Play interactive tour

Edit tour

Analysis Report document-1251000362.xlsm

Overview

General Information

Sample Name:	document-1251000362.xlsm
Analysis ID:	382870
MD5:	09217c79f99bbfe977a80d83d62489c7
SHA1:	da600d355dfb57190a5745342f3cfeb7d1e509f1
SHA256:	7bf8049e4766a2985851a3d3bf01710c53c389fe1e54397fa332672b62b649d8
Infos:
Most interesting Screenshot:

Detection

Hidden Macro 4.0 IcedID

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Document exploit detected (drops PE files)

Found malware configuration

Multi AV Scanner detection for submitted file

Office document tries to convince victim to disable security protection (e.g. to enable ActiveX or Macros)

System process connects to network (likely due to code injection or exploit)

Yara detected IcedID

C2 URLs / IPs found in malware configuration

Contains functionality to detect hardware virtualization (CPUID execution measurement)

Document exploit detected (UrlDownloadToFile)

Document exploit detected (process start blacklist hit)

Drops PE files to the user root directory

Found Excel 4.0 Macro with suspicious formulas

Found abnormal large hidden Excel 4.0 Macro sheet

Office process drops PE file

Outdated Microsoft Office dropper detected

Performs DNS queries to domains with low reputation

Tries to detect virtualization through RDTSC time measurements

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to query network adapater information

Detected potential crypto function

Drops PE files

Drops PE files to the user directory

Drops files with a non-matching file extension (content does not match file extension)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Potential document exploit detected (performs DNS queries)

Potential document exploit detected (performs HTTP gets)

Potential document exploit detected (unknown TCP traffic)

Sample execution stops while process was sleeping (likely an evasion)

Uses insecure TLS / SSL version for HTTPS connection

Classification

Startup

System is w7x64

EXCEL.EXE (PID: 2296 cmdline: 'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding MD5: 5FB0A0F93382ECD19F5F499A5CAA59F0)

rundll32.exe (PID: 2316 cmdline: rundll32 ..\ksjvoefv.skd,DllRegisterServer MD5: DD81D91FF3B0763C392422865C9AC12E)

rundll32.exe (PID: 2928 cmdline: rundll32 ..\ksjvoefv.skd1,DllRegisterServer MD5: DD81D91FF3B0763C392422865C9AC12E)

rundll32.exe (PID: 260 cmdline: rundll32 ..\ksjvoefv.skd2,DllRegisterServer MD5: DD81D91FF3B0763C392422865C9AC12E)

rundll32.exe (PID: 2864 cmdline: rundll32 ..\ksjvoefv.skd3,DllRegisterServer MD5: DD81D91FF3B0763C392422865C9AC12E)

rundll32.exe (PID: 268 cmdline: rundll32 ..\ksjvoefv.skd4,DllRegisterServer MD5: DD81D91FF3B0763C392422865C9AC12E)

cleanup

Malware Configuration

Threatname: IcedID

{"C2 url": "usaaforced.fun"}

Yara Overview

Memory Dumps

Source	Rule	Description	Author
00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2340656783.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2347303586.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2353273837.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2346946398.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2324539894.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2324305529.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2313180906.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2353071481.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2312959484.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2294844286.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2347372775.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2307293375.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2324432561.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2312752671.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2300737619.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2359025585.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2288787523.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2300503265.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2358776145.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2359409712.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2353386032.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2359132350.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2318924371.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2306619325.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2306955212.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2300848573.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2318582057.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2318854529.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2289125454.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2307060040.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000002.2499534316.00000000000DD000.00000004.00000020.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2353251472.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2313048515.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2318832417.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2294985377.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2289046679.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2324458781.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2347597509.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2295056636.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2294958860.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2289433187.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2341036692.00000000000DD000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2301147013.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000003.00000003.2340962857.0000000000152000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
Process Memory Space: rundll32.exe PID: 2864	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
Process Memory Space: rundll32.exe PID: 2316	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
Click to see the 42 entries

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Found malware configuration

Show sources

Source: 3.2.rundll32.exe.390000.0.raw.unpack

Malware Configuration Extractor: IcedID {"C2 url": "usaaforced.fun"}

Multi AV Scanner detection for submitted file

Show sources

Source: document-1251000362.xlsm

Metadefender: Detection: 13%

Perma Link

Yara detected IcedID

Show sources

Source: Yara match	File source: 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2340656783.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2347303586.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2353273837.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2346946398.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2324539894.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2324305529.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2313180906.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2353071481.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2312959484.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2294844286.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2347372775.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2307293375.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2324432561.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2312752671.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2300737619.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2359025585.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2288787523.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2300503265.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2358776145.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2359409712.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2353386032.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2359132350.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2318924371.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2306619325.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2306955212.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2300848573.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2318582057.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2318854529.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2289125454.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2307060040.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2499534316.00000000000DD000.00000004.00000020.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2353251472.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2313048515.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2318832417.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2294985377.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2289046679.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2324458781.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2347597509.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2295056636.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2294958860.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2289433187.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2341036692.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2301147013.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2340962857.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 2864, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 2316, type: MEMORY

Source: unknown	HTTPS traffic detected: 143.204.3.74:443 -> 192.168.2.22:49173 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 143.204.3.74:443 -> 192.168.2.22:49174 version: TLS 1.0

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Source: unknown	HTTPS traffic detected: 192.185.48.186:443 -> 192.168.2.22:49167 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.185.214.87:443 -> 192.168.2.22:49170 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 50.87.146.86:443 -> 192.168.2.22:49171 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.79.62.99:443 -> 192.168.2.22:49172 version: TLS 1.2

Software Vulnerabilities:

Document exploit detected (drops PE files)

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: 3003[1].gif.0.dr

Jump to dropped file

Document exploit detected (UrlDownloadToFile)

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Section loaded: \KnownDlls\api-ms-win-downlevel-shlwapi-l2-1-0.dll origin: URLDownloadToFileA

Document exploit detected (process start blacklist hit)

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Process created: C:\Windows\System32\rundll32.exe

Source: global traffic

DNS query: name: metaflip.io

Source: global traffic

TCP traffic: 192.168.2.22:49167 -> 192.185.48.186:443

Source: global traffic

TCP traffic: 192.168.2.22:49167 -> 192.185.48.186:443

Networking:

C2 URLs / IPs found in malware configuration

Show sources

Source: Malware configuration extractor

URLs: usaaforced.fun

Outdated Microsoft Office dropper detected

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	DNS query: agenbolatermurah.com is down
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	DNS query: agenbolatermurah.com is down

Performs DNS queries to domains with low reputation

Show sources

Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz

Source: Joe Sandbox View	IP Address: 50.87.146.86 50.87.146.86
Source: Joe Sandbox View	IP Address: 199.79.62.99 199.79.62.99
Source: Joe Sandbox View	IP Address: 192.185.214.87 192.185.214.87

Source: Joe Sandbox View	JA3 fingerprint: 05af1f5ca1b87cc9cc9b25185115607d
Source: Joe Sandbox View	JA3 fingerprint: 7dcce5b76c8b17472d024758970a406b

Source: unknown	HTTPS traffic detected: 143.204.3.74:443 -> 192.168.2.22:49173 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 143.204.3.74:443 -> 192.168.2.22:49174 version: TLS 1.0

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\DFB60433.png

Jump to behavior

Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	String found in binary or memory: <a class="lb-txt-none lb-txt-p-chromium lb-none-pad lb-none-v-margin lb-txt" style="padding-right:5px;" href="https://www.facebook.com/amazonwebservices" target="_blank" rel="noopener" title="Facebook"> <i class="icon-facebook"></i></a> equals www.facebook.com (Facebook)
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	String found in binary or memory: <a class="lb-txt-none lb-txt-p-chromium lb-none-pad lb-txt" style="padding-right:5px;" href="https://www.youtube.com/user/AmazonWebServices/Cloud/" target="_blank" rel="noopener" title="YouTube"> <i class="icon-youtube"></i></a> equals www.youtube.com (Youtube)
Source: rundll32.exe, 00000003.00000002.2499932403.0000000001B00000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2184161879.0000000001AC0000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2178177559.0000000001D10000.00000002.00000001.sdmp, rundll32.exe, 00000007.00000002.2499918134.0000000001BD0000.00000002.00000001.sdmp	String found in binary or memory: Please visit http://www.hotmail.com/oe to learn more. equals www.hotmail.com (Hotmail)
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: www.login.yahoo.com0 equals www.yahoo.com (Yahoo)

Source: unknown

DNS traffic detected: queries for: metaflip.io

Source: rundll32.exe, 00000007.00000003.2176468982.00000000003B7000.00000004.00000001.sdmp	String found in binary or memory: http://crl.comodoca.com/
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://crl.comodoca.com/UTN-USERFirst-Hardware.crl06
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://crl.entrust.net/2048ca.crl0
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://crl.entrust.net/server1.crl0
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://crl.pkioverheid.nl/DomOvLatestCRL.crl0
Source: rundll32.exe, 00000003.00000003.2340656783.00000000000DD000.00000004.00000001.sdmp	String found in binary or memory: http://crl.rootca1.a
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://crl.rootg2.amazontrust.com/rootg2.crl0
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://crl.sca1b.amazontrust.com/sca1b.crl0
Source: rundll32.exe, 00000007.00000003.2176468982.00000000003B7000.00000004.00000001.sdmp	String found in binary or memory: http://crt.comod
Source: rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://crt.rootca1.am
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://crt.rootg2.amazontrust.com/rootg2.cer0=
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://crt.sca1b.amazontrust.com/sca1b.crt0
Source: rundll32.exe, 00000003.00000002.2499932403.0000000001B00000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2184161879.0000000001AC0000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2178177559.0000000001D10000.00000002.00000001.sdmp, rundll32.exe, 00000007.00000002.2499918134.0000000001BD0000.00000002.00000001.sdmp	String found in binary or memory: http://investor.msn.com
Source: rundll32.exe, 00000003.00000002.2499932403.0000000001B00000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2184161879.0000000001AC0000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2178177559.0000000001D10000.00000002.00000001.sdmp, rundll32.exe, 00000007.00000002.2499918134.0000000001BD0000.00000002.00000001.sdmp	String found in binary or memory: http://investor.msn.com/
Source: rundll32.exe, 00000003.00000002.2500139731.0000000001CE7000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2184373019.0000000001CA7000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2178409552.0000000001EF7000.00000002.00000001.sdmp, rundll32.exe, 00000007.00000002.2500122657.0000000001DB7000.00000002.00000001.sdmp	String found in binary or memory: http://localizability/practices/XML.asp
Source: rundll32.exe, 00000003.00000002.2500139731.0000000001CE7000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2184373019.0000000001CA7000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2178409552.0000000001EF7000.00000002.00000001.sdmp, rundll32.exe, 00000007.00000002.2500122657.0000000001DB7000.00000002.00000001.sdmp	String found in binary or memory: http://localizability/practices/XMLConfiguration.asp
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://o.ss2.us/0
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.comodoca.com0
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.comodoca.com0%
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.comodoca.com0-
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.comodoca.com0/
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.comodoca.com05
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.entrust.net03
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.entrust.net0D
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.rootg2.amazontrust.com08
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.sca1b.amazontrust.com06
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://s.ss2.us/r.crl0
Source: rundll32.exe, 00000003.00000002.2501158491.0000000002DB0000.00000002.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
Source: rundll32.exe, 00000003.00000002.2500139731.0000000001CE7000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2184373019.0000000001CA7000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2178409552.0000000001EF7000.00000002.00000001.sdmp, rundll32.exe, 00000007.00000002.2500122657.0000000001DB7000.00000002.00000001.sdmp	String found in binary or memory: http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
Source: rundll32.exe, 00000007.00000003.2224343749.00000000031E1000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2232322981.00000000031F6000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2177213287.000000000043A000.00000004.00000001.sdmp	String found in binary or memory: http://tvorartificialnature.xyz/
Source: rundll32.exe, 00000007.00000003.2188576987.00000000003B7000.00000004.00000001.sdmp	String found in binary or memory: http://tvorartificialnature.xyz/F
Source: rundll32.exe, 00000007.00000003.2229998305.00000000003B7000.00000004.00000001.sdmp	String found in binary or memory: http://tvorartificialnature.xyz/j
Source: rundll32.exe, 00000003.00000002.2499572164.00000000000F9000.00000004.00000020.sdmp	String found in binary or memory: http://usaaforced.fun/
Source: rundll32.exe, 00000003.00000002.2499572164.00000000000F9000.00000004.00000020.sdmp	String found in binary or memory: http://usaaforced.fun/Q
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp	String found in binary or memory: http://usaaforced.fun/k
Source: rundll32.exe, 00000003.00000002.2500139731.0000000001CE7000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2184373019.0000000001CA7000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2178409552.0000000001EF7000.00000002.00000001.sdmp, rundll32.exe, 00000007.00000002.2500122657.0000000001DB7000.00000002.00000001.sdmp	String found in binary or memory: http://windowsmedia.com/redir/services.asp?WMPFriendly=true
Source: rundll32.exe, 00000003.00000002.2501158491.0000000002DB0000.00000002.00000001.sdmp, rundll32.exe, 00000007.00000002.2501033372.0000000002C60000.00000002.00000001.sdmp	String found in binary or memory: http://www.%s.comPA
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://www.digicert.com.my/cps.htm02
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://www.diginotar.nl/cps/pkioverheid0
Source: rundll32.exe, 00000003.00000002.2499932403.0000000001B00000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2184161879.0000000001AC0000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2178177559.0000000001D10000.00000002.00000001.sdmp, rundll32.exe, 00000007.00000002.2499918134.0000000001BD0000.00000002.00000001.sdmp	String found in binary or memory: http://www.hotmail.com/oe
Source: rundll32.exe, 00000003.00000002.2500139731.0000000001CE7000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2184373019.0000000001CA7000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2178409552.0000000001EF7000.00000002.00000001.sdmp, rundll32.exe, 00000007.00000002.2500122657.0000000001DB7000.00000002.00000001.sdmp	String found in binary or memory: http://www.icra.org/vocabulary/.
Source: rundll32.exe, 00000003.00000002.2499932403.0000000001B00000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2184161879.0000000001AC0000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2178177559.0000000001D10000.00000002.00000001.sdmp, rundll32.exe, 00000007.00000002.2499918134.0000000001BD0000.00000002.00000001.sdmp	String found in binary or memory: http://www.msnbc.com/news/ticker.txt
Source: rundll32.exe, 00000007.00000002.2499918134.0000000001BD0000.00000002.00000001.sdmp	String found in binary or memory: http://www.windows.com/pctv.
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: http://x.ss2.us/x.cer0&
Source: rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/aws-blog/1.0.46/js
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/da/js/1.0.47/aws-da.js
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/g11n-lib/2.0.67
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/css/1.0.376
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/css/1.0.376/style-awsm.css
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/images
Source: rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/images/gi-map/AWS_Global-Infrastructure-Map.svg
Source: rundll32.exe, 00000003.00000003.2110513457.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174357995.0000000000436000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/images/logo
Source: rundll32.exe, 00000007.00000003.2174357995.0000000000436000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/images/logoo
Source: rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/images/logos/aws_logo_smile_1200x630.png
Source: rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/images/logos/aws_logo_smile_179x109.png
Source: rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/images/site/fav/favicon.ico
Source: rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/images/site/touch-icon-ipad-144-smile.png
Source: rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/images/site/touch-icon-iphone-114-smile.png
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-search/1.0.13/js
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra/1.0.376/directories
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra/1.0.376/libra-cardsui
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra/1.0.376/libra-head.js
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra/1.0.376/librastandardlib
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/plc/js/1.0.108/plc
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/pricing-calculator/js/1.0.2
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/pricing-savings-plan/js/1.0.6
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/psf/null
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/s_code/js/3.0/awshome_s_code.js
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/target/1.0.113/aws-target-mediator.js
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: https://amazon.com/
Source: rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: https://amazon.com/vt2
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	String found in binary or memory: https://amazonwebservicesinc.tt.omtrdc.net
Source: rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/?nc1=h_ls
Source: rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/?nc2=h_lg
Source: rundll32.exe, 00000007.00000003.2225040318.00000000003B7000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/H
Source: rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: https://aws.amazon.com/Ht2
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/ar/
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/ar/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/cn/
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/cn/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/de/
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/de/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/es/
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/es/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/fr/
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/fr/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/id/
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/id/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/it/
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/it/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/jp/
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/jp/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2110327677.00000000000F8000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/k
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/ko/
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/ko/?nc1=h_ls
Source: rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/marketplace/?nc2=h_mo
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/marketplace/?nc2=h_ql_mp
Source: rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/marketplace?aws=hp
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/podcasts/aws-podcast/
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/privacy/?nc1=f_pr
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/pt/
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/pt/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/ru/
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/ru/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/search
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/search/
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/search/?searchQuery=
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/terms/?nc1=f_pr
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/th/
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/th/?nc1=f_ls
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/tr/
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/tr/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/tw/
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/tw/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/vi/
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/vi/?nc1=f_ls
Source: rundll32.exe, 00000003.00000003.2346923026.00000000000D8000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/wzx4
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://console.aws.amazon.com/?nc2=h_m_mc
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://console.aws.amazon.com/billing/home?nc2=h_m_bc
Source: rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://console.aws.amazon.com/console/home
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	String found in binary or memory: https://console.aws.amazon.com/console/home?nc1=f_ct&src=footer-signin-mobile
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://console.aws.amazon.com/iam/home?nc2=h_m_sc#security_credential
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	String found in binary or memory: https://console.aws.amazon.com/support/home/?nc1=f_dr
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://console.aws.amazon.com/support/home/?nc2=h_ql_cu
Source: rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://console.aws.amazon.com/support/home?nc2=h_ql_cu
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	String found in binary or memory: https://d1.awsstatic.com
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	String found in binary or memory: https://dc.ads.linkedin.com/collect/?pid=3038&fmt=gif
Source: rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://devices.amazonaws.com?hp=tile&so-exp=below
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://docs.aws.amazon.com/index.html?nc2=h_ql_doc
Source: rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	String found in binary or memory: https://fls-na.amazon.com/1/action-impressions/1/OE/aws-mktg/action/awsm_:comp_DeprecatedBrowser
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://i18n-string.us-west-2.prod.pricing.aws.a2z.com
Source: rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://pages.awscloud.com/AmazonECSAnywherePreview.html?hp=tile&so-exp=below
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	String found in binary or memory: https://pages.awscloud.com/communication-preferences?trk=homepage
Source: rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://pages.awscloud.com/fico-case-study.html?hp=tile&story=fico
Source: rundll32.exe, 00000003.00000003.2110269066.0000000002C01000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://pages.awscloud.com/zillow-case-study?hp=tile&story=zllw
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://phd.aws.amazon.com/?nc2=h_m_sc
Source: rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?exp=default
Source: rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?exp=default&sc_icampaign=
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	String found in binary or memory: https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc1=f_ct&src=default
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc2=h_ct&src=default
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://portal.aws.amazon.com/gp/aws/manageYourAccount?nc2=h_m_ma
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	String found in binary or memory: https://press.aboutamazon.com/press-releases/aws
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://s0.awsstatic.com
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://s0.awsstatic.com/en_US/nav/v3/panel-content/desktop/index.html
Source: rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://s0.awsstatic.com/en_US/nav/v3/panel-content/mobile/index.html
Source: rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	String found in binary or memory: https://secure.comodo.com/CPS0
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	String found in binary or memory: https://twitter.com/awscloud
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	String found in binary or memory: https://www.amazon.jobs/aws
Source: rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	String found in binary or memory: https://www.honeycode.aws/?&trk=el_a134p000003yC6YAAU&trkCampaign=pac-edm-2020-honeycode-hom
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	String found in binary or memory: https://www.twitch.tv/aws
Source: rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	String found in binary or memory: https://www.youtube.com/user/AmazonWebServices/Cloud/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49170
Source: unknown	Network traffic detected: HTTP traffic on port 49172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49174 -> 443

