52.37	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.613516092 CEST	8.8.8.8	192.168.2.5	0xfddc	No error (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com		60.15.43.38	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.613516092 CEST	8.8.8.8	192.168.2.5	0xfddc	No error (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com		64.51.38.40	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.613516092 CEST	8.8.8.8	192.168.2.5	0xfddc	No error (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com		68.15.86.93	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.613516092 CEST	8.8.8.8	192.168.2.5	0xfddc	No error (0)	wtfgdddjddddy999dddhdddddyr4c.thtqhmqtohknshuxpcnqsjepug.sluaknhbsoe.com		72.24.108.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.749687910 CEST	8.8.8.8	192.168.2.5	0x4c68	No error (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com		4.0.0.96	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.749687910 CEST	8.8.8.8	192.168.2.5	0x4c68	No error (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.749687910 CEST	8.8.8.8	192.168.2.5	0x4c68	No error (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com		12.120.238.223	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.749687910 CEST	8.8.8.8	192.168.2.5	0x4c68	No error (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com		16.97.155.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.749687910 CEST	8.8.8.8	192.168.2.5	0x4c68	No error (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com		20.11.48.152	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.749687910 CEST	8.8.8.8	192.168.2.5	0x4c68	No error (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com		24.101.91.231	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.749687910 CEST	8.8.8.8	192.168.2.5	0x4c68	No error (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com		28.82.34.89	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.749687910 CEST	8.8.8.8	192.168.2.5	0x4c68	No error (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com		32.13.35.124	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.749687910 CEST	8.8.8.8	192.168.2.5	0x4c68	No error (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com		36.143.164.115	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.749687910 CEST	8.8.8.8	192.168.2.5	0x4c68	No error (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com		40.85.207.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.749687910 CEST	8.8.8.8	192.168.2.5	0x4c68	No error (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com		44.235.216.49	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.749687910 CEST	8.8.8.8	192.168.2.5	0x4c68	No error (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com		48.177.50.136	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.749687910 CEST	8.8.8.8	192.168.2.5	0x4c68	No error (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com		52.8.180.25	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.749687910 CEST	8.8.8.8	192.168.2.5	0x4c68	No error (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com		56.221.98.187	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.749687910 CEST	8.8.8.8	192.168.2.5	0x4c68	No error (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com		60.252.8.160	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.749687910 CEST	8.8.8.8	192.168.2.5	0x4c68	No error (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com		64.188.35.62	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.749687910 CEST	8.8.8.8	192.168.2.5	0x4c68	No error (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com		68.22.129.76	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.749687910 CEST	8.8.8.8	192.168.2.5	0x4c68	No error (0)	wtfgdddqddddy999dddhdddddyyih.ppa399dynwgnsjjthlrc4kbsji.sluaknhbsoe.com		72.3.0.10	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.882888079 CEST	8.8.8.8	192.168.2.5	0x9b00	No error (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com		4.0.0.144	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.882888079 CEST	8.8.8.8	192.168.2.5	0x9b00	No error (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com		8.0.0.48	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.882888079 CEST	8.8.8.8	192.168.2.5	0x9b00	No error (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com		12.68.77.165	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.882888079 CEST	8.8.8.8	192.168.2.5	0x9b00	No error (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com		16.48.5.254	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.882888079 CEST	8.8.8.8	192.168.2.5	0x9b00	No error (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com		20.237.234.82	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.882888079 CEST	8.8.8.8	192.168.2.5	0x9b00	No error (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com		24.255.58.73	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.882888079 CEST	8.8.8.8	192.168.2.5	0x9b00	No error (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com		28.99.210.31	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.882888079 CEST	8.8.8.8	192.168.2.5	0x9b00	No error (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com		32.169.29.254	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.882888079 CEST	8.8.8.8	192.168.2.5	0x9b00	No error (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com		36.211.152.67	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.882888079 CEST	8.8.8.8	192.168.2.5	0x9b00	No error (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com		40.233.248.16	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.882888079 CEST	8.8.8.8	192.168.2.5	0x9b00	No error (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com		44.197.124.23	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.882888079 CEST	8.8.8.8	192.168.2.5	0x9b00	No error (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com		48.200.53.91	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.882888079 CEST	8.8.8.8	192.168.2.5	0x9b00	No error (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com		52.157.223.106	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.882888079 CEST	8.8.8.8	192.168.2.5	0x9b00	No error (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com		56.163.1.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.882888079 CEST	8.8.8.8	192.168.2.5	0x9b00	No error (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com		60.104.177.11	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.882888079 CEST	8.8.8.8	192.168.2.5	0x9b00	No error (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com		64.152.252.73	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.882888079 CEST	8.8.8.8	192.168.2.5	0x9b00	No error (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com		68.15.227.141	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:55.882888079 CEST	8.8.8.8	192.168.2.5	0x9b00	No error (0)	wtfgddd2ddddy999dddhdddddymaj.3yud9k92j35wsz6jvix9bz4sbc.sluaknhbsoe.com		72.184.23.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.011960983 CEST	8.8.8.8	192.168.2.5	0x9a76	No error (0)	wtfgdddpddddy999dddhddddddgci.n2eurt5u5ewrc9hbnpldsxvfoc.sluaknhbsoe.com		4.0.0.192	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.011960983 CEST	8.8.8.8	192.168.2.5	0x9a76	No error (0)	wtfgdddpddddy999dddhddddddgci.n2eurt5u5ewrc9hbnpldsxvfoc.sluaknhbsoe.com		8.0.0.39	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.011960983 CEST	8.8.8.8	192.168.2.5	0x9a76	No error (0)	wtfgdddpddddy999dddhddddddgci.n2eurt5u5ewrc9hbnpldsxvfoc.sluaknhbsoe.com		12.184.209.208	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.011960983 CEST	8.8.8.8	192.168.2.5	0x9a76	No error (0)	wtfgdddpddddy999dddhddddddgci.n2eurt5u5ewrc9hbnpldsxvfoc.sluaknhbsoe.com		16.236.75.228	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.011960983 CEST	8.8.8.8	192.168.2.5	0x9a76	No error (0)	wtfgdddpddddy999dddhddddddgci.n2eurt5u5ewrc9hbnpldsxvfoc.sluaknhbsoe.com		20.233.230.157	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.011960983 CEST	8.8.8.8	192.168.2.5	0x9a76	No error (0)	wtfgdddpddddy999dddhddddddgci.n2eurt5u5ewrc9hbnpldsxvfoc.sluaknhbsoe.com		24.78.74.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.011960983 CEST	8.8.8.8	192.168.2.5	0x9a76	No error (0)	wtfgdddpddddy999dddhddddddgci.n2eurt5u5ewrc9hbnpldsxvfoc.sluaknhbsoe.com		28.153.247.158	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.011960983 CEST	8.8.8.8	192.168.2.5	0x9a76	No error (0)	wtfgdddpddddy999dddhddddddgci.n2eurt5u5ewrc9hbnpldsxvfoc.sluaknhbsoe.com		32.186.46.104	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.011960983 CEST	8.8.8.8	192.168.2.5	0x9a76	No error (0)	wtfgdddpddddy999dddhddddddgci.n2eurt5u5ewrc9hbnpldsxvfoc.sluaknhbsoe.com		36.226.97.51	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.011960983 CEST	8.8.8.8	192.168.2.5	0x9a76	No error (0)	wtfgdddpddddy999dddhddddddgci.n2eurt5u5ewrc9hbnpldsxvfoc.sluaknhbsoe.com		40.166.182.45	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.011960983 CEST	8.8.8.8	192.168.2.5	0x9a76	No error (0)	wtfgdddpddddy999dddhddddddgci.n2eurt5u5ewrc9hbnpldsxvfoc.sluaknhbsoe.com		44.245.120.77	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.011960983 CEST	8.8.8.8	192.168.2.5	0x9a76	No error (0)	wtfgdddpddddy999dddhddddddgci.n2eurt5u5ewrc9hbnpldsxvfoc.sluaknhbsoe.com		48.184.82.24	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.011960983 CEST	8.8.8.8	192.168.2.5	0x9a76	No error (0)	wtfgdddpddddy999dddhddddddgci.n2eurt5u5ewrc9hbnpldsxvfoc.sluaknhbsoe.com		52.135.183.202	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.011960983 CEST	8.8.8.8	192.168.2.5	0x9a76	No error (0)	wtfgdddpddddy999dddhddddddgci.n2eurt5u5ewrc9hbnpldsxvfoc.sluaknhbsoe.com		56.186.33.133	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.011960983 CEST	8.8.8.8	192.168.2.5	0x9a76	No error (0)	wtfgdddpddddy999dddhddddddgci.n2eurt5u5ewrc9hbnpldsxvfoc.sluaknhbsoe.com		60.73.69.172	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.140192986 CEST	8.8.8.8	192.168.2.5	0xb48e	No error (0)	wtfgdd44ddddy999dddhdddddlp5r.gdwq5vmj6uojsdnpqrae5wxigi.sluaknhbsoe.com		4.0.0.231	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.140192986 CEST	8.8.8.8	192.168.2.5	0xb48e	No error (0)	wtfgdd44ddddy999dddhdddddlp5r.gdwq5vmj6uojsdnpqrae5wxigi.sluaknhbsoe.com		8.0.0.33	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.140192986 CEST	8.8.8.8	192.168.2.5	0xb48e	No error (0)	wtfgdd44ddddy999dddhdddddlp5r.gdwq5vmj6uojsdnpqrae5wxigi.sluaknhbsoe.com		12.52.20.154	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.140192986 CEST	8.8.8.8	192.168.2.5	0xb48e	No error (0)	wtfgdd44ddddy999dddhdddddlp5r.gdwq5vmj6uojsdnpqrae5wxigi.sluaknhbsoe.com		16.245.69.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.140192986 CEST	8.8.8.8	192.168.2.5	0xb48e	No error (0)	wtfgdd44ddddy999dddhdddddlp5r.gdwq5vmj6uojsdnpqrae5wxigi.sluaknhbsoe.com		20.82.82.90	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.140192986 CEST	8.8.8.8	192.168.2.5	0xb48e	No error (0)	wtfgdd44ddddy999dddhdddddlp5r.gdwq5vmj6uojsdnpqrae5wxigi.sluaknhbsoe.com		24.21.60.40	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.140192986 CEST	8.8.8.8	192.168.2.5	0xb48e	No error (0)	wtfgdd44ddddy999dddhdddddlp5r.gdwq5vmj6uojsdnpqrae5wxigi.sluaknhbsoe.com		28.125.56.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.140192986 CEST	8.8.8.8	192.168.2.5	0xb48e	No error (0)	wtfgdd44ddddy999dddhdddddlp5r.gdwq5vmj6uojsdnpqrae5wxigi.sluaknhbsoe.com		32.77.107.236	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.140192986 CEST	8.8.8.8	192.168.2.5	0xb48e	No error (0)	wtfgdd44ddddy999dddhdddddlp5r.gdwq5vmj6uojsdnpqrae5wxigi.sluaknhbsoe.com		36.254.218.179	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.140192986 CEST	8.8.8.8	192.168.2.5	0xb48e	No error (0)	wtfgdd44ddddy999dddhdddddlp5r.gdwq5vmj6uojsdnpqrae5wxigi.sluaknhbsoe.com		40.101.107.253	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.140192986 CEST	8.8.8.8	192.168.2.5	0xb48e	No error (0)	wtfgdd44ddddy999dddhdddddlp5r.gdwq5vmj6uojsdnpqrae5wxigi.sluaknhbsoe.com		44.32.231.178	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.140192986 CEST	8.8.8.8	192.168.2.5	0xb48e	No error (0)	wtfgdd44ddddy999dddhdddddlp5r.gdwq5vmj6uojsdnpqrae5wxigi.sluaknhbsoe.com		48.204.33.57	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.140192986 CEST	8.8.8.8	192.168.2.5	0xb48e	No error (0)	wtfgdd44ddddy999dddhdddddlp5r.gdwq5vmj6uojsdnpqrae5wxigi.sluaknhbsoe.com		52.10.4.210	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.271888018 CEST	8.8.8.8	192.168.2.5	0x59bd	No error (0)	wtfgdddggdddy999dddhdddddd2hf.r43e9fu33m4nchwrssjevbknsi.sluaknhbsoe.com		4.0.1.8	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.271888018 CEST	8.8.8.8	192.168.2.5	0x59bd	No error (0)	wtfgdddggdddy999dddhdddddd2hf.r43e9fu33m4nchwrssjevbknsi.sluaknhbsoe.com		8.0.0.27	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.271888018 CEST	8.8.8.8	192.168.2.5	0x59bd	No error (0)	wtfgdddggdddy999dddhdddddd2hf.r43e9fu33m4nchwrssjevbknsi.sluaknhbsoe.com		12.113.30.69	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.271888018 CEST	8.8.8.8	192.168.2.5	0x59bd	No error (0)	wtfgdddggdddy999dddhdddddd2hf.r43e9fu33m4nchwrssjevbknsi.sluaknhbsoe.com		16.141.12.183	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.271888018 CEST	8.8.8.8	192.168.2.5	0x59bd	No error (0)	wtfgdddggdddy999dddhdddddd2hf.r43e9fu33m4nchwrssjevbknsi.sluaknhbsoe.com		20.111.183.79	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.271888018 CEST	8.8.8.8	192.168.2.5	0x59bd	No error (0)	wtfgdddggdddy999dddhdddddd2hf.r43e9fu33m4nchwrssjevbknsi.sluaknhbsoe.com		24.0.1.41	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.271888018 CEST	8.8.8.8	192.168.2.5	0x59bd	No error (0)	wtfgdddggdddy999dddhdddddd2hf.r43e9fu33m4nchwrssjevbknsi.sluaknhbsoe.com		28.232.75.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.271888018 CEST	8.8.8.8	192.168.2.5	0x59bd	No error (0)	wtfgdddggdddy999dddhdddddd2hf.r43e9fu33m4nchwrssjevbknsi.sluaknhbsoe.com		32.126.3.88	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.271888018 CEST	8.8.8.8	192.168.2.5	0x59bd	No error (0)	wtfgdddggdddy999dddhdddddd2hf.r43e9fu33m4nchwrssjevbknsi.sluaknhbsoe.com		36.74.177.128	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.271888018 CEST	8.8.8.8	192.168.2.5	0x59bd	No error (0)	wtfgdddggdddy999dddhdddddd2hf.r43e9fu33m4nchwrssjevbknsi.sluaknhbsoe.com		40.37.81.219	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.271888018 CEST	8.8.8.8	192.168.2.5	0x59bd	No error (0)	wtfgdddggdddy999dddhdddddd2hf.r43e9fu33m4nchwrssjevbknsi.sluaknhbsoe.com		44.30.244.160	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.395081043 CEST	8.8.8.8	192.168.2.5	0xe07d	No error (0)	wtfgddqcgdddy999dddhdddddyrgb.y2qlfk5gupk2s96e3e3kk2fpbi.sluaknhbsoe.com		4.0.1.35	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.395081043 CEST	8.8.8.8	192.168.2.5	0xe07d	No error (0)	wtfgddqcgdddy999dddhdddddyrgb.y2qlfk5gupk2s96e3e3kk2fpbi.sluaknhbsoe.com		8.0.0.21	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.395081043 CEST	8.8.8.8	192.168.2.5	0xe07d	No error (0)	wtfgddqcgdddy999dddhdddddyrgb.y2qlfk5gupk2s96e3e3kk2fpbi.sluaknhbsoe.com		12.126.120.121	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.395081043 CEST	8.8.8.8	192.168.2.5	0xe07d	No error (0)	wtfgddqcgdddy999dddhdddddyrgb.y2qlfk5gupk2s96e3e3kk2fpbi.sluaknhbsoe.com		16.117.2.19	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.395081043 CEST	8.8.8.8	192.168.2.5	0xe07d	No error (0)	wtfgddqcgdddy999dddhdddddyrgb.y2qlfk5gupk2s96e3e3kk2fpbi.sluaknhbsoe.com		20.221.106.233	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.395081043 CEST	8.8.8.8	192.168.2.5	0xe07d	No error (0)	wtfgddqcgdddy999dddhdddddyrgb.y2qlfk5gupk2s96e3e3kk2fpbi.sluaknhbsoe.com		24.251.48.68	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.395081043 CEST	8.8.8.8	192.168.2.5	0xe07d	No error (0)	wtfgddqcgdddy999dddhdddddyrgb.y2qlfk5gupk2s96e3e3kk2fpbi.sluaknhbsoe.com		28.138.203.120	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.395081043 CEST	8.8.8.8	192.168.2.5	0xe07d	No error (0)	wtfgddqcgdddy999dddhdddddyrgb.y2qlfk5gupk2s96e3e3kk2fpbi.sluaknhbsoe.com		32.237.62.62	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.395081043 CEST	8.8.8.8	192.168.2.5	0xe07d	No error (0)	wtfgddqcgdddy999dddhdddddyrgb.y2qlfk5gupk2s96e3e3kk2fpbi.sluaknhbsoe.com		36.164.198.147	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.523591042 CEST	8.8.8.8	192.168.2.5	0xcce8	No error (0)	wtfgdddkgdddy999dddhdddddy5il.q2ign3t2aj5rse6r43psplfcmi.sluaknhbsoe.com		4.0.1.56	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.523591042 CEST	8.8.8.8	192.168.2.5	0xcce8	No error (0)	wtfgdddkgdddy999dddhdddddy5il.q2ign3t2aj5rse6r43psplfcmi.sluaknhbsoe.com		8.0.0.18	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.523591042 CEST	8.8.8.8	192.168.2.5	0xcce8	No error (0)	wtfgdddkgdddy999dddhdddddy5il.q2ign3t2aj5rse6r43psplfcmi.sluaknhbsoe.com		12.243.195.189	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.523591042 CEST	8.8.8.8	192.168.2.5	0xcce8	No error (0)	wtfgdddkgdddy999dddhdddddy5il.q2ign3t2aj5rse6r43psplfcmi.sluaknhbsoe.com		16.105.56.176	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.523591042 CEST	8.8.8.8	192.168.2.5	0xcce8	No error (0)	wtfgdddkgdddy999dddhdddddy5il.q2ign3t2aj5rse6r43psplfcmi.sluaknhbsoe.com		20.10.77.215	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.523591042 CEST	8.8.8.8	192.168.2.5	0xcce8	No error (0)	wtfgdddkgdddy999dddhdddddy5il.q2ign3t2aj5rse6r43psplfcmi.sluaknhbsoe.com		24.79.1.219	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.523591042 CEST	8.8.8.8	192.168.2.5	0xcce8	No error (0)	wtfgdddkgdddy999dddhdddddy5il.q2ign3t2aj5rse6r43psplfcmi.sluaknhbsoe.com		28.110.248.154	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.523591042 CEST	8.8.8.8	192.168.2.5	0xcce8	No error (0)	wtfgdddkgdddy999dddhdddddy5il.q2ign3t2aj5rse6r43psplfcmi.sluaknhbsoe.com		32.105.254.208	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.653734922 CEST	8.8.8.8	192.168.2.5	0x724c	No error (0)	wtfgddlmgdddy999dddhdddddy5jf.xti554ejkppjswwilaod54xp5i.sluaknhbsoe.com		4.0.1.74	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.653734922 CEST	8.8.8.8	192.168.2.5	0x724c	No error (0)	wtfgddlmgdddy999dddhdddddy5jf.xti554ejkppjswwilaod54xp5i.sluaknhbsoe.com		8.0.0.15	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.653734922 CEST	8.8.8.8	192.168.2.5	0x724c	No error (0)	wtfgddlmgdddy999dddhdddddy5jf.xti554ejkppjswwilaod54xp5i.sluaknhbsoe.com		12.195.218.225	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.653734922 CEST	8.8.8.8	192.168.2.5	0x724c	No error (0)	wtfgddlmgdddy999dddhdddddy5jf.xti554ejkppjswwilaod54xp5i.sluaknhbsoe.com		16.42.157.245	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.653734922 CEST	8.8.8.8	192.168.2.5	0x724c	No error (0)	wtfgddlmgdddy999dddhdddddy5jf.xti554ejkppjswwilaod54xp5i.sluaknhbsoe.com		20.234.45.222	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.653734922 CEST	8.8.8.8	192.168.2.5	0x724c	No error (0)	wtfgddlmgdddy999dddhdddddy5jf.xti554ejkppjswwilaod54xp5i.sluaknhbsoe.com		24.8.74.171	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.653734922 CEST	8.8.8.8	192.168.2.5	0x724c	No error (0)	wtfgddlmgdddy999dddhdddddy5jf.xti554ejkppjswwilaod54xp5i.sluaknhbsoe.com		28.16.206.103	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.780783892 CEST	8.8.8.8	192.168.2.5	0x4473	No error (0)	wtfgddcfgdddy999dddhdddddlrcn.ityoxilmbyk9cawra5lyzbs2aj.sluaknhbsoe.com		4.0.1.89	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.780783892 CEST	8.8.8.8	192.168.2.5	0x4473	No error (0)	wtfgddcfgdddy999dddhdddddlrcn.ityoxilmbyk9cawra5lyzbs2aj.sluaknhbsoe.com		8.0.0.12	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.780783892 CEST	8.8.8.8	192.168.2.5	0x4473	No error (0)	wtfgddcfgdddy999dddhdddddlrcn.ityoxilmbyk9cawra5lyzbs2aj.sluaknhbsoe.com		12.125.243.26	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.780783892 CEST	8.8.8.8	192.168.2.5	0x4473	No error (0)	wtfgddcfgdddy999dddhdddddlrcn.ityoxilmbyk9cawra5lyzbs2aj.sluaknhbsoe.com		16.12.55.61	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.780783892 CEST	8.8.8.8	192.168.2.5	0x4473	No error (0)	wtfgddcfgdddy999dddhdddddlrcn.ityoxilmbyk9cawra5lyzbs2aj.sluaknhbsoe.com		20.84.24.206	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.780783892 CEST	8.8.8.8	192.168.2.5	0x4473	No error (0)	wtfgddcfgdddy999dddhdddddlrcn.ityoxilmbyk9cawra5lyzbs2aj.sluaknhbsoe.com		24.244.121.91	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.906598091 CEST	8.8.8.8	192.168.2.5	0x1c4c	No error (0)	wtfgddsqgdddy999dddhdddddlf4r.xvm6itkixjw5crj2svitnjhjmg.sluaknhbsoe.com		4.0.1.101	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.906598091 CEST	8.8.8.8	192.168.2.5	0x1c4c	No error (0)	wtfgddsqgdddy999dddhdddddlf4r.xvm6itkixjw5crj2svitnjhjmg.sluaknhbsoe.com		8.0.0.9	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.906598091 CEST	8.8.8.8	192.168.2.5	0x1c4c	No error (0)	wtfgddsqgdddy999dddhdddddlf4r.xvm6itkixjw5crj2svitnjhjmg.sluaknhbsoe.com		12.81.1.132	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.906598091 CEST	8.8.8.8	192.168.2.5	0x1c4c	No error (0)	wtfgddsqgdddy999dddhdddddlf4r.xvm6itkixjw5crj2svitnjhjmg.sluaknhbsoe.com		16.230.110.149	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:56.906598091 CEST	8.8.8.8	192.168.2.5	0x1c4c	No error (0)	wtfgddsqgdddy999dddhdddddlf4r.xvm6itkixjw5crj2svitnjhjmg.sluaknhbsoe.com		20.213.198.156	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.038269997 CEST	8.8.8.8	192.168.2.5	0xa94e	No error (0)	wtfgddprgdddy999dddhdddddybgg.uuyk2gaz4nshsejszhb2zssvyh.sluaknhbsoe.com		4.0.1.110	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.038269997 CEST	8.8.8.8	192.168.2.5	0xa94e	No error (0)	wtfgddprgdddy999dddhdddddybgg.uuyk2gaz4nshsejszhb2zssvyh.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.038269997 CEST	8.8.8.8	192.168.2.5	0xa94e	No error (0)	wtfgddprgdddy999dddhdddddybgg.uuyk2gaz4nshsejszhb2zssvyh.sluaknhbsoe.com		12.248.10.47	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.038269997 CEST	8.8.8.8	192.168.2.5	0xa94e	No error (0)	wtfgddprgdddy999dddhdddddybgg.uuyk2gaz4nshsejszhb2zssvyh.sluaknhbsoe.com		16.111.150.138	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.165296078 CEST	8.8.8.8	192.168.2.5	0x325f	No error (0)	wtfgddywgdddy999dddhdddddlphc.ty3luv3ax4vusj6yru4qwtkork.sluaknhbsoe.com		4.0.1.116	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.165296078 CEST	8.8.8.8	192.168.2.5	0x325f	No error (0)	wtfgddywgdddy999dddhdddddlphc.ty3luv3ax4vusj6yru4qwtkork.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.165296078 CEST	8.8.8.8	192.168.2.5	0x325f	No error (0)	wtfgddywgdddy999dddhdddddlphc.ty3luv3ax4vusj6yru4qwtkork.sluaknhbsoe.com		12.199.23.119	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.165296078 CEST	8.8.8.8	192.168.2.5	0x325f	No error (0)	wtfgddywgdddy999dddhdddddlphc.ty3luv3ax4vusj6yru4qwtkork.sluaknhbsoe.com		16.52.33.236	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.304668903 CEST	8.8.8.8	192.168.2.5	0x212c	No error (0)	wtfgddlxgdddy999dddhddddddhnl.ex9b3ql5tb4ccxjoqvx9izqotj.sluaknhbsoe.com		4.0.1.122	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.304668903 CEST	8.8.8.8	192.168.2.5	0x212c	No error (0)	wtfgddlxgdddy999dddhddddddhnl.ex9b3ql5tb4ccxjoqvx9izqotj.sluaknhbsoe.com		8.0.0.6	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.304668903 CEST	8.8.8.8	192.168.2.5	0x212c	No error (0)	wtfgddlxgdddy999dddhddddddhnl.ex9b3ql5tb4ccxjoqvx9izqotj.sluaknhbsoe.com		12.248.255.225	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.304668903 CEST	8.8.8.8	192.168.2.5	0x212c	No error (0)	wtfgddlxgdddy999dddhddddddhnl.ex9b3ql5tb4ccxjoqvx9izqotj.sluaknhbsoe.com		16.164.194.177	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.430094004 CEST	8.8.8.8	192.168.2.5	0xf848	No error (0)	wtfgdddygdddy999dddhddddddufk.xfrrqmnf6eg4shnisdim3meypb.sluaknhbsoe.com		4.0.1.128	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.430094004 CEST	8.8.8.8	192.168.2.5	0xf848	No error (0)	wtfgdddygdddy999dddhddddddufk.xfrrqmnf6eg4shnisdim3meypb.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.430094004 CEST	8.8.8.8	192.168.2.5	0xf848	No error (0)	wtfgdddygdddy999dddhddddddufk.xfrrqmnf6eg4shnisdim3meypb.sluaknhbsoe.com		12.67.108.107	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.558336973 CEST	8.8.8.8	192.168.2.5	0x32f8	No error (0)	wtfgddqygdddy999dddhddddddffh.ynlxdlzabgq9sonkpi3mnbw49g.sluaknhbsoe.com		4.0.1.131	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.558336973 CEST	8.8.8.8	192.168.2.5	0x32f8	No error (0)	wtfgddqygdddy999dddhddddddffh.ynlxdlzabgq9sonkpi3mnbw49g.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.558336973 CEST	8.8.8.8	192.168.2.5	0x32f8	No error (0)	wtfgddqygdddy999dddhddddddffh.ynlxdlzabgq9sonkpi3mnbw49g.sluaknhbsoe.com		12.71.87.87	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.691174030 CEST	8.8.8.8	192.168.2.5	0x9fb8	No error (0)	wtfgddpygdddy999dddhdddddpp6f.626igjzvbw6gs3u4s6neazuuqh.sluaknhbsoe.com		4.0.1.134	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.691174030 CEST	8.8.8.8	192.168.2.5	0x9fb8	No error (0)	wtfgddpygdddy999dddhdddddpp6f.626igjzvbw6gs3u4s6neazuuqh.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.691174030 CEST	8.8.8.8	192.168.2.5	0x9fb8	No error (0)	wtfgddpygdddy999dddhdddddpp6f.626igjzvbw6gs3u4s6neazuuqh.sluaknhbsoe.com		12.70.84.123	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.817132950 CEST	8.8.8.8	192.168.2.5	0xf7f7	No error (0)	wtfgddczgdddy999dddhdddddppxg.xm53j6ixi6f5s62rumlc6wrjuc.sluaknhbsoe.com		4.0.1.137	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.817132950 CEST	8.8.8.8	192.168.2.5	0xf7f7	No error (0)	wtfgddczgdddy999dddhdddddppxg.xm53j6ixi6f5s62rumlc6wrjuc.sluaknhbsoe.com		8.0.0.3	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.817132950 CEST	8.8.8.8	192.168.2.5	0xf7f7	No error (0)	wtfgddczgdddy999dddhdddddppxg.xm53j6ixi6f5s62rumlc6wrjuc.sluaknhbsoe.com		12.94.95.76	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.972803116 CEST	8.8.8.8	192.168.2.5	0x242d	No error (0)	wtfgddyzgdddy999dddhdddddyf5c.2gh3s34zvlokc4ua9gamk66mzk.sluaknhbsoe.com		4.0.1.140	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.972803116 CEST	8.8.8.8	192.168.2.5	0x242d	No error (0)	wtfgddyzgdddy999dddhdddddyf5c.2gh3s34zvlokc4ua9gamk66mzk.sluaknhbsoe.com		8.0.0.1	A (IP address)	IN (0x0001)
Apr 5, 2021 07:50:57.972803116 CEST	8.8.8.8	192.168.2.5	0x242d	No error (0)	wtfgddyzgdddy999dddhdddddyf5c.2gh3s34zvlokc4ua9gamk66mzk.sluaknhbsoe.com		12.85.0.0	A (IP address)	IN (0x0001)
Apr 5, 2021 07:51:35.804020882 CEST	8.8.8.8	192.168.2.5	0x8dfc	No error (0)	prda.aadg.msidentity.com	www.tm.a.prd.aadg.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Apr 5, 2021 07:52:23.185467005 CEST	8.8.8.8	192.168.2.5	0x39e5	No error (0)	checkip.amazonaws.com	checkip.check-ip.aws.a2z.com		CNAME (Canonical name)	IN (0x0001)
Apr 5, 2021 07:52:23.185467005 CEST	8.8.8.8	192.168.2.5	0x39e5	No error (0)	checkip.check-ip.aws.a2z.com	checkip.us-east-1.prod.check-ip.aws.a2z.com		CNAME (Canonical name)	IN (0x0001)
Apr 5, 2021 07:52:23.185467005 CEST	8.8.8.8	192.168.2.5	0x39e5	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		3.224.94.38	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:23.185467005 CEST	8.8.8.8	192.168.2.5	0x39e5	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		52.20.197.7	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:23.185467005 CEST	8.8.8.8	192.168.2.5	0x39e5	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		3.211.138.232	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:23.185467005 CEST	8.8.8.8	192.168.2.5	0x39e5	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		107.21.162.206	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:23.185467005 CEST	8.8.8.8	192.168.2.5	0x39e5	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		3.222.126.94	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:23.185467005 CEST	8.8.8.8	192.168.2.5	0x39e5	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		23.21.27.29	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:23.185467005 CEST	8.8.8.8	192.168.2.5	0x39e5	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		34.192.7.28	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:23.185467005 CEST	8.8.8.8	192.168.2.5	0x39e5	No error (0)	checkip.us-east-1.prod.check-ip.aws.a2z.com		23.22.217.86	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:28.497823000 CEST	8.8.8.8	192.168.2.5	0x4c8	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:29.494926929 CEST	8.8.8.8	192.168.2.5	0x4c8	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:29.517997026 CEST	8.8.8.8	192.168.2.5	0x4c8	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:31.522336006 CEST	8.8.8.8	192.168.2.5	0x4c8	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:32.570938110 CEST	8.8.8.8	192.168.2.5	0x9316	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:33.557555914 CEST	8.8.8.8	192.168.2.5	0x9316	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:35.851516962 CEST	8.8.8.8	192.168.2.5	0x9316	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:36.652715921 CEST	8.8.8.8	192.168.2.5	0x80b5	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:37.647181988 CEST	8.8.8.8	192.168.2.5	0x80b5	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:38.660361052 CEST	8.8.8.8	192.168.2.5	0x80b5	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)
Apr 5, 2021 07:52:40.675978899 CEST	8.8.8.8	192.168.2.5	0x80b5	Server failure (2)	xyskencevli.com	none	none	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

checkip.amazonaws.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.5	49707	3.211.138.232	80	C:\Users\user\Desktop\anchor_x64.exe