Source: unknown	HTTPS traffic detected: 192.185.48.186:443 -> 192.168.2.22:49167 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.185.214.87:443 -> 192.168.2.22:49170 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 50.87.146.86:443 -> 192.168.2.22:49171 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.79.62.99:443 -> 192.168.2.22:49172 version: TLS 1.2

E-Banking Fraud:

Yara detected IcedID

Show sources

Source: Yara match	File source: 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2340656783.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2347303586.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2353273837.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2346946398.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2324539894.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2324305529.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2313180906.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2353071481.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2312959484.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2294844286.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2347372775.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2307293375.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2324432561.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2312752671.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2300737619.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2359025585.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2288787523.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2300503265.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2358776145.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2359409712.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2353386032.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2359132350.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2318924371.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2306619325.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2306955212.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2300848573.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2318582057.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2318854529.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2289125454.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2307060040.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2499534316.00000000000DD000.00000004.00000020.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2353251472.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2313048515.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2318832417.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2294985377.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2289046679.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2324458781.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2347597509.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2295056636.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2294958860.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2289433187.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2341036692.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2301147013.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2340962857.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 2864, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 2316, type: MEMORY

System Summary:

Office document tries to convince victim to disable security protection (e.g. to enable ActiveX or Macros)

Show sources

Source: Screenshot number: 4	Screenshot OCR: Enable Editing 11 from the yellow bar above 12 13 Once You have Enable Editing, please elk 14 Ru
Source: Screenshot number: 8	Screenshot OCR: Enable Editing, please click Enable Content 14 1 from the yellow bar above 15 CI c? 16 17 I 18
Source: Screenshot number: 8	Screenshot OCR: Enable Content 14 1 from the yellow bar above 15 CI c? 16 17 I 18 I WHY I CANNOTOPEN THIS DOCU
Source: Document image extraction number: 9	Screenshot OCR: Enable Editing from the yellow bar above Once You have Enable Editing , please click Enable Conten
Source: Document image extraction number: 9	Screenshot OCR: Enable Content from the yellow bar above WHYICANNOTOPEN THIS DOCUMENT? You are using iOS or Andro
Source: Document image extraction number: 15	Screenshot OCR: Enable Editing from the yellow bar above CB Once You have Enable Editing, please click Enable Cont
Source: Document image extraction number: 15	Screenshot OCR: Enable Content from the yellow bar above WHYICANNOTOPEN THIS DOCUMENT? W You are using IDS or And
Source: Screenshot number: 12	Screenshot OCR: Enable Editing 11 1 from the yellow bar above 12 13 ' @ Once You have Enable Editing, please clic
Source: Screenshot number: 12	Screenshot OCR: Enable Content 14 1 from the yellow bar above 15 CI c? 16 17 I 18 I WHY I CANNOTOPEN THIS DOCU

Found Excel 4.0 Macro with suspicious formulas

Show sources

Source: document-1251000362.xlsm	Initial sample: CALL
Source: document-1251000362.xlsm	Initial sample: EXEC

Found abnormal large hidden Excel 4.0 Macro sheet

Show sources

Source: document-1251000362.xlsm

Initial sample: Sheet size: 36917

Office process drops PE file

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\3003[1].gif	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\3003[1].gif	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd3	Jump to dropped file

Source: C:\Windows\System32\rundll32.exe	Code function: 3_2_003B13B8 NtQuerySystemInformation,RtlAllocateHeap,
Source: C:\Windows\System32\rundll32.exe	Code function: 7_2_002B13B8 NtQuerySystemInformation,RtlAllocateHeap,

Source: C:\Windows\System32\rundll32.exe	Code function: 3_2_003B1100
Source: C:\Windows\System32\rundll32.exe	Code function: 3_2_000007FEF40E1000
Source: C:\Windows\System32\rundll32.exe	Code function: 3_2_000007FEF40E1979
Source: C:\Windows\System32\rundll32.exe	Code function: 3_2_000007FEF40E1610
Source: C:\Windows\System32\rundll32.exe	Code function: 7_2_002B1100
Source: C:\Windows\System32\rundll32.exe	Code function: 7_2_000007FEF46AF93A

Source: rundll32.exe, 00000003.00000002.2499932403.0000000001B00000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2184161879.0000000001AC0000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2178177559.0000000001D10000.00000002.00000001.sdmp, rundll32.exe, 00000007.00000002.2499918134.0000000001BD0000.00000002.00000001.sdmp

Binary or memory string: .VBPud<_

Source: classification engine

Classification label: mal100.troj.expl.evad.winXLSM@11/20@871/6

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\Desktop\~$document-1251000362.xlsm

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\CVRCCD0.tmp

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Source: C:\Windows\System32\rundll32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd,DllRegisterServer

Source: document-1251000362.xlsm

Metadefender: Detection: 13%

Source: unknown	Process created: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE 'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd,DllRegisterServer
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd1,DllRegisterServer
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd2,DllRegisterServer
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd3,DllRegisterServer
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd4,DllRegisterServer
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd,DllRegisterServer
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd1,DllRegisterServer
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd2,DllRegisterServer
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd3,DllRegisterServer
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd4,DllRegisterServer

Source: C:\Windows\System32\rundll32.exe	Automated click: OK
Source: C:\Windows\System32\rundll32.exe	Automated click: OK
Source: C:\Windows\System32\rundll32.exe	Automated click: OK

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: document-1251000362.xlsm	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet2.xml.rels
Source: document-1251000362.xlsm	Initial sample: OLE zip file path = xl/media/image4.png
Source: document-1251000362.xlsm	Initial sample: OLE zip file path = xl/media/image3.png
Source: document-1251000362.xlsm	Initial sample: OLE zip file path = xl/media/image1.png
Source: document-1251000362.xlsm	Initial sample: OLE zip file path = xl/media/image2.png
Source: document-1251000362.xlsm	Initial sample: OLE zip file path = xl/printerSettings/printerSettings2.bin
Source: document-1251000362.xlsm	Initial sample: OLE zip file path = xl/printerSettings/printerSettings3.bin

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\3003[1].gif	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\3003[1].gif	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd3	Jump to dropped file

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd			Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd3			Jump to dropped file

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\3003[1].gif	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\3003[1].gif	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd3	Jump to dropped file

Boot Survival:

Drops PE files to the user root directory

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd			Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd3			Jump to dropped file

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion:

Contains functionality to detect hardware virtualization (CPUID execution measurement)

Show sources

Source: C:\Windows\System32\rundll32.exe	Code function: 3_2_003B1B94
Source: C:\Windows\System32\rundll32.exe	Code function: 7_2_002B1B94

Tries to detect virtualization through RDTSC time measurements

Show sources

Source: C:\Windows\System32\rundll32.exe	RDTSC instruction interceptor: First address: 00000000003B1C52 second address: 00000000003B1C73 instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 dec eax 0x00000007 or eax, edx 0x00000009 dec esp 0x0000000a mov eax, eax 0x0000000c xor ecx, ecx 0x0000000e mov eax, 00000001h 0x00000013 cpuid 0x00000015 mov dword ptr [ebp-10h], eax 0x00000018 mov dword ptr [ebp-0Ch], ebx 0x0000001b mov dword ptr [ebp-08h], ecx 0x0000001e mov dword ptr [ebp-04h], edx 0x00000021 rdtsc
Source: C:\Windows\System32\rundll32.exe	RDTSC instruction interceptor: First address: 00000000003B1C73 second address: 00000000003B1C88 instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 dec eax 0x00000007 or eax, edx 0x00000009 dec ecx 0x0000000a sub eax, eax 0x0000000c dec eax 0x0000000d add edi, eax 0x0000000f call dword ptr [00002428h] 0x00000015 jmp 00007F8410A97298h 0x00000017 jmp dword ptr [000925C2h] 0x0000001d dec eax 0x0000001e sub esp, 28h 0x00000021 dec eax 0x00000022 lea ecx, dword ptr [esp+30h] 0x00000026 call dword ptr [00046D21h] 0x0000002c dec eax 0x0000002d mov dword ptr [esp+08h], ecx 0x00000031 dec eax 0x00000032 sub esp, 18h 0x00000035 dec eax 0x00000036 test ecx, ecx 0x00000038 je 00007F8410AD1F7Dh 0x0000003e dec esp 0x00000040 mov eax, dword ptr [00000030h] 0x00000047 xor eax, eax 0x00000049 dec eax 0x0000004a mov dword ptr [esp+08h], eax 0x0000004e dec ecx 0x0000004f mov edx, dword ptr [eax+000014A0h] 0x00000055 dec eax 0x00000056 mov dword ptr [esp+08h], edx 0x0000005a dec eax 0x0000005b test edx, edx 0x0000005d jne 00007F8410AB078Ch 0x00000063 mov eax, C00000BBh 0x00000068 mov dword ptr [esp], eax 0x0000006b jmp 00007F8410A97292h 0x0000006d jmp 00007F8410A97292h 0x0000006f dec eax 0x00000070 mov dword ptr [ecx], edx 0x00000072 dec eax 0x00000073 add esp, 18h 0x00000076 ret 0x00000077 test eax, eax 0x00000079 jns 00007F8410AB71FFh 0x0000007f call dword ptr [00046D5Bh] 0x00000085 dec esp 0x00000086 mov edx, ecx 0x00000088 mov eax, 00000043h
Source: C:\Windows\System32\rundll32.exe	RDTSC instruction interceptor: First address: 00000000003B1C88 second address: 00000000003B1C95 instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 nop 0x00000007 dec eax 0x00000008 or eax, edx 0x0000000a dec eax 0x0000000b mov ecx, eax 0x0000000d rdtsc
Source: C:\Windows\System32\rundll32.exe	RDTSC instruction interceptor: First address: 00000000003B1C95 second address: 00000000003B1C52 instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 dec eax 0x00000007 or eax, edx 0x00000009 dec eax 0x0000000a sub eax, ecx 0x0000000c dec esp 0x0000000d add esi, eax 0x0000000f dec ecx 0x00000010 sub edi, 01h 0x00000013 jne 00007F8410A97234h 0x00000015 call dword ptr [0000245Eh] 0x0000001b jmp 00007F8410A97298h 0x0000001d jmp dword ptr [000925C2h] 0x00000023 dec eax 0x00000024 sub esp, 28h 0x00000027 dec eax 0x00000028 lea ecx, dword ptr [esp+30h] 0x0000002c call dword ptr [00046D21h] 0x00000032 dec eax 0x00000033 mov dword ptr [esp+08h], ecx 0x00000037 dec eax 0x00000038 sub esp, 18h 0x0000003b dec eax 0x0000003c test ecx, ecx 0x0000003e je 00007F8410AD1F7Dh 0x00000044 dec esp 0x00000046 mov eax, dword ptr [00000030h] 0x0000004d xor eax, eax 0x0000004f dec eax 0x00000050 mov dword ptr [esp+08h], eax 0x00000054 dec ecx 0x00000055 mov edx, dword ptr [eax+000014A0h] 0x0000005b dec eax 0x0000005c mov dword ptr [esp+08h], edx 0x00000060 dec eax 0x00000061 test edx, edx 0x00000063 jne 00007F8410AB078Ch 0x00000069 mov eax, C00000BBh 0x0000006e mov dword ptr [esp], eax 0x00000071 jmp 00007F8410A97292h 0x00000073 jmp 00007F8410A97292h 0x00000075 dec eax 0x00000076 mov dword ptr [ecx], edx 0x00000078 dec eax 0x00000079 add esp, 18h 0x0000007c ret 0x0000007d test eax, eax 0x0000007f jns 00007F8410AB71FFh 0x00000085 call dword ptr [00046D5Bh] 0x0000008b dec esp 0x0000008c mov edx, ecx 0x0000008e mov eax, 00000043h
Source: C:\Windows\System32\rundll32.exe	RDTSC instruction interceptor: First address: 00000000002B1C52 second address: 00000000002B1C73 instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 dec eax 0x00000007 or eax, edx 0x00000009 dec esp 0x0000000a mov eax, eax 0x0000000c xor ecx, ecx 0x0000000e mov eax, 00000001h 0x00000013 cpuid 0x00000015 mov dword ptr [ebp-10h], eax 0x00000018 mov dword ptr [ebp-0Ch], ebx 0x0000001b mov dword ptr [ebp-08h], ecx 0x0000001e mov dword ptr [ebp-04h], edx 0x00000021 rdtsc
Source: C:\Windows\System32\rundll32.exe	RDTSC instruction interceptor: First address: 00000000002B1C73 second address: 00000000002B1C88 instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 dec eax 0x00000007 or eax, edx 0x00000009 dec ecx 0x0000000a sub eax, eax 0x0000000c dec eax 0x0000000d add edi, eax 0x0000000f call dword ptr [00002428h] 0x00000015 jmp 00007F8410A97298h 0x00000017 jmp dword ptr [000925C2h] 0x0000001d dec eax 0x0000001e sub esp, 28h 0x00000021 dec eax 0x00000022 lea ecx, dword ptr [esp+30h] 0x00000026 call dword ptr [00046D21h] 0x0000002c dec eax 0x0000002d mov dword ptr [esp+08h], ecx 0x00000031 dec eax 0x00000032 sub esp, 18h 0x00000035 dec eax 0x00000036 test ecx, ecx 0x00000038 je 00007F8410AD1F7Dh 0x0000003e dec esp 0x00000040 mov eax, dword ptr [00000030h] 0x00000047 xor eax, eax 0x00000049 dec eax 0x0000004a mov dword ptr [esp+08h], eax 0x0000004e dec ecx 0x0000004f mov edx, dword ptr [eax+000014A0h] 0x00000055 dec eax 0x00000056 mov dword ptr [esp+08h], edx 0x0000005a dec eax 0x0000005b test edx, edx 0x0000005d jne 00007F8410AB078Ch 0x00000063 mov eax, C00000BBh 0x00000068 mov dword ptr [esp], eax 0x0000006b jmp 00007F8410A97292h 0x0000006d jmp 00007F8410A97292h 0x0000006f dec eax 0x00000070 mov dword ptr [ecx], edx 0x00000072 dec eax 0x00000073 add esp, 18h 0x00000076 ret 0x00000077 test eax, eax 0x00000079 jns 00007F8410AB71FFh 0x0000007f call dword ptr [00046D5Bh] 0x00000085 dec esp 0x00000086 mov edx, ecx 0x00000088 mov eax, 00000043h
Source: C:\Windows\System32\rundll32.exe	RDTSC instruction interceptor: First address: 00000000002B1C88 second address: 00000000002B1C95 instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 nop 0x00000007 dec eax 0x00000008 or eax, edx 0x0000000a dec eax 0x0000000b mov ecx, eax 0x0000000d rdtsc
Source: C:\Windows\System32\rundll32.exe	RDTSC instruction interceptor: First address: 00000000002B1C95 second address: 00000000002B1C52 instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 dec eax 0x00000007 or eax, edx 0x00000009 dec eax 0x0000000a sub eax, ecx 0x0000000c dec esp 0x0000000d add esi, eax 0x0000000f dec ecx 0x00000010 sub edi, 01h 0x00000013 jne 00007F8410A97234h 0x00000015 call dword ptr [0000245Eh] 0x0000001b jmp 00007F8410A97298h 0x0000001d jmp dword ptr [000925C2h] 0x00000023 dec eax 0x00000024 sub esp, 28h 0x00000027 dec eax 0x00000028 lea ecx, dword ptr [esp+30h] 0x0000002c call dword ptr [00046D21h] 0x00000032 dec eax 0x00000033 mov dword ptr [esp+08h], ecx 0x00000037 dec eax 0x00000038 sub esp, 18h 0x0000003b dec eax 0x0000003c test ecx, ecx 0x0000003e je 00007F8410AD1F7Dh 0x00000044 dec esp 0x00000046 mov eax, dword ptr [00000030h] 0x0000004d xor eax, eax 0x0000004f dec eax 0x00000050 mov dword ptr [esp+08h], eax 0x00000054 dec ecx 0x00000055 mov edx, dword ptr [eax+000014A0h] 0x0000005b dec eax 0x0000005c mov dword ptr [esp+08h], edx 0x00000060 dec eax 0x00000061 test edx, edx 0x00000063 jne 00007F8410AB078Ch 0x00000069 mov eax, C00000BBh 0x0000006e mov dword ptr [esp], eax 0x00000071 jmp 00007F8410A97292h 0x00000073 jmp 00007F8410A97292h 0x00000075 dec eax 0x00000076 mov dword ptr [ecx], edx 0x00000078 dec eax 0x00000079 add esp, 18h 0x0000007c ret 0x0000007d test eax, eax 0x0000007f jns 00007F8410AB71FFh 0x00000085 call dword ptr [00046D5Bh] 0x0000008b dec esp 0x0000008c mov edx, ecx 0x0000008e mov eax, 00000043h

Source: C:\Windows\System32\rundll32.exe

Code function: 3_2_003B1B94 rdtsc

Source: C:\Windows\System32\rundll32.exe	Code function: GetAdaptersInfo,GetAdaptersInfo,
Source: C:\Windows\System32\rundll32.exe	Code function: GetAdaptersInfo,GetAdaptersInfo,

Source: C:\Windows\System32\rundll32.exe

Window / User API: threadDelayed 668

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\3003[1].gif			Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\3003[1].gif			Jump to dropped file

Source: C:\Windows\System32\rundll32.exe	Last function: Thread delayed
Source: C:\Windows\System32\rundll32.exe	Last function: Thread delayed
Source: C:\Windows\System32\rundll32.exe	Last function: Thread delayed
Source: C:\Windows\System32\rundll32.exe	Last function: Thread delayed

Source: C:\Windows\System32\rundll32.exe	Thread delayed: delay time: 60000
Source: C:\Windows\System32\rundll32.exe	Thread delayed: delay time: 60000
Source: C:\Windows\System32\rundll32.exe	Thread delayed: delay time: 60000

Source: rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	Binary or memory string: </figure> <h3 id="VMware_Cloud_on_AWS" class="lb-tiny-align-center lb-txt-none lb-txt-white lb-h3 lb-title"> VMware Cloud on AWS</h3>
Source: rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	Binary or memory string: <a style="padding-left:30px; padding-right:30px;" href="/vmware/?hp=tile&tile=hybridsol" target="_blank" rel="noopener">
Source: rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	Binary or memory string: <img src="//d1.awsstatic.com/webteam/homepage/Hybrid%20Solutions/VMWareCloud_Icon.55cb0bcef2c74b55acdb7155e3524e4b5436ec6e.png" alt="VMWareCloud_Icon" title="VMWareCloud_Icon" class="cq-dd-image" />
Source: rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	Binary or memory string: Migrate and extend VMware environments to the AWS Cloud
Source: rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	Binary or memory string: <a href="/vmware/?hp=tile&so-exp=below"> VMware Cloud on AWS<span>Build a hybrid cloud without custom hardware</span> </a>
Source: rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	Binary or memory string: <a style="padding-left:20px; padding-right:45px;" href="/vmware/?hp=tile&tile=hybridsol" target="_blank" rel="noopener">
Source: rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	Binary or memory string: <a href="/rds/vmware/?hp=tile&so-exp=below"> Amazon RDS on VMware<span>Automate on-premises database management</span> </a>

Source: C:\Windows\System32\rundll32.exe

Code function: 3_2_003B1B94 rdtsc

HIPS / PFW / Operating System Protection Evasion:

System process connects to network (likely due to code injection or exploit)

Show sources

Source: C:\Windows\System32\rundll32.exe	Network Connect: 143.204.3.74 187
Source: C:\Windows\System32\rundll32.exe	Domain query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	Domain query: aws.amazon.com
Source: C:\Windows\System32\rundll32.exe	Domain query: usaaforced.fun

Source: rundll32.exe, 00000003.00000002.2499893181.0000000000700000.00000002.00000001.sdmp	Binary or memory string: Program Manager
Source: rundll32.exe, 00000003.00000002.2499893181.0000000000700000.00000002.00000001.sdmp	Binary or memory string: Shell_TrayWnd
Source: rundll32.exe, 00000003.00000002.2499893181.0000000000700000.00000002.00000001.sdmp	Binary or memory string: !Progman

Source: C:\Windows\System32\rundll32.exe

Code function: 3_2_003B1D48 LookupAccountNameW,

Stealing of Sensitive Information:

Yara detected IcedID

Show sources

Source: Yara match	File source: 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2340656783.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2347303586.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2353273837.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2346946398.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2324539894.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2324305529.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2313180906.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2353071481.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2312959484.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2294844286.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2347372775.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2307293375.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2324432561.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2312752671.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2300737619.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2359025585.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2288787523.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2300503265.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2358776145.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2359409712.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2353386032.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2359132350.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2318924371.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2306619325.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2306955212.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2300848573.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2318582057.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2318854529.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2289125454.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2307060040.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2499534316.00000000000DD000.00000004.00000020.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2353251472.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2313048515.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2318832417.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2294985377.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2289046679.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2324458781.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2347597509.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2295056636.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2294958860.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2289433187.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2341036692.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2301147013.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2340962857.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 2864, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 2316, type: MEMORY

Remote Access Functionality:

Yara detected IcedID

Show sources

Source: Yara match	File source: 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2340656783.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2347303586.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2353273837.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2346946398.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2324539894.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2324305529.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2313180906.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2353071481.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2312959484.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2294844286.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2347372775.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2307293375.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2324432561.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2312752671.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2300737619.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2359025585.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2288787523.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2300503265.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2358776145.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2359409712.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2353386032.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2359132350.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2318924371.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2306619325.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2306955212.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2300848573.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2318582057.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2318854529.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2289125454.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2307060040.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2499534316.00000000000DD000.00000004.00000020.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2353251472.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2313048515.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2318832417.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2294985377.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2289046679.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2324458781.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2347597509.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2295056636.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2294958860.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2289433187.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2341036692.00000000000DD000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2301147013.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2340962857.0000000000152000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 2864, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 2316, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Scripting2	Path Interception	Process Injection12	Masquerading121	OS Credential Dumping	Security Software Discovery211	Remote Services	Archive Collected Data1	Exfiltration Over Other Network Medium	Encrypted Channel12	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Exploitation for Client Execution33	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Disable or Modify Tools1	LSASS Memory	Process Discovery1	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Ingress Tool Transfer1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Virtualization/Sandbox Evasion1	Security Account Manager	Virtualization/Sandbox Evasion1	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Non-Application Layer Protocol1	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Process Injection12	NTDS	Application Window Discovery1	Distributed Component Object Model	Input Capture	Scheduled Transfer	Application Layer Protocol12	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Scripting2	LSA Secrets	Account Discovery1	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Rundll321	Cached Domain Credentials	System Owner/User Discovery1	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	Compile After Delivery	DCSync	Remote System Discovery1	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	System Network Configuration Discovery1	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	Masquerading	/etc/passwd and /etc/shadow	File and Directory Discovery1	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction
Supply Chain Compromise	AppleScript	At (Windows)	At (Windows)	Invalid Code Signature	Network Sniffing	System Information Discovery22	Taint Shared Content	Local Data Staging	Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol	File Transfer Protocols			Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
document-1251000362.xlsm	16%	Metadefender		Browse
document-1251000362.xlsm	7%	ReversingLabs

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Label
usaaforced.fun	0%	URL Reputation	safe
usaaforced.fun	0%	URL Reputation	safe
usaaforced.fun	0%	URL Reputation	safe
tvorartificialnature.xyz	0%	URL Reputation	safe
tvorartificialnature.xyz	0%	URL Reputation	safe
tvorartificialnature.xyz	0%	URL Reputation	safe