Timestamp	kBytes transferred	Direction	Data
Apr 5, 2021 07:44:25.622714996 CEST	1401	OUT	GET / HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache User-Agent: WinHTTP loader/1.0 Host: checkip.amazonaws.com
Apr 5, 2021 07:44:25.747306108 CEST	1401	IN	HTTP/1.1 200 OK Date: Mon, 05 Apr 2021 05:44:25 GMT Server: lighttpd/1.4.53 Content-Length: 12 Connection: keep-alive Data Raw: 38 34 2e 31 37 2e 35 32 2e 37 39 0a Data Ascii: 84.17.52.79

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.5	49739	52.20.197.7	80	C:\Users\user\Desktop\anchor_x64.exe

Timestamp	kBytes transferred	Direction	Data
Apr 5, 2021 07:46:23.076143980 CEST	6612	OUT	GET / HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache User-Agent: WinHTTP loader/1.0 Host: checkip.amazonaws.com
Apr 5, 2021 07:46:23.200896978 CEST	6612	IN	HTTP/1.1 200 OK Date: Mon, 05 Apr 2021 05:46:23 GMT Server: lighttpd/1.4.53 Content-Length: 12 Connection: keep-alive Data Raw: 38 34 2e 31 37 2e 35 32 2e 37 39 0a Data Ascii: 84.17.52.79

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.5	49740	3.211.138.232	80	C:\Users\user\Desktop\anchor_x64.exe

Timestamp	kBytes transferred	Direction	Data
Apr 5, 2021 07:48:23.964862108 CEST	6616	OUT	GET / HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache User-Agent: WinHTTP loader/1.0 Host: checkip.amazonaws.com
Apr 5, 2021 07:48:24.088776112 CEST	6617	IN	HTTP/1.1 200 OK Date: Mon, 05 Apr 2021 05:48:24 GMT Server: lighttpd/1.4.53 Content-Length: 12 Connection: keep-alive Data Raw: 38 34 2e 31 37 2e 35 32 2e 37 39 0a Data Ascii: 84.17.52.79

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.5	49746	52.20.197.7	80	C:\Users\user\Desktop\anchor_x64.exe

Timestamp	kBytes transferred	Direction	Data
Apr 5, 2021 07:50:24.671228886 CEST	6790	OUT	GET / HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache User-Agent: WinHTTP loader/1.0 Host: checkip.amazonaws.com
Apr 5, 2021 07:50:24.796149015 CEST	6790	IN	HTTP/1.1 200 OK Date: Mon, 05 Apr 2021 05:50:24 GMT Server: lighttpd/1.4.53 Content-Length: 12 Connection: keep-alive Data Raw: 38 34 2e 31 37 2e 35 32 2e 37 39 0a Data Ascii: 84.17.52.79

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: anchor_x64.exe PID: 5668 Parent PID: 5620

General

Start time:	07:44:22
Start date:	05/04/2021
Path:	C:\Users\user\Desktop\anchor_x64.exe
Wow64 process (32bit):	false
Commandline:	'C:\Users\user\Desktop\anchor_x64.exe'
Imagebase:	0x7ff6b4420000
File size:	347648 bytes
MD5 hash:	86FEFA2E8BE486A49782D4D04095015E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: anchor_x64.exe PID: 5732 Parent PID: 904

General

Start time:	07:44:24
Start date:	05/04/2021
Path:	C:\Users\user\Desktop\anchor_x64.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Desktop\anchor_x64.exe -u
Imagebase:	0x7ff6b4420000
File size:	347648 bytes
MD5 hash:	86FEFA2E8BE486A49782D4D04095015E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: anchor_x64.exe PID: 3756 Parent PID: 904

General

Start time:	07:46:22
Start date:	05/04/2021
Path:	C:\Users\user\Desktop\anchor_x64.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Desktop\anchor_x64.exe -u
Imagebase:	0x7ff649940000
File size:	347648 bytes
MD5 hash:	86FEFA2E8BE486A49782D4D04095015E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: anchor_x64.exe PID: 6788 Parent PID: 904

General

Start time:	07:48:22
Start date:	05/04/2021
Path:	C:\Users\user\Desktop\anchor_x64.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Desktop\anchor_x64.exe -u
Imagebase:	0x7ff649940000
File size:	347648 bytes
MD5 hash:	86FEFA2E8BE486A49782D4D04095015E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Disassembly

Code Analysis

Reset < >

Analysis Process: anchor_x64.exe PID: 5668 Parent PID: 5620 anchor_x64.exeCOMMON

Execution Graph

Execution Coverage:	10.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	32.1%
Total number of Nodes:	2000
Total number of Limit Nodes:	18

Executed Functions

Function 00007FF6B44303FD, Relevance: 93.0, APIs: 46, Strings: 5, Instructions: 3731memorytimeCOMMON

Download Yara Rule

APIs

GetLocalTime.KERNEL32 ref: 00007FF6B4430AE3
GetUserNameW.ADVAPI32 ref: 00007FF6B4430D9E
VariantInit.OLEAUT32 ref: 00007FF6B44315E8
VariantInit.OLEAUT32 ref: 00007FF6B443160A
VariantInit.OLEAUT32 ref: 00007FF6B443162C
VariantInit.OLEAUT32 ref: 00007FF6B443164D
VariantClear.OLEAUT32 ref: 00007FF6B443168C
VariantClear.OLEAUT32 ref: 00007FF6B4431695
VariantClear.OLEAUT32 ref: 00007FF6B443169E
VariantClear.OLEAUT32 ref: 00007FF6B44316A7
SysAllocString.OLEAUT32 ref: 00007FF6B44316E2
SysFreeString.OLEAUT32 ref: 00007FF6B4431725

Part of subcall function 00007FF6B4435E0C: LocalFree.KERNEL32(?,?,?,?,?,?,?,00000000,00007FF6B4431999), ref: 00007FF6B4435E72

VariantClear.OLEAUT32 ref: 00007FF6B4431833
SysFreeString.OLEAUT32 ref: 00007FF6B4431916
VariantClear.OLEAUT32 ref: 00007FF6B44339EA
VariantClear.OLEAUT32 ref: 00007FF6B44339F3
VariantClear.OLEAUT32 ref: 00007FF6B44339FC
VariantClear.OLEAUT32 ref: 00007FF6B4433A05

Strings

%iM, xrefs: 00007FF6B443237D
C:\Users\user\Desktop\anchor_x64.exe, xrefs: 00007FF6B4432F3D
AnchorDNS.cpp, xrefs: 00007FF6B4431903, 00007FF6B443194E, 00007FF6B44319A8, 00007FF6B44319ED, 00007FF6B4431A21, 00007FF6B4431A49, 00007FF6B4431AFD, 00007FF6B4431C1B, 00007FF6B4431CD0, 00007FF6B4431DFF, 00007FF6B4431E51, 00007FF6B4431F27, 00007FF6B4431F66, 00007FF6B4431FB0, 00007FF6B4431FEE, 00007FF6B4432236, 00007FF6B443274D, 00007FF6B4432809, 00007FF6B4432E85, 00007FF6B4432EE6, 00007FF6B44332F6, 00007FF6B44333D2, 00007FF6B4433857
@, xrefs: 00007FF6B44334AC
PT2M, xrefs: 00007FF6B4432177, 00007FF6B443238E

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: Variant$Clear$Init$FreeString$Local$AllocNameTimeUser
String ID: %iM$@$AnchorDNS.cpp$C:\Users\user\Desktop\anchor_x64.exe$PT2M
API String ID: 1053553721-1520563999
Opcode ID: 21d90337bb69b6b6baac76ed175b79abc14d48f35b04f2e97a9a73dbcba91590
Instruction ID: 388a091084ba9f11e58f1e7fe5f153ee57a71f6a07578fd3973df66d992a9824
Opcode Fuzzy Hash: 21d90337bb69b6b6baac76ed175b79abc14d48f35b04f2e97a9a73dbcba91590
Instruction Fuzzy Hash: 0263E2236096C18FEB21CF38D4D13EE3BA2EB66758F059135C7498779ACE39961AC701

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44242E4, Relevance: 39.9, APIs: 6, Strings: 16, Instructions: 1360
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00007FF6B44243E5
CreateFileMappingA.KERNEL32 ref: 00007FF6B44245D7
MapViewOfFile.KERNELBASE ref: 00007FF6B4424600
GetLastError.KERNEL32 ref: 00007FF6B4424F65
GetLastError.KERNEL32 ref: 00007FF6B44250C4
FindCloseChangeNotification.KERNELBASE ref: 00007FF6B4425672

Strings

q, xrefs: 00007FF6B4424BA5
:, xrefs: 00007FF6B4424C39
K, xrefs: 00007FF6B4424C2F
=, xrefs: 00007FF6B4424FD0
w, xrefs: 00007FF6B4424BBC
|, xrefs: 00007FF6B44254DA
<, xrefs: 00007FF6B4424C34
;, xrefs: 00007FF6B4425008
!, xrefs: 00007FF6B44246F9
&, xrefs: 00007FF6B4424EA8
=, xrefs: 00007FF6B4424D18
3:<KU, xrefs: 00007FF6B4424EBD
a, xrefs: 00007FF6B4424CF3
z, xrefs: 00007FF6B4424BE9
p, xrefs: 00007FF6B4424EA0
Z, xrefs: 00007FF6B442503C

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: File$CreateErrorLast$ChangeCloseFindMappingNotificationView
String ID: !$&$3:<KU$:$;$<$=$=$K$Z$a$p$q$w$z$|
API String ID: 22809042-863818155
Opcode ID: 7c483ff31ffa63e407df1a0290c0d0c56f73aff22cc9704d1455be2e97b2d163
Instruction ID: 16912d0b2d2afa7514393f674ff605ce894e52ecc920e790168c67b093bab201
Opcode Fuzzy Hash: 7c483ff31ffa63e407df1a0290c0d0c56f73aff22cc9704d1455be2e97b2d163
Instruction Fuzzy Hash: 3CB2822361D6C08BF7218A38A0E13DBAFD2D7A2364F249518D7D447BEACA6DC509DF11

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442F80E, Relevance: 30.6, APIs: 4, Strings: 13, Instructions: 838
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00007FF6B442F9F6
CreateFileA.KERNELBASE ref: 00007FF6B442FF83
WriteFile.KERNELBASE ref: 00007FF6B443011D
_Init_thread_header.LIBCMT ref: 00007FF6B44303B7

Strings

p, xrefs: 00007FF6B4430206
u, xrefs: 00007FF6B442FE32
t, xrefs: 00007FF6B443022C
5, xrefs: 00007FF6B44302EE
v, xrefs: 00007FF6B443023A
m, xrefs: 00007FF6B442FE4F
C, xrefs: 00007FF6B4430243
W, xrefs: 00007FF6B4430231
t, xrefs: 00007FF6B442FE6A
], xrefs: 00007FF6B4430219
-, xrefs: 00007FF6B442FE9C
u, xrefs: 00007FF6B443029D
m, xrefs: 00007FF6B443032F

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: File$Create$Init_thread_headerWrite
String ID: -$5$C$W$]$m$m$p$t$t$u$u$v
API String ID: 3655838646-576874599
Opcode ID: bcbf8ffac54b1773aa721f673119574997edb21e1206f49bdf9cb5a6c40c426a
Instruction ID: 9d6f2cf4cdd870cfc0afcf47df223d9e644bf5b2026eec2a2d447dc45bbf27b5
Opcode Fuzzy Hash: bcbf8ffac54b1773aa721f673119574997edb21e1206f49bdf9cb5a6c40c426a
Instruction Fuzzy Hash: FB72D42361E3C08AE711CB3CA4903DAAF91D7B2758F188669D794477DBCE6ED10ACB11

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442AED2, Relevance: 18.9, Strings: 15, Instructions: 161
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

k, xrefs: 00007FF6B442AF18
Q, xrefs: 00007FF6B442AF35
n, xrefs: 00007FF6B442AF3F
u, xrefs: 00007FF6B442AF01
w, xrefs: 00007FF6B442AF44
z, xrefs: 00007FF6B442AF22
i, xrefs: 00007FF6B442AEFC
}, xrefs: 00007FF6B442AF1D
[, xrefs: 00007FF6B442AF0F
q, xrefs: 00007FF6B442AF27
v, xrefs: 00007FF6B442AF3A
V, xrefs: 00007FF6B442AEF7
I, xrefs: 00007FF6B442AF49
l, xrefs: 00007FF6B442AF0A
O, xrefs: 00007FF6B442AEE6

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: I$O$Q$V$[$i$k$l$n$q$u$v$w$z$}
API String ID: 0-1532506219
Opcode ID: 8b01f4624aa48a6aec1cfc6a9b61c72d85cfba708378b178cb76ae60c3e6af23
Instruction ID: 2f943664a27e6c5fc2702a860a248a67e5a9380b7c5b7b5bfb0ddf1e9655a960
Opcode Fuzzy Hash: 8b01f4624aa48a6aec1cfc6a9b61c72d85cfba708378b178cb76ae60c3e6af23
Instruction Fuzzy Hash: C8518E2361E6C08AE711C63D9484B8EBF62C3A3768F28D254DB94176E7C26FD50B8B11

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44344C3, Relevance: 18.5, APIs: 4, Strings: 6, Instructions: 990
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00007FF6B44345FF
CreateFileA.KERNELBASE ref: 00007FF6B4434BBF
WriteFile.KERNELBASE ref: 00007FF6B4434E76
_Init_thread_header.LIBCMT ref: 00007FF6B44351C5

Strings

b, xrefs: 00007FF6B44350B9
-, xrefs: 00007FF6B443512F
x, xrefs: 00007FF6B4435118
t, xrefs: 00007FF6B44350F9
m, xrefs: 00007FF6B44350DE
e, xrefs: 00007FF6B443515B

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: File$Create$Init_thread_headerWrite
String ID: -$b$e$m$t$x
API String ID: 3655838646-2552193739
Opcode ID: 3ce5c1e8c2cf2fa098fabf7009a70737c3dc51f77ee7f6e113e094b2a62fa685
Instruction ID: 3c872f6396ad7d6c44f4692501f91f743195807d55876399d9f0df7cd84eb9de
Opcode Fuzzy Hash: 3ce5c1e8c2cf2fa098fabf7009a70737c3dc51f77ee7f6e113e094b2a62fa685
Instruction Fuzzy Hash: 0C821523B1E6C18AEB118B3C90803CE6FA1D763768F289564D794473E7DA6BC60BC711

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44358DB, Relevance: 10.7, APIs: 4, Strings: 2, Instructions: 173
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindFirstFileW.KERNELBASE ref: 00007FF6B44359C8
GetFileAttributesW.KERNELBASE ref: 00007FF6B4435A84
FindNextFileW.KERNELBASE ref: 00007FF6B4435B46
FindClose.KERNELBASE ref: 00007FF6B4435B74

Strings

*.*, xrefs: 00007FF6B4435973
R$C2, xrefs: 00007FF6B44359A8

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: FileFind$AttributesCloseFirstNext
String ID: *.*$R$C2
API String ID: 134685335-1302538481
Opcode ID: 7978a4c4514d9f912c9610612b83a38ab2a54f98fe8759dc1d0a46a43c747fc8
Instruction ID: 6bc1fae352fa6c2fcf6c109017eecd5494b6820950ea1cb970b68bd1a4d29dfc
Opcode Fuzzy Hash: 7978a4c4514d9f912c9610612b83a38ab2a54f98fe8759dc1d0a46a43c747fc8
Instruction Fuzzy Hash: 7C615C21B14A8394EF30AF6998C53E91391EF45B98F444636CF2D9BBDEDE38E2558310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B444AB74, Relevance: 3.0, APIs: 2, Instructions: 18COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNELBASE ref: 00007FF6B444AB7D
_invalid_parameter_noinfo.LIBCMT ref: 00007FF6B4455F38

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ExceptionFilterUnhandled_invalid_parameter_noinfo
String ID:
API String ID: 59578552-0
Opcode ID: 6781734e231bcae477a1390090db2320d11f16ece61793930e3357d2d0029aa8
Instruction ID: 969e968c9a70c17670ed854af776ed6efb847f77f1d8211cf77a01a24c7a69f5
Opcode Fuzzy Hash: 6781734e231bcae477a1390090db2320d11f16ece61793930e3357d2d0029aa8
Instruction Fuzzy Hash: 41E0B621E0D15386EA187FAE0CC20BC2090AF45320F500275E319C57CECE6D25B29B62

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4435209, Relevance: .3, Instructions: 327COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d79bf101e1cb1d71bd93de8d60d67037ea81bd114c7ca3ec68f1b25a1872cf92
Instruction ID: a8f40a6c8b41699f04b7a4b68d1029432dfe0ee34201e4c8722e80f9e9e3030a
Opcode Fuzzy Hash: d79bf101e1cb1d71bd93de8d60d67037ea81bd114c7ca3ec68f1b25a1872cf92
Instruction Fuzzy Hash: C7F1D822A087C189E732DF7CD4843ED2B61EB66788F148236CB9D5B79ACF789156C311

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44239FB, Relevance: .2, Instructions: 196COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ComputerName
String ID:
API String ID: 3545744682-0
Opcode ID: cff41d978c402d529349cd5407b2f90b1250f9a8a7f3c751a69f93d097a0efe5
Instruction ID: 0589f5a9a5c806daf958660e0807b0112a85c5d936383f203ee433bdd0d3b8be
Opcode Fuzzy Hash: cff41d978c402d529349cd5407b2f90b1250f9a8a7f3c751a69f93d097a0efe5
Instruction Fuzzy Hash: 4B71C1236192C147E751CF38D1913EE6BA2E7A2384F44943ADB899778ACE7DD10ECB11

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442A5F6, Relevance: .2, Instructions: 193COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62603fccd9053f368d91e07a2e7852646537ff8e2fdf08243e0994fb5983b1b4
Instruction ID: 6ceab5d762a4d9652be6654821beffa6ae5fcf0489539fdada2430915010a3d3
Opcode Fuzzy Hash: 62603fccd9053f368d91e07a2e7852646537ff8e2fdf08243e0994fb5983b1b4
Instruction Fuzzy Hash: 9861E3A37296D18BFB058A3994A17CFAF91D362B24F29E708CB54172D3C62A8556CF10

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44552C0, Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: FreeHeap
String ID:
API String ID: 3298025750-0
Opcode ID: 392c3d8147f14a5988bd6e81e08928f6685ac7a6814d1fd57e6d66c548fd3368
Instruction ID: 73d2fb2ef3020449ce3f864c151375f539b82e55db1d7836a0ba0c641346ea3c
Opcode Fuzzy Hash: 392c3d8147f14a5988bd6e81e08928f6685ac7a6814d1fd57e6d66c548fd3368
Instruction Fuzzy Hash: CC419E22B18A9482EF44CF6AD99516963A1FB48FD4B499037EF0D87B6CDE3CD496C300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44498CC, Relevance: 17.6, APIs: 6, Strings: 4, Instructions: 52
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32 ref: 00007FF6B44498E2
GetModuleHandleW.KERNELBASE ref: 00007FF6B44498EF
GetModuleHandleW.KERNEL32 ref: 00007FF6B4449904
GetProcAddress.KERNEL32 ref: 00007FF6B444991C
GetProcAddress.KERNEL32 ref: 00007FF6B444992F
CreateEventW.KERNEL32 ref: 00007FF6B444995B

Strings

SleepConditionVariableCS, xrefs: 00007FF6B4449912
kernel32.dll, xrefs: 00007FF6B44498FD
api-ms-win-core-synch-l1-2-0.dll, xrefs: 00007FF6B44498E8
WakeAllConditionVariable, xrefs: 00007FF6B4449922

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: AddressHandleModuleProc$CountCreateCriticalEventInitializeSectionSpin
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 4003212759-3242537097
Opcode ID: c90e6321c21e8170757152ffd5828284882e8311bafeae04178b06d48b048fe3
Instruction ID: a61123b6d0a300b471cd04cc6828dbde41bcebb1a2aeac1e793b12dbfc2e3e3c
Opcode Fuzzy Hash: c90e6321c21e8170757152ffd5828284882e8311bafeae04178b06d48b048fe3
Instruction Fuzzy Hash: 98212664A0EA4381FA259F6CF8D157423A0EF48790F484479CB1E827A8EE3CE469A300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B444AB90, Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 94
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__scrt_initialize_crt.LIBCMT ref: 00007FF6B444AB9F

Part of subcall function 00007FF6B4449D60: __scrt_dllmain_crt_thread_attach.LIBCMT ref: 00007FF6B4449D82

__scrt_acquire_startup_lock.LIBCMT ref: 00007FF6B444ABB4
__scrt_release_startup_lock.LIBCMT ref: 00007FF6B444AC22
__scrt_get_show_window_mode.LIBCMT ref: 00007FF6B444AC75
__scrt_is_managed_app.LIBCMT ref: 00007FF6B444AC98

Strings

MZx, xrefs: 00007FF6B444AC8A

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: __scrt_acquire_startup_lock__scrt_dllmain_crt_thread_attach__scrt_get_show_window_mode__scrt_initialize_crt__scrt_is_managed_app__scrt_release_startup_lock
String ID: MZx
API String ID: 4144305933-2575928145
Opcode ID: 668569cbe1293c5e423debe20043c5ffa30385686d6b254a4d3f7019f8ee5f8f
Instruction ID: 5b8b035703fa9bbe82dc2165595422f8101259698103facd066354f7e658fdd5
Opcode Fuzzy Hash: 668569cbe1293c5e423debe20043c5ffa30385686d6b254a4d3f7019f8ee5f8f
Instruction Fuzzy Hash: B2312C21E0C55746FB54AF6E94D23B92291EF81384F444439EB4EEB2DFCE6CA868D350

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442E78F, Relevance: 6.1, APIs: 4, Instructions: 90
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNamedSecurityInfoA.ADVAPI32 ref: 00007FF6B442E80E
SetNamedSecurityInfoA.ADVAPI32 ref: 00007FF6B442E8A1
LocalFree.KERNEL32 ref: 00007FF6B442E8AF
LocalFree.KERNEL32 ref: 00007FF6B442E8C6

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: FreeInfoLocalNamedSecurity
String ID:
API String ID: 845271200-0
Opcode ID: 1e2aad63e72d4c0012ff51290aabe9b0ca62d2cf94b0cce26fb9686713639998
Instruction ID: 28d64631d8bca92c29cc839e24c43f6a38e054597830e6eb384a9ec625e73b36
Opcode Fuzzy Hash: 1e2aad63e72d4c0012ff51290aabe9b0ca62d2cf94b0cce26fb9686713639998
Instruction Fuzzy Hash: 7C311E32A18A8186E774DF29B49076AB7A4FF88790F148135EBCED7B58DE3CD4558B00

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4454AC4, Relevance: 4.5, APIs: 3, Instructions: 19
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32(?,?,00000003,00007FF6B4454BD7), ref: 00007FF6B4454AED
TerminateProcess.KERNEL32(?,?,00000003,00007FF6B4454BD7), ref: 00007FF6B4454AF8
ExitProcess.KERNEL32 ref: 00007FF6B4454B07

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: 3dd67f1416581bf9e0c8d03f5868528173d187c597f887881cfbb1e3b75360a8
Instruction ID: a352fe933a96e7ea328858667808b896da7674b27b2822235eb5ed010afca9e6
Opcode Fuzzy Hash: 3dd67f1416581bf9e0c8d03f5868528173d187c597f887881cfbb1e3b75360a8
Instruction Fuzzy Hash: BAE04F64B0431542EF946F7D9CC637A2252EF85B41F005838CB0EC639ADE3DE8A8C311

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44215B0, Relevance: 3.1, APIs: 2, Instructions: 107
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetComputerNameExW.KERNELBASE ref: 00007FF6B4421618
GetComputerNameExW.KERNELBASE ref: 00007FF6B4421644

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ComputerName
String ID:
API String ID: 3545744682-0
Opcode ID: 812c41dfec9da1f572e5ac7ee80069b7e13f69b33e0dcd046d378d0cbb6e1c9b
Instruction ID: 587129eaf9f023fd6e7f51b921c819d4ec7f63e9a8ad7a8058bb150a9aa0b014
Opcode Fuzzy Hash: 812c41dfec9da1f572e5ac7ee80069b7e13f69b33e0dcd046d378d0cbb6e1c9b
Instruction Fuzzy Hash: 3D31C762A19A8246EA209F6DB98137B77A0EF86794F084134EF4DC37D9DE3CD595C700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4426046, Relevance: 3.1, APIs: 2, Instructions: 98
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE(?,?,00000007,000000F8,00000005,?,00007FF6B44264C1), ref: 00007FF6B44260B0
LoadLibraryA.KERNELBASE(?,?,00000007,000000F8,00000005,?,00007FF6B44264C1), ref: 00007FF6B4426141

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 7a908af0d394efd6741e70506695816e49587e2d47a3cf3d2d8c8993dcf36947
Instruction ID: 625a65d72f492a3e420e05e4ec674b2055f06963becbf67f5ac73dd8c533d680
Opcode Fuzzy Hash: 7a908af0d394efd6741e70506695816e49587e2d47a3cf3d2d8c8993dcf36947
Instruction Fuzzy Hash: 4D311832B15A0185EF549F6AE5C12B8A7A5EB58B94F088035DF5CC778AEE39E461C340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B444AAAC, Relevance: 3.1, APIs: 2, Instructions: 55
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_set_fmode.LIBCMT ref: 00007FF6B444AAC3
_RTC_Initialize.LIBCMT ref: 00007FF6B444AAE4

Part of subcall function 00007FF6B4454E58: _invalid_parameter_noinfo.LIBCMT ref: 00007FF6B4454E8A

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: Initialize_invalid_parameter_noinfo_set_fmode
String ID:
API String ID: 3548387204-0
Opcode ID: 7e89c3d713f20ed04751633389a0121669122a041881f48010efc85f242abade
Instruction ID: c72e359a2de1acf6783d7b5a7bedcd7b7e8f269d0525ad1d0f36626f08a41580
Opcode Fuzzy Hash: 7e89c3d713f20ed04751633389a0121669122a041881f48010efc85f242abade
Instruction Fuzzy Hash: BD115B90E0914306FB147FBA45C72BD4152DF903C5F480434EB0DEA6CFAD6DA8799722

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4436727, Relevance: 1.7, APIs: 1, Instructions: 153COMMON

Download Yara Rule

APIs

GetCommandLineW.KERNEL32(?,?,?,00000007,?,?,?,?,00007FF6B4435DA9,?,?,?,?,00007FF6B442F861), ref: 00007FF6B4436754

Part of subcall function 00007FF6B4457108: _invalid_parameter_noinfo.LIBCMT ref: 00007FF6B445712E

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: CommandLine_invalid_parameter_noinfo
String ID:
API String ID: 2763879323-0
Opcode ID: ae34b609a4c889860284eb4f048c2f17ec4dfa8815d0b6df7574d9a82d22a778
Instruction ID: f46214d523bb83c8a49928a9750595857ead505699ccab31ce6492120e9b8c9a
Opcode Fuzzy Hash: ae34b609a4c889860284eb4f048c2f17ec4dfa8815d0b6df7574d9a82d22a778
Instruction Fuzzy Hash: 2351D422E19B8381EA709F1D958037923A1EF95B98F059235DF5D87799EF7CE1A18300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B443A842, Relevance: 1.6, APIs: 1, Instructions: 135COMMON

Download Yara Rule

APIs

_Init_thread_header.LIBCMT ref: 00007FF6B443AA03

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: Init_thread_header
String ID:
API String ID: 3738618077-0
Opcode ID: f7e6f9d4f1ed91b2a7ab2141abed7fe15660a09e3651305a473d298d39522619
Instruction ID: b1fc32910f11fd66aad32563a424f6937055687a3256b00c842a3b4ba977b2d3
Opcode Fuzzy Hash: f7e6f9d4f1ed91b2a7ab2141abed7fe15660a09e3651305a473d298d39522619
Instruction Fuzzy Hash: 4E51D022A1C69286FB10DF3995D12FD77A2EB42794F004431CB9D9778ACF2DE56AC310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44549F8, Relevance: 1.6, APIs: 1, Instructions: 56COMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF6B4457771,?,?,?,?,00007FF6B445975B), ref: 00007FF6B4454B3B

Part of subcall function 00007FF6B4454A68: GetModuleHandleExW.KERNEL32 ref: 00007FF6B4454A84
Part of subcall function 00007FF6B4454A68: GetProcAddress.KERNEL32 ref: 00007FF6B4454A9A
Part of subcall function 00007FF6B4454A68: FreeLibrary.KERNEL32 ref: 00007FF6B4454AB7

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: HandleModule$AddressFreeLibraryProc
String ID:
API String ID: 3947729631-0
Opcode ID: ad0b6c8c18660d1b11e8c5c70b0d1bbfb5c01e0827e39ccbe49000612891cb51
Instruction ID: 41af00c4e1b49c89494e65b385aeed122983e976e9c99ecf9f9f3ecc14a1757a
Opcode Fuzzy Hash: ad0b6c8c18660d1b11e8c5c70b0d1bbfb5c01e0827e39ccbe49000612891cb51
Instruction Fuzzy Hash: 4A216032E057118AEF559F68C8813AC33B4EB44718F445A36D70D8AA8DDF79D565CB80