URLs

Source	Detection	Scanner	Label
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0	0%	URL Reputation	safe
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0	0%	URL Reputation	safe
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0	0%	URL Reputation	safe
http://www.diginotar.nl/cps/pkioverheid0	0%	URL Reputation	safe
http://www.diginotar.nl/cps/pkioverheid0	0%	URL Reputation	safe
http://www.diginotar.nl/cps/pkioverheid0	0%	URL Reputation	safe
https://www.honeycode.aws/?&trk=el_a134p000003yC6YAAU&trkCampaign=pac-edm-2020-honeycode-hom	0%	URL Reputation	safe
https://www.honeycode.aws/?&trk=el_a134p000003yC6YAAU&trkCampaign=pac-edm-2020-honeycode-hom	0%	URL Reputation	safe
https://www.honeycode.aws/?&trk=el_a134p000003yC6YAAU&trkCampaign=pac-edm-2020-honeycode-hom	0%	URL Reputation	safe
http://ocsp.rootg2.amazontrust.com08	0%	URL Reputation	safe
http://ocsp.rootg2.amazontrust.com08	0%	URL Reputation	safe
http://ocsp.rootg2.amazontrust.com08	0%	URL Reputation	safe
http://usaaforced.fun/	0%	URL Reputation	safe
http://usaaforced.fun/	0%	URL Reputation	safe
http://usaaforced.fun/	0%	URL Reputation	safe
http://usaaforced.fun/Q	0%	Avira URL Cloud	safe
http://crl.sca1b.amazontrust.com/sca1b.crl0	0%	URL Reputation	safe
http://crl.sca1b.amazontrust.com/sca1b.crl0	0%	URL Reputation	safe
http://crl.sca1b.amazontrust.com/sca1b.crl0	0%	URL Reputation	safe
http://tvorartificialnature.xyz/	0%	URL Reputation	safe
http://tvorartificialnature.xyz/	0%	URL Reputation	safe
http://tvorartificialnature.xyz/	0%	URL Reputation	safe
http://ocsp.sca1b.amazontrust.com06	0%	URL Reputation	safe
http://ocsp.sca1b.amazontrust.com06	0%	URL Reputation	safe
http://ocsp.sca1b.amazontrust.com06	0%	URL Reputation	safe
http://crl.rootca1.amazontrust.com/rootca1.crl0	0%	URL Reputation	safe
http://crl.rootca1.amazontrust.com/rootca1.crl0	0%	URL Reputation	safe
http://crl.rootca1.amazontrust.com/rootca1.crl0	0%	URL Reputation	safe
http://ocsp.rootca1.amazontrust.com0:	0%	Avira URL Cloud	safe
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	0%	URL Reputation	safe
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	0%	URL Reputation	safe
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	0%	URL Reputation	safe
http://usaaforced.fun/k	0%	Avira URL Cloud	safe
http://crl.rootg2.amazontrust.com/rootg2.crl0	0%	URL Reputation	safe
http://crl.rootg2.amazontrust.com/rootg2.crl0	0%	URL Reputation	safe
http://crl.rootg2.amazontrust.com/rootg2.crl0	0%	URL Reputation	safe
http://o.ss2.us/0	0%	URL Reputation	safe
http://o.ss2.us/0	0%	URL Reputation	safe
http://o.ss2.us/0	0%	URL Reputation	safe
http://crt.rootca1.am	0%	Avira URL Cloud	safe
http://ocsp.entrust.net03	0%	URL Reputation	safe
http://ocsp.entrust.net03	0%	URL Reputation	safe
http://ocsp.entrust.net03	0%	URL Reputation	safe
http://crt.rootg2.amazontrust.com/rootg2.cer0=	0%	URL Reputation	safe
http://crt.rootg2.amazontrust.com/rootg2.cer0=	0%	URL Reputation	safe
http://crt.rootg2.amazontrust.com/rootg2.cer0=	0%	URL Reputation	safe
http://crt.comod	0%	Avira URL Cloud	safe
http://www.icra.org/vocabulary/.	0%	URL Reputation	safe
http://www.icra.org/vocabulary/.	0%	URL Reputation	safe
http://www.icra.org/vocabulary/.	0%	URL Reputation	safe
http://www.%s.comPA	0%	URL Reputation	safe
http://www.%s.comPA	0%	URL Reputation	safe
http://www.%s.comPA	0%	URL Reputation	safe
http://ocsp.entrust.net0D	0%	URL Reputation	safe
http://ocsp.entrust.net0D	0%	URL Reputation	safe
http://ocsp.entrust.net0D	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
metaflip.io	192.185.48.186	true	false		unknown
tajushariya.com	199.79.62.99	true	false		unknown
columbia.aula-web.net	50.87.146.86	true	false		unknown
dr49lng3n1n2s.cloudfront.net	143.204.3.74	true	false		high
partsapp.com.br	192.185.214.87	true	false		unknown
agenbolatermurah.com	unknown	unknown	true		unknown
usaaforced.fun	unknown	unknown	true	0%, URL Reputation 0%, URL Reputation 0%, URL Reputation	unknown
tvorartificialnature.xyz	unknown	unknown	true	0%, URL Reputation 0%, URL Reputation 0%, URL Reputation	unknown
aws.amazon.com	unknown	unknown	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://twitter.com/awscloud	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com/libra-css/images/logo	rundll32.exe, 00000003.00000003.2110513457.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174357995.0000000000436000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/terms/?nc1=f_pr	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	false		high
https://dc.ads.linkedin.com/collect/?pid=3038&fmt=gif	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	false		high
https://s0.awsstatic.com/en_US/nav/v3/panel-content/mobile/index.html	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com/plc/js/1.0.108/plc	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/cn/	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	false		high
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0	rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.diginotar.nl/cps/pkioverheid0	rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://a0.awsstatic.com/libra-css/images	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com/psf/null	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/ar/	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	false		high
https://www.honeycode.aws/?&trk=el_a134p000003yC6YAAU&trkCampaign=pac-edm-2020-honeycode-hom	rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://pages.awscloud.com/zillow-case-study?hp=tile&story=zllw	rundll32.exe, 00000003.00000003.2110269066.0000000002C01000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://pages.awscloud.com/communication-preferences?trk=homepage	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	false		high
http://ocsp.rootg2.amazontrust.com08	rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://aws.amazon.com/cn/?nc1=h_ls	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc1=f_ct&src=default	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	false		high
http://usaaforced.fun/	rundll32.exe, 00000003.00000002.2499572164.00000000000F9000.00000004.00000020.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://aws.amazon.com/ru/	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/tw/?nc1=h_ls	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://fls-na.amazon.com/1/action-impressions/1/OE/aws-mktg/action/awsm_:comp_DeprecatedBrowser	rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	false		high
https://i18n-string.us-west-2.prod.pricing.aws.a2z.com	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/ko/	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/ru/?nc1=h_ls	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
http://usaaforced.fun/Q	rundll32.exe, 00000003.00000002.2499572164.00000000000F9000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
https://a0.awsstatic.com/libra-css/images/site/fav/favicon.ico	rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/es/	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	false		high
http://crl.sca1b.amazontrust.com/sca1b.crl0	rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://a0.awsstatic.com/target/1.0.113/aws-target-mediator.js	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://docs.aws.amazon.com/index.html?nc2=h_ql_doc	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
http://tvorartificialnature.xyz/	rundll32.exe, 00000007.00000003.2224343749.00000000031E1000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2232322981.00000000031F6000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2177213287.000000000043A000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://aws.amazon.com/ar/?nc1=h_ls	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/k	rundll32.exe, 00000003.00000003.2110327677.00000000000F8000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/th/	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	false		high
http://www.windows.com/pctv.	rundll32.exe, 00000007.00000002.2499918134.0000000001BD0000.00000002.00000001.sdmp	false		high
https://a0.awsstatic.com/pricing-calculator/js/1.0.2	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/marketplace/?nc2=h_mo	rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
http://ocsp.sca1b.amazontrust.com06	rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://amazon.com/	rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	false		high
https://a0.awsstatic.com/libra-css/images/logos/aws_logo_smile_179x109.png	rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	false		high
https://console.aws.amazon.com/support/home/?nc2=h_ql_cu	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://aws.amazon.com/search/	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://console.aws.amazon.com/iam/home?nc2=h_m_sc#security_credential	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/?nc2=h_lg	rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
http://ocsp.rootca1.amazontrust.com0:	rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
https://console.aws.amazon.com/support/home/?nc1=f_dr	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com/aws-blog/1.0.46/js	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/fr/	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	false		high
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	rundll32.exe, 00000003.00000002.2500139731.0000000001CE7000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2184373019.0000000001CA7000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2178409552.0000000001EF7000.00000002.00000001.sdmp, rundll32.exe, 00000007.00000002.2500122657.0000000001DB7000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://console.aws.amazon.com/console/home?nc1=f_ct&src=footer-signin-mobile	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/vi/	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	false		high
https://www.twitch.tv/aws	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	false		high
http://usaaforced.fun/k	rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://aws.amazon.com/marketplace/?nc2=h_ql_mp	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/search	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
http://crl.rootg2.amazontrust.com/rootg2.crl0	rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.	rundll32.exe, 00000003.00000002.2501158491.0000000002DB0000.00000002.00000001.sdmp	false		high
https://a0.awsstatic.com/da/js/1.0.47/aws-da.js	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/tw/	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/tr/?nc1=h_ls	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://console.aws.amazon.com/?nc2=h_m_mc	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/fr/?nc1=h_ls	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
http://o.ss2.us/0	rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://aws.amazon.com/search/?searchQuery=	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com/libra-search/1.0.13/js	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
http://crt.rootca1.am	rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
https://aws.amazon.com/privacy/?nc1=f_pr	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/pt/?nc1=h_ls	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/jp/?nc1=h_ls	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
http://crl.entrust.net/2048ca.crl0	rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	false		high
https://aws.amazon.com/marketplace?aws=hp	rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/	rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
http://www.msnbc.com/news/ticker.txt	rundll32.exe, 00000003.00000002.2499932403.0000000001B00000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2184161879.0000000001AC0000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2178177559.0000000001D10000.00000002.00000001.sdmp, rundll32.exe, 00000007.00000002.2499918134.0000000001BD0000.00000002.00000001.sdmp	false		high
https://a0.awsstatic.com/libra-css/images/site/touch-icon-ipad-144-smile.png	rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com/s_code/js/3.0/awshome_s_code.js	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/podcasts/aws-podcast/	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp	false		high
http://ocsp.entrust.net03	rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://aws.amazon.com/jp/	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	false		high
http://crt.rootg2.amazontrust.com/rootg2.cer0=	rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://aws.amazon.com/pt/	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/?nc1=h_ls	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://s0.awsstatic.com/en_US/nav/v3/panel-content/desktop/index.html	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
http://crt.comod	rundll32.exe, 00000007.00000003.2176468982.00000000003B7000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://aws.amazon.com/es/?nc1=h_ls	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com/libra-css/images/logoo	rundll32.exe, 00000007.00000003.2174357995.0000000000436000.00000004.00000001.sdmp	false		high
http://www.icra.org/vocabulary/.	rundll32.exe, 00000003.00000002.2500139731.0000000001CE7000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2184373019.0000000001CA7000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2178409552.0000000001EF7000.00000002.00000001.sdmp, rundll32.exe, 00000007.00000002.2500122657.0000000001DB7000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://d1.awsstatic.com	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/de/	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp	false		high
http://investor.msn.com/	rundll32.exe, 00000003.00000002.2499932403.0000000001B00000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2184161879.0000000001AC0000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2178177559.0000000001D10000.00000002.00000001.sdmp, rundll32.exe, 00000007.00000002.2499918134.0000000001BD0000.00000002.00000001.sdmp	false		high
https://phd.aws.amazon.com/?nc2=h_m_sc	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com/libra/1.0.376/librastandardlib	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/id/?nc1=h_ls	rundll32.exe, 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2220091217.0000000000439000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com/libra-css/images/logos/aws_logo_smile_1200x630.png	rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
http://www.%s.comPA	rundll32.exe, 00000003.00000002.2501158491.0000000002DB0000.00000002.00000001.sdmp, rundll32.exe, 00000007.00000002.2501033372.0000000002C60000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	low
https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc2=h_ct&src=default	rundll32.exe, 00000003.00000003.2110319662.000000000015C000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com	rundll32.exe, 00000007.00000003.2174367394.0000000000443000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high
http://ocsp.entrust.net0D	rundll32.exe, 00000003.00000003.2312867530.00000000000F9000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000002.2499723891.00000000003B7000.00000004.00000020.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://pages.awscloud.com/fico-case-study.html?hp=tile&story=fico	rundll32.exe, 00000003.00000002.2501076885.0000000002C00000.00000004.00000001.sdmp, rundll32.exe, 00000007.00000003.2174303678.00000000031C9000.00000004.00000001.sdmp	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
50.87.146.86	columbia.aula-web.net	United States	46606	UNIFIEDLAYER-AS-1US	false
199.79.62.99	tajushariya.com	United States	394695	PUBLIC-DOMAIN-REGISTRYUS	false
192.185.214.87	partsapp.com.br	United States	46606	UNIFIEDLAYER-AS-1US	false
143.204.3.74	dr49lng3n1n2s.cloudfront.net	United States	16509	AMAZON-02US	false
192.185.48.186	metaflip.io	United States	46606	UNIFIEDLAYER-AS-1US	false

Private

IP
192.168.2.255

General Information

Joe Sandbox Version:	31.0.0 Emerald
Analysis ID:	382870
Start date:	06.04.2021
Start time:	19:34:43
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 9m 11s
Hypervisor based Inspection enabled:	false
Report type:	light
Sample file name:	document-1251000362.xlsm
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 7 x64 SP1 with Office 2010 SP2 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.expl.evad.winXLSM@11/20@871/6
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 24.5% (good quality ratio 13.3%) Quality average: 41.9% Quality standard deviation: 42.4%
HCA Information:	Successful, ratio: 75% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .xlsm Found Word or Excel or PowerPoint or XPS Viewer Found warning dialog Click Ok Attach to Office via COM Scroll down Close Viewer
Warnings:	Show All Exclude process from analysis (whitelisted): dllhost.exe, WmiPrvSE.exe, svchost.exe TCP Packets have been reduced to 100 Excluded IPs from analysis (whitelisted): 192.35.177.64, 2.20.142.210, 2.20.142.209, 205.185.216.10, 205.185.216.42 Excluded domains from analysis (whitelisted): au.download.windowsupdate.com.edgesuite.net, audownload.windowsupdate.nsatc.net, au.download.windowsupdate.com.hwcdn.net, apps.digsigtrust.com, ctldl.windowsupdate.com, a767.dscg3.akamai.net, cds.d2s7q6s2.hwcdn.net, apps.identrust.com, au-bg-shim.trafficmanager.net Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtOpenKeyEx calls found. Report size getting too big, too many NtQueryValueKey calls found. VT rate limit hit for: /opt/package/joesandbox/database/analysis/382870/sample/document-1251000362.xlsm

Simulations

Behavior and APIs

Time	Type	Description
19:35:54	API Interceptor	859x Sleep call for process: rundll32.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
50.87.146.86	document-1848152474.xlsm	Get hash	malicious	Browse
	document-959193245.xlsm	Get hash	malicious	Browse
	document-530268537.xlsm	Get hash	malicious	Browse
	document-1644845700.xlsm	Get hash	malicious	Browse
	document-1706683968.xlsm	Get hash	malicious	Browse
	document-968581210.xlsm	Get hash	malicious	Browse
	document-773551118.xlsm	Get hash	malicious	Browse
	document-804885672.xlsm	Get hash	malicious	Browse
	document-1794368715.xlsm	Get hash	malicious	Browse
	document-1154632083.xlsm	Get hash	malicious	Browse
	document-2096492671.xlsm	Get hash	malicious	Browse
	document-1987108866.xlsm	Get hash	malicious	Browse
	document-1862023781.xlsm	Get hash	malicious	Browse
	document-1128349241.xlsm	Get hash	malicious	Browse
	document-1467924102.xlsm	Get hash	malicious	Browse
	document-229569004.xlsm	Get hash	malicious	Browse
	document-655115812.xlsm	Get hash	malicious	Browse
	document-2101880844.xlsm	Get hash	malicious	Browse
	document-1008963425.xlsm	Get hash	malicious	Browse
	document-1369672464.xlsm	Get hash	malicious	Browse
199.79.62.99	TALQ_812421154768_10062020.vbs	Get hash	malicious	Browse	digitalschoolfaridabad.in/courses/images/parallax/mjogqxakfxg/8888888.jpg
199.79.62.99	TALQ_46998970_10062020.vbs	Get hash	malicious	Browse	digitalschoolfaridabad.in/courses/images/parallax/mjogqxakfxg/8888888.jpg
192.185.214.87	document-1848152474.xlsm	Get hash	malicious	Browse
	document-959193245.xlsm	Get hash	malicious	Browse
	document-530268537.xlsm	Get hash	malicious	Browse
	document-1644845700.xlsm	Get hash	malicious	Browse
	document-1706683968.xlsm	Get hash	malicious	Browse
	document-968581210.xlsm	Get hash	malicious	Browse
	document-773551118.xlsm	Get hash	malicious	Browse
	document-804885672.xlsm	Get hash	malicious	Browse
	document-1794368715.xlsm	Get hash	malicious	Browse
	document-1154632083.xlsm	Get hash	malicious	Browse
	document-2096492671.xlsm	Get hash	malicious	Browse
	document-1987108866.xlsm	Get hash	malicious	Browse
	document-1862023781.xlsm	Get hash	malicious	Browse
	document-1128349241.xlsm	Get hash	malicious	Browse
	document-1467924102.xlsm	Get hash	malicious	Browse
	document-229569004.xlsm	Get hash	malicious	Browse
	document-655115812.xlsm	Get hash	malicious	Browse
	document-2101880844.xlsm	Get hash	malicious	Browse
	document-1008963425.xlsm	Get hash	malicious	Browse
	document-1369672464.xlsm	Get hash	malicious	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
columbia.aula-web.net	document-1848152474.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-959193245.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-530268537.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-1644845700.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-1706683968.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-968581210.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-773551118.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-804885672.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-1794368715.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-1154632083.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-2096492671.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-1987108866.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-1862023781.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-1128349241.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-1467924102.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-229569004.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-655115812.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-2101880844.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-1008963425.xlsm	Get hash	malicious	Browse	50.87.146.86
	document-1369672464.xlsm	Get hash	malicious	Browse	50.87.146.86
tajushariya.com	document-1848152474.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-959193245.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-530268537.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1644845700.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1706683968.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-968581210.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-773551118.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-804885672.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1794368715.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1154632083.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-2096492671.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1987108866.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1862023781.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1128349241.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1467924102.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-229569004.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-655115812.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-2101880844.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1008963425.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1369672464.xlsm	Get hash	malicious	Browse	199.79.62.99
metaflip.io	document-1848152474.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-959193245.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-530268537.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1644845700.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1706683968.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-968581210.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-773551118.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-804885672.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1794368715.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1154632083.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-2096492671.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1987108866.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1862023781.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1128349241.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1467924102.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-229569004.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-655115812.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-2101880844.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1008963425.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1369672464.xlsm	Get hash	malicious	Browse	192.185.48.186

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
UNIFIEDLAYER-AS-1US	catalogue-41.xlsb	Get hash	malicious	Browse	108.167.180.111
	documents-1660683173.xlsm	Get hash	malicious	Browse	192.185.56.250
	06iKnPFk8Y.dll	Get hash	malicious	Browse	162.241.54.59
	06iKnPFk8Y.dll	Get hash	malicious	Browse	162.241.54.59
	ddff.exe	Get hash	malicious	Browse	108.179.235.108
	PowerShell_Input.ps1	Get hash	malicious	Browse	162.241.61.203
	New PO#700-20-HDO410444RF217,pdf.exe	Get hash	malicious	Browse	192.185.122.118
	Purchase Order.9000.scan.pdf...exe	Get hash	malicious	Browse	162.241.148.243
	document-1848152474.xlsm	Get hash	malicious	Browse	192.185.48.186
	7z7Q51Y8Xd.dll	Get hash	malicious	Browse	162.241.54.59
	pySsaGoiCT.dll	Get hash	malicious	Browse	162.241.54.59
	QOpv1PykFc.dll	Get hash	malicious	Browse	162.241.54.59
	S4caD0RhXL.dll	Get hash	malicious	Browse	162.241.54.59
	pH8YW11W1x.dll	Get hash	malicious	Browse	162.241.54.59
	7z7Q51Y8Xd.dll	Get hash	malicious	Browse	162.241.54.59
	pySsaGoiCT.dll	Get hash	malicious	Browse	162.241.54.59
	QOpv1PykFc.dll	Get hash	malicious	Browse	162.241.54.59
	S4caD0RhXL.dll	Get hash	malicious	Browse	162.241.54.59
	pH8YW11W1x.dll	Get hash	malicious	Browse	162.241.54.59
	CI-2100403L.exe	Get hash	malicious	Browse	192.254.180.165
PUBLIC-DOMAIN-REGISTRYUS	document-1055791644.xls	Get hash	malicious	Browse	103.50.162.157
	catalogue-41.xlsb	Get hash	malicious	Browse	5.100.152.162
	documents-1660683173.xlsm	Get hash	malicious	Browse	111.118.215.222
	swift Copy.xls.exe	Get hash	malicious	Browse	208.91.199.225
	document-1848152474.xlsm	Get hash	malicious	Browse	199.79.62.99
	FN vw Safety 1 & 2.exe	Get hash	malicious	Browse	208.91.199.223
	MV TBN.uslfze.exe	Get hash	malicious	Browse	208.91.199.224
	purchase order.exe	Get hash	malicious	Browse	208.91.199.223
	AD1-2001028L.exe	Get hash	malicious	Browse	208.91.199.224
	AD1-2001028L (2).exe	Get hash	malicious	Browse	208.91.199.224
	document-1048628209.xls	Get hash	malicious	Browse	5.100.155.169
	document-1771131239.xls	Get hash	malicious	Browse	5.100.155.169
	document-1370071295.xls	Get hash	malicious	Browse	5.100.155.169
	document-69564892.xls	Get hash	malicious	Browse	5.100.155.169
	document-1320073816.xls	Get hash	malicious	Browse	5.100.155.169
	document-184653858.xls	Get hash	malicious	Browse	5.100.155.169
	document-1729033050.xls	Get hash	malicious	Browse	5.100.155.169
	document-1268722929.xls	Get hash	malicious	Browse	5.100.155.169
	document-540475316.xls	Get hash	malicious	Browse	5.100.155.169
	document-1456634656.xls	Get hash	malicious	Browse	5.100.155.169
UNIFIEDLAYER-AS-1US	catalogue-41.xlsb	Get hash	malicious	Browse	108.167.180.111
	documents-1660683173.xlsm	Get hash	malicious	Browse	192.185.56.250
	06iKnPFk8Y.dll	Get hash	malicious	Browse	162.241.54.59
	06iKnPFk8Y.dll	Get hash	malicious	Browse	162.241.54.59
	ddff.exe	Get hash	malicious	Browse	108.179.235.108
	PowerShell_Input.ps1	Get hash	malicious	Browse	162.241.61.203
	New PO#700-20-HDO410444RF217,pdf.exe	Get hash	malicious	Browse	192.185.122.118
	Purchase Order.9000.scan.pdf...exe	Get hash	malicious	Browse	162.241.148.243
	document-1848152474.xlsm	Get hash	malicious	Browse	192.185.48.186
	7z7Q51Y8Xd.dll	Get hash	malicious	Browse	162.241.54.59
	pySsaGoiCT.dll	Get hash	malicious	Browse	162.241.54.59
	QOpv1PykFc.dll	Get hash	malicious	Browse	162.241.54.59
	S4caD0RhXL.dll	Get hash	malicious	Browse	162.241.54.59
	pH8YW11W1x.dll	Get hash	malicious	Browse	162.241.54.59
	7z7Q51Y8Xd.dll	Get hash	malicious	Browse	162.241.54.59
	pySsaGoiCT.dll	Get hash	malicious	Browse	162.241.54.59
	QOpv1PykFc.dll	Get hash	malicious	Browse	162.241.54.59
	S4caD0RhXL.dll	Get hash	malicious	Browse	162.241.54.59
	pH8YW11W1x.dll	Get hash	malicious	Browse	162.241.54.59
	CI-2100403L.exe	Get hash	malicious	Browse	192.254.180.165

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
05af1f5ca1b87cc9cc9b25185115607d	NEW LEMA PO 652872-21.ppt	Get hash	malicious	Browse	143.204.3.74
	final po PP-11164.ppt	Get hash	malicious	Browse	143.204.3.74
	OrderSheet.pps	Get hash	malicious	Browse	143.204.3.74
	document-1848152474.xlsm	Get hash	malicious	Browse	143.204.3.74
	Reports-018315.xlsm	Get hash	malicious	Browse	143.204.3.74
	Reports-018315.xlsm	Get hash	malicious	Browse	143.204.3.74
	Sample.doc	Get hash	malicious	Browse	143.204.3.74
	Sample.doc	Get hash	malicious	Browse	143.204.3.74
	documents-575751901.xlsm	Get hash	malicious	Browse	143.204.3.74
	278.xlsm	Get hash	malicious	Browse	143.204.3.74
	1449.xlsm	Get hash	malicious	Browse	143.204.3.74
	documents-1987093434.xlsm	Get hash	malicious	Browse	143.204.3.74
	1737.xlsm	Get hash	malicious	Browse	143.204.3.74
	492.xlsm	Get hash	malicious	Browse	143.204.3.74
	3205.xlsm	Get hash	malicious	Browse	143.204.3.74
	1984.xlsm	Get hash	malicious	Browse	143.204.3.74
	2503.xlsm	Get hash	malicious	Browse	143.204.3.74
	3032.xlsm	Get hash	malicious	Browse	143.204.3.74
	937.xlsm	Get hash	malicious	Browse	143.204.3.74
	documents-760030714.xlsm	Get hash	malicious	Browse	143.204.3.74
7dcce5b76c8b17472d024758970a406b	FARASIS.xlsx	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	NEW LEMA PO 652872-21.ppt	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1055791644.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	final po PP-11164.ppt	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	OrderSheet.pps	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1848152474.xlsm	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	appraisal document.doc	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1048628209.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1771131239.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1370071295.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-69564892.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1320073816.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-184653858.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1729033050.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1268722929.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-540475316.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1456634656.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-12162673.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-997754822.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1376447212.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	Microsoft Cabinet archive data, 58596 bytes, 1 file
Category:	dropped
Size (bytes):	58596
Entropy (8bit):	7.995478615012125
Encrypted:	true
SSDEEP:	1536:J7r25qSSheImS2zyCvg3nB/QPsBbgwYkGrLMQ:F2qSSwIm1m/QEBbgb1oQ
MD5:	61A03D15CF62612F50B74867090DBE79
SHA1:	15228F34067B4B107E917BEBAF17CC7C3C1280A8
SHA-256:	F9E23DC21553DAA34C6EB778CD262831E466CE794F4BEA48150E8D70D3E6AF6D
SHA-512:	5FECE89CCBBF994E4F1E3EF89A502F25A72F359D445C034682758D26F01D9F3AA20A43010B9A87F2687DA7BA201476922AA46D4906D442D56EB59B2B881259D3
Malicious:	false
Reputation:	high, very likely benign file
Preview:	MSCF............,...................I........T........bR. .authroot.stl...s~.4..CK..8T....c_.d....A.K......&.-.J...."Y...$E.KB..D...D.....3.n..u.............\|..=H4..c&.......f.,..=..-....p2.:..`HX......b.......Di.a......M.....4.....i..}..:~N.<..>..V..CX......B......,.q.M.....HB..E~Q...)..Gax../..}7..f......O0...x..k..ha...y.K.0.h..(....{2Y.].g...yw..\|0.+?.`-../.xvy..e......w.+^...w\|.Q.k.9&.Q.EzS.f......>?w.G.......v.F......A......-P.$.Y...u....Z..g..>.0&.y.(..<.].`>... ..R.q...g.Y..s.y.B..B....Z.4.<?.R....1.8.<.=.8..[a.s.......add..).NtX....r....R.&W4.5]....k.._iK..xzW.w.M.>,5.}..}.tLX5Ls3_..).!..X.~...%.B.....YS9m.,.....BV`.Cee.....?......:.x-.q9j...Yps..W...1.A<.X.O....7.ei..a\.~=X....HN.#....h,....y...\.br.8.y"k).....~B..v....GR.g\|.z..+.D8.m..F .h............ItNs.\....s..,.f`D...]..k...:9..lk.<D....u...........[...*.wY.O....P?.U.l....Fc.ObLq......Fvk..G9.8..!..\T:K`.......'.3......;.u..h...uD..^.bS...r........j..j .=...s .FxV....g.c.s..9.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	893
Entropy (8bit):	7.366016576663508
Encrypted:	false
SSDEEP:	24:hBntmDvKUQQDvKUr7C5fpqp8gPvXHmXvponXux:3ntmD5QQD5XC5RqHHXmXvp++x
MD5:	D4AE187B4574036C2D76B6DF8A8C1A30
SHA1:	B06F409FA14BAB33CBAF4A37811B8740B624D9E5
SHA-256:	A2CE3A0FA7D2A833D1801E01EC48E35B70D84F3467CC9F8FAB370386E13879C7
SHA-512:	1F44A360E8BB8ADA22BC5BFE001F1BABB4E72005A46BC2A94C33C4BD149FF256CCE6F35D65CA4F7FC2A5B9E15494155449830D2809C8CF218D0B9196EC646B0C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	0..y...H.........j0..f...1.0....H.........N0..J0..2.......D....'..09...@k0....H........0?1$0"..U....Digital Signature Trust Co.1.0...U....DST Root CA X30...000930211219Z..210930140115Z0?1$0"..U....Digital Signature Trust Co.1.0...U....DST Root CA X30.."0....H.............0..........P..W..be......,k0.[...}.@......3vI.?!I..N..>H.e...!.e..2....w..{........s.z..2..~..0....8.y.1.P..e.Qc...a.Ka..Rk...K.(.H......>.... .[.....p....%.tr.{j.4.0...h.{T....Z...=d.....Ap..r.&.8U9C....\@........%.......:..n.>..\..<.i.....)W..=....]......B0@0...U.......0....0...U...........0...U.........{,q...K.u...`...0....H...............,...\...(f7:...?K.... ]..YD.>.>..K.t.....t..~.....K. D....}..j.....N..:.pI...........:^H...X._..Z.....Y..n......f3.Y[...sG.+..7H..VK....r2...D.SrmC.&H.Rg.X..gvqx...V..9$1....Z0G..P.......dc`........}...=2.e..\|.Wv..(9..e...w.j..w.......)...55.1.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	326
Entropy (8bit):	3.123116142976021
Encrypted:	false
SSDEEP:	6:kKtskwTJ6YN+SkQlPlEGYRMY9z+4KlDA3RUe0ht:mkwTJ6HkPlE99SNxAhUe0ht
MD5:	65FDEB8FFAD4D99DAD4952E672875870
SHA1:	2EDD7085F937534FAF45EB269432653231B21FA5
SHA-256:	B61FD6EA338CFAFF4DB22BB7BA45912209484A2F2E6CF7284DBF75DBDA4828E7
SHA-512:	2DECB5D71CBEBAEF0CECB864C00FEAF314C467C9B78C3D612FA37BBEF9DDDDFAC1519BF988995A7A1F37C30FBAABD4E39FE5A8AD0BD923818D711CED1FFD6545
Malicious:	false
Reputation:	low
Preview:	p...... ..........].V+..(....................................................... ...................$...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".0.d.8.f.4.f.3.f.6.f.d.7.1.:.0."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	252
Entropy (8bit):	3.0294634724686764
Encrypted:	false
SSDEEP:	3:kkFklC+ltfllXlE/QhzllPlzRkwWBARLNDU+ZMlKlBkvclcMlVHblB1UAYpFit:kKMnliBAIdQZV7eAYLit
MD5:	532C2C5013FA0AEB515621E3AE61BEDB
SHA1:	4356A124AB1EC90E2EC8E1295E5363602CEBFD95
SHA-256:	32DD398387EF5B5EA8442A55E8297EBC9854BB8E64849C2157A9AF89C57482FE
SHA-512:	344A73070AB4616F7E3684FFA0421DCE43AC960D5EEF8FC85CDB12D3C590428B786A1DEE55C1DB5A24A67346470E948D63232784F4CBD6B75EF9F163D263678B
Malicious:	false
Reputation:	low
Preview:	p...... ....`...S.).V+..(....................................................... ........u.........(...........}...h.t.t.p.:././.a.p.p.s...i.d.e.n.t.r.u.s.t...c.o.m./.r.o.o.t.s./.d.s.t.r.o.o.t.c.a.x.3...p.7.c...".3.7.d.-.5.9.e.7.6.b.3.c.6.4.b.c.0."...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\3003[1].gif Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PE32+ executable (DLL) (native) x86-64, for MS Windows
Category:	downloaded
Size (bytes):	46867
Entropy (8bit):	5.063576400987857
Encrypted:	false
SSDEEP:	768:RHppffnqCuZgKEq2OqmBhw9+eyA/Dj74zZ/mgxH7Wgagg1nXFJBMq/umJUZp:NDqvHEbsBneyAbniZPWznfBL/nM
MD5:	F029290EA011A5F9C6F7880F35D23A1B
SHA1:	384FB5A582A4AA67E0BE9716D5E260258E2FA3B2
SHA-256:	A7B8E0DF5276942405D485EB808FA19B24E42D9758CACF1515028122755C2513
SHA-512:	DC2525087DDD8AAC2DCE2C74D5C32A93C474F7C9692C8ED7FBF26B106C58734DB16B2DEE0892FDAC51CCB8ACE4A3C8F1EFBD4B65EAA5F9ADAB4A15E908168CA7
Malicious:	true
Reputation:	low
IE Cache URL:	https://metaflip.io/ds/3003.gif
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......%.o.a...a...a...q...d...q...`...q...`...Richa...........................PE..d.....c`.........." ................................................................O:....`..........................................!..L............................................ ...............................................................................text...2........................... ..`.rdata....... ......................@..@.data...X@...0...B..................@....pdata...............Z..............@..@.ndata...O.......P...\..............@...................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\3003[1].gif Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	downloaded
Size (bytes):	255317
Entropy (8bit):	5.733275351438473
Encrypted:	false
SSDEEP:	3072:OCHCrCVCVC/CtCczk8PkyGtzjU0c28vPr:Wk8PpIzw0c2sP
MD5:	94233B243340F796260350A45DBC7D46
SHA1:	EA8F87964CE33A381F8779AD212907FC30CC470F
SHA-256:	BF4D7AAF16DD3806DB0C54096EE9CAF23316C2A6C9D1F6ABC55B39215E88F685
SHA-512:	ACD727A7CE66D3170A828249F563BDF38177648E17548A1AE0FB4E0821E9C0EB8177919C880C7AE43841F31285BA7899EF75578C84860EE9F1A20EF8A8EBD1AF
Malicious:	true
Reputation:	low
IE Cache URL:	https://tajushariya.com/ds/3003.gif
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........dhF.............g.......................c.......c......Rich............................PE..d.....e`.........." .........................................................`............`.............................................d...d...P............P..........................................................................p............................text.............................. ..`.rdata...T.......V..................@..@.data...P@.......B..................@....pdata.......P......................@..@........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\4AE58898.png Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	557
Entropy (8bit):	7.343009301479381
Encrypted:	false
SSDEEP:	12:6v/7aLMZ5I9TvSb5Lr6U7+uHK2yJtNJTNSB0qNMQCvGEvfvqVFsSq6ixPT3Zf:Ng8SdCU7+uqF20qNM1dvfSviNd
MD5:	A516B6CB784827C6BDE58BC9D341C1BD
SHA1:	9D602E7248E06FF639E6437A0A16EA7A4F9E6C73
SHA-256:	EF8F7EDB6BA0B5ACEC64543A0AF1B133539FFD439F8324634C3F970112997074
SHA-512:	C297A61DA1D7E7F247E14D188C425D43184139991B15A5F932403EE68C356B01879B90B7F96D55B0C9B02F6B9BFAF4E915191683126183E49E668B6049048D35
Malicious:	false
Preview:	.PNG........IHDR.............o.......sRGB.........pHYs..........+......IDAT8Oc.......l.9a._.X....@.`ddbc.]...........O..m7.r0\|..."......?A.......w..;.N1u........_.[.\Y...BK=...F +.t.M~..oX..%....211o.q.P.".......y...../..l.r...4..Q]..h.....LL.d.......d....w.>{.e..k.7.9y.%.. .YpI...{.+Kv......./..\[...A....^.5c..O?.......G...VB..4HWY...9NU...?..S..$..1..6.U.....c... ....7..J. "M..5. ............_.......d.V.W.c.....Y.A..S....~.C.....q........t?..."n.....4......G_......Q..x..W.!L.a...3....MR.\|.-P#P;..p._.......jUG....X........IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\77F73266.png Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 485 x 185, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	34789
Entropy (8bit):	7.988267796017535
Encrypted:	false
SSDEEP:	768:+D5XH0YsPc/wBfkpz/srsnYlCO20quHVkKAPH+leFbMLezAIt:+D5XUYz/wBf8orsEwHKynWLmAQ
MD5:	13CE435F07ADD2BEABD4A860755B489D
SHA1:	6CB356E6EA48633D56B49E578039818E493D364F
SHA-256:	AA2172D7F8454BEF43575C8877FCA816254D49BE7A9AF420B0C7FEE0169058E4
SHA-512:	E3E0C4541C1299494E8BC5C597E5913B06A1D481E125241C538D634CE2119BFCED14424C2E537A9EE036927E9955688D914DC56550E83B683B2D065E67FA037C
Malicious:	false
Preview:	.PNG........IHDR..............i......sRGB.........pHYs..........+......IDATx^....]U.?.L....$...........`....}..kY]{].+....!H...:IHH.u2..?wN.>^...d2I.%.3..{....9..;....NUOO..J5.j`.h.......{.G6l....y..k......\|gGG....;...y.:.#.8b...z@j.*.....R...........Y.}....k........---~...{v...G...5r..1.....>.h..h..c...z.B...R.. E..9X5.g....M.._.L...}.5.....;....?.....p j .....R.......p.....C..{..>..=......?.y.{..._...L.R]].O_..>.4...`k.T.....;w.o...;.c.......@w......:u.3........OO!{.t>x^....i.T.A...\|.w....U......{..mC.1......+..K._dH_:..H.z.u........>.......^C.AR....\}..x.+.M.6HDJ...H.z..7-..........?\|....\|..6....(Ke...o..._..I.&..`z......VKe...Z...o~s.u.-[..a..d......w...o{...PF.......vJ..0........o...T.......s.y.;.q.e...................D.@j$5.......z ..O..>\|..W^...~PTd?...3.5...`l.T......q.......O..S?.P..........\|..kMMMf.x..wt......-..7...Z.=...........6..K.5..H.z ...k.i`..0.R3..l.....b..2}.tQ-.f.<y.9s.MCm..".3_....[.n./h{...?I.z...+V.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\98EC7FB9.png Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	848
Entropy (8bit):	7.595467031611744
Encrypted:	false
SSDEEP:	24:NLJZbn0jL5Q3H/hbqzej+0C3Yi6yyuq53q:JIjm3pQCLWYi67lc
MD5:	02DB1068B56D3FD907241C2F3240F849
SHA1:	58EC338C879DDBDF02265CBEFA9A2FB08C569D20
SHA-256:	D58FF94F5BB5D49236C138DC109CE83E82879D0D44BE387B0EA3773D908DD25F
SHA-512:	9057CE6FA62F83BB3F3EFAB2E5142ABC41190C08846B90492C37A51F07489F69EDA1D1CA6235C2C8510473E8EA443ECC5694E415AEAF3C7BD07F864212064678
Malicious:	false
Preview:	.PNG........IHDR.............o.......sRGB.........pHYs..........+......IDAT8O.T]H.Q..;3...?..fk.lR..R$.R.Pb.Q...B..OA..T$.hAD...J../..-h...fj..+....;s.vg.Zsw.=...{.w.s.w.@.....;..s...O........;.y.p........,...s1@ Ir.:... .>.LLa..b?h...l.6..U....1....r.....T..O.d.KSA...7.YS..a.(F@....xe.^.I..$h....PpJ...k%.....9..QQ....h..!H................./....2..J2..HG....A....Q&...k...d..&..Xa.t..E....E..f2.d(..v.~.P.+.pik+;...xEU.g....._xfw...+...(..pQ.(..(.U./..)..@..?..........f.'...lx+@F...+....)..k.A2...r~B,....TZ..y..9...`..0....q....yY....Q.......A.....8j[.O9..t..&...g. I@ ..;..X!...9S.J5..'.xh...8I.~.+...mf.m.W.i..{...+>P...Rh...+..br^$. q.^.......(..._.j...$..Ar...MZm\|...9..E..!U[S.fDx7<....Wd.......p..C......^MyI:...c.^..SI.mGj,.......!...h..$..;...........yD./..a...-j.^:.}..v....RQY.^......IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\DFB60433.png Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	8301
Entropy (8bit):	7.970711494690041
Encrypted:	false
SSDEEP:	192:BzNWXTPmjktA8BddiGGwjNHOQRud4JTTOFPY4:B8aoVT0QNuzWKPh
MD5:	D8574C9CC4123EF67C8B600850BE52EE
SHA1:	5547AC473B3523BA2410E04B75E37B1944EE0CCC
SHA-256:	ADD8156BAA01E6A9DE10132E57A2E4659B1A8027A8850B8937E57D56A4FC204B
SHA-512:	20D29AF016ED2115C210F4F21C65195F026AAEA14AA16E36FD705482CC31CD26AB78C4C7A344FD11D4E673742E458C2A104A392B28187F2ECCE988B0612DBACF
Malicious:	false
Preview:	.PNG........IHDR.......:......IJ.....sRGB.........pHYs..........+.... .IDATx^..\....}.\6"Sp...g..9Ks..r..=r.U....Y..l.S.2...Q.'C............h}x........... ......\..N...z....._.\|......III.666...~~~..6l.Q.J...\..m..g.h.SRR.\.p....'N...EEE...X9......c.&M...].n.g4..E..g...w...{..]..;w..I...y.m\...~..;.].3{~..qV.k..._....?..w/$GlI\|..2. m,,,.-[.....sr.V1..g...on...........dl.'...'''[[[.R.......(..^...F.PT.Xq..Mnnn.3..M..g.......6.....pP"#F..P/S.L...W.^..o.r.....5H......111t....\|9..3...`J..>...{..t~/F.b..h.P..]z..)......o..4n.F..e...0!!!......#""h.K..K.....g.......^..w.!.$.&...7n.].F.\\\.A....6lxjj.K/........g.....3g......f....:t..s..5.C4..+W.y...88..?.,Y. .^...8{.@VN.6....Kbch.=zt...7+T....v.z....P........VVV..."t.N......$..Jag.v.U...P[(_.I?.9.4i.G.$U..D......W.r...........!>\|..#G...3..x.b......P....H!.Vj......u.2..*;..Z..c..._Ga....&L.......`.1.[.n].7..W_m..#8k...)U..L.....G..q.F.e>..s.......q....J....(.N.V...k..>m....=.).