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4454A14, Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF6B4457771,?,?,?,?,00007FF6B445975B), ref: 00007FF6B4454B3B

Part of subcall function 00007FF6B4454A68: GetModuleHandleExW.KERNEL32 ref: 00007FF6B4454A84
Part of subcall function 00007FF6B4454A68: GetProcAddress.KERNEL32 ref: 00007FF6B4454A9A
Part of subcall function 00007FF6B4454A68: FreeLibrary.KERNEL32 ref: 00007FF6B4454AB7

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: HandleModule$AddressFreeLibraryProc
String ID:
API String ID: 3947729631-0
Opcode ID: 90a98ec7c72ff395797cea65d6b45e04f18cd6c0c49a9a8b2ab6f56cca4e6c60
Instruction ID: 3947c19537af5fab4d9155c7d9a9faa3b643e2d05284b93f2e48c5bc404e18db
Opcode Fuzzy Hash: 90a98ec7c72ff395797cea65d6b45e04f18cd6c0c49a9a8b2ab6f56cca4e6c60
Instruction Fuzzy Hash: CA217F32E0571189EF618F68C8853EC33B4EB44728F445A3AD70D8AA8DDF79D5A5CB80

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4454A04, Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF6B4457771,?,?,?,?,00007FF6B445975B), ref: 00007FF6B4454B3B

Part of subcall function 00007FF6B4454A68: GetModuleHandleExW.KERNEL32 ref: 00007FF6B4454A84
Part of subcall function 00007FF6B4454A68: GetProcAddress.KERNEL32 ref: 00007FF6B4454A9A
Part of subcall function 00007FF6B4454A68: FreeLibrary.KERNEL32 ref: 00007FF6B4454AB7

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: HandleModule$AddressFreeLibraryProc
String ID:
API String ID: 3947729631-0
Opcode ID: f2b97e03f31a33bedda8801a687625bf3fe8a316791a43a4e2cf5efe20736c53
Instruction ID: 6dfbc661d46c77965342b4b3dc42ff568c02daba7a299106754077bbdd3bfadc
Opcode Fuzzy Hash: f2b97e03f31a33bedda8801a687625bf3fe8a316791a43a4e2cf5efe20736c53
Instruction Fuzzy Hash: 16216D32E0461189EF658F68C8813AC33B5EB44728F445A3AD70D8AA8CDF79D5A5CB80

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44549EC, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF6B4457771,?,?,?,?,00007FF6B445975B), ref: 00007FF6B4454B3B

Part of subcall function 00007FF6B4454A68: GetModuleHandleExW.KERNEL32 ref: 00007FF6B4454A84
Part of subcall function 00007FF6B4454A68: GetProcAddress.KERNEL32 ref: 00007FF6B4454A9A
Part of subcall function 00007FF6B4454A68: FreeLibrary.KERNEL32 ref: 00007FF6B4454AB7

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: HandleModule$AddressFreeLibraryProc
String ID:
API String ID: 3947729631-0
Opcode ID: 26ed40e8fec66c4a0c49e75b6e7e0d4365db7880a68bf38084232f54730fa06b
Instruction ID: d0ed21f5cf4c6b31b22ee5270839732f60637ca907c06a8f3e8874fd835d2720
Opcode Fuzzy Hash: 26ed40e8fec66c4a0c49e75b6e7e0d4365db7880a68bf38084232f54730fa06b
Instruction Fuzzy Hash: 31218E32E0471189EF618F68C8813AC33B4EB44728F545A36DB0C8AA8CDF79D5A1CB80

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4425EFC, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

FreeLibrary.KERNELBASE ref: 00007FF6B4425F78

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: FreeLibrary
String ID:
API String ID: 3664257935-0
Opcode ID: 2a1e59a0c5f7b4def49d1427c4cfebfc97c7f4869b29c6ba1edda233ce21ae24
Instruction ID: a29cc541c7c460eb3f0da7966141a963f2b45a19285982f45a3faf5d812ee9ae
Opcode Fuzzy Hash: 2a1e59a0c5f7b4def49d1427c4cfebfc97c7f4869b29c6ba1edda233ce21ae24
Instruction Fuzzy Hash: CC112E26716B4186EA75CF5AE1903796360EB44BA4F158534DF6EC7BD4CE38E4928310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B445DFD0, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF6B445DFFB

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: 5f4a2476c7093d8de22d6614e3f9c9decae07cef510fc887f15bdf7dd5a96ddb
Instruction ID: e6cfd844780c948f7d4be023b5cc4945c180605faa96085ea072b1c6525b6808
Opcode Fuzzy Hash: 5f4a2476c7093d8de22d6614e3f9c9decae07cef510fc887f15bdf7dd5a96ddb
Instruction Fuzzy Hash: 93116A7291C66292FB10AF18A5C017963A4FB40B40F650435E7ADDBA9ADE3CE931CB00

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B445C4D8, Relevance: 1.5, APIs: 1, Instructions: 36memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,?,00000000,00007FF6B4459861,?,?,000000F8,00007FF6B445B195,?,?,?,?,00007FF6B445A971), ref: 00007FF6B445C52D

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 50ee23321bb0392af5e36db0a14a67e004919aab705170532cb16fd1e2da9a79
Instruction ID: 48efdc94993106ec0157c01cabe9d1d09e88277fcd914923fa2977306589f6c0
Opcode Fuzzy Hash: 50ee23321bb0392af5e36db0a14a67e004919aab705170532cb16fd1e2da9a79
Instruction Fuzzy Hash: 8FF04941B0921A41FE555FED98D12BA1290DF89B84F884430CB0ECA2CEDE2CE4A1C310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B445B264, Relevance: 1.5, APIs: 1, Instructions: 29memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,?,0000000100000002,00007FF6B4461B15,?,?,00000000,00007FF6B445DBCF,?,?,0000000100000002,00007FF6B4455377,00000000,00000000,?,00007FF6B44555AD), ref: 00007FF6B445B2A2

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 6da3bee6b59dccd8d17a81d4324de9a97876941589f4a15ec500e38210a561e7
Instruction ID: 8771d9b472de3aa01acf52b0dc7b868727d3e2ee9b5f5085717add4459b7f67c
Opcode Fuzzy Hash: 6da3bee6b59dccd8d17a81d4324de9a97876941589f4a15ec500e38210a561e7
Instruction Fuzzy Hash: BCF0FE01F1D68341FE556FA969C567D5281DF957A1F084630EB2EC62CDDFACA4A0D320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4461AF8, Relevance: 1.3, APIs: 1, Instructions: 38memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B445B264: RtlAllocateHeap.NTDLL(?,?,0000000100000002,00007FF6B4461B15,?,?,00000000,00007FF6B445DBCF,?,?,0000000100000002,00007FF6B4455377,00000000,00000000,?,00007FF6B44555AD), ref: 00007FF6B445B2A2

HeapReAlloc.KERNEL32(?,?,00000000,00007FF6B445DBCF,?,?,0000000100000002,00007FF6B4455377,00000000,00000000,?,00007FF6B44555AD,?,?,000000F8,00007FF6B445526E), ref: 00007FF6B4461B65

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: Heap$AllocAllocate
String ID:
API String ID: 2177240990-0
Opcode ID: 185bad2c8ce41f127a627d581bddb9ac587d1fb32a341f829627fe44d33ae8b4
Instruction ID: 3ee2b370420a4aeea1a4c27e45fdba979fc788bed27dcebdacba7ed971b28c94
Opcode Fuzzy Hash: 185bad2c8ce41f127a627d581bddb9ac587d1fb32a341f829627fe44d33ae8b4
Instruction Fuzzy Hash: 4601FF10E0D24344FE646F6AA9C16792158DF56BA0F0C4671DB2DC62DEEE3CE470D300

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00007FF6B44212B6, Relevance: 78.9, Strings: 63, Instructions: 199COMMON

Download Yara Rule

Strings

m, xrefs: 00007FF6B44213A7
n, xrefs: 00007FF6B44213AC
E, xrefs: 00007FF6B442134D
,, xrefs: 00007FF6B44213D9
+, xrefs: 00007FF6B44213FC
7, xrefs: 00007FF6B442140B
y, xrefs: 00007FF6B442136B
{, xrefs: 00007FF6B4421375
I, xrefs: 00007FF6B4421339
%, xrefs: 00007FF6B4421406
T, xrefs: 00007FF6B44212F8
S, xrefs: 00007FF6B442131B
p, xrefs: 00007FF6B442138E
L, xrefs: 00007FF6B4421320
s, xrefs: 00007FF6B442139D
^, xrefs: 00007FF6B44212DA
J, xrefs: 00007FF6B442133E
P, xrefs: 00007FF6B442130C
v, xrefs: 00007FF6B4421384
*, xrefs: 00007FF6B44213F7
f, xrefs: 00007FF6B44213D4
Y, xrefs: 00007FF6B44212E9
k, xrefs: 00007FF6B44213C5
u, xrefs: 00007FF6B442137F
M, xrefs: 00007FF6B4421325
_, xrefs: 00007FF6B44212DF
3, xrefs: 00007FF6B4421410
D, xrefs: 00007FF6B4421348
], xrefs: 00007FF6B44212D5
V, xrefs: 00007FF6B4421302
), xrefs: 00007FF6B44213F2
~, xrefs: 00007FF6B442135C
U, xrefs: 00007FF6B44212FD
o, xrefs: 00007FF6B44213B1
., xrefs: 00007FF6B44213E3
j, xrefs: 00007FF6B44213C0
-, xrefs: 00007FF6B44213DE
R, xrefs: 00007FF6B4421316
(, xrefs: 00007FF6B44213ED
l, xrefs: 00007FF6B44213A2
d, xrefs: 00007FF6B44213CA
e, xrefs: 00007FF6B44213CF
x, xrefs: 00007FF6B4421366
H, xrefs: 00007FF6B4421334
/, xrefs: 00007FF6B44213E8
t, xrefs: 00007FF6B442137A
Q, xrefs: 00007FF6B4421311
W, xrefs: 00007FF6B4421307
q, xrefs: 00007FF6B4421393
h, xrefs: 00007FF6B44213B6
F, xrefs: 00007FF6B4421352
N, xrefs: 00007FF6B442132A
}, xrefs: 00007FF6B4421357
X, xrefs: 00007FF6B44212E4
r, xrefs: 00007FF6B4421398
K, xrefs: 00007FF6B4421343
[, xrefs: 00007FF6B44212F3
w, xrefs: 00007FF6B4421389
i, xrefs: 00007FF6B44213BB
z, xrefs: 00007FF6B4421370
O, xrefs: 00007FF6B442132F
Z, xrefs: 00007FF6B44212EE
$, xrefs: 00007FF6B4421401

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: $$%$($)$*$+$,$-$.$/$3$7$D$E$F$H$I$J$K$L$M$N$O$P$Q$R$S$T$U$V$W$X$Y$Z$[$]$^$_$d$e$f$h$i$j$k$l$m$n$o$p$q$r$s$t$u$v$w$x$y$z${$}$~
API String ID: 0-1365822169
Opcode ID: 590e0402bee17ec44ebb9210a0617c2d0f30fdc08742d61b04fab8db75b1eb80
Instruction ID: 17c1e0538d8c8eddf92e24919567c6d6880091bf011dface155209207442b138
Opcode Fuzzy Hash: 590e0402bee17ec44ebb9210a0617c2d0f30fdc08742d61b04fab8db75b1eb80
Instruction Fuzzy Hash: 73916C5351D2C08DE3128639A45839FFFA183A3358F0C5199E7D90BB9BC6AED049CF22

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44220D8, Relevance: 69.8, APIs: 3, Strings: 36, Instructions: 1515COMMON

Download Yara Rule

APIs

_Init_thread_header.LIBCMT ref: 00007FF6B44223AD
_Init_thread_header.LIBCMT ref: 00007FF6B44223F8
_Init_thread_header.LIBCMT ref: 00007FF6B4423320

Part of subcall function 00007FF6B444999C: EnterCriticalSection.KERNEL32(?,?,00000007,00007FF6B44263F7,?,?,?,?,00007FF6B44264A6), ref: 00007FF6B44499AC

Strings

p, xrefs: 00007FF6B4422D02
!, xrefs: 00007FF6B4423168
?, xrefs: 00007FF6B4422D58
h, xrefs: 00007FF6B4422E2F
k, xrefs: 00007FF6B4422D0C
v, xrefs: 00007FF6B4422D11
r, xrefs: 00007FF6B4422E2A
p, xrefs: 00007FF6B4423159
^, xrefs: 00007FF6B4422CFD
[, xrefs: 00007FF6B4422E20
n, xrefs: 00007FF6B4422415
{, xrefs: 00007FF6B4422E39
z, xrefs: 00007FF6B4422E5A
r, xrefs: 00007FF6B442241E
Y, xrefs: 00007FF6B4422D61
e, xrefs: 00007FF6B4423154
x, xrefs: 00007FF6B442315E
z, xrefs: 00007FF6B4422423
z, xrefs: 00007FF6B4422D1B
w, xrefs: 00007FF6B4422E3E
X, xrefs: 00007FF6B4423145
W, xrefs: 00007FF6B4422E49
6, xrefs: 00007FF6B4422E6B
X, xrefs: 00007FF6B442240A
m, xrefs: 00007FF6B4422E25
t, xrefs: 00007FF6B4423163
s, xrefs: 00007FF6B4422E34
}, xrefs: 00007FF6B4422D37
Q, xrefs: 00007FF6B4423172
Z, xrefs: 00007FF6B4422D26
j, xrefs: 00007FF6B442314A
<, xrefs: 00007FF6B4422E7A
~, xrefs: 00007FF6B4422D16
Y, xrefs: 00007FF6B442316D
u, xrefs: 00007FF6B4422D07
o, xrefs: 00007FF6B442314F

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: Init_thread_header$CriticalEnterSection
String ID: !$6$<$?$Q$W$X$X$Y$Y$Z$[$^$e$h$j$k$m$n$o$p$p$r$r$s$t$u$v$w$x$z$z$z${$}$~
API String ID: 640747144-3305837859
Opcode ID: d289debaf4cabb33d861810eae78fdffde80523ce52a8c9c752a87a1d7701e8c
Instruction ID: 298cc7973fb7a8acc43b61d58a5dbec78ec193ce2b0c54c4d81562e9d3fbd866
Opcode Fuzzy Hash: d289debaf4cabb33d861810eae78fdffde80523ce52a8c9c752a87a1d7701e8c
Instruction Fuzzy Hash: 4FC2DE63A1D2C18EE715CB3891C43CABFA2E363314F05A425C39487797DB6AA62FD711

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B444FF60, Relevance: 40.4, APIs: 20, Strings: 2, Instructions: 1864COMMON

Download Yara Rule

APIs

memcpy_s.LIBCPMT ref: 00007FF6B4450C7C
memcpy_s.LIBCPMT ref: 00007FF6B4450D11
memcpy_s.LIBCPMT ref: 00007FF6B4451409
memcpy_s.LIBCPMT ref: 00007FF6B4451450
memcpy_s.LIBCPMT ref: 00007FF6B4451684
memcpy_s.LIBCPMT ref: 00007FF6B44516ED
memcpy_s.LIBCPMT ref: 00007FF6B4451728
memcpy_s.LIBCPMT ref: 00007FF6B44517D0
memcpy_s.LIBCPMT ref: 00007FF6B44519E4
memcpy_s.LIBCPMT ref: 00007FF6B4450EC3

Part of subcall function 00007FF6B444F400: _invalid_parameter_noinfo.LIBCMT ref: 00007FF6B444F432

memcpy_s.LIBCPMT ref: 00007FF6B4451099
memcpy_s.LIBCPMT ref: 00007FF6B4451187
memcpy_s.LIBCPMT ref: 00007FF6B44511BD
memcpy_s.LIBCPMT ref: 00007FF6B4451252
memcpy_s.LIBCPMT ref: 00007FF6B4451363
memcpy_s.LIBCPMT ref: 00007FF6B4451BB3

Strings

MZx, xrefs: 00007FF6B444FF93, 00007FF6B4450191, 00007FF6B4450506, 00007FF6B44505C9, 00007FF6B445067E, 00007FF6B44506CC, 00007FF6B4450A62, 00007FF6B4450D7A, 00007FF6B4450DAF, 00007FF6B44510D7, 00007FF6B44512BF, 00007FF6B44512F4, 00007FF6B44516BF
, xrefs: 00007FF6B44519F6

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: memcpy_s$_invalid_parameter_noinfo
String ID: $MZx
API String ID: 2880407647-1316729395
Opcode ID: bc193ee7fd2add63f8d1ef46771125166fe55af57fce5cc31dc074751e44201c
Instruction ID: e7e98c9c559dc24be456ce82df8a422ce643e3f243afd648fbbd2b2cf283fb2d
Opcode Fuzzy Hash: bc193ee7fd2add63f8d1ef46771125166fe55af57fce5cc31dc074751e44201c
Instruction Fuzzy Hash: 8F03D376A181D28BEB758F289590AF93795FB8978CF401135DB0AD7B4CDF38AA14CB40

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44416CE, Relevance: 38.8, APIs: 9, Strings: 13, Instructions: 347injectionmemorythreadCOMMON

Download Yara Rule

APIs

VirtualAllocEx.KERNEL32 ref: 00007FF6B4441747
WriteProcessMemory.KERNEL32 ref: 00007FF6B4441776
CreateRemoteThread.KERNEL32 ref: 00007FF6B44417A3
CloseHandle.KERNEL32 ref: 00007FF6B44417B5
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00007FF6B443D634,?,00000000,000000F5,0000006B,00000021,000000F4,00007FF6B444160C), ref: 00007FF6B44417C0
GetLastError.KERNEL32 ref: 00007FF6B44418C0
GetLastError.KERNEL32 ref: 00007FF6B44419EF
GetLastError.KERNEL32 ref: 00007FF6B4441ADC
CloseHandle.KERNEL32 ref: 00007FF6B4441BD7

Strings

r, xrefs: 00007FF6B4441B2D
1, xrefs: 00007FF6B4441B5F
@, xrefs: 00007FF6B4441731
p, xrefs: 00007FF6B4441AA0
m, xrefs: 00007FF6B44419FD
H, xrefs: 00007FF6B4441B04
W, xrefs: 00007FF6B4441B24
m, xrefs: 00007FF6B4441B47
\, xrefs: 00007FF6B4441A32
n, xrefs: 00007FF6B4441B9F
y, xrefs: 00007FF6B4441A5F
*, xrefs: 00007FF6B4441B9A
Y, xrefs: 00007FF6B4441B42

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ErrorLast$CloseHandle$AllocCreateMemoryProcessRemoteThreadVirtualWrite
String ID: *$1$@$H$W$Y$\$m$m$n$p$r$y
API String ID: 2672033360-2450132792
Opcode ID: 509527a9178011772fbb75b66973a6ae0779f64e2d2f48fec426633055b94f00
Instruction ID: 9d7230482887a30bf4e7083eb0956f5f422c90c2937ac1855216c8943ca142f7
Opcode Fuzzy Hash: 509527a9178011772fbb75b66973a6ae0779f64e2d2f48fec426633055b94f00
Instruction Fuzzy Hash: DCF16E1350E3C089D712877C644428EAFE1D773A48F2C8099D7C5077AAD96FC52BDB66

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4445414, Relevance: 35.8, APIs: 1, Strings: 21, Instructions: 2813sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32 ref: 00007FF6B44454DC

Strings

t, xrefs: 00007FF6B4446236
Z, xrefs: 00007FF6B444740A
o, xrefs: 00007FF6B44473D9
t, xrefs: 00007FF6B4446397
{, xrefs: 00007FF6B4447497
,, xrefs: 00007FF6B44462C7
@, xrefs: 00007FF6B44464E3
c, xrefs: 00007FF6B444741B
1, xrefs: 00007FF6B4447520
~, xrefs: 00007FF6B44463CB
m, xrefs: 00007FF6B44463DB
b, xrefs: 00007FF6B4447447
V, xrefs: 00007FF6B44463D3
Y, xrefs: 00007FF6B4447480
w, xrefs: 00007FF6B44463A7
k, xrefs: 00007FF6B44461E2
y, xrefs: 00007FF6B444748F
v, xrefs: 00007FF6B4446409
Z, xrefs: 00007FF6B44463E3
z, xrefs: 00007FF6B44474DA
u, xrefs: 00007FF6B4446281

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: Sleep
String ID: ,$1$@$V$Y$Z$Z$b$c$k$m$o$t$t$u$v$w$y$z${$~
API String ID: 3472027048-1889956645
Opcode ID: b883412409f385da3dccdaedf41a5f72889cee189f3be9252496c239270b3145
Instruction ID: 4e758cbfc0797143aadb344bb65dab945a4215c891f41b594bcec11cbb9b5ecd
Opcode Fuzzy Hash: b883412409f385da3dccdaedf41a5f72889cee189f3be9252496c239270b3145
Instruction Fuzzy Hash: 7B23082365E2C18FE7218B3C90947CF7FA1D376318F29A558C791073A3C66A860ADB55

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442176B, Relevance: 33.2, Strings: 26, Instructions: 707COMMON

Download Yara Rule

Strings

\, xrefs: 00007FF6B4421BE1
J, xrefs: 00007FF6B4421BDC
R, xrefs: 00007FF6B4421BCD
P, xrefs: 00007FF6B4421BF0
_, xrefs: 00007FF6B4421C18
O, xrefs: 00007FF6B4421BEB
S, xrefs: 00007FF6B4421BFA
K, xrefs: 00007FF6B4421C1D
N, xrefs: 00007FF6B4421BB4
^, xrefs: 00007FF6B4421BC8
X, xrefs: 00007FF6B4421BD2
T, xrefs: 00007FF6B4421BFF
c, xrefs: 00007FF6B4421C09
b, xrefs: 00007FF6B4421BC3
a, xrefs: 00007FF6B4421C0E
L, xrefs: 00007FF6B4421C13
U, xrefs: 00007FF6B4421C04
`, xrefs: 00007FF6B4421BAF
W, xrefs: 00007FF6B4421C22
V, xrefs: 00007FF6B4421C27
[, xrefs: 00007FF6B4421BB9
M, xrefs: 00007FF6B4421BE6
Z, xrefs: 00007FF6B4421BAA
Y, xrefs: 00007FF6B4421BD7
], xrefs: 00007FF6B4421BBE
Q, xrefs: 00007FF6B4421BF5

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: J$K$L$M$N$O$P$Q$R$S$T$U$V$W$X$Y$Z$[$\$]$^$_$`$a$b$c
API String ID: 0-709081789
Opcode ID: 95e4a524beecc5d3375392c90eb3e29f890008fe832452cbeb287093093b9316
Instruction ID: 158de31cc52600253c80195a85bf00041166d577b5372a03e599f72692168c71
Opcode Fuzzy Hash: 95e4a524beecc5d3375392c90eb3e29f890008fe832452cbeb287093093b9316
Instruction Fuzzy Hash: 3A420623B5E6D18FFB01CA3894E53DB6F92C363328F19A528DB55477C7CA298609CB10

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4447CCC, Relevance: 26.6, APIs: 2, Strings: 13, Instructions: 341sleepCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B4448250: GetTickCount.KERNEL32 ref: 00007FF6B44482AE
Part of subcall function 00007FF6B4448250: UuidCreate.RPCRT4 ref: 00007FF6B44482DB

Sleep.KERNEL32 ref: 00007FF6B4447ECC
htonl.WS2_32 ref: 00007FF6B444806F

Strings

y, xrefs: 00007FF6B4447DC9
n, xrefs: 00007FF6B4447F1B
v, xrefs: 00007FF6B4447E16
o, xrefs: 00007FF6B4447DF4
q, xrefs: 00007FF6B4447DB1
~, xrefs: 00007FF6B4447F33
w, xrefs: 00007FF6B4447F16
v, xrefs: 00007FF6B4447F49
i, xrefs: 00007FF6B4447F44
-, xrefs: 00007FF6B4447F8D
x, xrefs: 00007FF6B4447DEB
d, xrefs: 00007FF6B4447DE2
u, xrefs: 00007FF6B4447DB6

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: CountCreateSleepTickUuidhtonl
String ID: -$d$i$n$o$q$u$v$v$w$x$y$~
API String ID: 3289394829-175494460
Opcode ID: 128d2acbc99dae409a441b2b5b9585aaca3754f24f26254c70192992c32f7fd9
Instruction ID: 2dab045014086d640be50c9bc8cfe692c5342c8e9809da8c98743a86b9290d9d
Opcode Fuzzy Hash: 128d2acbc99dae409a441b2b5b9585aaca3754f24f26254c70192992c32f7fd9
Instruction Fuzzy Hash: CDE1D22750C6C08AE7218F3DA4803ABAB90F7A2794F184165DBD887B9ECE7CD415DF11

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B445FB64, Relevance: 25.7, APIs: 9, Strings: 5, Instructions: 1207COMMON

Download Yara Rule

APIs

fegetenv.LIBCMT ref: 00007FF6B445FBAD
_invalid_parameter_noinfo.LIBCMT ref: 00007FF6B44601B8
_invalid_parameter_noinfo.LIBCMT ref: 00007FF6B446037B
_invalid_parameter_noinfo.LIBCMT ref: 00007FF6B4460582
_invalid_parameter_noinfo.LIBCMT ref: 00007FF6B4460846
_invalid_parameter_noinfo.LIBCMT ref: 00007FF6B4460A41
memcpy_s.LIBCPMT ref: 00007FF6B4460B2F
memcpy_s.LIBCPMT ref: 00007FF6B4460BDA
memcpy_s.LIBCPMT ref: 00007FF6B4460CA3

Strings

MZx, xrefs: 00007FF6B44601D7, 00007FF6B446023E, 00007FF6B44605A5, 00007FF6B44606CA, 00007FF6B446072D, 00007FF6B4460A5E
1#IND, xrefs: 00007FF6B4460D49
1#QNAN, xrefs: 00007FF6B4460D5B
1#SNAN, xrefs: 00007FF6B4460D52
1#INF, xrefs: 00007FF6B4460D77

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: _invalid_parameter_noinfo$memcpy_s$fegetenv
String ID: 1#IND$1#INF$1#QNAN$1#SNAN$MZx
API String ID: 808467561-2638907429
Opcode ID: d012cead53beefa769b0082b3f3d7855ca9d1f1ad9093c85bdf3b4fc5cd47282
Instruction ID: bf7ab28c308f0e7641169cd25ff01aebd9de244c74a9e8e80c3f8b7512552c6a
Opcode Fuzzy Hash: d012cead53beefa769b0082b3f3d7855ca9d1f1ad9093c85bdf3b4fc5cd47282
Instruction Fuzzy Hash: 6CB2C272A182928AEB65CF6DD4806FD27A1FB54788F505135DB0A97B8DDF38E950CB00

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B443FBB4, Relevance: 24.2, Strings: 19, Instructions: 477COMMON

Download Yara Rule

Strings

{, xrefs: 00007FF6B443FF20
|, xrefs: 00007FF6B443FBD0
s, xrefs: 00007FF6B443FBE0
~, xrefs: 00007FF6B4440005
u, xrefs: 00007FF6B443FBF8
3, xrefs: 00007FF6B443FC10
r, xrefs: 00007FF6B443FFF1
p, xrefs: 00007FF6B443FF0B
4, xrefs: 00007FF6B443FFFA
8, xrefs: 00007FF6B443FC00
f, xrefs: 00007FF6B443FF06
g, xrefs: 00007FF6B443FF10
m, xrefs: 00007FF6B443FBE8
1, xrefs: 00007FF6B443FF15
}, xrefs: 00007FF6B443FC21
g, xrefs: 00007FF6B443FFEC
7, xrefs: 00007FF6B443FC08
n, xrefs: 00007FF6B443FBD8
q, xrefs: 00007FF6B443FBF0

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: 1$3$4$7$8$f$g$g$m$n$p$q$r$s$u${$|$}$~
API String ID: 3215553584-3385196127
Opcode ID: a4fb933015b4370a8789d106c28e4a7b97fb32e8a639dea17fde7982e115794c
Instruction ID: 80debb9263b77985c9b5e52f6e0be08ad0b154f649b34d3a77b96b3941aca44d
Opcode Fuzzy Hash: a4fb933015b4370a8789d106c28e4a7b97fb32e8a639dea17fde7982e115794c
Instruction Fuzzy Hash: 7502BD2364E3C08EE721CB7890857CA7FA0D363344F0A945AD3C44B75BD6BE950ADB22

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B444048A, Relevance: 24.2, APIs: 12, Strings: 1, Instructions: 1475sleepCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32 ref: 00007FF6B444084C
OpenProcessToken.ADVAPI32 ref: 00007FF6B444085D
LookupPrivilegeValueA.ADVAPI32 ref: 00007FF6B4440888
AdjustTokenPrivileges.ADVAPI32 ref: 00007FF6B44408AB
CloseHandle.KERNEL32 ref: 00007FF6B44408C9
CreateDesktopA.USER32 ref: 00007FF6B444093C
Sleep.KERNEL32 ref: 00007FF6B44409A8
CloseDesktop.USER32 ref: 00007FF6B4440F5C
GetLastError.KERNEL32 ref: 00007FF6B4440F83
GetLastError.KERNEL32 ref: 00007FF6B4441406
GetLastError.KERNEL32 ref: 00007FF6B44414D8
CloseHandle.KERNEL32 ref: 00007FF6B44415B9

Strings

SeDebugPrivilege, xrefs: 00007FF6B444087F

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: CloseErrorLast$DesktopHandleProcessToken$AdjustCreateCurrentLookupOpenPrivilegePrivilegesSleepValue
String ID: SeDebugPrivilege
API String ID: 424851636-2896544425
Opcode ID: 70dd4c4aaec2ce1fd2c9a64400d0de6192bb0fecf6f34e628cd92d7b906293ec
Instruction ID: 20eec6820e243347a0a6b4ef21506f9d579f06c6f6834621d662be5f703a8860
Opcode Fuzzy Hash: 70dd4c4aaec2ce1fd2c9a64400d0de6192bb0fecf6f34e628cd92d7b906293ec
Instruction Fuzzy Hash: 21C213236192C08FE715CF3884E56DE3FE2D332368F296918E754477DBCA2A990AC715

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4442C2F, Relevance: 23.2, APIs: 2, Strings: 13, Instructions: 679COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00007FF6B4443199
GetLastError.KERNEL32 ref: 00007FF6B44434B3