C:\Users\user\AppData\Local\Temp\C4DE0000 Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	108032
Entropy (8bit):	7.906344234085925
Encrypted:	false
SSDEEP:	3072:GJYRWZxNFcWr5qXDzPjEwqtDGko+bJ99K7meX7prH:GW82jYDs+d9imeX7prH
MD5:	0104F96722B10FAC20846193E46EDCE7
SHA1:	54A7F48C8C0C74DB859D84CDF23193F059A55381
SHA-256:	48B48EBECE4F07BF589CD65C8E7A370A080EB6049504F2C8B7C8E1D9AC04E7DF
SHA-512:	94220C4B03C4977C62916E8CD4B0EC4AA341EBC1F46A8A742041E26CBE6BFDBB470674323A6B23D75CC12103A47E0ABDADC3CA8BDCD777F7A43CCD17DC1A0556
Malicious:	false
Preview:	.U.N.0..#.?D....#4j.b........mb./..h..k7.......>......."j.Zv.LX.Nz.]..wW.9.0.....Z..d...'.u....e}J.7.({........G+.....B.E..l2..w.\.S.`.._X.{....].8.k.?...T.D.FK..(.pjG.........D.`. ....&DM...R.`..^...Mm..\|}?"........%..:.O*.B^9...G.....F.t-,..W.?...{.l...2-..`..Xc......Z..=;<.T.....;$.>$../').#>.....y..m..za.....b.}S.D..x..\|.f$8.......1.^DP...t...^s..PQ<f.\|......c.4.n..H.4.....=.]."..4l....U...q....y.+P{.yy.........PK..........!...`.............[Content_Types].xml ...(........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\CabDF39.tmp Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	Microsoft Cabinet archive data, 58596 bytes, 1 file
Category:	dropped
Size (bytes):	58596
Entropy (8bit):	7.995478615012125
Encrypted:	true
SSDEEP:	1536:J7r25qSSheImS2zyCvg3nB/QPsBbgwYkGrLMQ:F2qSSwIm1m/QEBbgb1oQ
MD5:	61A03D15CF62612F50B74867090DBE79
SHA1:	15228F34067B4B107E917BEBAF17CC7C3C1280A8
SHA-256:	F9E23DC21553DAA34C6EB778CD262831E466CE794F4BEA48150E8D70D3E6AF6D
SHA-512:	5FECE89CCBBF994E4F1E3EF89A502F25A72F359D445C034682758D26F01D9F3AA20A43010B9A87F2687DA7BA201476922AA46D4906D442D56EB59B2B881259D3
Malicious:	false
Preview:	MSCF............,...................I........T........bR. .authroot.stl...s~.4..CK..8T....c_.d....A.K......&.-.J...."Y...$E.KB..D...D.....3.n..u.............\|..=H4..c&.......f.,..=..-....p2.:..`HX......b.......Di.a......M.....4.....i..}..:~N.<..>..V..CX......B......,.q.M.....HB..E~Q...)..Gax../..}7..f......O0...x..k..ha...y.K.0.h..(....{2Y.].g...yw..\|0.+?.`-../.xvy..e......w.+^...w\|.Q.k.9&.Q.EzS.f......>?w.G.......v.F......A......-P.$.Y...u....Z..g..>.0&.y.(..<.].`>... ..R.q...g.Y..s.y.B..B....Z.4.<?.R....1.8.<.=.8..[a.s.......add..).NtX....r....R.&W4.5]....k.._iK..xzW.w.M.>,5.}..}.tLX5Ls3_..).!..X.~...%.B.....YS9m.,.....BV`.Cee.....?......:.x-.q9j...Yps..W...1.A<.X.O....7.ei..a\.~=X....HN.#....h,....y...\.br.8.y"k).....~B..v....GR.g\|.z..+.D8.m..F .h............ItNs.\....s..,.f`D...]..k...:9..lk.<D....u...........[...*.wY.O....P?.U.l....Fc.ObLq......Fvk..G9.8..!..\T:K`.......'.3......;.u..h...uD..^.bS...r........j..j .=...s .FxV....g.c.s..9.

C:\Users\user\AppData\Local\Temp\TarDF3A.tmp Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	152788
Entropy (8bit):	6.309740459389463
Encrypted:	false
SSDEEP:	1536:TIz6c7xcjgCyrYBZ5pimp4Ydm6Caku2Dnsz0JD8reJgMnl3rlMGGv:TNqccCymfdmoku2DMykMnNGG0
MD5:	4E0487E929ADBBA279FD752E7FB9A5C4
SHA1:	2497E03F42D2CBB4F4989E87E541B5BB27643536
SHA-256:	AE781E4F9625949F7B8A9445B8901958ADECE7E3B95AF344E2FCB24FE989EEB7
SHA-512:	787CBC262570A4FA23FD9C2BA6DA7B0D17609C67C3FD568246F9BEF2A138FA4EBCE2D76D7FD06C3C342B11D6D9BCD875D88C3DC450AE41441B6085B2E5D48C5A
Malicious:	false
Preview:	0..T....H.........T.0..T....1.0...`.H.e......0..D...+.....7.....D.0..D.0...+.....7..........\|h....210303062855Z0...+......0..D.0.......`...@.,..0..0.r1...0...+.....7..~1......D...0...+.....7..i1...0...+.....7<..0 ..+.....7...1.......@N...%.=.,..0$..+.....7...1......`@V'..%..*..S.Y.00..+.....7..b1". .].L4.>..X...E.W..'..........-@w0Z..+.....7...1L.JM.i.c.r.o.s.o.f.t. .R.o.o.t. .C.e.r.t.i.f.i.c.a.t.e. .A.u.t.h.o.r.i.t.y...0..,...........[./..uIv..%1...0...+.....7..h1.....6.M...0...+.....7..~1...........0...+.....7...1...0...+.......0 ..+.....7...1...O..V.........b0$..+.....7...1...>.)....s,.=$.~R.'..00..+.....7..b1". [x.....[....3x:_....7.2...Gy.cS.0D..+.....7...16.4V.e.r.i.S.i.g.n. .T.i.m.e. .S.t.a.m.p.i.n.g. .C.A...0......4...R....2.7.. ...1..0...+.....7..h1......o&...0...+.....7..i1...0...+.....7<..0 ..+.....7...1...lo...^....[...J@0$..+.....7...1...J\u".F....9.N...`...00..+.....7..b1". ...@.....G..d..m..$.....X...}0B..+.....7...14.2M.i.c.r.o.s.o.f.t. .R.o.o.t. .A.u.t.h.o

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Tue Oct 17 10:04:00 2017, mtime=Wed Apr 7 01:35:39 2021, atime=Wed Apr 7 01:35:39 2021, length=16384, window=hide
Category:	dropped
Size (bytes):	867
Entropy (8bit):	4.478080160324842
Encrypted:	false
SSDEEP:	12:85QFe0LgXg/XAlCPCHaXtB8XzB/HURGUX+Wnicvb3bDtZ3YilMMEpxRljKg1yTdK:85Cb/XTd6j0YefDv3qXqrNru/
MD5:	F02EEDCF2D6213F4DCE41C411FF6A1DF
SHA1:	9EAE75F1647961136A08C02262F57CF9EF21987A
SHA-256:	5CA53E61600946C945402724D4E7AD7D4639C5B4DBC671680EC2A380D2CB68BD
SHA-512:	7BB5CC0BB3A66FEA2F208EA88977F2BA2379CD24821542E582EFFCC9AB1F89FE676352F9BEC776939AD3AB0B61E6F84B634C9574B2E8679A3A2196A5A2C3E63C
Malicious:	false
Preview:	L..................F...........7G...9.V+...9.V+...@......................i....P.O. .:i.....+00.../C:\...................t.1.....QK.X..Users.`.......:..QK.X...................6.....U.s.e.r.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.3.....L.1......Q.y..user.8......QK.X.Q.y...&=....U...............A.l.b.u.s.....z.1......Rt...Desktop.d......QK.X.Rt...._=..............:.....D.e.s.k.t.o.p...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.9.......i...............-...8...[............?J......C:\Users\..#...................\\830021\Users.user\Desktop.......\.....\.....\.....\.....\.D.e.s.k.t.o.p.........:..,.LB.)...Ag...............1SPS.XF.L8C....&.m.m............-...S.-.1.-.5.-.2.1.-.9.6.6.7.7.1.3.1.5.-.3.0.1.9.4.0.5.6.3.7.-.3.6.7.3.3.6.4.7.7.-.1.0.0.6.............`.......X.......830021..........D_....3N...W...9r.[........}EkD_....3N...W...9r.[.*.......}Ek....

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\document-1251000362.LNK Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:16 2020, mtime=Wed Apr 7 01:35:39 2021, atime=Wed Apr 7 01:35:40 2021, length=108032, window=hide
Category:	dropped
Size (bytes):	2128
Entropy (8bit):	4.544360153953986
Encrypted:	false
SSDEEP:	24:80/XTd6jFyxZ3e8sZWDv3qXqdM7dD20/XTd6jFyxZ3e8sZWDv3qXqdM7dV:80/XT0jFG51sraQh20/XT0jFG51sraQ/
MD5:	5A2D5AF1B69DF237A0550063F6DD5AB4
SHA1:	FDD7B14490302915CBC1C6E922E576B3F6430444
SHA-256:	B11E2624AA4EBAA0BC9763072CD0A580C8E1AB3391AB59FC000DE984C1A0DF44
SHA-512:	DD683EB97DAA1A09711C99B55C871B3DCDED64B44FB0D115C6A49F84CF8A37430E6364B2B923DEBB0F23A6B0F66B93DFAE1A11F241128AF928DB1BD2BE5CF610
Malicious:	false
Preview:	L..................F.... ...<f...{...9.V+..p ..V+...............................P.O. .:i.....+00.../C:\...................t.1.....QK.X..Users.`.......:..QK.X...................6.....U.s.e.r.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.3.....L.1......Q.y..user.8......QK.X.Q.y...&=....U...............A.l.b.u.s.....z.1......Q.y..Desktop.d......QK.X.Q.y..._=..............:.....D.e.s.k.t.o.p...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.9.....z.2......Rq. .DOCUME~1.XLS..^.......Q.y.Q.y...8.....................d.o.c.u.m.e.n.t.-.1.2.5.1.0.0.0.3.6.2...x.l.s.m.......................-...8...[............?J......C:\Users\..#...................\\830021\Users.user\Desktop\document-1251000362.xlsm./.....\.....\.....\.....\.....\.D.e.s.k.t.o.p.\.d.o.c.u.m.e.n.t.-.1.2.5.1.0.0.0.3.6.2...x.l.s.m.........:..,.LB.)...Ag...............1SPS.XF.L8C....&.m.m............-...S.-.1.-.5.-.2.1.-.9.6.6.7.7.1.3.1.5.-.3.0.1.9.4.0.5.6.3.7.-.3.6.7.3.3.6.4.7.7.-.1.0.0.6.............`.......X.......830021..........D_..

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	112
Entropy (8bit):	4.651969231706502
Encrypted:	false
SSDEEP:	3:oyBVomxWKS9LR7MLUZELR7MLUmxWKS9LR7MLUv:dj49LFKmELFK89LFK2
MD5:	A348D9A6AAD55F97FEFAD8FED3E7A810
SHA1:	CB3796F3CD7CE5AF7E0DAE21286139F2721E6D62
SHA-256:	FA8C4325ABC8119436E0C362DD14561B1285287EC56CC4D99E4CD3D8112EAC24
SHA-512:	443429B4A95517245FC0E110D4FD084679E01C7B0C22671600A49354626D6F7FEB8C55CB06AE66D5ECAC99421CC5136502930ADDBE51F9DBE30089004DB070F7
Malicious:	false
Preview:	Desktop.LNK=0..[misc]..document-1251000362.LNK=0..document-1251000362.LNK=0..[misc]..document-1251000362.LNK=0..

C:\Users\user\Desktop\A5DE0000 Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	108032
Entropy (8bit):	7.906344234085925
Encrypted:	false
SSDEEP:	3072:GJYRWZxNFcWr5qXDzPjEwqtDGko+bJ99K7meX7prH:GW82jYDs+d9imeX7prH
MD5:	0104F96722B10FAC20846193E46EDCE7
SHA1:	54A7F48C8C0C74DB859D84CDF23193F059A55381
SHA-256:	48B48EBECE4F07BF589CD65C8E7A370A080EB6049504F2C8B7C8E1D9AC04E7DF
SHA-512:	94220C4B03C4977C62916E8CD4B0EC4AA341EBC1F46A8A742041E26CBE6BFDBB470674323A6B23D75CC12103A47E0ABDADC3CA8BDCD777F7A43CCD17DC1A0556
Malicious:	false
Preview:	.U.N.0..#.?D....#4j.b........mb./..h..k7.......>......."j.Zv.LX.Nz.]..wW.9.0.....Z..d...'.u....e}J.7.({........G+.....B.E..l2..w.\.S.`.._X.{....].8.k.?...T.D.FK..(.pjG.........D.`. ....&DM...R.`..^...Mm..\|}?"........%..:.O*.B^9...G.....F.t-,..W.?...{.l...2-..`..Xc......Z..=;<.T.....;$.>$../').#>.....y..m..za.....b.}S.D..x..\|.f$8.......1.^DP...t...^s..PQ<f.\|......c.4.n..H.4.....=.]."..4l....U...q....y.+P{.yy.........PK..........!...`.............[Content_Types].xml ...(........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Desktop\~$document-1251000362.xlsm Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	330
Entropy (8bit):	1.4377382811115937
Encrypted:	false
SSDEEP:	3:vZ/FFDJw2fj/FFDJw2fV:vBFFGaFFGS
MD5:	96114D75E30EBD26B572C1FC83D1D02E
SHA1:	A44EEBDA5EB09862AC46346227F06F8CFAF19407
SHA-256:	0C6F8CF0E504C17073E4C614C8A7063F194E335D840611EEFA9E29C7CED1A523
SHA-512:	52D33C36DF2A91E63A9B1949FDC5D69E6A3610CD3855A2E3FC25017BF0A12717FC15EB8AC6113DC7D69C06AD4A83FAF0F021AD7C8D30600AA8168348BD0FA9E0
Malicious:	true
Preview:	.user ..A.l.b.u.s. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ..user ..A.l.b.u.s. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

C:\Users\user\ksjvoefv.skd Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PE32+ executable (DLL) (native) x86-64, for MS Windows
Category:	dropped
Size (bytes):	46867
Entropy (8bit):	5.063576400987857
Encrypted:	false
SSDEEP:	768:RHppffnqCuZgKEq2OqmBhw9+eyA/Dj74zZ/mgxH7Wgagg1nXFJBMq/umJUZp:NDqvHEbsBneyAbniZPWznfBL/nM
MD5:	F029290EA011A5F9C6F7880F35D23A1B
SHA1:	384FB5A582A4AA67E0BE9716D5E260258E2FA3B2
SHA-256:	A7B8E0DF5276942405D485EB808FA19B24E42D9758CACF1515028122755C2513
SHA-512:	DC2525087DDD8AAC2DCE2C74D5C32A93C474F7C9692C8ED7FBF26B106C58734DB16B2DEE0892FDAC51CCB8ACE4A3C8F1EFBD4B65EAA5F9ADAB4A15E908168CA7
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......%.o.a...a...a...q...d...q...`...q...`...Richa...........................PE..d.....c`.........." ................................................................O:....`..........................................!..L............................................ ...............................................................................text...2........................... ..`.rdata....... ......................@..@.data...X@...0...B..................@....pdata...............Z..............@..@.ndata...O.......P...\..............@...................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\ksjvoefv.skd3 Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	255317
Entropy (8bit):	5.733275351438473
Encrypted:	false
SSDEEP:	3072:OCHCrCVCVC/CtCczk8PkyGtzjU0c28vPr:Wk8PpIzw0c2sP
MD5:	94233B243340F796260350A45DBC7D46
SHA1:	EA8F87964CE33A381F8779AD212907FC30CC470F
SHA-256:	BF4D7AAF16DD3806DB0C54096EE9CAF23316C2A6C9D1F6ABC55B39215E88F685
SHA-512:	ACD727A7CE66D3170A828249F563BDF38177648E17548A1AE0FB4E0821E9C0EB8177919C880C7AE43841F31285BA7899EF75578C84860EE9F1A20EF8A8EBD1AF
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........dhF.............g.......................c.......c......Rich............................PE..d.....e`.........." .........................................................`............`.............................................d...d...P............P..........................................................................p............................text.............................. ..`.rdata...T.......V..................@..@.data...P@.......B..................@....pdata.......P......................@..@........................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General
File type:	Microsoft Excel 2007+
Entropy (8bit):	7.90711837214681
TrID:	Excel Microsoft Office Open XML Format document (40004/1) 83.33% ZIP compressed archive (8000/1) 16.67%
File name:	document-1251000362.xlsm
File size:	108063
MD5:	09217c79f99bbfe977a80d83d62489c7
SHA1:	da600d355dfb57190a5745342f3cfeb7d1e509f1
SHA256:	7bf8049e4766a2985851a3d3bf01710c53c389fe1e54397fa332672b62b649d8
SHA512:	e38504266eb60cb5850ee2ba3b11cacec72436942d6977731cf1b4249d5a3fbad2a85c24853a8aff7ce7e41415e0a45a7818641ba7cdd2e9e5ba31da8bae0578
SSDEEP:	3072:U2CxNFcWr5qQDzPjEwqtDpko+bJ99K7meX7pD/:UzxjYDj+d9imeX7pD/
File Content Preview:	PK..........!...`.............[Content_Types].xml ...(.........................................................................................................................................................................................................

File Icon


Icon Hash:	e4e2aa8aa4bcbcac

Static OLE Info

General
Document Type:	OpenXML
Number of OLE Files:	1

OLE File "document-1251000362.xlsm"

Indicators
Has Summary Info:
Application Name:
Encrypted Document:
Contains Word Document Stream:
Contains Workbook/Book Stream:
Contains PowerPoint Document Stream:
Contains Visio Document Stream:
Contains ObjectPool Stream:
Flash Objects Count:
Contains VBA Macros:

Macro 4.0 Code

CALL(, , , 'Doc2'!AR22, before.2.0.0.sheet!BD113, before.2.0.0.sheet!BG98&"1", 0, 0)
CALL(, , , 'Doc2'!AR22, before.2.0.0.sheet!BD114, before.2.0.0.sheet!BG99&"2", 0, 0)
CALL(, , , 'Doc2'!AR22, before.2.0.0.sheet!BD115, before.2.0.0.sheet!BG100&"3", 0, 0)
CALL(, , , 'Doc2'!AR22, before.2.0.0.sheet!BD116, before.2.0.0.sheet!BG101&"4", 0, 0)

,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
04/06/21-19:35:45.233657	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.22	8.8.8.8

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 6, 2021 19:35:36.438637018 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:36.598484039 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:36.598632097 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:36.609575033 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:36.770637989 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:36.783880949 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:36.783917904 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:36.783931971 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:36.784075975 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:36.825025082 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:36.994757891 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:36.994880915 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:38.553092003 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:38.755254984 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.301760912 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.301799059 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.301820993 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.301832914 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:39.301841021 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.301860094 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.301865101 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:39.301870108 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:39.301876068 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:39.301879883 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.301893950 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.301893950 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:39.301912069 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:39.301925898 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:39.304244041 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.304269075 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.304285049 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.304352999 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:39.304416895 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:39.304425001 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:39.461581945 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.461616993 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.461631060 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.461643934 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.461664915 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.461683035 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.461699009 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.461714983 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.461730957 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.461745977 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.461761951 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.461776972 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.461816072 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:39.461853027 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:39.461967945 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:39.464710951 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:39.469680071 CEST	49167	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:35:39.546057940 CEST	49170	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:35:39.634726048 CEST	443	49167	192.185.48.186	192.168.2.22
Apr 6, 2021 19:35:39.706125975 CEST	443	49170	192.185.214.87	192.168.2.22
Apr 6, 2021 19:35:39.706208944 CEST	49170	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:35:39.706816912 CEST	49170	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:35:39.868146896 CEST	443	49170	192.185.214.87	192.168.2.22
Apr 6, 2021 19:35:39.879723072 CEST	443	49170	192.185.214.87	192.168.2.22
Apr 6, 2021 19:35:39.879756927 CEST	443	49170	192.185.214.87	192.168.2.22
Apr 6, 2021 19:35:39.879769087 CEST	443	49170	192.185.214.87	192.168.2.22
Apr 6, 2021 19:35:39.879900932 CEST	49170	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:35:39.923453093 CEST	49170	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:35:40.091923952 CEST	443	49170	192.185.214.87	192.168.2.22
Apr 6, 2021 19:35:40.092118979 CEST	49170	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:35:40.125617027 CEST	49170	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:35:40.326392889 CEST	443	49170	192.185.214.87	192.168.2.22
Apr 6, 2021 19:35:40.458323956 CEST	443	49170	192.185.214.87	192.168.2.22
Apr 6, 2021 19:35:40.458529949 CEST	49170	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:35:40.458570957 CEST	443	49170	192.185.214.87	192.168.2.22
Apr 6, 2021 19:35:40.458632946 CEST	49170	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:35:40.458954096 CEST	49170	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:35:40.625941992 CEST	443	49170	192.185.214.87	192.168.2.22
Apr 6, 2021 19:35:40.647813082 CEST	49171	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:35:40.834311008 CEST	443	49171	50.87.146.86	192.168.2.22
Apr 6, 2021 19:35:40.834460020 CEST	49171	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:35:40.835194111 CEST	49171	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:35:41.022219896 CEST	443	49171	50.87.146.86	192.168.2.22
Apr 6, 2021 19:35:41.026923895 CEST	443	49171	50.87.146.86	192.168.2.22
Apr 6, 2021 19:35:41.026943922 CEST	443	49171	50.87.146.86	192.168.2.22
Apr 6, 2021 19:35:41.026957989 CEST	443	49171	50.87.146.86	192.168.2.22
Apr 6, 2021 19:35:41.027004004 CEST	49171	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:35:41.027039051 CEST	49171	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:35:41.073666096 CEST	49171	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:35:41.261784077 CEST	443	49171	50.87.146.86	192.168.2.22
Apr 6, 2021 19:35:41.261894941 CEST	49171	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:35:41.291629076 CEST	49171	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:35:41.519725084 CEST	443	49171	50.87.146.86	192.168.2.22
Apr 6, 2021 19:35:41.640141964 CEST	443	49171	50.87.146.86	192.168.2.22
Apr 6, 2021 19:35:41.640340090 CEST	49171	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:35:41.640392065 CEST	443	49171	50.87.146.86	192.168.2.22
Apr 6, 2021 19:35:41.640466928 CEST	49171	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:35:41.640834093 CEST	49171	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:35:41.825393915 CEST	443	49171	50.87.146.86	192.168.2.22
Apr 6, 2021 19:35:41.851118088 CEST	49172	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:35:42.013964891 CEST	443	49172	199.79.62.99	192.168.2.22
Apr 6, 2021 19:35:42.014108896 CEST	49172	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:35:42.014799118 CEST	49172	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:35:42.178729057 CEST	443	49172	199.79.62.99	192.168.2.22
Apr 6, 2021 19:35:42.182810068 CEST	443	49172	199.79.62.99	192.168.2.22
Apr 6, 2021 19:35:42.182851076 CEST	443	49172	199.79.62.99	192.168.2.22