Strings

K, xrefs: 00007FF6B4442D74
:, xrefs: 00007FF6B4442E04
v, xrefs: 00007FF6B4442D9D
_, xrefs: 00007FF6B4442D8D
u, xrefs: 00007FF6B4442DF4
l, xrefs: 00007FF6B4442DA5
[, xrefs: 00007FF6B4442DCD
;, xrefs: 00007FF6B4442DFC
B, xrefs: 00007FF6B4442D7C
q, xrefs: 00007FF6B4442D95
|, xrefs: 00007FF6B4442DE4
m, xrefs: 00007FF6B4442DEC
w, xrefs: 00007FF6B4442DAD

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ErrorLast
String ID: :$;$B$K$[$_$l$m$q$u$v$w$|
API String ID: 1452528299-116905044
Opcode ID: 0513b9e020c650c038df537f902685702b3668b7bf956292b96d5c65e824962a
Instruction ID: b8cbc828d48cea2a1bc7f7357441580331d6177b68cf2e2f335fb4329c8c1778
Opcode Fuzzy Hash: 0513b9e020c650c038df537f902685702b3668b7bf956292b96d5c65e824962a
Instruction Fuzzy Hash: E552071374E7C189EB228B3C94803DA7F90D726B58F2D8169C789073A3DE6AC217D765

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B443DB2C, Relevance: 20.6, APIs: 1, Strings: 12, Instructions: 1136COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00007FF6B443DF2B

Strings

s, xrefs: 00007FF6B443E9B9
y, xrefs: 00007FF6B443DE19
i, xrefs: 00007FF6B443DDF0
u, xrefs: 00007FF6B443E813
r, xrefs: 00007FF6B443E7D2
h, xrefs: 00007FF6B443DBEA
6, xrefs: 00007FF6B443E94F
S, xrefs: 00007FF6B443DEBC
], xrefs: 00007FF6B443E940
, xrefs: 00007FF6B443DD6C
O, xrefs: 00007FF6B443DEC4
a, xrefs: 00007FF6B443E7F9

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ErrorLast
String ID: $6$O$S$]$a$h$i$r$s$u$y
API String ID: 1452528299-3945959020
Opcode ID: 15539a1ea54178624e94140e6e54b061f5b9f23d1ee489a3d026fef316606662
Instruction ID: 263461ed98c755a92e1dd1666243e3175cd4e88405a050c6b0cdfa33fc353bc7
Opcode Fuzzy Hash: 15539a1ea54178624e94140e6e54b061f5b9f23d1ee489a3d026fef316606662
Instruction Fuzzy Hash: CC92BC2375B2C09ED732CB3C90802CABFA1D777708F19A529D784477A7C62A861BDB15

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44374C4, Relevance: 20.5, Strings: 16, Instructions: 479COMMON

Download Yara Rule

Strings

g, xrefs: 00007FF6B4437A3E
hardWorker.cpp, xrefs: 00007FF6B4437923
C, xrefs: 00007FF6B44379A1
m, xrefs: 00007FF6B4437A5E
s, xrefs: 00007FF6B4437A48
W, xrefs: 00007FF6B44379BE
i, xrefs: 00007FF6B4437A43
y, xrefs: 00007FF6B4437A55
x, xrefs: 00007FF6B44379F8
thExecute, xrefs: 00007FF6B443791C
E, xrefs: 00007FF6B44379F3
c, xrefs: 00007FF6B4437A01
a, xrefs: 00007FF6B44379AE
u, xrefs: 00007FF6B4437A06
k, xrefs: 00007FF6B44379CF
d, xrefs: 00007FF6B44379B9

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: C$E$W$a$c$d$g$hardWorker.cpp$i$k$m$s$thExecute$u$x$y
API String ID: 0-4044612007
Opcode ID: 528565641a5fa59965e7094b39c86091d7e099151dbf63dc0e9e00202449089f
Instruction ID: 12ec31b5442448cf8507b23991933d1ff36fe212693763d3ff3f02cf770e3bb6
Opcode Fuzzy Hash: 528565641a5fa59965e7094b39c86091d7e099151dbf63dc0e9e00202449089f
Instruction Fuzzy Hash: 0102EF2761D1C08FF715CB39A0E96DF6FA2C3B6364F166458D79103397CA2A860ECB25

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B443614C, Relevance: 18.3, APIs: 12, Instructions: 260memoryCOMMON

Download Yara Rule

APIs

VariantInit.OLEAUT32 ref: 00007FF6B4436217
VariantInit.OLEAUT32 ref: 00007FF6B4436233
VariantInit.OLEAUT32 ref: 00007FF6B4436252
VariantInit.OLEAUT32 ref: 00007FF6B4436270
VariantClear.OLEAUT32 ref: 00007FF6B44362AC
VariantClear.OLEAUT32 ref: 00007FF6B44362B5
VariantClear.OLEAUT32 ref: 00007FF6B44362BB
VariantClear.OLEAUT32 ref: 00007FF6B44362C1
SysAllocString.OLEAUT32 ref: 00007FF6B44362F5
SysFreeString.OLEAUT32 ref: 00007FF6B4436338
SysAllocString.OLEAUT32 ref: 00007FF6B44363A6
SysFreeString.OLEAUT32 ref: 00007FF6B44363F3

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: Variant$ClearInitString$AllocFree
String ID:
API String ID: 1107635823-0
Opcode ID: 5dbce6b5678e906daa497a8fe069cedab797123d3a809188e671a20ac9afd09d
Instruction ID: 2ff0acabbc5ea90d97424d13328e3c756618645f42988a7d27144eb483f44221
Opcode Fuzzy Hash: 5dbce6b5678e906daa497a8fe069cedab797123d3a809188e671a20ac9afd09d
Instruction Fuzzy Hash: 18B1A032A19B5286EB249F29E9917A823A0FF44B98F044135DF5D87788DF3CE566C300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4447CCD, Relevance: 17.8, APIs: 2, Strings: 8, Instructions: 262sleepCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B4448250: GetTickCount.KERNEL32 ref: 00007FF6B44482AE
Part of subcall function 00007FF6B4448250: UuidCreate.RPCRT4 ref: 00007FF6B44482DB

Sleep.KERNEL32 ref: 00007FF6B4447ECC
htonl.WS2_32 ref: 00007FF6B444806F

Strings

y, xrefs: 00007FF6B4447DC9
v, xrefs: 00007FF6B4447E16
%, xrefs: 00007FF6B4447E4A
o, xrefs: 00007FF6B4447DF4
x, xrefs: 00007FF6B4447DEB
d, xrefs: 00007FF6B4447DE2
q, xrefs: 00007FF6B4447DB1
u, xrefs: 00007FF6B4447DB6

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: CountCreateSleepTickUuidhtonl
String ID: %$d$o$q$u$v$x$y
API String ID: 3289394829-2334579308
Opcode ID: d322d65621f5a739180624087787dc2bb8428771ec4983662acf44e31363ed38
Instruction ID: 93bcaafab5ed07199493bb180fa7434916447a5f02493645583a55d481cda220
Opcode Fuzzy Hash: d322d65621f5a739180624087787dc2bb8428771ec4983662acf44e31363ed38
Instruction Fuzzy Hash: EBB1B026A0C6C08AE721CF2DA4803AAAB91F795794F584135EBCD87B9DCF7CD815CB11

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442E8EC, Relevance: 14.4, Strings: 11, Instructions: 646COMMON

Download Yara Rule

Strings

], xrefs: 00007FF6B442F042
q, xrefs: 00007FF6B442F059
/, xrefs: 00007FF6B442F09F
v, xrefs: 00007FF6B442EF83
j, xrefs: 00007FF6B442F03A
t, xrefs: 00007FF6B442F08F
I, xrefs: 00007FF6B442F01C
R, xrefs: 00007FF6B442EFB0
n, xrefs: 00007FF6B442F024
., xrefs: 00007FF6B442F097
{, xrefs: 00007FF6B442F087

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: .$/$I$R$]$j$n$q$t$v${
API String ID: 0-3027042243
Opcode ID: e3f05266b6695d7b907c3ace667c789df552f0161a1971962b81a190934c847e
Instruction ID: 7eea94559755b3a3719d8c9f78a46d3f70ac029e0397814bee5e89906ed4dd73
Opcode Fuzzy Hash: e3f05266b6695d7b907c3ace667c789df552f0161a1971962b81a190934c847e
Instruction Fuzzy Hash: 1C32382371E2C14AEB218B3C91903DF6F92D7A2318F289424C785477E7CE6ED61ADB11

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442E192, Relevance: 14.2, APIs: 2, Strings: 6, Instructions: 206timeCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B444C784: _invalid_parameter_noinfo.LIBCMT ref: 00007FF6B444C8A6

Part of subcall function 00007FF6B444C78C: _invalid_parameter_noinfo.LIBCMT ref: 00007FF6B444C7E1

GetLocalTime.KERNEL32 ref: 00007FF6B442E26C
GetCurrentProcessId.KERNEL32 ref: 00007FF6B442E3CF

Strings

>, xrefs: 00007FF6B442E284
=, xrefs: 00007FF6B442E36A
8, xrefs: 00007FF6B442E354
n, xrefs: 00007FF6B442E390
z, xrefs: 00007FF6B442E381
:H, xrefs: 00007FF6B442E4A8

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: _invalid_parameter_noinfo$CurrentLocalProcessTime
String ID: 8$:H$=$>$n$z
API String ID: 479778610-3277947295
Opcode ID: 24e28aaa322a5534530b53c80a3b68297e011b316e398c9091511e55271d6754
Instruction ID: 4976788098a768d3ae96666ad4eaba9d587c70d88f77b422d71acb3b5bd8cfa1
Opcode Fuzzy Hash: 24e28aaa322a5534530b53c80a3b68297e011b316e398c9091511e55271d6754
Instruction Fuzzy Hash: 52917D2361D2D189E7318B39B4917DBBE90EBA6780F044169DBC887B9ECE3CC155DB21

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4428248, Relevance: 12.7, Strings: 10, Instructions: 171COMMON

Download Yara Rule

Strings

t, xrefs: 00007FF6B442827D
y, xrefs: 00007FF6B4428287
r, xrefs: 00007FF6B4428268
[, xrefs: 00007FF6B442825E
h, xrefs: 00007FF6B44282AA
m, xrefs: 00007FF6B4428263
e, xrefs: 00007FF6B44282A5
w, xrefs: 00007FF6B44282B7
U, xrefs: 00007FF6B4428282
}, xrefs: 00007FF6B4428298

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: U$[$e$h$m$r$t$w$y$}
API String ID: 0-542650763
Opcode ID: a865f49fdada702029f60446668b973021f220212d246cc2c5f246155bfd698f
Instruction ID: cbc7e836a3b3bd109f6b2d64882333edc8c39ea190d5c0ae20a61e1663779c52
Opcode Fuzzy Hash: a865f49fdada702029f60446668b973021f220212d246cc2c5f246155bfd698f
Instruction Fuzzy Hash: 8551F31366E2C08AE711CB3D95C47CEAF52D3B2768F29A204D795077E6D26BC60ECB11

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B445EE18, Relevance: 10.8, APIs: 5, Strings: 1, Instructions: 321fileCOMMON

Download Yara Rule

APIs

GetConsoleCP.KERNEL32 ref: 00007FF6B445EE87
WriteFile.KERNEL32 ref: 00007FF6B445F131
WriteFile.KERNEL32 ref: 00007FF6B445F183
GetLastError.KERNEL32 ref: 00007FF6B445F2C5
GetLastError.KERNEL32 ref: 00007FF6B445F2D7

Strings

MZx, xrefs: 00007FF6B445EE55, 00007FF6B445EEEC, 00007FF6B445EFA1, 00007FF6B445F06A, 00007FF6B445F1C6, 00007FF6B445F296

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ErrorFileLastWrite$Console
String ID: MZx
API String ID: 786612050-2575928145
Opcode ID: 0e3544457a81fbf93e5bb65d93716f6e1bedc45cc0cd8151d53bc768b8010a5f
Instruction ID: ed3a93086af9b35efa1b2b8de93771e2aca061c828c28757bfc3612b945b5e8e
Opcode Fuzzy Hash: 0e3544457a81fbf93e5bb65d93716f6e1bedc45cc0cd8151d53bc768b8010a5f
Instruction Fuzzy Hash: 94D1D176B18A819AEB00CF68D5941ED7BB1FB45788B544136DF8E87B9DEE38D126C300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B444A284, Relevance: 10.6, APIs: 7, Instructions: 72COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32 ref: 00007FF6B444A2A0
RtlCaptureContext.KERNEL32 ref: 00007FF6B444A2CC
RtlLookupFunctionEntry.KERNEL32 ref: 00007FF6B444A2E6
RtlVirtualUnwind.KERNEL32 ref: 00007FF6B444A327
IsDebuggerPresent.KERNEL32 ref: 00007FF6B444A37B
SetUnhandledExceptionFilter.KERNEL32 ref: 00007FF6B444A39C
UnhandledExceptionFilter.KERNEL32 ref: 00007FF6B444A3A7

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$CaptureContextDebuggerEntryFeatureFunctionLookupProcessorUnwindVirtual
String ID:
API String ID: 3140674995-0
Opcode ID: f983b5067b0f2b30bdd97aa1616adc2b1c5e79f94750c729e5f29479b3610a46
Instruction ID: 41366d62be9d0609c0024a4ec0bb1c7adb23554750aa861044b8653065aff21f
Opcode Fuzzy Hash: f983b5067b0f2b30bdd97aa1616adc2b1c5e79f94750c729e5f29479b3610a46
Instruction Fuzzy Hash: 6A316F72609B8186EB609F65E8803ED7361FB84388F44403ADB4E97B99EF38D558C710

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44479D8, Relevance: 10.2, Strings: 8, Instructions: 181COMMON

Download Yara Rule

Strings

G, xrefs: 00007FF6B4447A7E
A, xrefs: 00007FF6B4447AB1
C, xrefs: 00007FF6B4447ABB
@, xrefs: 00007FF6B4447AB6
3333, xrefs: 00007FF6B4447C6D
u, xrefs: 00007FF6B4447A1C
L, xrefs: 00007FF6B4447AC0
F, xrefs: 00007FF6B4447A83

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: 3333$@$A$C$F$G$L$u
API String ID: 0-4267255643
Opcode ID: 73dff7867b47ab10b650259e415461b6b4d32505e36f3260bad87e8669f254a6
Instruction ID: ee27b66948cf4f21180ae569ccf903162b4db9a4ebb7cfbf719850394774cde3
Opcode Fuzzy Hash: 73dff7867b47ab10b650259e415461b6b4d32505e36f3260bad87e8669f254a6
Instruction Fuzzy Hash: 7371072360C2D085E7228B29B48439BFF90E796798F184065EFC987B8ACFBDC555DB11

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442BC62, Relevance: 10.2, Strings: 8, Instructions: 162COMMON

Download Yara Rule

Strings

r, xrefs: 00007FF6B442BCE2
t, xrefs: 00007FF6B442BCB7
W, xrefs: 00007FF6B442BC77
h, xrefs: 00007FF6B442BCBC
H, xrefs: 00007FF6B442BC89
J, xrefs: 00007FF6B442BCFC
}, xrefs: 00007FF6B442BD01
q, xrefs: 00007FF6B442BC84

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: H$J$W$h$q$r$t$}
API String ID: 0-3791407899
Opcode ID: 46464f3eedbe39486a22904aa52231a7252bd4eca6388a052e98277ec73fe164
Instruction ID: 9909ccf0d15307cc1bebb5d3f6b0e827a80d945ea7ea644c142d5c8dd26731c8
Opcode Fuzzy Hash: 46464f3eedbe39486a22904aa52231a7252bd4eca6388a052e98277ec73fe164
Instruction Fuzzy Hash: 5A517F1362E2C08AE751CB3C94C478EBF52D3B3768F28A648D794077AAC56FC50ACB11

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44271F6, Relevance: 10.2, Strings: 8, Instructions: 156COMMON

Download Yara Rule

Strings

m, xrefs: 00007FF6B4427211
[, xrefs: 00007FF6B442720C
t, xrefs: 00007FF6B442722B
L, xrefs: 00007FF6B442721C
g, xrefs: 00007FF6B4427247
G, xrefs: 00007FF6B4427230
s, xrefs: 00007FF6B4427235
i, xrefs: 00007FF6B4427242

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: G$L$[$g$i$m$s$t
API String ID: 0-169899670
Opcode ID: 6ac3f60ab24f3bebc5f90f06eaca6cd237b2d56c670aa21dcdf2d2834f9f795e
Instruction ID: 2933069061e73d2191ce815ca2e2eef8321d97acde9f7c5dfb2d8010b4027883
Opcode Fuzzy Hash: 6ac3f60ab24f3bebc5f90f06eaca6cd237b2d56c670aa21dcdf2d2834f9f795e
Instruction Fuzzy Hash: E451B11772E2C09AFB50873C94C47CEAF52C3A3728F28E204DB94177E6D62B850B8B51

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44559E4, Relevance: 9.1, APIs: 6, Instructions: 83COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlCaptureContext.KERNEL32 ref: 00007FF6B4455A5D
RtlLookupFunctionEntry.KERNEL32 ref: 00007FF6B4455A75
RtlVirtualUnwind.KERNEL32 ref: 00007FF6B4455AB0
IsDebuggerPresent.KERNEL32 ref: 00007FF6B4455AE9
SetUnhandledExceptionFilter.KERNEL32 ref: 00007FF6B4455AF3
UnhandledExceptionFilter.KERNEL32 ref: 00007FF6B4455AFE

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ExceptionFilterUnhandled$CaptureContextDebuggerEntryFunctionLookupPresentUnwindVirtual
String ID:
API String ID: 1239891234-0
Opcode ID: 50b34b393fb9b7757b0067613f9e722e960c043d972149cb9b14dd6ea40172bd
Instruction ID: d7f7c8e562c86d11f67292a60ec115b71a3f905b5164adf50640c57187a490d0
Opcode Fuzzy Hash: 50b34b393fb9b7757b0067613f9e722e960c043d972149cb9b14dd6ea40172bd
Instruction Fuzzy Hash: B1315272A18B8185DB60CF29E8802AE73A4FB88794F500135EB9D83B5DDF3CD565CB00

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44273F4, Relevance: 9.0, Strings: 7, Instructions: 220COMMON

Download Yara Rule

Strings

b, xrefs: 00007FF6B4427613
t, xrefs: 00007FF6B4427618
o, xrefs: 00007FF6B442763B
9, xrefs: 00007FF6B4427636
{, xrefs: 00007FF6B4427631
s, xrefs: 00007FF6B4427622
y, xrefs: 00007FF6B442761D

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: 9$b$o$s$t$y${
API String ID: 0-736560757
Opcode ID: 60f82f41f61e1d2d3b64a86383cc8727ed979f05cec05201576a6f6810efef2b
Instruction ID: ed49eabaa68056ca70e6c77f64ab7a283cd8aecd7484c46ff5ca8c4d0d8533fa
Opcode Fuzzy Hash: 60f82f41f61e1d2d3b64a86383cc8727ed979f05cec05201576a6f6810efef2b
Instruction Fuzzy Hash: 8071E2A379A6908FFB148A3AD4B13DBBF91D326724F1A9B19C395033C3C6598655CF04

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4426EEC, Relevance: 7.7, Strings: 6, Instructions: 161COMMON

Download Yara Rule

Strings

j, xrefs: 00007FF6B4426F1C
S, xrefs: 00007FF6B4426F02
m, xrefs: 00007FF6B4426F21
G, xrefs: 00007FF6B4426F17
e, xrefs: 00007FF6B4426F12
b, xrefs: 00007FF6B4426F0D

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: G$S$b$e$j$m
API String ID: 0-2644272952
Opcode ID: c4fb804e673f428e67ea96ab1e82ed4398614bcb78a6f580d91a974905e431e6
Instruction ID: 87b3fcb3ab0eb057e6ea5211df0c8131cd96d907f674f02a549ba984ceec7e89
Opcode Fuzzy Hash: c4fb804e673f428e67ea96ab1e82ed4398614bcb78a6f580d91a974905e431e6
Instruction Fuzzy Hash: 8951C42366A2C05AE7118B3C85C43CEAF63D7A272DF19E214D685077E6D66B860FCB50

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442C0FC, Relevance: 7.6, Strings: 6, Instructions: 149COMMON

Download Yara Rule

Strings

], xrefs: 00007FF6B442C133
l, xrefs: 00007FF6B442C14F
r, xrefs: 00007FF6B442C159
L, xrefs: 00007FF6B442C110
|, xrefs: 00007FF6B442C146
x, xrefs: 00007FF6B442C15E

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: L$]$l$r$x$|
API String ID: 0-2173852877
Opcode ID: b89107e548eef7b1376e91251f736a102339f2769cf279979c098e94cbec1f6b
Instruction ID: c42748d1a5472640deb7319fa691dcca7d97c843448cd3a631a2607aa1471337
Opcode Fuzzy Hash: b89107e548eef7b1376e91251f736a102339f2769cf279979c098e94cbec1f6b
Instruction Fuzzy Hash: 6451902362E2C09AE751CB3D94C4B8EBF52D7A3758F24E244DB84176A7C66BC50ACB11

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442777A, Relevance: 6.4, Strings: 5, Instructions: 174COMMON

Download Yara Rule

Strings

i, xrefs: 00007FF6B44277C5
|, xrefs: 00007FF6B44277D3
u, xrefs: 00007FF6B44277EE
N, xrefs: 00007FF6B44277A4
], xrefs: 00007FF6B442778F

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: N$]$i$u$|
API String ID: 0-306787487
Opcode ID: 00291b2c38cc812770b405be390ef908429b6587eb70d51dcfe9d5e5913cfd49
Instruction ID: 60f4b43df30b3769f8a3158b8d2c4caf9fb0c08804327f0d7d9ea772af32c8a2
Opcode Fuzzy Hash: 00291b2c38cc812770b405be390ef908429b6587eb70d51dcfe9d5e5913cfd49
Instruction Fuzzy Hash: 8D51701322E2C09AE711C73D94C4BCEAF52C7A3768F28E654DB94176A7C16BC50ACF11

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44395A8, Relevance: 6.1, APIs: 1, Strings: 2, Instructions: 887COMMON

Download Yara Rule

APIs

_Init_thread_header.LIBCMT ref: 00007FF6B443A2DA

Strings

@, xrefs: 00007FF6B443A119
0.0.0.0, xrefs: 00007FF6B4439607, 00007FF6B443A308

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: Init_thread_header
String ID: 0.0.0.0$@
API String ID: 3738618077-4086448161
Opcode ID: 10443c0507e290efbba5fb0e161bc6cfcda90558624135c68c1676f3c4c44b19
Instruction ID: 26e596accef74bc6559e66797bed4495a216c6df82f73da86ee188d9b105a53b
Opcode Fuzzy Hash: 10443c0507e290efbba5fb0e161bc6cfcda90558624135c68c1676f3c4c44b19
Instruction Fuzzy Hash: F582F5236096C18FE721CF7898D43DA3F91D762368F05962AC7585B7DBCE29920EC721

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4448250, Relevance: 5.6, APIs: 2, Strings: 1, Instructions: 357COMMON

Download Yara Rule

APIs

GetTickCount.KERNEL32 ref: 00007FF6B44482AE
UuidCreate.RPCRT4 ref: 00007FF6B44482DB

Part of subcall function 00007FF6B4448926: getaddrinfo.WS2_32 ref: 00007FF6B4448963
Part of subcall function 00007FF6B4448926: WSAGetLastError.WS2_32 ref: 00007FF6B4448A54

Strings

., xrefs: 00007FF6B44486C4

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: CountCreateErrorLastTickUuidgetaddrinfo
String ID: .
API String ID: 649965334-248832578
Opcode ID: 51d7d7a1b873e9233772d54583de9425c2a44a9220ee525fc56a18a4e1e50fac
Instruction ID: 94f6b2962b7c2ea3fb5bb46fbcd4e5aa1f17ab454d8db6612add7a531b22d138
Opcode Fuzzy Hash: 51d7d7a1b873e9233772d54583de9425c2a44a9220ee525fc56a18a4e1e50fac
Instruction Fuzzy Hash: 18E1D626A18AC14AE625CF29A4903ABB751FB897C4F444235EF8A9378DDF3CE555CB00

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B445CEEC, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 166COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF6B445D228

Part of subcall function 00007FF6B445599C: IsProcessorFeaturePresent.KERNEL32(?,?,?,?,00007FF6B4455BF5), ref: 00007FF6B44559A5
Part of subcall function 00007FF6B445599C: GetCurrentProcess.KERNEL32(?,?,?,?,00007FF6B4455BF5), ref: 00007FF6B44559CA

Strings

*?, xrefs: 00007FF6B445D24F
C:\Users\user\Desktop\anchor_x64.exe, xrefs: 00007FF6B445D203

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: CurrentFeaturePresentProcessProcessor_invalid_parameter_noinfo
String ID: *?$C:\Users\user\Desktop\anchor_x64.exe
API String ID: 4036615347-3079180348
Opcode ID: c9df3f397fa8304feafd434982a4bc6d76a1b4192cfd87788eb276fbb3299915
Instruction ID: f12db145778dcba592af869e82ba7e7ed28b50acf5ba2fd91276cedd94ae7e3e
Opcode Fuzzy Hash: c9df3f397fa8304feafd434982a4bc6d76a1b4192cfd87788eb276fbb3299915
Instruction Fuzzy Hash: 5851A2A2B1575685EF14DFAA98805BD67A1FF44BD4B448532EF4D87B89EE3CD061C300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4448926, Relevance: 5.1, APIs: 3, Instructions: 593networkCOMMON

Download Yara Rule

APIs

getaddrinfo.WS2_32 ref: 00007FF6B4448963
WSAGetLastError.WS2_32 ref: 00007FF6B4448A54
freeaddrinfo.WS2_32 ref: 00007FF6B4448FB2

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ErrorLastfreeaddrinfogetaddrinfo
String ID:
API String ID: 1817844550-0
Opcode ID: 44f7346984cd6515759428d1e639b69ff0e5dfb8f6e93bb076f1a20633db3deb
Instruction ID: f6356c25de1d4f8c64f7dcd82cb0f002353175740979380daf15b75163ce1b0a
Opcode Fuzzy Hash: 44f7346984cd6515759428d1e639b69ff0e5dfb8f6e93bb076f1a20633db3deb
Instruction Fuzzy Hash: 482246A3B5E6C18FE7118A38C0903CBBF50E322764F1E9659D79107393D679C6A8DB10

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B444F5B0, Relevance: 4.8, APIs: 3, Instructions: 317COMMON

Download Yara Rule

APIs

memcpy_s.LIBCPMT ref: 00007FF6B444F616
memcpy_s.LIBCPMT ref: 00007FF6B444F641

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: memcpy_s
String ID:
API String ID: 1502251526-0
Opcode ID: 89efa1099f50e7829e98c86f8bf3cc02ee95f86496c297bcc613a316ecd5c7a4
Instruction ID: 4594c9ba9386203a15aa7cb2718573fd156f94005ab6fcc4e4be104500118878
Opcode Fuzzy Hash: 89efa1099f50e7829e98c86f8bf3cc02ee95f86496c297bcc613a316ecd5c7a4
Instruction Fuzzy Hash: F8C1C272B1868687EB24CF5DE184A6AB791F7987C8F548135DB4A87748DF3CE811CB40

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B444217C, Relevance: 4.1, Strings: 3, Instructions: 318COMMON

Download Yara Rule

Strings

GET, xrefs: 00007FF6B4442248
WinHTTP loader/1.0, xrefs: 00007FF6B44421D5
200, xrefs: 00007FF6B444236B

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: 200$GET$WinHTTP loader/1.0
API String ID: 0-1079223383
Opcode ID: 4e184deaab9a70519047993a2d940f8846fc76a40cf1d86d5a6f7e43759051b7
Instruction ID: fa1e2e8399c9523c7c09a5bfcb28beffb6bc51cd99056ea5627820fb53699892
Opcode Fuzzy Hash: 4e184deaab9a70519047993a2d940f8846fc76a40cf1d86d5a6f7e43759051b7
Instruction Fuzzy Hash: 80C19A22B1961286FB14DFB9A4A27BE26A0FF447D8F144138DF0DD7B89EE3CA5118711

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442CE64, Relevance: 3.9, Strings: 3, Instructions: 190COMMON

Download Yara Rule

Strings

o, xrefs: 00007FF6B442D05D
/, xrefs: 00007FF6B442D077
u, xrefs: 00007FF6B442D062

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: /$o$u
API String ID: 0-955228073
Opcode ID: 4cb9749f711672b83aac21dc32cebb1b7c05c79f5a70da71348e750688edf089
Instruction ID: 82251f02aec60fac317c4f4ef2b2b87868e1e207b34fa4fef16c120337735fc4
Opcode Fuzzy Hash: 4cb9749f711672b83aac21dc32cebb1b7c05c79f5a70da71348e750688edf089
Instruction Fuzzy Hash: 756118A37296E19BFB158B3994A13DFAF90D332724F19A708CB55073D3C61A8595CF00

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442B45A, Relevance: 3.9, Strings: 3, Instructions: 187COMMON

Download Yara Rule

Strings

4, xrefs: 00007FF6B442B63E
z, xrefs: 00007FF6B442B629
t, xrefs: 00007FF6B442B624

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: 4$t$z
API String ID: 0-2937284666
Opcode ID: 0911adb01154f1bee7d990377110a5d971ef59dbf3f6572fe52af0f7b7b0eb17
Instruction ID: 7d55bbcec9a6f03e56fee2a88b925c86246363b4fa5e0150075796f01fdfceef
Opcode Fuzzy Hash: 0911adb01154f1bee7d990377110a5d971ef59dbf3f6572fe52af0f7b7b0eb17
Instruction Fuzzy Hash: EF61D2A379A6D08FF7068A39E4B13CBAF91D372724F09AB19CB85033D3C6598655CB14

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B445BC9C, Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 248COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF6B445BD00

Strings

gfffffff, xrefs: 00007FF6B445BF9D

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: gfffffff
API String ID: 3215553584-1523873471
Opcode ID: 39d8d324a5ed8ccc1c6ea7aacc02ab180607cb5763201971971ac6820e19807c
Instruction ID: d52b0a828f58ea846f8828af437f654e150ec2230a19445e0d528a42b7c85094
Opcode Fuzzy Hash: 39d8d324a5ed8ccc1c6ea7aacc02ab180607cb5763201971971ac6820e19807c
Instruction Fuzzy Hash: 1F912263B096CA86EF11CF2994803BD6794EB54B84F098032DB4D8B799EFBDE516C701

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B445B6E8, Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 207COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF6B445B719

Part of subcall function 00007FF6B445599C: IsProcessorFeaturePresent.KERNEL32(?,?,?,?,00007FF6B4455BF5), ref: 00007FF6B44559A5
Part of subcall function 00007FF6B445599C: GetCurrentProcess.KERNEL32(?,?,?,?,00007FF6B4455BF5), ref: 00007FF6B44559CA

Strings

-, xrefs: 00007FF6B445B8F4

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: CurrentFeaturePresentProcessProcessor_invalid_parameter_noinfo
String ID: -
API String ID: 4036615347-2547889144
Opcode ID: 7f26510c5e6554bce16751d4058f303b2fede24bf5a348830ea5ec309e2d6b03
Instruction ID: 2085021304e917654a1533c6f0da011b6cf67a477643966a1c833de942f305c8
Opcode Fuzzy Hash: 7f26510c5e6554bce16751d4058f303b2fede24bf5a348830ea5ec309e2d6b03
Instruction Fuzzy Hash: 6481C162A087C686EE648F29948077AA791FB557E0F444235EB9D87BDDDF7CE410CB00

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B445D404, Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 146COMMON

Download Yara Rule

Strings

C:\Users\user\Desktop\anchor_x64.exe, xrefs: 00007FF6B445D416

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: C:\Users\user\Desktop\anchor_x64.exe
API String ID: 0-303449656
Opcode ID: 1652115602dfb63e67c9851bbdaec33a69702db4e1f3cc669f16178081a43772
Instruction ID: e46fc873a7c81ff4d2910cc87e700bd761a92f238d8f7e3641ca786b38c9a404
Opcode Fuzzy Hash: 1652115602dfb63e67c9851bbdaec33a69702db4e1f3cc669f16178081a43772
Instruction Fuzzy Hash: 7651D462B0869184FB209F7AA9801AE7BA1FB457D4F548234EF5D97A89CF3CD051C700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4443609, Relevance: 3.3, APIs: 1, Instructions: 2086sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32 ref: 00007FF6B4444370

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 75bb56789affa75da9325a087a0ddfb37c55b33460be0a2db31353ed10f0cc08
Instruction ID: 7fbecfcbe23ebe45b6ba2a28b1f2ecef38cf9dffa90053058bac9776a2561e56
Opcode Fuzzy Hash: 75bb56789affa75da9325a087a0ddfb37c55b33460be0a2db31353ed10f0cc08
Instruction Fuzzy Hash: 4E03CE2379B2C08EE721CF7C88907CE2FA0D337748F19A559C7944B797CA66860AD725

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B443890E, Relevance: 3.3, APIs: 2, Instructions: 796COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B4439232: WSAGetLastError.WS2_32 ref: 00007FF6B443929A

GetLastError.KERNEL32 ref: 00007FF6B44389A7
GetLastError.KERNEL32 ref: 00007FF6B4438B56

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: 713c048b60c55eecbb66833d9fd3fc9b947a0fa7016a9b51d47dd0bfd0301b45
Instruction ID: 10fa1a7519ef58afb5b2d1b47e36564e529fc8c18ff7039fe0c14d90adc92ae1
Opcode Fuzzy Hash: 713c048b60c55eecbb66833d9fd3fc9b947a0fa7016a9b51d47dd0bfd0301b45
Instruction Fuzzy Hash: 2C42BE63BAB2C19EDB12CB7C80802CE3FA1D337B0CB29A459D78547363D526961BE715

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4462E48, Relevance: 3.2, APIs: 2, Instructions: 232COMMONLIBRARYCODE

Download Yara Rule

APIs

_clrfp.LIBCMT ref: 00007FF6B4463097
RaiseException.KERNEL32 ref: 00007FF6B44630A8

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ExceptionRaise_clrfp
String ID:
API String ID: 15204871-0
Opcode ID: c20f8608ea0ecac529bd971984dccab8c2031a969faf6f7420bb3b580a637607
Instruction ID: 5a162042a3c744d9ff4b95b5ef745967e7ebebbe192942735156171869550028
Opcode Fuzzy Hash: c20f8608ea0ecac529bd971984dccab8c2031a969faf6f7420bb3b580a637607
Instruction Fuzzy Hash: FCB13B77A00B858BEB19CF2DC88636877A0F744B48F158966DB5D877A8CF39D861CB01

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442F1C7, Relevance: 2.8, Strings: 2, Instructions: 307COMMON

Download Yara Rule

Strings

%s%s", xrefs: 00007FF6B442F579
%s%s, xrefs: 00007FF6B442F325

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: %s%s$%s%s"
API String ID: 0-3970236042
Opcode ID: 2c53f94690d710ff52d975b19985bc04d770dff98ea3af100831d4714eaa257a
Instruction ID: 96b5931ee540e8e6e15dd41098a9904d2870d5c9125f1fbf91f9674ad264ac5b
Opcode Fuzzy Hash: 2c53f94690d710ff52d975b19985bc04d770dff98ea3af100831d4714eaa257a
Instruction Fuzzy Hash: A0E1B561A18AD285FB718F6CA8857F923A0FF85348F440235DF4D97A9DDF7DA2968300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4437C28, Relevance: 1.9, APIs: 1, Instructions: 356COMMON

Download Yara Rule

APIs

_Init_thread_header.LIBCMT ref: 00007FF6B44380AF

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: Init_thread_header
String ID:
API String ID: 3738618077-0
Opcode ID: ce705f50aec31e5bcc48da97e35d25f4b06f5220e85e65c20c9088254f92cfb5
Instruction ID: 92a894b0f199b2159507d378cbdceab9fac783f3dcceb67f068efdee08b98e74
Opcode Fuzzy Hash: ce705f50aec31e5bcc48da97e35d25f4b06f5220e85e65c20c9088254f92cfb5
Instruction Fuzzy Hash: 8AE1F422A186818AFB15CF38E4D13EE6BA1E752798F008535DB9D937DACE3DD55AC300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442A16E, Relevance: 1.5, Strings: 1, Instructions: 291COMMON

Download Yara Rule

Strings

3:<KU, xrefs: 00007FF6B442A170

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: 3:<KU
API String ID: 0-2596799183
Opcode ID: f1e28a683cac5d88c91e3cb031c53df122bb0c837ad4f0d12324c1fc40aa2c42
Instruction ID: 1420fe495537ba7d23352057c2170071aaa54321ba8cd316db7cbc13827fcdf5
Opcode Fuzzy Hash: f1e28a683cac5d88c91e3cb031c53df122bb0c837ad4f0d12324c1fc40aa2c42
Instruction Fuzzy Hash: EFA1B2A37A76D09FFB018A39C5A17CFBF90D326724F29A709CB60176D3C21A9615DB10

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4423575, Relevance: 1.5, Strings: 1, Instructions: 226COMMON

Download Yara Rule

Strings

7, xrefs: 00007FF6B4423595

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID: 7
API String ID: 0-1790921346
Opcode ID: bd684695b0b9009310375d860dea63871e4bb56076010b7dd2d901ca6ecf7f5b
Instruction ID: 9bda34d51b3b72295bac3e914515360cd3cf8ac631e9881fabc77d10035e1bed
Opcode Fuzzy Hash: bd684695b0b9009310375d860dea63871e4bb56076010b7dd2d901ca6ecf7f5b
Instruction Fuzzy Hash: 6761D9637AA2804FDB21CE78A0916C77BA0E37A308F096616F7C587B57D56CDA07DB04

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B444E894, Relevance: 1.5, Strings: 1, Instructions: 209COMMON

Download Yara Rule

Strings

0, xrefs: 00007FF6B444EA63

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: 0
API String ID: 3215553584-4108050209
Opcode ID: d3cad61f5502d7106a1471d22457d203db06ea8473520b57dc9d58c1c2d2d2a1
Instruction ID: 3356589b0b0eec96f23f4e952b25b69bdb8be9850b76b30e4b7ef7271d8c52c1
Opcode Fuzzy Hash: d3cad61f5502d7106a1471d22457d203db06ea8473520b57dc9d58c1c2d2d2a1
Instruction Fuzzy Hash: 3D71F611A18643A6FAA49F5D82C06BE2290FF407C4FA45132DF4D976DDCF2DEA638705

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B444D00C, Relevance: 1.4, Strings: 1, Instructions: 196COMMON

Download Yara Rule

Strings

0, xrefs: 00007FF6B444D1A5

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: 0
API String ID: 3215553584-4108050209
Opcode ID: 6d0a94d7c0469c5c6aeef568c5c81d7626709050d9262ba6b699d629f267a2f6
Instruction ID: c349aaa8bb15ece0d6c8a6d0eb9489e8a0cdb03d737d8ed97d008b65ac32b6d5
Opcode Fuzzy Hash: 6d0a94d7c0469c5c6aeef568c5c81d7626709050d9262ba6b699d629f267a2f6
Instruction Fuzzy Hash: B9611491A0C64246FA688F2D60803BE5792EF46BC9F581131DF89977DECE2DE867C341

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4459600, Relevance: 1.3, APIs: 1, Instructions: 7memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 00007FF6B4459604

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: e06ef351894c49f49f10d3e365f1dd25fc469adfcf509904f72e1a7b88f780e1
Instruction ID: 37eb11e20f93ca364ac4f9047e3ee6df4de433fa83f1e7a1ee51e21a70be8dbf
Opcode Fuzzy Hash: e06ef351894c49f49f10d3e365f1dd25fc469adfcf509904f72e1a7b88f780e1
Instruction Fuzzy Hash: 61B09220E1BA02C2EA082F2A6CC221422A5FF48700F958078C20C81328DE3C20BA5700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B443EBAA, Relevance: .4, Instructions: 449COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f4e7805e7cd11ea0290a49bbe4ff1756958a9c33e91ea1cf9ce81fb76ab44a9e
Instruction ID: 73ed630af526499bba9e51c362fead4511d8baf283524fe2d70804cf7b8e83d6
Opcode Fuzzy Hash: f4e7805e7cd11ea0290a49bbe4ff1756958a9c33e91ea1cf9ce81fb76ab44a9e
Instruction Fuzzy Hash: 03F1D82375A2805AEB10CA38D1C47CA6F52D7A6719F28E524CB54473E7DA7BDA0FCB10

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B443F31E, Relevance: .4, Instructions: 418COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 976c2c5f0d80b86eb54c4b415adca4402a94d225a663c7417f28d4740c029039
Instruction ID: 0635fa156f463012e9acd077cbafbb245c6ae44e4c8af96150c5a99fb610bfc9
Opcode Fuzzy Hash: 976c2c5f0d80b86eb54c4b415adca4402a94d225a663c7417f28d4740c029039
Instruction Fuzzy Hash: 91F123237192D18EEB21CF3884D43DA6F52DB66768F099525CB484B7D7CE2A9A0FC710

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B443D004, Relevance: .4, Instructions: 377COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f8299c70641a8df5a701ed7c720cb2b4eabe6ad68e686a92389bed2a30eabf53
Instruction ID: 864413866558d2f6ad9cc9641b5f73dc6dacff1cfcc24439c34198135ddcd78d
Opcode Fuzzy Hash: f8299c70641a8df5a701ed7c720cb2b4eabe6ad68e686a92389bed2a30eabf53
Instruction Fuzzy Hash: A9D16863B19A914BFB148F39E4A13DB6B91E762720F199629CB94437C3DF2CD529CB00

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4428E1C, Relevance: .4, Instructions: 376COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ec9c28821c2a8ae692be1e14cac8bde547ad27467c50e85521d691d121d2b05
Instruction ID: 8d937ee766b45af3f99c88f5f6ed1180f80e8e51e1a87561a2b850f713bbd422
Opcode Fuzzy Hash: 1ec9c28821c2a8ae692be1e14cac8bde547ad27467c50e85521d691d121d2b05
Instruction Fuzzy Hash: 00D116B3B9BA914FF7158A39C4B13CB7F90D322734F1A9B198790072D3D6A98659CB04

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B443B4E4, Relevance: .3, Instructions: 334COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 35012a9d2a0d3de121f552b8a21dc0deb257bf598013a262d6ddb06e2d030171
Instruction ID: de08b48928b77ab6021b9e8d7ac4f4894770e4889847b3a378c3e8c76d8ca944
Opcode Fuzzy Hash: 35012a9d2a0d3de121f552b8a21dc0deb257bf598013a262d6ddb06e2d030171
Instruction Fuzzy Hash: DDD1AE1369B2C19DE7128F3CC5803CD6F21E32276CF5E9A15DB580B7A7CA6A961AC311

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4427E98, Relevance: .3, Instructions: 315COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 90bd88c5e1ace47f4bb3f2349a19dcac0d2c52e9744543e966c8390ca8e80190
Instruction ID: 9a0a6861ad011c299ccb4affa62fabd8aec099bb33b815ab23ef019502b3906d
Opcode Fuzzy Hash: 90bd88c5e1ace47f4bb3f2349a19dcac0d2c52e9744543e966c8390ca8e80190
Instruction Fuzzy Hash: 67B1E3A3F9EA914FE7118A39C4B53DBBF90D322734F2A97198791033D3D2698619DB00

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442B68A, Relevance: .3, Instructions: 313COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4464c61eb48e64d6a55577db531dbf1875ca18cd90fd9caa29261f6e11474085
Instruction ID: fff35b5bc2668a54ada6e4afe12984600aff4c2d10045883c89a0f401d93953d
Opcode Fuzzy Hash: 4464c61eb48e64d6a55577db531dbf1875ca18cd90fd9caa29261f6e11474085
Instruction Fuzzy Hash: 8AB1C1A379B6905BF7018A3AC5A1BCFBF90D322B24F1EAB098750073D3C12A5655DB04

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B443BF22, Relevance: .3, Instructions: 311COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 15ee82f0324375bd0286e3819d9379f4f23836b73f508718769443e55e3ba1f4
Instruction ID: d1bc825843fc456c22d890ad5cf2dd15c01dca5d4e77c07071ba5f14b5dc83af
Opcode Fuzzy Hash: 15ee82f0324375bd0286e3819d9379f4f23836b73f508718769443e55e3ba1f4
Instruction Fuzzy Hash: 52C1C153A9B2C09EE712CF3CC5803CD6F21E32275CF09AA19EB58077E7C6699616C351

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442C8B2, Relevance: .3, Instructions: 303COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b89e939baf70925d4038a8583e7867248cc781f4f4f6cafa39a8d77e8d9bc00f
Instruction ID: 91807c13a80a4bfcbafbfe385e51837ea39321d0d6affca09f220f3e8f794865
Opcode Fuzzy Hash: b89e939baf70925d4038a8583e7867248cc781f4f4f6cafa39a8d77e8d9bc00f
Instruction Fuzzy Hash: 76A1FDA37DB6D04FFB018A39C4A13CBBF91D322728F1EAB198B81072D3C6594559DB14

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B443C3C2, Relevance: .3, Instructions: 291COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 14a30570f157cb874c8448727ff115599652c466b19802783eafbe6c7ec458cb
Instruction ID: 59d6122fa36d0157ac6b138f96e86b282c26ec36a8a1dae004555e312e674767
Opcode Fuzzy Hash: 14a30570f157cb874c8448727ff115599652c466b19802783eafbe6c7ec458cb
Instruction Fuzzy Hash: 3EB1B02775A2C08EEB108A3CC4C43CA6F22D76676DF19D615DB54076EBDA6B8A0FC700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4427B16, Relevance: .3, Instructions: 289COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 87164b491f6f8fb0343465a9b1afb2d8908d293274efa30ff8567c3db7772b61
Instruction ID: 883548f300f8bad2ec481f2cb7e7b00dfecd0fc44d72c82da4b1f53a390c90ca
Opcode Fuzzy Hash: 87164b491f6f8fb0343465a9b1afb2d8908d293274efa30ff8567c3db7772b61
Instruction Fuzzy Hash: 75A1F463F9EA924FEB118A38C4653CBBF40D322738F2A9719C791072C3E7698655DB14

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B444FA54, Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48883f57f144b60095104683b0817eab8d4014c728ff544acee589e53995ce7b
Instruction ID: 72d4d6d9f3bc3787d877717b2327b1b606ce991ebc5ec6399fbeed7e83bdef67
Opcode Fuzzy Hash: 48883f57f144b60095104683b0817eab8d4014c728ff544acee589e53995ce7b
Instruction Fuzzy Hash: 9891E426F2868246FA294F2DA4A03BA1680FF557D4F141239DF6EC77D8DE2CE525E700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442AB96, Relevance: .3, Instructions: 263COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a943bb1cbb97479ab0a4489ceced7149998649bd6574ab5a3b291c252fe21127
Instruction ID: d4cba7c25654fea867e6b0489e98fc3dfa081ccc99012af08e1e2e6ff27fcbe0
Opcode Fuzzy Hash: a943bb1cbb97479ab0a4489ceced7149998649bd6574ab5a3b291c252fe21127
Instruction Fuzzy Hash: 7191D6637A76D15BFB108B3AC5A1BCFBF91D322B24F29A7088B10177D3C62A5515DB10

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4426BCC, Relevance: .3, Instructions: 258COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d8e77ec87860a453529ea951c619791a31c0ad02ca89d6f665f6c1910c5f01e
Instruction ID: d34bc36eddcb32bfb084e3dbcab88f0061e642744034783be87a10e005b44f13
Opcode Fuzzy Hash: 2d8e77ec87860a453529ea951c619791a31c0ad02ca89d6f665f6c1910c5f01e
Instruction Fuzzy Hash: 6A91A2637AB5D19BFB058B39C5A17CEBFA0D322B14F19AA08CB54177E2C12A5506DB10

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442C5BE, Relevance: .2, Instructions: 250COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f80cd3c5ba8744f42e17a15f05b6de34eb747bc6488c40dce7af27f30c8e1fd
Instruction ID: a0757fd486d5cd822794d6b95518c3755f56cd0699b9182bbb77793e88d8057e
Opcode Fuzzy Hash: 3f80cd3c5ba8744f42e17a15f05b6de34eb747bc6488c40dce7af27f30c8e1fd
Instruction Fuzzy Hash: 7191C2A37AA6D08FF7058A3A95B13CFAF91D332724F19A708C751073D3C6698655CB01

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442C2F2, Relevance: .2, Instructions: 234COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21824d62f9b976fcae4470ac268b5a075de4c4ac38ff61e7020170adf9e213ea
Instruction ID: d15781cc1d6b1b30c2f1803a7232f9a39c933f70abafe38b5f70665a6e165086
Opcode Fuzzy Hash: 21824d62f9b976fcae4470ac268b5a075de4c4ac38ff61e7020170adf9e213ea
Instruction Fuzzy Hash: 8281E6A365A9D08FF7068A39C5B13CFAFA1D332724F1AE608CB91073E3C6698555CB15

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4428476, Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d5071de560cc4215307046580fdf4f82cb738bf1884aef68748710f25112a311
Instruction ID: 3149c2d2d584e49d899c7f3120ba9e49f191e0d78c2c2c763fcd3c63557448e5
Opcode Fuzzy Hash: d5071de560cc4215307046580fdf4f82cb738bf1884aef68748710f25112a311
Instruction Fuzzy Hash: 3B81B2A375A6D04BF7058A3990B13DBBF91D322724F1DAA19C7900B3D3C5698956CB14

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442BE8E, Relevance: .2, Instructions: 213COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 169e86cce73c17a0faaeb406c63d34aee5ed4118838362f7c7c654b4cd043588
Instruction ID: 2dde1a8e4fb077fd9ec1aade6f62de1d622a462e0fc1668d3d2a2d522267fd9a
Opcode Fuzzy Hash: 169e86cce73c17a0faaeb406c63d34aee5ed4118838362f7c7c654b4cd043588
Instruction Fuzzy Hash: B171CEA379AAD04FFB068A39D4B13DBAF91D332724F1DEA1AC790032C3C6598559CB15

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4428716, Relevance: .2, Instructions: 198COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cfc15ad1049b2a5b4aca574729ae55be81d2070715a28aef2ca27dc71cf1e275
Instruction ID: 9d02611ba095f6b15620288ac6b881eb1c92c56ea35becc5b54c33876e323aca
Opcode Fuzzy Hash: cfc15ad1049b2a5b4aca574729ae55be81d2070715a28aef2ca27dc71cf1e275
Instruction Fuzzy Hash: 4471B1A37296D18BFB058A3984A17CFBF90D362B64F29E618CB50173D3C62A8156CF11

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44266C4, Relevance: .2, Instructions: 197COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f9da9ec980b119b44d90e7dc43282575d384b3a47d2bde8e7d89dc5c0f99111
Instruction ID: a2f35a4225537d840ef9b3c5acc102e8afdc66a3c909b7394b9e16b154625228
Opcode Fuzzy Hash: 7f9da9ec980b119b44d90e7dc43282575d384b3a47d2bde8e7d89dc5c0f99111
Instruction Fuzzy Hash: E371C3537AB2D09AE7128B38C5907CEFFA0E322B48F1DE509C7841B793C26B9556DB10

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B443AFAE, Relevance: .2, Instructions: 196COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a52fd02be9789394d27e646f48e7b2451de2921e30df74e2d29c6f24417af25e
Instruction ID: 08b4327b89c455c74a50a3d187cb781c052c331ac4f2a53aea76c78d8148e58d
Opcode Fuzzy Hash: a52fd02be9789394d27e646f48e7b2451de2921e30df74e2d29c6f24417af25e
Instruction Fuzzy Hash: 9B71E123F186914AFB11CF78D0843EE6B62D722788F009431CB589778BDF69D59AC340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B443CD36, Relevance: .2, Instructions: 191COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef4994529661a5766efd0df43838bd9f1a40f01a08a6aae2c8327f8a0e32095a
Instruction ID: fab319b12deaa63440dc34684fb3b4c2bcf6ba1c71c8c47ad0edb5a0bea95736
Opcode Fuzzy Hash: ef4994529661a5766efd0df43838bd9f1a40f01a08a6aae2c8327f8a0e32095a
Instruction Fuzzy Hash: 4271F23360C68186EB618F39A5447ABAB90EB95BC4F048135EF8D87B99DF7DE055C700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442693C, Relevance: .2, Instructions: 190COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3cb4dce6d1a2b9ac929753d10aed64681087a6ca7aabf66f340171d7eb85002c
Instruction ID: 9715719e870fa3cabfb494610574640e9ec6868194df352b955088709c5a2477
Opcode Fuzzy Hash: 3cb4dce6d1a2b9ac929753d10aed64681087a6ca7aabf66f340171d7eb85002c
Instruction Fuzzy Hash: A471F4636292D28AEB019B3D800178EBF50E332B7CF599348CB551B3D3C62B9596CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4429F0A, Relevance: .2, Instructions: 188COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d6bd9bba0eed2d923df6b4da09b911c160644f2ee509e049f78aaa21a1cec2c
Instruction ID: e1a50f4c7e27478138cbfd7f071fa0287557da5ac9178a4eb52fce5ee55cec4e
Opcode Fuzzy Hash: 6d6bd9bba0eed2d923df6b4da09b911c160644f2ee509e049f78aaa21a1cec2c
Instruction Fuzzy Hash: 3C61056375B2D29AE7019A3DC44078EBF50E336B2CF5DD249CB802B393C56B8596DB60

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4429CA4, Relevance: .2, Instructions: 183COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a25027324f34b724fb860dd91c33603bd208728eec59983b04f164319679cb1e
Instruction ID: ab2d04b3a517513300a3004c8f7eceb784eec620aedeb5e1a257a3d09c013f22
Opcode Fuzzy Hash: a25027324f34b724fb860dd91c33603bd208728eec59983b04f164319679cb1e
Instruction Fuzzy Hash: 1A61C5576291D29AEB016B3C850134EBF50E322B7CF599344CF552B3E2C62B9986CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4428992, Relevance: .2, Instructions: 182COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33e5ca7b8fa6794b4f0a8a060e1ad0653a279b2b61011ea5a190e56d8981e0e7
Instruction ID: 0e8c41e9c9ccd15d9b367acbfd3d61002027437a522c934486bef478570f6182
Opcode Fuzzy Hash: 33e5ca7b8fa6794b4f0a8a060e1ad0653a279b2b61011ea5a190e56d8981e0e7
Instruction Fuzzy Hash: 4361B56761A1D25AEB025F3D850134FBF60E326B7CF59A344CF462B3A2C53B9986C790

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B442BA3A, Relevance: .2, Instructions: 172COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe515e028832d8876a252f3d873d3ece6b3a4d2d7e5e6c64d57da01840e4d6e3
Instruction ID: f5f306b684b56f2f9f966c281258f7ab1b63f5d5eb3cbe89eb358dcbe8c89424
Opcode Fuzzy Hash: fe515e028832d8876a252f3d873d3ece6b3a4d2d7e5e6c64d57da01840e4d6e3
Instruction Fuzzy Hash: DC51D2637AB2D09AE7118A3CC4907CEFF50E332B08F1DE659C7941B393C66A8556DB11

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4421094, Relevance: .2, Instructions: 170COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 814864bee3f53b4c06bb8eb1701532d171da2eb01eba70b8f1f9e221d3dbd06a
Instruction ID: fa0e5433a1c2753f6f7df179c4b6d2d56ac7b4e9e4006256a1c9dc47abd0af37
Opcode Fuzzy Hash: 814864bee3f53b4c06bb8eb1701532d171da2eb01eba70b8f1f9e221d3dbd06a
Instruction Fuzzy Hash: 0251B2137680E15BFB155E3844E2AFB6FD2C7433D8F1AA430E789C7A9BDD2A95198340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B443F148, Relevance: .1, Instructions: 131COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b063f5835d7df482878bd6b6fc98aea5100d92c3071ce995fc2fb080e30ce592
Instruction ID: 061674842ba02cb708849f064c799401d17903834293cf3cacdd40931bbdf22e
Opcode Fuzzy Hash: b063f5835d7df482878bd6b6fc98aea5100d92c3071ce995fc2fb080e30ce592
Instruction Fuzzy Hash: 0B416723B183918AFB15CF39A5D02EE6B62E712B94F049135DF58977CACF29956AC300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B444908C, Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9dda3d076260c3319880d8bbc1012172f9946e85fa5eeab6500ea4dbf244f5c
Instruction ID: ebf6c19d9915a84d3110253d16e83501b0949bd6fdaa19110cc42c483bc54e84
Opcode Fuzzy Hash: c9dda3d076260c3319880d8bbc1012172f9946e85fa5eeab6500ea4dbf244f5c
Instruction Fuzzy Hash: 6F318E6372597613BF098C3E9DD02BB55E2ABC47A1F45D5389E55836E8DD3D88065300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B443A3AE, Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ddab7a796360b66ec20354cd96875d2fe32611bd170d5d19ef14e3db215dfac
Instruction ID: 4fd13cdd058b7e76006ed6586e8c6dabee0447fb2685c192e3f8c1b0250cf7df
Opcode Fuzzy Hash: 7ddab7a796360b66ec20354cd96875d2fe32611bd170d5d19ef14e3db215dfac
Instruction Fuzzy Hash: DE41AC1364E3C089EB168B3C50842D96FA2D332B4CF2DD1A9C7881B763C96AC15BD762

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4452754, Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8990701b6120a7c83ef5e4eb0131d7695fbb9565f5dd60224c821d488128b677
Instruction ID: 618a626ba46b2a3d95c6eac41db8bb8cf1a5e904199529167b086e1ae99d87c9
Opcode Fuzzy Hash: 8990701b6120a7c83ef5e4eb0131d7695fbb9565f5dd60224c821d488128b677
Instruction Fuzzy Hash: 6E314D32E1C95386FEA99F6D85D45791242FF82700E648633C70D81A9DCD2AF566DF03

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4462C60, Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 784b48e0997eee179a80e101ce4c513229386164b17c0dd4af8a97d850ba0fdd
Instruction ID: f5c676913ccaaad9f5f585f67e1ed4b61989219f6d694bf8e48d091553d4bd54
Opcode Fuzzy Hash: 784b48e0997eee179a80e101ce4c513229386164b17c0dd4af8a97d850ba0fdd
Instruction Fuzzy Hash: 20F06871B296558ADB948F2CB58362977D0F748380F808039D69DC7F08DA3C90718F04

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B444A274, Relevance: .0, Instructions: 2COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0210d77da61e30b27039753a39a2f2148efb687aa5e96026ff40c58e14571448
Instruction ID: f63bcb9193e0638ff15af085562e574370ef9cea7fd0c8914bdc809550da260e
Opcode Fuzzy Hash: 0210d77da61e30b27039753a39a2f2148efb687aa5e96026ff40c58e14571448
Instruction Fuzzy Hash: BDA0026190CC02D1F7448F0AF8D00302330FB51785F400071E20ED10A8AF7CA824E302

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4439232, Relevance: 21.1, APIs: 2, Strings: 10, Instructions: 106networkCOMMON

Download Yara Rule

APIs

WSAGetLastError.WS2_32 ref: 00007FF6B443929A
_Init_thread_header.LIBCMT ref: 00007FF6B44393DE

Strings

k, xrefs: 00007FF6B443934A
/, xrefs: 00007FF6B4439313
,, xrefs: 00007FF6B4439358
|, xrefs: 00007FF6B4439309
3, xrefs: 00007FF6B443931D
p, xrefs: 00007FF6B443935D
H, xrefs: 00007FF6B44392ED
0, xrefs: 00007FF6B4439318
^, xrefs: 00007FF6B44392E2
w, xrefs: 00007FF6B443930E

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ErrorInit_thread_headerLast
String ID: ,$/$0$3$H$^$k$p$w$|
API String ID: 4025375154-253053246
Opcode ID: 7416f4ff0be6ec7eba57a9f441abc027175377b62e64652e372d29bfff532440
Instruction ID: 95d11ce1efbfa2a54c5e3933e4eaec669be66818a8df5f3d2aa3c0759b439549
Opcode Fuzzy Hash: 7416f4ff0be6ec7eba57a9f441abc027175377b62e64652e372d29bfff532440
Instruction Fuzzy Hash: 4B51611250E2C188E7728B3C64D03AAAFA0C7B6744F581179E7C9477AACE6DD059CB26

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44586A4, Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 318COMMONLIBRARYCODE

Download Yara Rule

APIs

__FrameHandler3::GetHandlerSearchState.LIBVCRUNTIME ref: 00007FF6B4458708

Part of subcall function 00007FF6B4457B74: _GetEstablisherFrame.LIBVCRUNTIME ref: 00007FF6B4457BA9
Part of subcall function 00007FF6B4457B74: __GetUnwindTryBlock.LIBCMT ref: 00007FF6B4457BB7
Part of subcall function 00007FF6B4457B74: __SetUnwindTryBlock.LIBVCRUNTIME ref: 00007FF6B4457BDC

Is_bad_exception_allowed.LIBVCRUNTIME ref: 00007FF6B44587E0
__FrameHandler3::ExecutionInCatch.LIBVCRUNTIME ref: 00007FF6B4458A44
_GetEstablisherFrame.LIBVCRUNTIME ref: 00007FF6B4458A95
std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF6B4458B55

Strings

csm, xrefs: 00007FF6B4458789
csm, xrefs: 00007FF6B4458803
csm, xrefs: 00007FF6B4458722

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: Frame$BlockEstablisherHandler3::Unwind$CatchExecutionHandlerIs_bad_exception_allowedSearchStatestd::bad_alloc::bad_alloc
String ID: csm$csm$csm
API String ID: 3606184308-393685449
Opcode ID: d75e76c68253bcca0b94597d7b6e8bbe81b92c6df5baad666a6ded16b790c426
Instruction ID: 13b38a207f43ab20fdcffefd2eb34f4facd8f55d8229b493a7f694aabb9c85d6
Opcode Fuzzy Hash: d75e76c68253bcca0b94597d7b6e8bbe81b92c6df5baad666a6ded16b790c426
Instruction Fuzzy Hash: 33E14D72A08B818AEF609F6994803AD77A4FB45798F144135EF8D97B9DDF38E4A1C700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B445E260, Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 86libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000000,00007FF6B445E0F5,?,?,00000000,00007FF6B4457784), ref: 00007FF6B445E2E3
GetLastError.KERNEL32(?,?,00000000,00007FF6B4457784), ref: 00007FF6B445E2F1
LoadLibraryExW.KERNEL32(?,?,00000000,00007FF6B4457784), ref: 00007FF6B445E31B
FreeLibrary.KERNEL32(?,?,00000000,00007FF6B4457784), ref: 00007FF6B445E361
GetProcAddress.KERNEL32(?,?,00000000,00007FF6B4457784), ref: 00007FF6B445E36D

Strings

api-ms-, xrefs: 00007FF6B445E303
MZx, xrefs: 00007FF6B445E27E, 00007FF6B445E32C, 00007FF6B445E34A

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: Library$Load$AddressErrorFreeLastProc
String ID: MZx$api-ms-
API String ID: 2559590344-259127448
Opcode ID: 04355ff06001d2d6a683f0a034157a800ff914f5fcb14f6eb95f28767bf62b4d
Instruction ID: abff29deace94f73770f4b683f6fd339a7bf38fc1af6710050b3407251ba0a19
Opcode Fuzzy Hash: 04355ff06001d2d6a683f0a034157a800ff914f5fcb14f6eb95f28767bf62b4d
Instruction Fuzzy Hash: 1B31A322B1BA42E1EE11DF1AA9805796394FF44BA4FA90535DF1DCB798EE3CE461C300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4437AF0, Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 82fileCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B44360F1: WideCharToMultiByte.KERNEL32 ref: 00007FF6B443613A

GetModuleFileNameA.KERNEL32 ref: 00007FF6B4437B44
CreateFileA.KERNEL32 ref: 00007FF6B4437BC6
GetFileSize.KERNEL32 ref: 00007FF6B4437BDF
CloseHandle.KERNEL32 ref: 00007FF6B4437BEA

Part of subcall function 00007FF6B4456E78: _invalid_parameter_noinfo.LIBCMT ref: 00007FF6B4456E9D

Strings

=, xrefs: 00007FF6B4437B50
g, xrefs: 00007FF6B4437B5B
w, xrefs: 00007FF6B4437B66

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: File$ByteCharCloseCreateHandleModuleMultiNameSizeWide_invalid_parameter_noinfo
String ID: =$g$w
API String ID: 2869743477-3268570079
Opcode ID: 4a82ca26e9b12c163d29d0ee986f8d2af40302c703be63ebbdc4b3e78d14f6a9
Instruction ID: b494bdd075ab7fabc2cc6d7b54ca60bfea9c2afa07a3ecc7998511f949aa6476
Opcode Fuzzy Hash: 4a82ca26e9b12c163d29d0ee986f8d2af40302c703be63ebbdc4b3e78d14f6a9
Instruction Fuzzy Hash: 30312B1160C2C185F7919F3DA8D436A6AA0EF95B98F048175EBCE87BDACE3CD455CB01

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44626B0, Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 48fileCOMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 00007FF6B44626E1
GetLastError.KERNEL32 ref: 00007FF6B44626ED
CloseHandle.KERNEL32 ref: 00007FF6B4462705
CreateFileW.KERNEL32 ref: 00007FF6B4462730
WriteConsoleW.KERNEL32 ref: 00007FF6B446274F

Strings

CONOUT$, xrefs: 00007FF6B4462711

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast
String ID: CONOUT$
API String ID: 3230265001-3130406586
Opcode ID: b3995c7a37e6925a60afd43ef683f5ac5acb67d9482e949a7e5944a38cb6630b
Instruction ID: f51a6d65ca814c8007289b3adfc03dc2de28c933553bcb02aede8cc240512441
Opcode Fuzzy Hash: b3995c7a37e6925a60afd43ef683f5ac5acb67d9482e949a7e5944a38cb6630b
Instruction Fuzzy Hash: 42119361718B4286E7509F5AE88472972A0FB88FE5F044274EB1EC7B98CF7CD8648741

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B443879C, Relevance: 9.1, APIs: 6, Instructions: 103fileCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B44360F1: WideCharToMultiByte.KERNEL32 ref: 00007FF6B443613A

GetModuleFileNameA.KERNEL32 ref: 00007FF6B44387F1
CreateFileA.KERNEL32 ref: 00007FF6B44388AD
GetFileSize.KERNEL32 ref: 00007FF6B44388C1
SetFilePointer.KERNEL32 ref: 00007FF6B44388D6
SetEndOfFile.KERNEL32 ref: 00007FF6B44388DF
CloseHandle.KERNEL32 ref: 00007FF6B44388E8

Part of subcall function 00007FF6B4456E78: _invalid_parameter_noinfo.LIBCMT ref: 00007FF6B4456E9D

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: File$ByteCharCloseCreateHandleModuleMultiNamePointerSizeWide_invalid_parameter_noinfo
String ID:
API String ID: 3914190426-0
Opcode ID: dceae1f6229362cc64b66fbe57b7f2deff865424649d4b32b4333f0f8ac6b727
Instruction ID: 9c9ee4abea07e92c4520591dacb43151645444c49a6b7ca4816728ed39f9fefb
Opcode Fuzzy Hash: dceae1f6229362cc64b66fbe57b7f2deff865424649d4b32b4333f0f8ac6b727
Instruction Fuzzy Hash: 1E413622A0D2C146FB659F3DA4A53AA7BD1EB96B94F088035DB8D877C9CE3D940DC701

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4454A68, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 24libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32 ref: 00007FF6B4454A84
GetProcAddress.KERNEL32 ref: 00007FF6B4454A9A
FreeLibrary.KERNEL32 ref: 00007FF6B4454AB7

Strings

CorExitProcess, xrefs: 00007FF6B4454A93
mscoree.dll, xrefs: 00007FF6B4454A7B

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: ecd63c3c4316c3c9fbdcfef5bf25d74ee47e5c971f69a65528fc7b8558aba146
Instruction ID: efe95ac5d3b99f118a44ac92e752e479a966aa25f1cc2f7e2052946d232a7f5e
Opcode Fuzzy Hash: ecd63c3c4316c3c9fbdcfef5bf25d74ee47e5c971f69a65528fc7b8558aba146
Instruction Fuzzy Hash: CBF05EA1B29A8282EF948F69E8C03782370EF88744F041835D75FC56A8CF3CD4A8C300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B445EB3C, Relevance: 7.7, APIs: 5, Instructions: 203COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF6B445EB7D
GetConsoleMode.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B445EAFB,?,?,?,00007FF6B445ADEB), ref: 00007FF6B445EC3C
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B445EAFB,?,?,?,00007FF6B445ADEB), ref: 00007FF6B445ECBC

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ConsoleErrorLastMode_invalid_parameter_noinfo
String ID:
API String ID: 2210144848-0
Opcode ID: 07eeae94c06d92b8504f9e987bce4935aa044e86d40c3320ad466e40d74f921d
Instruction ID: 4f39aabfc18e116be53d0573d2fc1e9ee02f9e8df9fa3cf420116486bf40a0e9
Opcode Fuzzy Hash: 07eeae94c06d92b8504f9e987bce4935aa044e86d40c3320ad466e40d74f921d
Instruction Fuzzy Hash: 40819D22E18612A9FF51AF6989C02BC26A1FB44B99F640135DF0E9779DDE38E466C310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4449FC0, Relevance: 7.6, APIs: 5, Instructions: 118memoryCOMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32 ref: 00007FF6B444A047
MultiByteToWideChar.KERNEL32 ref: 00007FF6B444A0C9
SysAllocString.OLEAUT32 ref: 00007FF6B444A0D6

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ByteCharMultiWide$AllocString
String ID:
API String ID: 262959230-0
Opcode ID: d862167c056b2ad39305bc35e6b04559ab4bed8c119e56702c1ae49f8c288d9f
Instruction ID: 31378a42c2fdb5f743aebdc38c944bf1dc71dfb0f11b96aceb5edeb1041a5929
Opcode Fuzzy Hash: d862167c056b2ad39305bc35e6b04559ab4bed8c119e56702c1ae49f8c288d9f
Instruction Fuzzy Hash: E641C421A0868649FB549F3EA8903B92290FF447F4F144634EB6EE6BDDDE3CE0658300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44547E0, Relevance: 7.6, APIs: 5, Instructions: 60threadCOMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF6B4454804
CreateThread.KERNEL32 ref: 00007FF6B4454845
GetLastError.KERNEL32 ref: 00007FF6B4454853
CloseHandle.KERNEL32 ref: 00007FF6B4454870
FreeLibrary.KERNEL32 ref: 00007FF6B445487F

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: CloseCreateErrorFreeHandleLastLibraryThread_invalid_parameter_noinfo
String ID:
API String ID: 2067211477-0
Opcode ID: e755e38ed2f8e5df5b331195f0aae42cec82dc5444c985b05eb8cf30841258e8
Instruction ID: 6f5648bb8c2db5c3cc135fcddb4b2b4c45bae85b3853101d89bc9caab9b87b54
Opcode Fuzzy Hash: e755e38ed2f8e5df5b331195f0aae42cec82dc5444c985b05eb8cf30841258e8
Instruction Fuzzy Hash: 22215E29A09B9286EE54DF6AA4912796390EF85BD4F084C31DB4D8BB5DDE3CE424C740

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4462A58, Relevance: 7.6, APIs: 5, Instructions: 56COMMONLIBRARYCODE

Download Yara Rule

APIs

_set_statfp.LIBCMT ref: 00007FF6B4462A80
_set_statfp.LIBCMT ref: 00007FF6B4462A9B
_set_statfp.LIBCMT ref: 00007FF6B4462AB7
_set_statfp.LIBCMT ref: 00007FF6B4462AF3

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: _set_statfp
String ID:
API String ID: 1156100317-0
Opcode ID: 2f5373d1ca46f5c3229c317260ef8bd11ef88d050e705646cdd7aa3137752530
Instruction ID: bbc37b155f506dad3380b0e10c97f46256dfbe86fcf6f49c895fc39cb68f2822
Opcode Fuzzy Hash: 2f5373d1ca46f5c3229c317260ef8bd11ef88d050e705646cdd7aa3137752530
Instruction Fuzzy Hash: 05119422E5CA5321F6742B2CD4D13761541FF54370F0947B5EBBE862DE8EBC68619302

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B445B9EC, Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 179COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF6B445BA2F

Strings

e+000, xrefs: 00007FF6B445BAD4
-, xrefs: 00007FF6B445BC11
gfff, xrefs: 00007FF6B445BB51

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: -$e+000$gfff
API String ID: 3215553584-2620144452
Opcode ID: fea700b4ae36ff7c529df643656e834d20fb0c31ee8ce0b254d5c322e6b27136
Instruction ID: 3f7c09abf8c2e75f63efca2c6c6387815367393ca9d38642f676df53eaf06593
Opcode Fuzzy Hash: fea700b4ae36ff7c529df643656e834d20fb0c31ee8ce0b254d5c322e6b27136
Instruction Fuzzy Hash: E1610562B187C586EB218F2999813A97791EB40B90F488235DBAC87BDDDFBCD954C700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4458C68, Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 146COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(?,?,?,?,00000000,00000000,?,00007FF6B444B689,?,?,00007FF6B4458B1B), ref: 00007FF6B4458CB4
_CallSETranslator.LIBVCRUNTIME ref: 00007FF6B4458D03

Strings

RCC, xrefs: 00007FF6B4458CD1
MOC, xrefs: 00007FF6B4458CC8

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: CallEncodePointerTranslator
String ID: MOC$RCC
API String ID: 3544855599-2084237596
Opcode ID: ba8a55b228979507f88b3c3f52684b91d840e4bed7c9b4b7db1ce7d12982141e
Instruction ID: 81e87d48f0e156a8fef1c3938ba3f2c6a91300cf2768f3832652056ab197b754
Opcode Fuzzy Hash: ba8a55b228979507f88b3c3f52684b91d840e4bed7c9b4b7db1ce7d12982141e
Instruction Fuzzy Hash: 11512937A08B898AEB20CF69E4803AD77A0FB54B88F144525EF4D97B59DF78E465C700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B445806C, Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 145COMMONLIBRARYCODE

Download Yara Rule

APIs

__except_validate_context_record.LIBVCRUNTIME ref: 00007FF6B4458094
__FrameHandler3::FrameUnwindToEmptyState.LIBVCRUNTIME ref: 00007FF6B445817C

Strings

csm, xrefs: 00007FF6B44581CE
csm, xrefs: 00007FF6B44580B6

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: Frame$EmptyHandler3::StateUnwind__except_validate_context_record
String ID: csm$csm
API String ID: 3896166516-3733052814
Opcode ID: c1f9aeab5c56c4da10f37370f3e62ba49f3a1aa23b94188c6bc5adb2cffb70f5
Instruction ID: 5fc25e1862eee577beb2e2f61cc4db1e8fef85cacb6c78137a9d3ac76058dec4
Opcode Fuzzy Hash: c1f9aeab5c56c4da10f37370f3e62ba49f3a1aa23b94188c6bc5adb2cffb70f5
Instruction Fuzzy Hash: 86515F3290868286EF648F19A484279BBA0FB55B95F144135EB9DC7B9DCF3CE470CB00

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4435E96, Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 67memorywindowCOMMON

Download Yara Rule

APIs

FormatMessageA.KERNEL32 ref: 00007FF6B4435EDD
LocalAlloc.KERNEL32 ref: 00007FF6B4435F38

Strings

IDispatch error #%d, xrefs: 00007FF6B4435F6C
Unknown error 0x%0lX, xrefs: 00007FF6B4435F7D

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: AllocFormatLocalMessage
String ID: IDispatch error #%d$Unknown error 0x%0lX
API String ID: 3960703613-2934499512
Opcode ID: 693297c9b66ce21f8298f55620efccc22f9a8bf88e228e71242208683c58015a
Instruction ID: 2d75b4b1183d28d261994af00d37c5cd7ce0cef1e0557507e030d4feea1efc5d
Opcode Fuzzy Hash: 693297c9b66ce21f8298f55620efccc22f9a8bf88e228e71242208683c58015a
Instruction Fuzzy Hash: 9B21A072A0CA4181FB358F29E49537D6691EB84BA4F544235CB1D83BD8CF3DE866C341

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44583E4, Relevance: 6.2, APIs: 4, Instructions: 202COMMONLIBRARYCODE

Download Yara Rule

APIs

__AdjustPointer.LIBCMT ref: 00007FF6B4458507
__AdjustPointer.LIBCMT ref: 00007FF6B4458552
__AdjustPointer.LIBCMT ref: 00007FF6B4458629

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: fa5bbb738a34b93a05ad879c9e0083a197e3b01216d23d5cd4cd7d0d0e826275
Instruction ID: 8fcaee69a63398bcdae27942515cff949025583d44c0141a6c3e5cf0a0933991
Opcode Fuzzy Hash: fa5bbb738a34b93a05ad879c9e0083a197e3b01216d23d5cd4cd7d0d0e826275
Instruction Fuzzy Hash: EC71BF22A0A68A82EE65DF1995C167D63A0EF44BC4F094835DF4D8778EDE3CE472C740

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4436678, Relevance: 6.0, APIs: 4, Instructions: 29COMMON

Download Yara Rule

APIs

VariantClear.OLEAUT32 ref: 00007FF6B44366A0
VariantClear.OLEAUT32 ref: 00007FF6B44366A9
VariantClear.OLEAUT32 ref: 00007FF6B44366AF
VariantClear.OLEAUT32 ref: 00007FF6B44366B5

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ClearVariant
String ID:
API String ID: 1473721057-0
Opcode ID: ab6e2a0be742cb0bde27c77b28ef8d64c4758e36f59ce557272be3e982f2d718
Instruction ID: 3010567a7ff10c39be86b09d46dc5fb84bfff706242d8720aac4beae9d6feb02
Opcode Fuzzy Hash: ab6e2a0be742cb0bde27c77b28ef8d64c4758e36f59ce557272be3e982f2d718
Instruction Fuzzy Hash: A5E012636109A4A8D711EF31FC419E86B24F790768F454133EE5C82554AE34DA9BC300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B445F508, Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNEL32 ref: 00007FF6B445F61F
GetLastError.KERNEL32 ref: 00007FF6B445F641

Strings

U, xrefs: 00007FF6B445F5CB

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ErrorFileLastWrite
String ID: U
API String ID: 442123175-4171548499
Opcode ID: 8fade4a58e48830b81c384b6c6ba52233c11786accea551678c790b2d95991eb
Instruction ID: f4c4ea08868760eb7424c23fdd1e32d43643181785785e55bb679463b5f776e6
Opcode Fuzzy Hash: 8fade4a58e48830b81c384b6c6ba52233c11786accea551678c790b2d95991eb
Instruction Fuzzy Hash: 8A41B362B18A8586DB20DF29E4843A967A1FB88794F904031EF4EC7B9CEF3CD451C741

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4459130, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 50COMMON

Download Yara Rule

APIs

try_get_function.LIBVCRUNTIME ref: 00007FF6B4459169
LCMapStringW.KERNEL32 ref: 00007FF6B44591F1

Strings

LCMapStringEx, xrefs: 00007FF6B445915D

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: Stringtry_get_function
String ID: LCMapStringEx
API String ID: 2588686239-3893581201
Opcode ID: f67ab05fe97bd50b79bf084790dd862744209eba1f613a5f26c7c8cf081a3eae
Instruction ID: a7a0b19612ebc0d6a309157de53fa9aaa050c72724f784d82a4aaebecc4952dc
Opcode Fuzzy Hash: f67ab05fe97bd50b79bf084790dd862744209eba1f613a5f26c7c8cf081a3eae
Instruction Fuzzy Hash: E1110B36608B8186DB60CF5AB4802AAB7A4FBC9B90F544136EF8D83B59DF3CD550CB40

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B444AE90, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 42COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlPcToFileHeader.KERNEL32(?,?,?,?,?,?,?,?,000000F8,00007FF6B444A1CF), ref: 00007FF6B444AED4
RaiseException.KERNEL32(?,?,?,?,?,?,?,?,000000F8,00007FF6B444A1CF), ref: 00007FF6B444AF1A

Strings

csm, xrefs: 00007FF6B444AF07

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: ExceptionFileHeaderRaise
String ID: csm
API String ID: 2573137834-1018135373
Opcode ID: 0cca6d678f7393a148cf465ca776ec0841094c4d6af28f07bbd8ffb2a00a0908
Instruction ID: aee6ff070553134446dffd27f6d36c93520226041f5f56ea62a21db83b9edfd2
Opcode Fuzzy Hash: 0cca6d678f7393a148cf465ca776ec0841094c4d6af28f07bbd8ffb2a00a0908
Instruction Fuzzy Hash: A2112132618B8182EB618F1AF48026977E5FB88B94F284231EF9D57B58DF3CD565C700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B44590CC, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 25COMMON

Download Yara Rule

APIs

try_get_function.LIBVCRUNTIME ref: 00007FF6B44590FD
InitializeCriticalSectionAndSpinCount.KERNEL32 ref: 00007FF6B4459117

Strings

InitializeCriticalSectionEx, xrefs: 00007FF6B44590F1

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpintry_get_function
String ID: InitializeCriticalSectionEx
API String ID: 539475747-3084827643
Opcode ID: 5a6045978c56dcf5002bf3edd797e27b0a63ee0f840b27bacdebb484f0c300c5
Instruction ID: 9948c58d25f9c2450c46b13f690c3cdc9657ec399295d350217aa97186a77e12
Opcode Fuzzy Hash: 5a6045978c56dcf5002bf3edd797e27b0a63ee0f840b27bacdebb484f0c300c5
Instruction Fuzzy Hash: C9F0B825B18A9182FB04AF49B4804A92270EF48BC0F484072EB0E83B6DCE3CE8A5D700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6B4459078, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMONLIBRARYCODE

Download Yara Rule

APIs

try_get_function.LIBVCRUNTIME ref: 00007FF6B44590A1
TlsSetValue.KERNEL32(?,?,000000F8,00007FF6B445984E,?,?,000000F8,00007FF6B445B195,?,?,?,?,00007FF6B445A971), ref: 00007FF6B44590B8

Strings

FlsSetValue, xrefs: 00007FF6B445908E

Memory Dump Source

Source File: 00000000.00000002.219449421.00007FF6B4421000.00000020.00020000.sdmp, Offset: 00007FF6B4420000, based on PE: true

Associated: 00000000.00000002.219445036.00007FF6B4420000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219482569.00007FF6B4464000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219492224.00007FF6B4472000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.219497658.00007FF6B4476000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.219503280.00007FF6B447A000.00000008.00020000.sdmp Download File
Associated: 00000000.00000002.219507688.00007FF6B447D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b4420000_anchor_x64.jbxd

Similarity

API ID: Valuetry_get_function
String ID: FlsSetValue
API String ID: 738293619-3750699315
Opcode ID: 5ede85f7a9a30eb9969be66e7c2d03b727b65964b4e05a0450b48e01618ea5dd
Instruction ID: 23446fea6651ad5a90ccbc0f47492a921add94e31b00907f8c7daed8f1aaa0de
Opcode Fuzzy Hash: 5ede85f7a9a30eb9969be66e7c2d03b727b65964b4e05a0450b48e01618ea5dd
Instruction Fuzzy Hash: FDE06D61A1C642D1FA044F6CF8804B92272EF48B80F585072DB1E866ACCE3CE8A9C301

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: anchor_x64.exe PID: 3756 Parent PID: 904 anchor_x64.exeCOMMON

Execution Graph

Execution Coverage:	10.5%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	2000
Total number of Limit Nodes:	13

Executed Functions

Function 00007FF6499442E4, Relevance: 39.9, APIs: 6, Strings: 16, Instructions: 1360
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00007FF6499443E5
CreateFileMappingA.KERNEL32 ref: 00007FF6499445D7
MapViewOfFile.KERNELBASE ref: 00007FF649944600
GetLastError.KERNEL32 ref: 00007FF649944F65
GetLastError.KERNEL32 ref: 00007FF6499450C4
FindCloseChangeNotification.KERNELBASE ref: 00007FF649945672

Strings

:, xrefs: 00007FF649944C39
q, xrefs: 00007FF649944BA5
!, xrefs: 00007FF6499446F9
=, xrefs: 00007FF649944D18
K, xrefs: 00007FF649944C2F
p, xrefs: 00007FF649944EA0
a, xrefs: 00007FF649944CF3
Z, xrefs: 00007FF64994503C
z, xrefs: 00007FF649944BE9
3:<KU, xrefs: 00007FF649944EBD
&, xrefs: 00007FF649944EA8
=, xrefs: 00007FF649944FD0
<, xrefs: 00007FF649944C34
w, xrefs: 00007FF649944BBC
|, xrefs: 00007FF6499454DA
;, xrefs: 00007FF649945008

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: File$CreateErrorLast$ChangeCloseFindMappingNotificationView
String ID: !$&$3:<KU$:$;$<$=$=$K$Z$a$p$q$w$z$|
API String ID: 22809042-863818155
Opcode ID: 7c483ff31ffa63e407df1a0290c0d0c56f73aff22cc9704d1455be2e97b2d163
Instruction ID: 50ac2d190aa537282ec947e940d2ecb5f07b0c4c5cd313b2829aa5c4d3e1b8ec
Opcode Fuzzy Hash: 7c483ff31ffa63e407df1a0290c0d0c56f73aff22cc9704d1455be2e97b2d163
Instruction Fuzzy Hash: 24B2832361D2C08BF7219A38A0A13DBAFD2D7A2364F285518D7D447BEBCA6DC509DF11

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649967CCC, Relevance: 26.6, APIs: 2, Strings: 13, Instructions: 341
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF649968250: GetTickCount.KERNEL32 ref: 00007FF6499682AE
Part of subcall function 00007FF649968250: UuidCreate.RPCRT4 ref: 00007FF6499682DB

Sleep.KERNEL32 ref: 00007FF649967ECC
htonl.WS2_32 ref: 00007FF64996806F

Strings

i, xrefs: 00007FF649967F44
y, xrefs: 00007FF649967DC9
v, xrefs: 00007FF649967F49
o, xrefs: 00007FF649967DF4
n, xrefs: 00007FF649967F1B
x, xrefs: 00007FF649967DEB
w, xrefs: 00007FF649967F16
v, xrefs: 00007FF649967E16
-, xrefs: 00007FF649967F8D
~, xrefs: 00007FF649967F33
q, xrefs: 00007FF649967DB1
u, xrefs: 00007FF649967DB6
d, xrefs: 00007FF649967DE2

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: CountCreateSleepTickUuidhtonl
String ID: -$d$i$n$o$q$u$v$v$w$x$y$~
API String ID: 3289394829-175494460
Opcode ID: 128d2acbc99dae409a441b2b5b9585aaca3754f24f26254c70192992c32f7fd9
Instruction ID: 589b939760e4f65da129a4b964042a33a6cc427017df1087cb5b7df177f591b7
Opcode Fuzzy Hash: 128d2acbc99dae409a441b2b5b9585aaca3754f24f26254c70192992c32f7fd9
Instruction Fuzzy Hash: 04E1C52350C7C08AD321EA39A4403ABBB90F7A6794F1C5168DBD887B9ACE7CD845DF51

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649967CCD, Relevance: 17.8, APIs: 2, Strings: 8, Instructions: 262
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF649968250: GetTickCount.KERNEL32 ref: 00007FF6499682AE
Part of subcall function 00007FF649968250: UuidCreate.RPCRT4 ref: 00007FF6499682DB

Sleep.KERNEL32 ref: 00007FF649967ECC
htonl.WS2_32 ref: 00007FF64996806F

Strings

v, xrefs: 00007FF649967E16
q, xrefs: 00007FF649967DB1
y, xrefs: 00007FF649967DC9
u, xrefs: 00007FF649967DB6
o, xrefs: 00007FF649967DF4
%, xrefs: 00007FF649967E4A
d, xrefs: 00007FF649967DE2
x, xrefs: 00007FF649967DEB

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: CountCreateSleepTickUuidhtonl
String ID: %$d$o$q$u$v$x$y
API String ID: 3289394829-2334579308
Opcode ID: d322d65621f5a739180624087787dc2bb8428771ec4983662acf44e31363ed38
Instruction ID: 26aa808be36831f938eef1fa7daadac9bd0492d450df938029e024b735fe6989
Opcode Fuzzy Hash: d322d65621f5a739180624087787dc2bb8428771ec4983662acf44e31363ed38
Instruction Fuzzy Hash: 41B1F32264C6C08AE321EF29A4403AAAB90F795794F1C5134EBCDC7B9ACF7CD845CB41

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649968926, Relevance: 7.6, APIs: 3, Strings: 1, Instructions: 593
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getaddrinfo.WS2_32 ref: 00007FF649968963
WSAGetLastError.WS2_32 ref: 00007FF649968A54
freeaddrinfo.WS2_32 ref: 00007FF649968FB2

Strings

xyskencevli.com, xrefs: 00007FF64996892E

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: ErrorLastfreeaddrinfogetaddrinfo
String ID: xyskencevli.com
API String ID: 1817844550-2822726775
Opcode ID: 44f7346984cd6515759428d1e639b69ff0e5dfb8f6e93bb076f1a20633db3deb
Instruction ID: 77b5173b98ff3b98669c45357d9e3afc68469dfa6de831ea545917054dcad3b5
Opcode Fuzzy Hash: 44f7346984cd6515759428d1e639b69ff0e5dfb8f6e93bb076f1a20633db3deb
Instruction Fuzzy Hash: F52235A3B5E6D18FE7118A39C0903CBBF50E322724F1EA659D7910B393D679C698CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6499595A8, Relevance: 6.1, APIs: 1, Strings: 2, Instructions: 887COMMON

Download Yara Rule

APIs

_Init_thread_header.LIBCMT ref: 00007FF64995A2DA

Strings

@, xrefs: 00007FF64995A119
0.0.0.0, xrefs: 00007FF649959607, 00007FF64995A308

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: Init_thread_header
String ID: 0.0.0.0$@
API String ID: 3738618077-4086448161
Opcode ID: 9b040317e688fd2a7653d609604e405f1f5c38e9a8bda94b4501e465965ba3b6
Instruction ID: b35ee73f75a80d462261054c9760b74dff4787c19602bcf115d907e4b3c028fc
Opcode Fuzzy Hash: 9b040317e688fd2a7653d609604e405f1f5c38e9a8bda94b4501e465965ba3b6
Instruction Fuzzy Hash: 7F82062350D2C18FE721EF78D8943EA2F91D762368F09966AC7585B7D7CE29920DC321

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649968250, Relevance: 5.6, APIs: 2, Strings: 1, Instructions: 357COMMON

Download Yara Rule

APIs

GetTickCount.KERNEL32 ref: 00007FF6499682AE
UuidCreate.RPCRT4 ref: 00007FF6499682DB

Part of subcall function 00007FF649968926: getaddrinfo.WS2_32 ref: 00007FF649968963
Part of subcall function 00007FF649968926: WSAGetLastError.WS2_32 ref: 00007FF649968A54

Strings

., xrefs: 00007FF6499686C4

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: CountCreateErrorLastTickUuidgetaddrinfo
String ID: .
API String ID: 649965334-248832578
Opcode ID: 815e5dea587bd228023022b309e894403f855a677a5b86023fa8c0616ec5ad0b
Instruction ID: dcf2a7eb52bf408ea1e39798baa72872aba59ac539abecb3097277453b09a483
Opcode Fuzzy Hash: 815e5dea587bd228023022b309e894403f855a677a5b86023fa8c0616ec5ad0b
Instruction Fuzzy Hash: 72E1F73261C6814AE725FF25A4503ABB791FB89784F485235EA8AD378ADF3CD445CB40

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64995890E, Relevance: 3.3, APIs: 2, Instructions: 796COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF649959232: WSAStartup.WS2_32 ref: 00007FF649959288
Part of subcall function 00007FF649959232: WSAGetLastError.WS2_32 ref: 00007FF64995929A

GetLastError.KERNEL32 ref: 00007FF6499589A7
GetLastError.KERNEL32 ref: 00007FF649958B56

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: ErrorLast$Startup
String ID:
API String ID: 1234940641-0
Opcode ID: 713c048b60c55eecbb66833d9fd3fc9b947a0fa7016a9b51d47dd0bfd0301b45
Instruction ID: c7e9e65f80ee858778461ce7c972905ce2cf8d2e1418eddb7452ea0187da7074
Opcode Fuzzy Hash: 713c048b60c55eecbb66833d9fd3fc9b947a0fa7016a9b51d47dd0bfd0301b45
Instruction Fuzzy Hash: B742CE63B9B2C19EDB12DB7C80802CE3FA1D337B0CB29A419D78587363D526960BE715

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64996AB74, Relevance: 3.0, APIs: 2, Instructions: 18COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNELBASE ref: 00007FF64996AB7D
_invalid_parameter_noinfo.LIBCMT ref: 00007FF649975F38

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: ExceptionFilterUnhandled_invalid_parameter_noinfo
String ID:
API String ID: 59578552-0
Opcode ID: fd153b00e2a22bfe5e1fd9c367fdc79bfa4260bf045666fa8bf6caeb022564b0
Instruction ID: 66652f4da64cbd0bbda4e75e373722646bd32a4a85db29bfc36b575f6a207a91
Opcode Fuzzy Hash: fd153b00e2a22bfe5e1fd9c367fdc79bfa4260bf045666fa8bf6caeb022564b0
Instruction Fuzzy Hash: EAE0EC30ECE213CAE5993FA60C421BC11902F46330F9816F5E11DC53C3CD5D6D928A53

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649957C28, Relevance: 1.9, APIs: 1, Instructions: 356COMMON

Download Yara Rule

APIs

_Init_thread_header.LIBCMT ref: 00007FF6499580AF

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: Init_thread_header
String ID:
API String ID: 3738618077-0
Opcode ID: 6450970b5147ffee5bd4f4ed960c8fc393e20b4fb7bfaa992207f077d0d7f4c5
Instruction ID: 8b692ab9fc5cd23a39e955ee6da6c916b3c005782dcf5c2f923e0c85a5dba85d
Opcode Fuzzy Hash: 6450970b5147ffee5bd4f4ed960c8fc393e20b4fb7bfaa992207f077d0d7f4c5
Instruction Fuzzy Hash: 25E1CE23A4C6818AFB15FF34A4913EE2BA1EB52358F089135DA5DC7797DE2DE54AC300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649959232, Relevance: 22.9, APIs: 3, Strings: 10, Instructions: 106
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WSAStartup.WS2_32 ref: 00007FF649959288
WSAGetLastError.WS2_32 ref: 00007FF64995929A
_Init_thread_header.LIBCMT ref: 00007FF6499593DE

Strings

/, xrefs: 00007FF649959313
H, xrefs: 00007FF6499592ED
p, xrefs: 00007FF64995935D
,, xrefs: 00007FF649959358
3, xrefs: 00007FF64995931D
|, xrefs: 00007FF649959309
k, xrefs: 00007FF64995934A
^, xrefs: 00007FF6499592E2
w, xrefs: 00007FF64995930E
0, xrefs: 00007FF649959318

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: ErrorInit_thread_headerLastStartup
String ID: ,$/$0$3$H$^$k$p$w$|
API String ID: 2929739276-253053246
Opcode ID: 2175a5ce8f9873b99b24dd98866584c265c1c3bb23d06dc05c7e4ea8f1b764bf
Instruction ID: 1725c8e719ad16c494cb0edca6d490ec9e1227937c0a6bfb4c245cc9095da315
Opcode Fuzzy Hash: 2175a5ce8f9873b99b24dd98866584c265c1c3bb23d06dc05c7e4ea8f1b764bf
Instruction Fuzzy Hash: 0751A31254D2C1C8F722AB38B49029F7FA087B7344F5C1169E2CA877A7CD6DD448CB22

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6499698CC, Relevance: 17.6, APIs: 6, Strings: 4, Instructions: 52
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32 ref: 00007FF6499698E2
GetModuleHandleW.KERNELBASE ref: 00007FF6499698EF
GetModuleHandleW.KERNEL32 ref: 00007FF649969904
GetProcAddress.KERNEL32 ref: 00007FF64996991C
GetProcAddress.KERNEL32 ref: 00007FF64996992F
CreateEventW.KERNEL32 ref: 00007FF64996995B

Strings

api-ms-win-core-synch-l1-2-0.dll, xrefs: 00007FF6499698E8
kernel32.dll, xrefs: 00007FF6499698FD
WakeAllConditionVariable, xrefs: 00007FF649969922
SleepConditionVariableCS, xrefs: 00007FF649969912

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: AddressHandleModuleProc$CountCreateCriticalEventInitializeSectionSpin
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 4003212759-3242537097
Opcode ID: 5c80d45eb3995af41284a01945e197f9b1740e81c407631ffe8ce31621f7fa01
Instruction ID: 49c18797563dd1fe9b224deaba05740de6b24e1c54c358001dbd55f5dae6e577
Opcode Fuzzy Hash: 5c80d45eb3995af41284a01945e197f9b1740e81c407631ffe8ce31621f7fa01
Instruction Fuzzy Hash: 7F211A60AAEA0791FE19FF11B95057423A4AF49795F4C603DC90EC27A2EE2CE845C240

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649957AF0, Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 82
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF6499560F1: WideCharToMultiByte.KERNEL32 ref: 00007FF64995613A

GetModuleFileNameA.KERNELBASE ref: 00007FF649957B44
CreateFileA.KERNELBASE ref: 00007FF649957BC6
GetFileSize.KERNEL32 ref: 00007FF649957BDF
FindCloseChangeNotification.KERNELBASE ref: 00007FF649957BEA

Part of subcall function 00007FF649976E78: _invalid_parameter_noinfo.LIBCMT ref: 00007FF649976E9D

Strings

w, xrefs: 00007FF649957B66
g, xrefs: 00007FF649957B5B
=, xrefs: 00007FF649957B50

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: File$ByteChangeCharCloseCreateFindModuleMultiNameNotificationSizeWide_invalid_parameter_noinfo
String ID: =$g$w
API String ID: 700852892-3268570079
Opcode ID: d940e3737af3a358a1f4e92b64857611284bdb21d7be17a818da97315a72b9bb
Instruction ID: 5607db38fb0cb2a025f4b9d28864c9e339b25dda16351e91e29d99f7e4b6f7db
Opcode Fuzzy Hash: d940e3737af3a358a1f4e92b64857611284bdb21d7be17a818da97315a72b9bb
Instruction Fuzzy Hash: 8A312B12A1C28186F781BF39A85436B6A80AFD57A4F0C4135EA8EC7BD7CE3CD845CB45

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64996AB90, Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 94
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__scrt_initialize_crt.LIBCMT ref: 00007FF64996AB9F

Part of subcall function 00007FF649969D60: __scrt_dllmain_crt_thread_attach.LIBCMT ref: 00007FF649969D82

__scrt_acquire_startup_lock.LIBCMT ref: 00007FF64996ABB4
__scrt_release_startup_lock.LIBCMT ref: 00007FF64996AC22
__scrt_get_show_window_mode.LIBCMT ref: 00007FF64996AC75
__scrt_is_managed_app.LIBCMT ref: 00007FF64996AC98

Strings

MZx, xrefs: 00007FF64996AC8A

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: __scrt_acquire_startup_lock__scrt_dllmain_crt_thread_attach__scrt_get_show_window_mode__scrt_initialize_crt__scrt_is_managed_app__scrt_release_startup_lock
String ID: MZx
API String ID: 4144305933-2575928145
Opcode ID: 668569cbe1293c5e423debe20043c5ffa30385686d6b254a4d3f7019f8ee5f8f
Instruction ID: 3aa9c30b3373df2702b235c08ec7f1b1f631d93004e8dc0a44d471668c33b305
Opcode Fuzzy Hash: 668569cbe1293c5e423debe20043c5ffa30385686d6b254a4d3f7019f8ee5f8f
Instruction Fuzzy Hash: A8316F21ECE14386FA64BF65E4613B913A5AF41384F4C6039E94ECB2D3DE2DBC64C290

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64995879C, Relevance: 9.1, APIs: 6, Instructions: 103
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF6499560F1: WideCharToMultiByte.KERNEL32 ref: 00007FF64995613A

GetModuleFileNameA.KERNELBASE ref: 00007FF6499587F1
CreateFileA.KERNELBASE ref: 00007FF6499588AD
GetFileSize.KERNEL32 ref: 00007FF6499588C1
SetFilePointer.KERNELBASE ref: 00007FF6499588D6
SetEndOfFile.KERNELBASE ref: 00007FF6499588DF
FindCloseChangeNotification.KERNELBASE ref: 00007FF6499588E8

Part of subcall function 00007FF649976E78: _invalid_parameter_noinfo.LIBCMT ref: 00007FF649976E9D

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: File$ByteChangeCharCloseCreateFindModuleMultiNameNotificationPointerSizeWide_invalid_parameter_noinfo
String ID:
API String ID: 3708365157-0
Opcode ID: a887de73b909ecda563ad80546854b86fea59b4edba785f3512799d166482ae1
Instruction ID: 328be333ca1baff9a317a18522b16e8f3bcf3dd20a3b8dbffcf0526bd96c4c08
Opcode Fuzzy Hash: a887de73b909ecda563ad80546854b86fea59b4edba785f3512799d166482ae1
Instruction Fuzzy Hash: EE412423A4D28146F755BF39A4257AB3B90AB967A4F0C8439DA8DC7BD3CE3D9409C701

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6499747E0, Relevance: 7.6, APIs: 5, Instructions: 60
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF649974804
CreateThread.KERNELBASE ref: 00007FF649974845
GetLastError.KERNEL32 ref: 00007FF649974853
CloseHandle.KERNEL32 ref: 00007FF649974870
FreeLibrary.KERNEL32 ref: 00007FF64997487F

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: CloseCreateErrorFreeHandleLastLibraryThread_invalid_parameter_noinfo
String ID:
API String ID: 2067211477-0
Opcode ID: e755e38ed2f8e5df5b331195f0aae42cec82dc5444c985b05eb8cf30841258e8
Instruction ID: d3de7176040c81e43828b189f3837f7263114db32ff3064c21cee1ec25158d9d
Opcode Fuzzy Hash: e755e38ed2f8e5df5b331195f0aae42cec82dc5444c985b05eb8cf30841258e8
Instruction Fuzzy Hash: F2218B26A8D786C6FE58FF61A4101BA63A5AF84BD4F0C4475DA5DC3B97DE3CE4008640

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649968811, Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 81stringCOMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 00007FF64996882F
lstrcmp.KERNEL32 ref: 00007FF649968858
GetTickCount64.KERNEL32 ref: 00007FF649968866

Strings

xyskencevli.com, xrefs: 00007FF64996884E, 00007FF649968887, 00007FF6499688DA

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: Count64Tick$lstrcmp
String ID: xyskencevli.com
API String ID: 4294099536-2822726775
Opcode ID: acf1beb41fc939a7ddfb2294c401d92f79820ee86b6cff440ab52a69d498f3a0
Instruction ID: 4fdd7ea37e78a98bb6f951663b123b3182c5f62abd769cb10ac7dbbc1cdd7f03
Opcode Fuzzy Hash: acf1beb41fc939a7ddfb2294c401d92f79820ee86b6cff440ab52a69d498f3a0
Instruction Fuzzy Hash: 8321B151E9D69A89FA02BF23B8047B42790AF067E4F4C5231C96DC73D6EE3CA846C350

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649974988, Relevance: 4.5, APIs: 3, Instructions: 27threadCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF649979804: GetLastError.KERNEL32(?,?,000000F8,00007FF64997B195,?,?,?,?,00007FF64997A971,?,?,?,?,?,?,00000007), ref: 00007FF649979813
Part of subcall function 00007FF649979804: SetLastError.KERNEL32(?,?,000000F8,00007FF64997B195,?,?,?,?,00007FF64997A971,?,?,?,?,?,?,00000007), ref: 00007FF6499798B1

CloseHandle.KERNEL32(?,?,?,00007FF6499748BD), ref: 00007FF6499749C3
FreeLibraryAndExitThread.KERNELBASE(?,?,?,00007FF6499748BD), ref: 00007FF6499749D9

Part of subcall function 00007FF64997929C: try_get_function.LIBVCRUNTIME ref: 00007FF6499792BA

ExitThread.KERNEL32 ref: 00007FF6499749E2

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: ErrorExitLastThread$CloseFreeHandleLibrarytry_get_function
String ID:
API String ID: 1393601959-0
Opcode ID: 86452e76b6a9de378a44cfb3c9801d97f94e193380d476bd8989dc9932826ef7
Instruction ID: b4d468e79c57b5098c1f0841d9be2232e6bcec04dea52c2e636450e72162a2e8
Opcode Fuzzy Hash: 86452e76b6a9de378a44cfb3c9801d97f94e193380d476bd8989dc9932826ef7
Instruction Fuzzy Hash: 07F0EC22A4C692D1EA59BF25904527C2396AF84F79F2C4779D63CC22E7DF28D845C341

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649974AC4, Relevance: 4.5, APIs: 3, Instructions: 19COMMONLIBRARYCODE

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,00000003,00007FF649974BD7), ref: 00007FF649974AED
TerminateProcess.KERNEL32(?,?,00000003,00007FF649974BD7), ref: 00007FF649974AF8
ExitProcess.KERNEL32 ref: 00007FF649974B07

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: 3dd67f1416581bf9e0c8d03f5868528173d187c597f887881cfbb1e3b75360a8
Instruction ID: 932ccf5ba888e0fd609178b51856356205dca5141e325995c7335ee797a75ce3
Opcode Fuzzy Hash: 3dd67f1416581bf9e0c8d03f5868528173d187c597f887881cfbb1e3b75360a8
Instruction Fuzzy Hash: 1AE01A20A9C301C2EB1CBF2498C53792392AF95B01F0C547CC80AC2397DE3DE4488301

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649979320, Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 19COMMON

Download Yara Rule

APIs

try_get_function.LIBVCRUNTIME ref: 00007FF649979343

Strings

AppPolicyGetThreadInitializationType, xrefs: 00007FF64997933C

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: try_get_function
String ID: AppPolicyGetThreadInitializationType
API String ID: 2742660187-3350320272
Opcode ID: 6ff8407eb23b83040c1230fc8499d04d094ebb1e6276c752fb2b8270b537c660
Instruction ID: fd0adb912041e3f7a8d1f855245b3e5812ab76d45f39228caa5cd325e0fcfa78
Opcode Fuzzy Hash: 6ff8407eb23b83040c1230fc8499d04d094ebb1e6276c752fb2b8270b537c660
Instruction Fuzzy Hash: 43E08691E5D506D1FE19BF91A8442B01211EF087B0F8C437AD93DCA3D29E2C9994C710

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6499415B0, Relevance: 3.1, APIs: 2, Instructions: 107COMMON

Download Yara Rule

APIs

GetComputerNameExW.KERNELBASE ref: 00007FF649941618
GetComputerNameExW.KERNELBASE ref: 00007FF649941644

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: ComputerName
String ID:
API String ID: 3545744682-0
Opcode ID: b7f0053646a81c9820f53cadacb8aab6c3438559418e1f4c76a38cc3e359c20a
Instruction ID: a6404e847bd4be18de791bc7455076beebd8ebd1d2edf2d881035aabfc826071
Opcode Fuzzy Hash: b7f0053646a81c9820f53cadacb8aab6c3438559418e1f4c76a38cc3e359c20a
Instruction Fuzzy Hash: CE311662A4CA8141FA21FF29B81177A67A0EF95798F0C4138EE5CC7392DE3CD481CA00

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64996AAAC, Relevance: 3.1, APIs: 2, Instructions: 55COMMON

Download Yara Rule

APIs

_set_fmode.LIBCMT ref: 00007FF64996AAC3
_RTC_Initialize.LIBCMT ref: 00007FF64996AAE4

Part of subcall function 00007FF649974E58: _invalid_parameter_noinfo.LIBCMT ref: 00007FF649974E8A

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: Initialize_invalid_parameter_noinfo_set_fmode
String ID:
API String ID: 3548387204-0
Opcode ID: 803415309a1e16e49bbae71aca4502c29995ac52edd54956b54009d197570dc3
Instruction ID: dcd8c6e9cac8f82ceefd4a1e6b2dcd152cacd504846e19111ccae8bc38fb988f
Opcode Fuzzy Hash: 803415309a1e16e49bbae71aca4502c29995ac52edd54956b54009d197570dc3
Instruction Fuzzy Hash: 20119E10ECF20346FA547FB14A562B802924FA5341F8C3474E50DCA2C3ED1DBCA5C6A2

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649974920, Relevance: 3.0, APIs: 2, Instructions: 30threadCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00007FF64997492E
ExitThread.KERNEL32 ref: 00007FF649974936

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: ErrorExitLastThread
String ID:
API String ID: 1611280651-0
Opcode ID: 3ba0c9633902245450d202e82a1a1c1a56593ba9448ddc73625d59258dd423ef
Instruction ID: 3cf5e7c84a70cb0a03d36138767d83345b820253164f2899dcda9d3ce8457564
Opcode Fuzzy Hash: 3ba0c9633902245450d202e82a1a1c1a56593ba9448ddc73625d59258dd423ef
Instruction Fuzzy Hash: 03F05E12E9E642C6FF18BF7594566BC23A1AF95B45F0C01B9D95AC7397EF2CA844C300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649956727, Relevance: 1.7, APIs: 1, Instructions: 153COMMON

Download Yara Rule

APIs

GetCommandLineW.KERNEL32(?,?,?,00000007,?,?,?,?,00007FF649955DA9,?,?,?,?,00007FF64994F861), ref: 00007FF649956754

Part of subcall function 00007FF649977108: _invalid_parameter_noinfo.LIBCMT ref: 00007FF64997712E

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: CommandLine_invalid_parameter_noinfo
String ID:
API String ID: 2763879323-0
Opcode ID: 1b95a2da5f54aadbb1ff2a8e8b30a44da897fab7232eca5e39067b55ff345e16
Instruction ID: 1ea6313fa0c20747a0438d1c3fe15042c904e1f223ee38626a8a479d4568e8f5
Opcode Fuzzy Hash: 1b95a2da5f54aadbb1ff2a8e8b30a44da897fab7232eca5e39067b55ff345e16
Instruction Fuzzy Hash: 9551BF23E9C74285FB60BF1195112BA23A1AF957E9F089235DE5DC7396EF7CE1818340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64995A842, Relevance: 1.6, APIs: 1, Instructions: 135COMMON

Download Yara Rule

APIs

_Init_thread_header.LIBCMT ref: 00007FF64995AA03

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: Init_thread_header
String ID:
API String ID: 3738618077-0
Opcode ID: 2f9b666c93bd72f1a961651a7ea7cd050f11b7784046df7a39569143dad752bc
Instruction ID: 6e1985305a68e5ff685d6d3f02d1b84ab116891eccf63be45c9ad48143f660ed
Opcode Fuzzy Hash: 2f9b666c93bd72f1a961651a7ea7cd050f11b7784046df7a39569143dad752bc
Instruction Fuzzy Hash: 3D51E022A4C6928AFB01FF2595903FE27A29B16794F084031CB9DC7787CF2DE54AC311

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649946046, Relevance: 1.6, APIs: 1, Instructions: 98libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE(?,?,00000007,000000F8,00000005,?,00007FF6499464C1), ref: 00007FF649946141

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 7a908af0d394efd6741e70506695816e49587e2d47a3cf3d2d8c8993dcf36947
Instruction ID: 236ecf4e4888af9db33794b2a6f7b77fdca95d4dd16d261e9a4f98e827790fd4
Opcode Fuzzy Hash: 7a908af0d394efd6741e70506695816e49587e2d47a3cf3d2d8c8993dcf36947
Instruction Fuzzy Hash: BC316832B4DB0184EE55BF66E5812AC67A5AB98B84F0C8035CFACC7387EE39D440C740

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6499749F8, Relevance: 1.6, APIs: 1, Instructions: 56COMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF649977771,?,?,?,?,00007FF64997975B), ref: 00007FF649974B3B

Part of subcall function 00007FF649974A68: GetModuleHandleExW.KERNEL32 ref: 00007FF649974A84
Part of subcall function 00007FF649974A68: GetProcAddress.KERNEL32 ref: 00007FF649974A9A
Part of subcall function 00007FF649974A68: FreeLibrary.KERNEL32 ref: 00007FF649974AB7

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: HandleModule$AddressFreeLibraryProc
String ID:
API String ID: 3947729631-0
Opcode ID: ad0b6c8c18660d1b11e8c5c70b0d1bbfb5c01e0827e39ccbe49000612891cb51
Instruction ID: 748c3af1e18390d1050afd6fd0339691411c7f42320eb31cbd585467d7f5389d
Opcode Fuzzy Hash: ad0b6c8c18660d1b11e8c5c70b0d1bbfb5c01e0827e39ccbe49000612891cb51
Instruction Fuzzy Hash: 43216B32E48601CAEB14BF64C4403AC33AAEB44318F0C553AD60C83A8BDF79D945CB85

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649974A04, Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF649977771,?,?,?,?,00007FF64997975B), ref: 00007FF649974B3B

Part of subcall function 00007FF649974A68: GetModuleHandleExW.KERNEL32 ref: 00007FF649974A84
Part of subcall function 00007FF649974A68: GetProcAddress.KERNEL32 ref: 00007FF649974A9A
Part of subcall function 00007FF649974A68: FreeLibrary.KERNEL32 ref: 00007FF649974AB7

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: HandleModule$AddressFreeLibraryProc
String ID:
API String ID: 3947729631-0
Opcode ID: f2b97e03f31a33bedda8801a687625bf3fe8a316791a43a4e2cf5efe20736c53
Instruction ID: 574d40db9d3145c977f1ce17c8509e346a5b55312332aa3efe93ca10fc38c2e7
Opcode Fuzzy Hash: f2b97e03f31a33bedda8801a687625bf3fe8a316791a43a4e2cf5efe20736c53
Instruction Fuzzy Hash: 28215C32E48601CAEB25BF64C4403AC33AAEB44718F4C553AD60D87A8ADF79D985CBC5

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649974A14, Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF649977771,?,?,?,?,00007FF64997975B), ref: 00007FF649974B3B

Part of subcall function 00007FF649974A68: GetModuleHandleExW.KERNEL32 ref: 00007FF649974A84
Part of subcall function 00007FF649974A68: GetProcAddress.KERNEL32 ref: 00007FF649974A9A
Part of subcall function 00007FF649974A68: FreeLibrary.KERNEL32 ref: 00007FF649974AB7

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: HandleModule$AddressFreeLibraryProc
String ID:
API String ID: 3947729631-0
Opcode ID: 90a98ec7c72ff395797cea65d6b45e04f18cd6c0c49a9a8b2ab6f56cca4e6c60
Instruction ID: 03b1b0a7f65e7958787e94d51456021303ddcbc0845d28cadedb6ee9eca9c8eb
Opcode Fuzzy Hash: 90a98ec7c72ff395797cea65d6b45e04f18cd6c0c49a9a8b2ab6f56cca4e6c60
Instruction Fuzzy Hash: A2216D32E49601CAEB25BF64C4443EC33A9EB44718F4C553AD60D83A8ADF79D985CBC5

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6499749EC, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF649977771,?,?,?,?,00007FF64997975B), ref: 00007FF649974B3B

Part of subcall function 00007FF649974A68: GetModuleHandleExW.KERNEL32 ref: 00007FF649974A84
Part of subcall function 00007FF649974A68: GetProcAddress.KERNEL32 ref: 00007FF649974A9A
Part of subcall function 00007FF649974A68: FreeLibrary.KERNEL32 ref: 00007FF649974AB7

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: HandleModule$AddressFreeLibraryProc
String ID:
API String ID: 3947729631-0
Opcode ID: 26ed40e8fec66c4a0c49e75b6e7e0d4365db7880a68bf38084232f54730fa06b
Instruction ID: 2e5e9319a8eb80c848f7bc27749f5f4b318829df2c0af6b4d8742466e1a75e56
Opcode Fuzzy Hash: 26ed40e8fec66c4a0c49e75b6e7e0d4365db7880a68bf38084232f54730fa06b
Instruction Fuzzy Hash: 5C217F32E48701CAEB10BF64C4403AC33AAEB44718F5C5536D60C83A8ADF79D985CBC5

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649945EFC, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

FreeLibrary.KERNELBASE ref: 00007FF649945F78

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: FreeLibrary
String ID:
API String ID: 3664257935-0
Opcode ID: 2a1e59a0c5f7b4def49d1427c4cfebfc97c7f4869b29c6ba1edda233ce21ae24
Instruction ID: 44213736b1ba9b2e5a1ccef3b582f31d7b7cc3ac81603e3ff3d320569e409f87
Opcode Fuzzy Hash: 2a1e59a0c5f7b4def49d1427c4cfebfc97c7f4869b29c6ba1edda233ce21ae24
Instruction Fuzzy Hash: FC11632674EB0186EE76AE96E15033963609B40BA0F188574DF7EC7BD1CF2CE4418701

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64997DFD0, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF64997DFFB

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: 5f4a2476c7093d8de22d6614e3f9c9decae07cef510fc887f15bdf7dd5a96ddb
Instruction ID: 4aa082079e05f41112423be3d07ceb349d8ae8befb26dc8f6e4adeabe7269e08
Opcode Fuzzy Hash: 5f4a2476c7093d8de22d6614e3f9c9decae07cef510fc887f15bdf7dd5a96ddb
Instruction Fuzzy Hash: 22116632A9C642C6F310BF54A44417AB6A4FB84740F8D04B5EA5DCB7A3DF3CE9508B01

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64997C4D8, Relevance: 1.5, APIs: 1, Instructions: 36memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,?,00000000,00007FF649979861,?,?,000000F8,00007FF64997B195,?,?,?,?,00007FF64997A971), ref: 00007FF64997C52D

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 50ee23321bb0392af5e36db0a14a67e004919aab705170532cb16fd1e2da9a79
Instruction ID: 2ca8d45204e73319a8b40109423fa440e9d10eaae7d1ec2fc4e8751e3ff9c5de
Opcode Fuzzy Hash: 50ee23321bb0392af5e36db0a14a67e004919aab705170532cb16fd1e2da9a79
Instruction Fuzzy Hash: 90F06D40B8E206C1FE557EA568113B513815F89B84F4C44B0CD0ECA3C3FE1DE4818210

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64997B264, Relevance: 1.5, APIs: 1, Instructions: 29memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,?,0000000100000002,00007FF649981B15,?,?,00000000,00007FF64997DBCF,?,?,0000000100000002,00007FF649975377,00000000,00000000,?,00007FF6499755AD), ref: 00007FF64997B2A2

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 6da3bee6b59dccd8d17a81d4324de9a97876941589f4a15ec500e38210a561e7
Instruction ID: e16fd890edd1b38ce351ab31a124cd4eeb890fe0785cd302757ac88521c875a9
Opcode Fuzzy Hash: 6da3bee6b59dccd8d17a81d4324de9a97876941589f4a15ec500e38210a561e7
Instruction Fuzzy Hash: 79F01C00F9E207C9FAA47EB169417BD22815FA57B0F0C06B4DD2EC62C3EF2CE4808215

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64996984C, Relevance: 1.5, APIs: 1, Instructions: 21COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00007FF64996987C

Part of subcall function 00007FF64996A190: std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF64996A199

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: Concurrency::cancel_current_taskstd::bad_alloc::bad_alloc
String ID:
API String ID: 680105476-0
Opcode ID: 1c851c6f120e8abe9e540672112921d23754185783693e936dc6c88b8c0c8cb4
Instruction ID: c1b413343456c153262b96913ea07c5ae5bd39d22b3c57c159d4f71cddceb7e1
Opcode Fuzzy Hash: 1c851c6f120e8abe9e540672112921d23754185783693e936dc6c88b8c0c8cb4
Instruction Fuzzy Hash: 95E01700EDE10786FE683EA31A061B801440F497B0E2C3B78D93EC82C3ED1DACA5C690

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6499560F1, Relevance: 1.5, APIs: 1, Instructions: 19COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF649956727: GetCommandLineW.KERNEL32(?,?,?,00000007,?,?,?,?,00007FF649955DA9,?,?,?,?,00007FF64994F861), ref: 00007FF649956754

WideCharToMultiByte.KERNEL32 ref: 00007FF64995613A

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: ByteCharCommandLineMultiWide
String ID:
API String ID: 532630495-0
Opcode ID: 93cc59c6319e32a2709bff1ed075f390e52e57941f07c298e3664158893235c7
Instruction ID: a14fb1a752c5a76934f8969a6678957301c39f32716e088f1efe4fbe1f978f42
Opcode Fuzzy Hash: 93cc59c6319e32a2709bff1ed075f390e52e57941f07c298e3664158893235c7
Instruction Fuzzy Hash: 43F05EA2DAC68389E610BF20A8021792350BF44359F4C4336E05DC23B2DF6CA1C48210

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64997A94C, Relevance: 1.5, APIs: 1, Instructions: 14COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlDeleteBoundaryDescriptor.NTDLL(?,?,?,?,?,?,00000007,00007FF6499463B0,?,?,?,?,00007FF6499464A6), ref: 00007FF64997A962

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: BoundaryDeleteDescriptor
String ID:
API String ID: 3203483114-0
Opcode ID: fc64f70267d9cbb078e125bc18e0d0af3bbd3a7b823214fbae80858c1df7c9f2
Instruction ID: 654303a10279deeaba8bd8295b686ca12bc095dfda2e357c62526821fbe789b8
Opcode Fuzzy Hash: fc64f70267d9cbb078e125bc18e0d0af3bbd3a7b823214fbae80858c1df7c9f2
Instruction Fuzzy Hash: 32D0A980EAE007C6FE1CBFF2580013242512FA4792F0C8070C80DC2253EE1C64A24214

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00007FF6499616CE, Relevance: 38.8, APIs: 9, Strings: 13, Instructions: 347injectionmemorythreadCOMMON

Download Yara Rule

APIs

VirtualAllocEx.KERNEL32 ref: 00007FF649961747
WriteProcessMemory.KERNEL32 ref: 00007FF649961776
CreateRemoteThread.KERNEL32 ref: 00007FF6499617A3
CloseHandle.KERNEL32 ref: 00007FF6499617B5
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00007FF64995D634,?,00000000,000000F5,0000006B,00000021,000000F4,00007FF64996160C), ref: 00007FF6499617C0
GetLastError.KERNEL32 ref: 00007FF6499618C0
GetLastError.KERNEL32 ref: 00007FF6499619EF
GetLastError.KERNEL32 ref: 00007FF649961ADC
CloseHandle.KERNEL32 ref: 00007FF649961BD7

Strings

r, xrefs: 00007FF649961B2D
W, xrefs: 00007FF649961B24
*, xrefs: 00007FF649961B9A
H, xrefs: 00007FF649961B04
m, xrefs: 00007FF6499619FD
Y, xrefs: 00007FF649961B42
1, xrefs: 00007FF649961B5F
p, xrefs: 00007FF649961AA0
\, xrefs: 00007FF649961A32
n, xrefs: 00007FF649961B9F
@, xrefs: 00007FF649961731
y, xrefs: 00007FF649961A5F
m, xrefs: 00007FF649961B47

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: ErrorLast$CloseHandle$AllocCreateMemoryProcessRemoteThreadVirtualWrite
String ID: *$1$@$H$W$Y$\$m$m$n$p$r$y
API String ID: 2672033360-2450132792
Opcode ID: 509527a9178011772fbb75b66973a6ae0779f64e2d2f48fec426633055b94f00
Instruction ID: 0c6e565f872cc4090b062c51ce0cef4987a3b8e6d6cd2e71c86184afe4028f65
Opcode Fuzzy Hash: 509527a9178011772fbb75b66973a6ae0779f64e2d2f48fec426633055b94f00
Instruction Fuzzy Hash: B9F18E1354E3C089D322D77C644068EAFE1D7B3A48F2C8099D7C5477A7CA6EC41ADB66

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64995614C, Relevance: 18.3, APIs: 12, Instructions: 260memoryCOMMON

Download Yara Rule

APIs

VariantInit.OLEAUT32 ref: 00007FF649956217
VariantInit.OLEAUT32 ref: 00007FF649956233
VariantInit.OLEAUT32 ref: 00007FF649956252
VariantInit.OLEAUT32 ref: 00007FF649956270
VariantClear.OLEAUT32 ref: 00007FF6499562AC
VariantClear.OLEAUT32 ref: 00007FF6499562B5
VariantClear.OLEAUT32 ref: 00007FF6499562BB
VariantClear.OLEAUT32 ref: 00007FF6499562C1
SysAllocString.OLEAUT32 ref: 00007FF6499562F5
SysFreeString.OLEAUT32 ref: 00007FF649956338
SysAllocString.OLEAUT32 ref: 00007FF6499563A6
SysFreeString.OLEAUT32 ref: 00007FF6499563F3

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: Variant$ClearInitString$AllocFree
String ID:
API String ID: 1107635823-0
Opcode ID: e7a3ff9d258f2e1b9d66712175b5ecbe6b2dff525dedeb00a1e7d1f201825fac
Instruction ID: d857ee9b27416a46b103430b829e5cd1dc321ef6b695cd102bcc0b70a377ea50
Opcode Fuzzy Hash: e7a3ff9d258f2e1b9d66712175b5ecbe6b2dff525dedeb00a1e7d1f201825fac
Instruction Fuzzy Hash: F2B19F32A5DA4286EB24BF65E9107AD2360FF44B98F084135DE5DC7786DF38E585C340

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64994E192, Relevance: 14.2, APIs: 2, Strings: 6, Instructions: 206timeCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF64996C784: _invalid_parameter_noinfo.LIBCMT ref: 00007FF64996C8A6

Part of subcall function 00007FF64996C78C: _invalid_parameter_noinfo.LIBCMT ref: 00007FF64996C7E1

GetLocalTime.KERNEL32 ref: 00007FF64994E26C
GetCurrentProcessId.KERNEL32 ref: 00007FF64994E3CF

Strings

>, xrefs: 00007FF64994E284
n, xrefs: 00007FF64994E390
z, xrefs: 00007FF64994E381
=, xrefs: 00007FF64994E36A
8, xrefs: 00007FF64994E354
:H, xrefs: 00007FF64994E4A8

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: _invalid_parameter_noinfo$CurrentLocalProcessTime
String ID: 8$:H$=$>$n$z
API String ID: 479778610-3277947295
Opcode ID: 24e28aaa322a5534530b53c80a3b68297e011b316e398c9091511e55271d6754
Instruction ID: 1250604db4b1935df2cfc07c63f1b1c04b90aa7cda12a834fe144b7c371276a9
Opcode Fuzzy Hash: 24e28aaa322a5534530b53c80a3b68297e011b316e398c9091511e55271d6754
Instruction Fuzzy Hash: F191902360D3C189E731AB79B4517DBBB90E7A6780F084169EAD887B8BCE2CC145DF11

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64997EE18, Relevance: 10.8, APIs: 5, Strings: 1, Instructions: 321fileCOMMON

Download Yara Rule

APIs

GetConsoleCP.KERNEL32 ref: 00007FF64997EE87
WriteFile.KERNEL32 ref: 00007FF64997F131
WriteFile.KERNEL32 ref: 00007FF64997F183
GetLastError.KERNEL32 ref: 00007FF64997F2C5
GetLastError.KERNEL32 ref: 00007FF64997F2D7

Strings

MZx, xrefs: 00007FF64997EE55, 00007FF64997EEEC, 00007FF64997EFA1, 00007FF64997F06A, 00007FF64997F1C6, 00007FF64997F296

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: ErrorFileLastWrite$Console
String ID: MZx
API String ID: 786612050-2575928145
Opcode ID: 0e3544457a81fbf93e5bb65d93716f6e1bedc45cc0cd8151d53bc768b8010a5f
Instruction ID: 63c381a5739c5445f1713988f8c5171ca7bc34a4abd6e548fa0eaddc4ba49efd
Opcode Fuzzy Hash: 0e3544457a81fbf93e5bb65d93716f6e1bedc45cc0cd8151d53bc768b8010a5f
Instruction Fuzzy Hash: 8DD1D022A8CA819AE700FF64D4442ED7BB1FB45788F584176CE8ED7B9ADE38D156C300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64996A284, Relevance: 10.6, APIs: 7, Instructions: 72COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32 ref: 00007FF64996A2A0
RtlCaptureContext.KERNEL32 ref: 00007FF64996A2CC
RtlLookupFunctionEntry.KERNEL32 ref: 00007FF64996A2E6
RtlVirtualUnwind.KERNEL32 ref: 00007FF64996A327
IsDebuggerPresent.KERNEL32 ref: 00007FF64996A37B
SetUnhandledExceptionFilter.KERNEL32 ref: 00007FF64996A39C
UnhandledExceptionFilter.KERNEL32 ref: 00007FF64996A3A7

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$CaptureContextDebuggerEntryFeatureFunctionLookupProcessorUnwindVirtual
String ID:
API String ID: 3140674995-0
Opcode ID: f983b5067b0f2b30bdd97aa1616adc2b1c5e79f94750c729e5f29479b3610a46
Instruction ID: 57bf036baf5de9a3d0058633caf6943e8af1e160ccfe4e94fc47692b0ec834de
Opcode Fuzzy Hash: f983b5067b0f2b30bdd97aa1616adc2b1c5e79f94750c729e5f29479b3610a46
Instruction Fuzzy Hash: 28315D72659A8189EB64FF60E8407ED73A4FB84344F48403ADA4EC7B9AEF38D548C710

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6499759E4, Relevance: 9.1, APIs: 6, Instructions: 83COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlCaptureContext.KERNEL32 ref: 00007FF649975A5D
RtlLookupFunctionEntry.KERNEL32 ref: 00007FF649975A75
RtlVirtualUnwind.KERNEL32 ref: 00007FF649975AB0
IsDebuggerPresent.KERNEL32 ref: 00007FF649975AE9
SetUnhandledExceptionFilter.KERNEL32 ref: 00007FF649975AF3
UnhandledExceptionFilter.KERNEL32 ref: 00007FF649975AFE

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: ExceptionFilterUnhandled$CaptureContextDebuggerEntryFunctionLookupPresentUnwindVirtual
String ID:
API String ID: 1239891234-0
Opcode ID: 50b34b393fb9b7757b0067613f9e722e960c043d972149cb9b14dd6ea40172bd
Instruction ID: 1abd6745fed88e008ae7b5108ffe5c7d53dddc746b63c91270f7b74c1d751219
Opcode Fuzzy Hash: 50b34b393fb9b7757b0067613f9e722e960c043d972149cb9b14dd6ea40172bd
Instruction Fuzzy Hash: 42316132A58B8185EB64FF25E8402AE73A4FB84754F580139EA8DC3B56DF3CC555CB40

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64997CEEC, Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 166COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF64997D228

Part of subcall function 00007FF64997599C: IsProcessorFeaturePresent.KERNEL32(?,?,?,?,00007FF649975BF5), ref: 00007FF6499759A5
Part of subcall function 00007FF64997599C: GetCurrentProcess.KERNEL32(?,?,?,?,00007FF649975BF5), ref: 00007FF6499759CA

Strings

C:\Users\user\Desktop\anchor_x64.exe, xrefs: 00007FF64997D203
*?, xrefs: 00007FF64997D24F

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: CurrentFeaturePresentProcessProcessor_invalid_parameter_noinfo
String ID: *?$C:\Users\user\Desktop\anchor_x64.exe
API String ID: 4036615347-3079180348
Opcode ID: c9df3f397fa8304feafd434982a4bc6d76a1b4192cfd87788eb276fbb3299915
Instruction ID: a0d6a4e31ec5fb78b51c4ac0da77357528281c9428ad837e28f9debac5ec5158
Opcode Fuzzy Hash: c9df3f397fa8304feafd434982a4bc6d76a1b4192cfd87788eb276fbb3299915
Instruction Fuzzy Hash: E051B062B59756C5EF14FFA298005BD27A1BB48BD8B4C4572DE4DC7B86EE3CD4428320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6499786A4, Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 318COMMONLIBRARYCODE

Download Yara Rule

APIs

__FrameHandler3::GetHandlerSearchState.LIBVCRUNTIME ref: 00007FF649978708

Part of subcall function 00007FF649977B74: _GetEstablisherFrame.LIBVCRUNTIME ref: 00007FF649977BA9
Part of subcall function 00007FF649977B74: __GetUnwindTryBlock.LIBCMT ref: 00007FF649977BB7
Part of subcall function 00007FF649977B74: __SetUnwindTryBlock.LIBVCRUNTIME ref: 00007FF649977BDC

Is_bad_exception_allowed.LIBVCRUNTIME ref: 00007FF6499787E0
__FrameHandler3::ExecutionInCatch.LIBVCRUNTIME ref: 00007FF649978A44
_GetEstablisherFrame.LIBVCRUNTIME ref: 00007FF649978A95
std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF649978B55

Strings

csm, xrefs: 00007FF649978722
csm, xrefs: 00007FF649978803
csm, xrefs: 00007FF649978789

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: Frame$BlockEstablisherHandler3::Unwind$CatchExecutionHandlerIs_bad_exception_allowedSearchStatestd::bad_alloc::bad_alloc
String ID: csm$csm$csm
API String ID: 3606184308-393685449
Opcode ID: d75e76c68253bcca0b94597d7b6e8bbe81b92c6df5baad666a6ded16b790c426
Instruction ID: 110febfe6b41f5554c7407e25e94597cbc8cb706f7134c17eb31d89d24e3dfa4
Opcode Fuzzy Hash: d75e76c68253bcca0b94597d7b6e8bbe81b92c6df5baad666a6ded16b790c426
Instruction Fuzzy Hash: 5FE15D62A4C741CAEB20BF6694803AD37A4FB84798F180175EE8DD7B96DF38E491C740

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64997E260, Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 86libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000000,00007FF64997E0F5,?,?,00000000,00007FF649977784), ref: 00007FF64997E2E3
GetLastError.KERNEL32(?,?,00000000,00007FF649977784), ref: 00007FF64997E2F1
LoadLibraryExW.KERNEL32(?,?,00000000,00007FF649977784), ref: 00007FF64997E31B
FreeLibrary.KERNEL32(?,?,00000000,00007FF649977784), ref: 00007FF64997E361
GetProcAddress.KERNEL32(?,?,00000000,00007FF649977784), ref: 00007FF64997E36D

Strings

MZx, xrefs: 00007FF64997E27E, 00007FF64997E32C, 00007FF64997E34A
api-ms-, xrefs: 00007FF64997E303

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: Library$Load$AddressErrorFreeLastProc
String ID: MZx$api-ms-
API String ID: 2559590344-259127448
Opcode ID: 04355ff06001d2d6a683f0a034157a800ff914f5fcb14f6eb95f28767bf62b4d
Instruction ID: 923a46f182c3868c2cf500fcd7eab99da5160fe277b06a62ad93c0998cd1b9cd
Opcode Fuzzy Hash: 04355ff06001d2d6a683f0a034157a800ff914f5fcb14f6eb95f28767bf62b4d
Instruction Fuzzy Hash: 8831B021B5EA43D1EE16FF52A804579A398BF04BA5F5D0535DD1DC63A2EE3CE4408320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6499826B0, Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 48fileCOMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 00007FF6499826E1
GetLastError.KERNEL32 ref: 00007FF6499826ED
CloseHandle.KERNEL32 ref: 00007FF649982705
CreateFileW.KERNEL32 ref: 00007FF649982730
WriteConsoleW.KERNEL32 ref: 00007FF64998274F

Strings

CONOUT$, xrefs: 00007FF649982711

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast
String ID: CONOUT$
API String ID: 3230265001-3130406586
Opcode ID: b3995c7a37e6925a60afd43ef683f5ac5acb67d9482e949a7e5944a38cb6630b
Instruction ID: 50e88aa9db2dce06d52a0e4456cfdcc0c98076021ada5769b3005b5cf4ccf74b
Opcode Fuzzy Hash: b3995c7a37e6925a60afd43ef683f5ac5acb67d9482e949a7e5944a38cb6630b
Instruction Fuzzy Hash: 9B11812266CB4186E754FF12E84472962A4FB88FE4F080238EA1EC7B95DF3CD8448744

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649974A68, Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 24libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32 ref: 00007FF649974A84
GetProcAddress.KERNEL32 ref: 00007FF649974A9A
FreeLibrary.KERNEL32 ref: 00007FF649974AB7

Strings

CorExitProcess, xrefs: 00007FF649974A93
mscoree.dll, xrefs: 00007FF649974A7B

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: ecd63c3c4316c3c9fbdcfef5bf25d74ee47e5c971f69a65528fc7b8558aba146
Instruction ID: 8d7bcaafb58d050d7e58d1ab7f0d3b651646637aa4abe15685043c8c537d3321
Opcode Fuzzy Hash: ecd63c3c4316c3c9fbdcfef5bf25d74ee47e5c971f69a65528fc7b8558aba146
Instruction Fuzzy Hash: 5FF03AA1B7D60281EF58BF60E8807792361AF88754F0C1439D46FC6666DF2CD488C300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64997EB3C, Relevance: 7.7, APIs: 5, Instructions: 203COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF64997EB7D
GetConsoleMode.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,00007FF64997EAFB,?,?,?,00007FF64997ADEB), ref: 00007FF64997EC3C
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,00007FF64997EAFB,?,?,?,00007FF64997ADEB), ref: 00007FF64997ECBC

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: ConsoleErrorLastMode_invalid_parameter_noinfo
String ID:
API String ID: 2210144848-0
Opcode ID: 07eeae94c06d92b8504f9e987bce4935aa044e86d40c3320ad466e40d74f921d
Instruction ID: 64ab1c1305fa73532a4aa8a3453cf121ae96dbbd3f6d57d54241da3c32b4be0b
Opcode Fuzzy Hash: 07eeae94c06d92b8504f9e987bce4935aa044e86d40c3320ad466e40d74f921d
Instruction Fuzzy Hash: 1B819C26E9C613CAF750BFA588846BDAAA0BB44B94F4C0175DE0ED77A7DF38A441C310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649969FC0, Relevance: 7.6, APIs: 5, Instructions: 118memoryCOMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32 ref: 00007FF64996A047
MultiByteToWideChar.KERNEL32 ref: 00007FF64996A0C9
SysAllocString.OLEAUT32 ref: 00007FF64996A0D6

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: ByteCharMultiWide$AllocString
String ID:
API String ID: 262959230-0
Opcode ID: d862167c056b2ad39305bc35e6b04559ab4bed8c119e56702c1ae49f8c288d9f
Instruction ID: 78ca33d58c1b3b64cedd55570b7d63c25334b591c7bfeb6625f0c24fb6208546
Opcode Fuzzy Hash: d862167c056b2ad39305bc35e6b04559ab4bed8c119e56702c1ae49f8c288d9f
Instruction Fuzzy Hash: E141C621A4E64689E714BF3599103B92290BF457F4F1C6638E96DC67D7DE3CE891C380

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649982A58, Relevance: 7.6, APIs: 5, Instructions: 56COMMONLIBRARYCODE

Download Yara Rule

APIs

_set_statfp.LIBCMT ref: 00007FF649982A80
_set_statfp.LIBCMT ref: 00007FF649982A9B
_set_statfp.LIBCMT ref: 00007FF649982AB7
_set_statfp.LIBCMT ref: 00007FF649982AF3

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: _set_statfp
String ID:
API String ID: 1156100317-0
Opcode ID: 2f5373d1ca46f5c3229c317260ef8bd11ef88d050e705646cdd7aa3137752530
Instruction ID: 88997ea73b4e880abbe73251d5ec20154f81a88b749e1affd3c3527af75d542a
Opcode Fuzzy Hash: 2f5373d1ca46f5c3229c317260ef8bd11ef88d050e705646cdd7aa3137752530
Instruction Fuzzy Hash: E3118F26EFCA1321F6BCB968D85237E16816F543E0F4D463DED7ECA6D78E2CA8424100

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64997B9EC, Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 179COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF64997BA2F

Strings

e+000, xrefs: 00007FF64997BAD4
-, xrefs: 00007FF64997BC11
gfff, xrefs: 00007FF64997BB51

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: -$e+000$gfff
API String ID: 3215553584-2620144452
Opcode ID: fea700b4ae36ff7c529df643656e834d20fb0c31ee8ce0b254d5c322e6b27136
Instruction ID: 0928823e865fc4de46b8b2c856694b3c4a467a38189d947ff4e6721befeccea3
Opcode Fuzzy Hash: fea700b4ae36ff7c529df643656e834d20fb0c31ee8ce0b254d5c322e6b27136
Instruction Fuzzy Hash: D261E262B5C7858AE725BF2599413A97791EB80BA0F4C8271DBACC7BDADF2CD444C700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649978C68, Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 146COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(?,?,?,?,00000000,00000000,?,00007FF64996B689,?,?,00007FF649978B1B), ref: 00007FF649978CB4
_CallSETranslator.LIBVCRUNTIME ref: 00007FF649978D03

Strings

MOC, xrefs: 00007FF649978CC8
RCC, xrefs: 00007FF649978CD1

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: CallEncodePointerTranslator
String ID: MOC$RCC
API String ID: 3544855599-2084237596
Opcode ID: ba8a55b228979507f88b3c3f52684b91d840e4bed7c9b4b7db1ce7d12982141e
Instruction ID: 80478aa7891f32dddd788bc9259c1dd3ee4ed3d75d1eede72bce5e6784e19403
Opcode Fuzzy Hash: ba8a55b228979507f88b3c3f52684b91d840e4bed7c9b4b7db1ce7d12982141e
Instruction Fuzzy Hash: 40514932A08A85CAE720BF66D4803AD77A0FB54B88F184566EF4D97B5ADF38E455C700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64997806C, Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 145COMMONLIBRARYCODE

Download Yara Rule

APIs

__except_validate_context_record.LIBVCRUNTIME ref: 00007FF649978094
__FrameHandler3::FrameUnwindToEmptyState.LIBVCRUNTIME ref: 00007FF64997817C

Strings

csm, xrefs: 00007FF6499781CE
csm, xrefs: 00007FF6499780B6

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: Frame$EmptyHandler3::StateUnwind__except_validate_context_record
String ID: csm$csm
API String ID: 3896166516-3733052814
Opcode ID: c1f9aeab5c56c4da10f37370f3e62ba49f3a1aa23b94188c6bc5adb2cffb70f5
Instruction ID: ffdf2365abb8a3c38ce9bc9b1a4284dbb7ecd3246752d32533eef0747c61fd7d
Opcode Fuzzy Hash: c1f9aeab5c56c4da10f37370f3e62ba49f3a1aa23b94188c6bc5adb2cffb70f5
Instruction Fuzzy Hash: 99517E3294C682C6EB64BF16948426977A0FB91B85F1C4176DB9DC7B9ACF3CE490CB01

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649955E96, Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 67memorywindowCOMMON

Download Yara Rule

APIs

FormatMessageA.KERNEL32 ref: 00007FF649955EDD
LocalAlloc.KERNEL32 ref: 00007FF649955F38

Strings

Unknown error 0x%0lX, xrefs: 00007FF649955F7D
IDispatch error #%d, xrefs: 00007FF649955F6C

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: AllocFormatLocalMessage
String ID: IDispatch error #%d$Unknown error 0x%0lX
API String ID: 3960703613-2934499512
Opcode ID: 693297c9b66ce21f8298f55620efccc22f9a8bf88e228e71242208683c58015a
Instruction ID: e15946c2dc87efb1ac600cd10fbe81b7bdc1081a7c7672f053d35279bd55e3b0
Opcode Fuzzy Hash: 693297c9b66ce21f8298f55620efccc22f9a8bf88e228e71242208683c58015a
Instruction Fuzzy Hash: 1821E173A9C74181EB64BF25D41437A2291AB94BA4F588235CA0EC3BD2CF3DE846C342

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6499783E4, Relevance: 6.2, APIs: 4, Instructions: 202COMMONLIBRARYCODE

Download Yara Rule

APIs

__AdjustPointer.LIBCMT ref: 00007FF649978507
__AdjustPointer.LIBCMT ref: 00007FF649978552
__AdjustPointer.LIBCMT ref: 00007FF649978629

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: fa5bbb738a34b93a05ad879c9e0083a197e3b01216d23d5cd4cd7d0d0e826275
Instruction ID: 140d1c223b20438363552dafc5449ff7bf02585e62670022273f9c405406622c
Opcode Fuzzy Hash: fa5bbb738a34b93a05ad879c9e0083a197e3b01216d23d5cd4cd7d0d0e826275
Instruction Fuzzy Hash: 3371BB22A8DA42D5EA65FE2295C067963A4AF44B84F0D44B6DE4DC7B87DF3CE842C740

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649956678, Relevance: 6.0, APIs: 4, Instructions: 29COMMON

Download Yara Rule

APIs

VariantClear.OLEAUT32 ref: 00007FF6499566A0
VariantClear.OLEAUT32 ref: 00007FF6499566A9
VariantClear.OLEAUT32 ref: 00007FF6499566AF
VariantClear.OLEAUT32 ref: 00007FF6499566B5

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: ClearVariant
String ID:
API String ID: 1473721057-0
Opcode ID: ab6e2a0be742cb0bde27c77b28ef8d64c4758e36f59ce557272be3e982f2d718
Instruction ID: 4ffd3f5106ba26ad2c68769c45dc5cc0bc6e9e72c6d69c84c0971dbefbaf6a06
Opcode Fuzzy Hash: ab6e2a0be742cb0bde27c77b28ef8d64c4758e36f59ce557272be3e982f2d718
Instruction Fuzzy Hash: 76E012236109A4A8D711EF31FC009E86B24F7947A8F494133EE5C82594AE34D69BC300

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64997F508, Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNEL32 ref: 00007FF64997F61F
GetLastError.KERNEL32 ref: 00007FF64997F641

Strings

U, xrefs: 00007FF64997F5CB

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: ErrorFileLastWrite
String ID: U
API String ID: 442123175-4171548499
Opcode ID: 8fade4a58e48830b81c384b6c6ba52233c11786accea551678c790b2d95991eb
Instruction ID: 00208eced87c96a51f5aebe542c5b30e3a5724e214036579234d9a6b8a11595d
Opcode Fuzzy Hash: 8fade4a58e48830b81c384b6c6ba52233c11786accea551678c790b2d95991eb
Instruction Fuzzy Hash: 1C41BF62A5CA8586DB20FF25E8443BA67A0FB88794F884035EE4EC7799EF3CD541C740

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649979130, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 50COMMON

Download Yara Rule

APIs

try_get_function.LIBVCRUNTIME ref: 00007FF649979169
LCMapStringW.KERNEL32 ref: 00007FF6499791F1

Strings

LCMapStringEx, xrefs: 00007FF64997915D

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: Stringtry_get_function
String ID: LCMapStringEx
API String ID: 2588686239-3893581201
Opcode ID: 10092055109f20ff08fe1d73816b987917436d09da2eb9a86565676a6789cb92
Instruction ID: 09ef3a928ded682d4f796bf571cd6a4bf1ff2605a5eada581ea099b6e5e6fe55
Opcode Fuzzy Hash: 10092055109f20ff08fe1d73816b987917436d09da2eb9a86565676a6789cb92
Instruction Fuzzy Hash: DC113E3660CB8186D764EF05B4402AAB7A0FBC9B80F584139EE8DC3B59DF3CD4508B00

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF64996AE90, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 42COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlPcToFileHeader.KERNEL32(?,?,?,?,?,?,?,?,000000F8,00007FF64996A1CF), ref: 00007FF64996AED4
RaiseException.KERNEL32(?,?,?,?,?,?,?,?,000000F8,00007FF64996A1CF), ref: 00007FF64996AF1A

Strings

csm, xrefs: 00007FF64996AF07

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: ExceptionFileHeaderRaise
String ID: csm
API String ID: 2573137834-1018135373
Opcode ID: 0cca6d678f7393a148cf465ca776ec0841094c4d6af28f07bbd8ffb2a00a0908
Instruction ID: 953af7c4e6ce2a0f07e25b940ae966c562dba59f606c8371a4592e49da5da05d
Opcode Fuzzy Hash: 0cca6d678f7393a148cf465ca776ec0841094c4d6af28f07bbd8ffb2a00a0908
Instruction Fuzzy Hash: 46116A3261DB8182EB61AF15E400269B7A0FB88B94F1C5235DECD87B59DF3CD861CB40

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF6499790CC, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 25COMMON

Download Yara Rule

APIs

try_get_function.LIBVCRUNTIME ref: 00007FF6499790FD
InitializeCriticalSectionAndSpinCount.KERNEL32 ref: 00007FF649979117

Strings

InitializeCriticalSectionEx, xrefs: 00007FF6499790F1

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpintry_get_function
String ID: InitializeCriticalSectionEx
API String ID: 539475747-3084827643
Opcode ID: bac8d23a8693670139153d8745ccc6ccbceeebcb8e954284360a08e8e9ceb6ae
Instruction ID: 03f84f30138e28ee45db1fe8380cbd88e8472e869d312433bfdb4357efff5d8d
Opcode Fuzzy Hash: bac8d23a8693670139153d8745ccc6ccbceeebcb8e954284360a08e8e9ceb6ae
Instruction Fuzzy Hash: D9F0BE25B6C681C2EA18BF41B4440B92220EF48B90F4C4079EA1EC3B56CE3CD895C700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF649979078, Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMONLIBRARYCODE

Download Yara Rule

APIs

try_get_function.LIBVCRUNTIME ref: 00007FF6499790A1
TlsSetValue.KERNEL32(?,?,000000F8,00007FF64997984E,?,?,000000F8,00007FF64997B195,?,?,?,?,00007FF64997A971), ref: 00007FF6499790B8

Strings

FlsSetValue, xrefs: 00007FF64997908E

Memory Dump Source

Source File: 00000020.00000002.507775120.00007FF649941000.00000020.00020000.sdmp, Offset: 00007FF649940000, based on PE: true

Associated: 00000020.00000002.507766431.00007FF649940000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507809906.00007FF649984000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507821261.00007FF649992000.00000004.00020000.sdmp Download File
Associated: 00000020.00000002.507828845.00007FF649996000.00000002.00020000.sdmp Download File
Associated: 00000020.00000002.507835546.00007FF64999A000.00000008.00020000.sdmp Download File
Associated: 00000020.00000002.507841163.00007FF64999D000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_7ff649940000_anchor_x64.jbxd

Similarity

API ID: Valuetry_get_function
String ID: FlsSetValue
API String ID: 738293619-3750699315
Opcode ID: e1488f367ffe63e201038fcd8e7a87b8f83c512b92a77859745930310495d7f5
Instruction ID: ff98e31a9a7b7d537c2d5c008d7c9414496548468d106eeba9bf9671ead44096
Opcode Fuzzy Hash: e1488f367ffe63e201038fcd8e7a87b8f83c512b92a77859745930310495d7f5
Instruction Fuzzy Hash: 71E0E561AAC502D1FA08BF54F8000B42222EF48780F4C507ED91EC67A2DE3CD888C701

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically requires being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	File monitoring, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create an account to maintain access to victim systems. With a sufficient level of access, creating such accounts may be used to establish secondary credentialed access that do not require persistent remote access tools to be deployed on the system.
Tactics:	Persistence
Data Sources:	AWS CloudTrail logs, Authentication logs, Azure activity logs, Office 365 account logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, Access tokens, Authentication logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use NTFS file attributes to hide their malicious data in order to evade detection. Every New Technology File System (NTFS) formatted partition contains a Master File Table (MFT) that maintains a record for every file/directory on the partition. Within MFT entries are file attributes, such as Extended Attributes (EA) and Data [known as Alternate Data Streams (ADSs) when more than one Data attribute is present], that can be used to store arbitrary data (and even complete files).
Tactics:	Defense Evasion
Data Sources:	API monitoring, File monitoring, Process command-line parameters
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report anchor_x64.exe

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

AV Detection:

Compliance:

Spreading:

Networking:

Protection of GUI:

System Summary:

Data Obfuscation:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

Anti Debugging:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

Contacted IPs

Public

Private

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Possible Origin

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

Code Manipulations

Statistics

CPU Usage

Function 00007FF6B44242E4, Relevance: 39.9, APIs: 6, Strings: 16, Instructions: 1360
fileCOMMON

Function 00007FF6B442F80E, Relevance: 30.6, APIs: 4, Strings: 13, Instructions: 838
fileCOMMON

Function 00007FF6B442AED2, Relevance: 18.9, Strings: 15, Instructions: 161
COMMON

Function 00007FF6B44344C3, Relevance: 18.5, APIs: 4, Strings: 6, Instructions: 990
fileCOMMON

Function 00007FF6B44358DB, Relevance: 10.7, APIs: 4, Strings: 2, Instructions: 173
fileCOMMON

Function 00007FF6B44498CC, Relevance: 17.6, APIs: 6, Strings: 4, Instructions: 52
libraryloaderCOMMON

Function 00007FF6B444AB90, Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 94
COMMON

Function 00007FF6B442E78F, Relevance: 6.1, APIs: 4, Instructions: 90
COMMON

Function 00007FF6B4454AC4, Relevance: 4.5, APIs: 3, Instructions: 19
COMMONLIBRARYCODE

Function 00007FF6B44215B0, Relevance: 3.1, APIs: 2, Instructions: 107
COMMON

Function 00007FF6B4426046, Relevance: 3.1, APIs: 2, Instructions: 98
libraryCOMMON

Function 00007FF6B444AAAC, Relevance: 3.1, APIs: 2, Instructions: 55
COMMON