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 6, 2021 19:35:36.137125969 CEST	52197	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:35:36.425247908 CEST	53	52197	8.8.8.8	192.168.2.22
Apr 6, 2021 19:35:37.365375996 CEST	53099	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:35:37.413573980 CEST	53	53099	8.8.8.8	192.168.2.22
Apr 6, 2021 19:35:37.421454906 CEST	52838	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:35:37.467365980 CEST	53	52838	8.8.8.8	192.168.2.22
Apr 6, 2021 19:35:37.968590975 CEST	61200	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:35:38.024811029 CEST	53	61200	8.8.8.8	192.168.2.22
Apr 6, 2021 19:35:38.036154985 CEST	49548	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:35:38.084805012 CEST	53	49548	8.8.8.8	192.168.2.22
Apr 6, 2021 19:35:39.489626884 CEST	55627	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:35:39.543775082 CEST	53	55627	8.8.8.8	192.168.2.22
Apr 6, 2021 19:35:40.470395088 CEST	56009	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:35:40.643868923 CEST	53	56009	8.8.8.8	192.168.2.22
Apr 6, 2021 19:35:41.654264927 CEST	61865	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:35:41.848874092 CEST	53	61865	8.8.8.8	192.168.2.22
Apr 6, 2021 19:35:43.086404085 CEST	55171	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:35:44.158269882 CEST	53	55171	8.8.8.8	192.168.2.22
Apr 6, 2021 19:35:44.158518076 CEST	55171	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:35:44.824902058 CEST	52496	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:35:44.892538071 CEST	53	52496	8.8.8.8	192.168.2.22
Apr 6, 2021 19:35:44.906500101 CEST	57564	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:35:44.969774008 CEST	53	57564	8.8.8.8	192.168.2.22
Apr 6, 2021 19:35:45.233510017 CEST	53	55171	8.8.8.8	192.168.2.22
Apr 6, 2021 19:35:47.846592903 CEST	63009	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:35:47.905324936 CEST	53	63009	8.8.8.8	192.168.2.22
Apr 6, 2021 19:35:50.343298912 CEST	59319	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:35:50.402719975 CEST	53	59319	8.8.8.8	192.168.2.22
Apr 6, 2021 19:35:52.836795092 CEST	53070	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:35:52.895401001 CEST	53	53070	8.8.8.8	192.168.2.22
Apr 6, 2021 19:35:55.331228971 CEST	59770	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:35:55.394992113 CEST	53	59770	8.8.8.8	192.168.2.22
Apr 6, 2021 19:35:57.835201979 CEST	61523	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:35:57.891355038 CEST	53	61523	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:00.331211090 CEST	62791	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:00.392870903 CEST	53	62791	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:02.814538002 CEST	50667	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:02.868995905 CEST	53	50667	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:05.298871994 CEST	54129	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:05.357808113 CEST	53	54129	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:07.816678047 CEST	65329	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:07.874599934 CEST	53	65329	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:10.308917999 CEST	60718	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:10.363790989 CEST	53	60718	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:12.803281069 CEST	49157	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:12.859426022 CEST	53	49157	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:15.297872066 CEST	57391	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:15.355676889 CEST	53	57391	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:16.179481030 CEST	61858	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:16.235996962 CEST	53	61858	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:16.247292995 CEST	62500	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:16.301940918 CEST	53	62500	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:17.672786951 CEST	51652	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:17.736104965 CEST	53	51652	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:17.799909115 CEST	62762	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:17.857254982 CEST	53	62762	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:17.879045010 CEST	56905	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:17.933339119 CEST	53	56905	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:18.090595007 CEST	54609	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:18.145066023 CEST	53	54609	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:18.284327030 CEST	58101	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:18.338862896 CEST	53	58101	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:18.473706961 CEST	64329	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:18.528184891 CEST	53	64329	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:18.828723907 CEST	64881	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:18.876478910 CEST	53	64881	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:19.021471977 CEST	55327	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:19.083251953 CEST	53	55327	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:19.261431932 CEST	59150	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:19.324871063 CEST	53	59150	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:19.466202021 CEST	63439	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:19.522948027 CEST	53	63439	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:19.659653902 CEST	65040	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:19.715971947 CEST	53	65040	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:19.857697964 CEST	61369	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:19.912062883 CEST	53	61369	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:20.056922913 CEST	65515	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:20.116415024 CEST	53	65515	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:20.261230946 CEST	60236	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:20.307106972 CEST	53	60236	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:20.346158028 CEST	53198	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:20.403281927 CEST	53	53198	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:20.481821060 CEST	50027	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:20.541081905 CEST	53	50027	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:20.693258047 CEST	59245	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:20.750017881 CEST	53	59245	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:20.933017969 CEST	55840	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:20.994478941 CEST	53	55840	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:21.137475967 CEST	61667	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:21.192076921 CEST	53	61667	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:21.334577084 CEST	63736	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:21.380764961 CEST	53	63736	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:21.511698961 CEST	59805	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:21.571089983 CEST	53	59805	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:21.720818043 CEST	62322	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:21.777422905 CEST	53	62322	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:21.922323942 CEST	52819	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:21.968228102 CEST	53	52819	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:22.113008976 CEST	51215	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:22.167390108 CEST	53	51215	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:22.322094917 CEST	60312	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:22.379254103 CEST	53	60312	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:22.533502102 CEST	63463	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:22.592026949 CEST	53	63463	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:22.724620104 CEST	62224	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:22.772957087 CEST	53	62224	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:22.838228941 CEST	59064	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:22.886979103 CEST	53	59064	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:22.925374985 CEST	59885	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:22.971462011 CEST	53	59885	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:23.115191936 CEST	63749	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:23.161987066 CEST	53	63749	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:23.330302000 CEST	50878	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:23.377444029 CEST	53	50878	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:23.525396109 CEST	58469	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:23.574239969 CEST	53	58469	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:23.716440916 CEST	54773	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:23.762428045 CEST	53	54773	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:23.910854101 CEST	52166	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:23.957479000 CEST	53	52166	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:24.115884066 CEST	54589	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:24.161765099 CEST	53	54589	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:24.480736017 CEST	58113	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:24.530757904 CEST	53	58113	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:24.663889885 CEST	53533	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:24.709784031 CEST	53	53533	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:24.854388952 CEST	57696	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:24.913845062 CEST	53	57696	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:25.059902906 CEST	51068	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:25.108118057 CEST	53	51068	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:25.239742994 CEST	52944	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:25.293937922 CEST	53	52944	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:25.321590900 CEST	56190	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:25.378568888 CEST	53	56190	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:25.492512941 CEST	63877	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:25.548268080 CEST	53	63877	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:25.699820042 CEST	62299	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:25.750637054 CEST	53	62299	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:25.913938999 CEST	53239	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:25.963754892 CEST	53	53239	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:26.166996956 CEST	62320	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:26.221399069 CEST	53	62320	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:26.362685919 CEST	61507	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:26.417303085 CEST	53	61507	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:26.588087082 CEST	53940	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:26.644500017 CEST	53	53940	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:26.850569010 CEST	59089	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:26.899437904 CEST	53	59089	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:27.030610085 CEST	51739	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:27.085365057 CEST	53	51739	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:27.231368065 CEST	53552	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:27.289777994 CEST	53	53552	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:27.431425095 CEST	61135	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:27.478826046 CEST	53	61135	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:27.606967926 CEST	49357	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:27.654603958 CEST	53	49357	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:27.797789097 CEST	53451	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:27.815926075 CEST	62183	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:27.845401049 CEST	53	53451	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:27.873532057 CEST	53	62183	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:28.032005072 CEST	61653	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:28.082180023 CEST	53	61653	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:28.300306082 CEST	56509	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:28.357707024 CEST	53	56509	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:28.576062918 CEST	62179	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:28.623466015 CEST	53	62179	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:28.831423044 CEST	54721	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:28.879307032 CEST	53	54721	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:29.120851994 CEST	59549	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:29.179820061 CEST	53	59549	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:29.446841002 CEST	50463	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:29.495584011 CEST	53	50463	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:29.646418095 CEST	59029	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:29.694730997 CEST	53	59029	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:29.873347044 CEST	60541	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:29.919368029 CEST	53	60541	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:30.071108103 CEST	62739	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:30.135358095 CEST	53	62739	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:30.292124033 CEST	62511	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:30.318037987 CEST	54403	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:30.346826077 CEST	53	62511	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:30.372534037 CEST	53	54403	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:30.486824989 CEST	62038	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:30.541258097 CEST	53	62038	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:30.684063911 CEST	50377	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:30.731415033 CEST	53	50377	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:30.893956900 CEST	59171	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:30.940021038 CEST	53	59171	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:31.078867912 CEST	59721	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:31.127651930 CEST	53	59721	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:31.257278919 CEST	54110	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:31.306453943 CEST	53	54110	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:31.454668045 CEST	65178	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:31.500567913 CEST	53	65178	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:31.640161991 CEST	57185	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:31.689196110 CEST	53	57185	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:31.838002920 CEST	51859	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:31.885118008 CEST	53	51859	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:32.017920017 CEST	63355	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:32.075129032 CEST	53	63355	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:32.223304033 CEST	59126	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:32.269953012 CEST	53	59126	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:32.422225952 CEST	59136	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:32.471493006 CEST	53	59136	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:32.604650974 CEST	61938	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:32.659054995 CEST	53	61938	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:32.872615099 CEST	54603	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:32.877154112 CEST	56472	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:32.921516895 CEST	53	54603	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:32.924493074 CEST	53	56472	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:33.226604939 CEST	64956	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:33.275885105 CEST	53	64956	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:33.411539078 CEST	49558	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:33.460458994 CEST	53	49558	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:33.815419912 CEST	60485	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:33.864224911 CEST	53	60485	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:34.016172886 CEST	62070	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:34.062098980 CEST	53	62070	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:34.188574076 CEST	52196	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:34.234946012 CEST	53	52196	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:34.373506069 CEST	53324	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:34.422507048 CEST	53	53324	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:34.884202957 CEST	59208	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:34.931473017 CEST	53	59208	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:35.070255995 CEST	53489	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:35.116287947 CEST	53	53489	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:36.116987944 CEST	60104	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:36.163029909 CEST	53	60104	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:36.216833115 CEST	57579	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:36.276655912 CEST	53	57579	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:36.295813084 CEST	56516	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:36.341650963 CEST	53	56516	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:36.465683937 CEST	50926	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:36.511831999 CEST	53	50926	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:36.631361961 CEST	61266	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:36.678879023 CEST	53	61266	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:36.819865942 CEST	57279	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:36.866157055 CEST	53	57279	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:36.988800049 CEST	65273	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:37.037826061 CEST	53	65273	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:37.257400990 CEST	64307	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:37.306787014 CEST	53	64307	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:37.448842049 CEST	49977	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:37.504345894 CEST	53	49977	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:37.628514051 CEST	61667	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:37.683876991 CEST	53	61667	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:37.805069923 CEST	65274	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:37.853719950 CEST	53	65274	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:38.060878038 CEST	58029	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:38.111294985 CEST	53	58029	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:38.280234098 CEST	64534	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:38.329044104 CEST	53	64534	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:38.454212904 CEST	51031	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:38.507600069 CEST	53	51031	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:38.630655050 CEST	64254	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:38.681490898 CEST	53	64254	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:38.739043951 CEST	52696	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:38.793664932 CEST	53	52696	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:38.808923960 CEST	56479	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:38.854741096 CEST	53	56479	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:39.057017088 CEST	63874	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:39.104387045 CEST	53	63874	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:39.285995007 CEST	62985	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:39.334992886 CEST	53	62985	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:39.515069008 CEST	53083	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:39.563930988 CEST	53	53083	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:39.754087925 CEST	56129	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:39.805354118 CEST	53	56129	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:39.991471052 CEST	54898	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:40.039519072 CEST	53	54898	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:40.281938076 CEST	60996	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:40.329593897 CEST	53	60996	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:40.538321018 CEST	56871	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:40.587184906 CEST	53	56871	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:40.803672075 CEST	56681	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:40.859613895 CEST	53	56681	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:41.121234894 CEST	57030	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:41.167093039 CEST	53	57030	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:41.240986109 CEST	56842	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:41.297482014 CEST	53	56842	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:41.397893906 CEST	54769	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:41.457772970 CEST	53	54769	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:41.726876020 CEST	57976	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:41.777553082 CEST	53	57976	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:42.010631084 CEST	57822	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:42.056910038 CEST	53	57822	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:42.261653900 CEST	57816	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:42.311079979 CEST	53	57816	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:42.527062893 CEST	58218	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:42.578414917 CEST	53	58218	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:42.806523085 CEST	52925	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:42.863167048 CEST	53	52925	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:43.078768015 CEST	50088	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:43.125004053 CEST	53	50088	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:43.267930984 CEST	63974	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:43.314171076 CEST	53	63974	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:43.443906069 CEST	60174	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:43.491615057 CEST	53	60174	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:43.725967884 CEST	62566	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:43.735095024 CEST	60502	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:43.773960114 CEST	53	62566	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:43.789509058 CEST	53	60502	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:43.991578102 CEST	64666	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:44.038954020 CEST	53	64666	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:44.293545961 CEST	65172	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:44.342452049 CEST	53	65172	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:44.536412001 CEST	61683	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:44.582551003 CEST	53	61683	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:44.826736927 CEST	62288	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:44.881262064 CEST	53	62288	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:45.097667933 CEST	58473	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:45.146435976 CEST	53	58473	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:45.366111994 CEST	57284	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:45.411995888 CEST	53	57284	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:45.604413033 CEST	58015	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:45.650341034 CEST	53	58015	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:45.786500931 CEST	55470	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:45.833425999 CEST	53	55470	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:45.965044022 CEST	50974	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:46.015721083 CEST	53	50974	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:46.131656885 CEST	64934	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:46.180838108 CEST	53	64934	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:46.229585886 CEST	61741	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:46.276206017 CEST	53	61741	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:46.305361032 CEST	64069	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:46.351461887 CEST	53	64069	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:46.482002974 CEST	60995	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:46.531446934 CEST	53	60995	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:46.664236069 CEST	62291	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:46.713201046 CEST	53	62291	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:46.837809086 CEST	50900	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:46.888993025 CEST	53	50900	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:47.013334990 CEST	54131	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:47.059444904 CEST	53	54131	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:47.184865952 CEST	54293	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:47.235099077 CEST	53	54293	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:47.387356043 CEST	50519	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:47.436594963 CEST	53	50519	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:47.553055048 CEST	54187	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:47.599680901 CEST	53	54187	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:47.732084990 CEST	58673	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:47.779345989 CEST	53	58673	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:47.898159981 CEST	63779	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:47.946181059 CEST	53	63779	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:48.084307909 CEST	56240	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:48.133445024 CEST	53	56240	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:48.272094965 CEST	60915	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:48.321207047 CEST	53	60915	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:48.457078934 CEST	49177	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:48.504182100 CEST	53	49177	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:48.652059078 CEST	52037	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:48.686547041 CEST	59411	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:48.701400995 CEST	53	52037	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:48.734016895 CEST	53	59411	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:48.833695889 CEST	57033	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:48.880402088 CEST	53	57033	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:49.015856981 CEST	60843	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:49.062361002 CEST	53	60843	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:49.190787077 CEST	49820	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:49.236880064 CEST	53	49820	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:49.356460094 CEST	63256	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:49.402327061 CEST	53	63256	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:49.536844969 CEST	56363	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:49.582681894 CEST	53	56363	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:49.711152077 CEST	54157	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:49.761981964 CEST	53	54157	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:49.899955034 CEST	63680	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:49.947999001 CEST	53	63680	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:50.076857090 CEST	51814	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:50.122746944 CEST	53	51814	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:50.260812998 CEST	51622	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:50.309537888 CEST	53	51622	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:50.438448906 CEST	60177	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:50.484322071 CEST	53	60177	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:50.611718893 CEST	60843	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:50.668335915 CEST	53	60843	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:50.825449944 CEST	58008	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:50.888242960 CEST	53	58008	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:51.012044907 CEST	57992	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:51.066414118 CEST	53	57992	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:51.204231977 CEST	65522	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:51.213184118 CEST	49639	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:51.250205040 CEST	53	65522	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:51.262105942 CEST	53	49639	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:51.389925003 CEST	63327	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:51.438874006 CEST	53	63327	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:51.566467047 CEST	49388	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:51.612327099 CEST	53	49388	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:51.749661922 CEST	60534	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:51.798420906 CEST	53	60534	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:51.931509018 CEST	52146	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:51.977644920 CEST	53	52146	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:52.106955051 CEST	62947	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:52.152868986 CEST	53	62947	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:52.284025908 CEST	57302	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:52.330019951 CEST	53	57302	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:52.464056969 CEST	54780	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:52.510094881 CEST	53	54780	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:52.640108109 CEST	59773	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:52.687549114 CEST	53	59773	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:52.815110922 CEST	51222	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:52.861021042 CEST	53	51222	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:52.989859104 CEST	54790	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:53.038561106 CEST	53	54790	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:53.164561987 CEST	58285	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:53.213341951 CEST	53	58285	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:53.340703011 CEST	50633	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:53.386735916 CEST	53	50633	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:53.514827967 CEST	55526	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:53.561526060 CEST	53	55526	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:53.683840990 CEST	60187	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:53.692327023 CEST	63165	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:53.739248991 CEST	53	63165	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:53.740195036 CEST	53	60187	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:53.859879017 CEST	61810	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:53.907088995 CEST	53	61810	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:54.031747103 CEST	64073	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:54.077692986 CEST	53	64073	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:54.213190079 CEST	50715	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:54.261339903 CEST	53	50715	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:54.395225048 CEST	61224	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:54.441154003 CEST	53	61224	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:54.571655989 CEST	52360	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:54.617497921 CEST	53	52360	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:54.742714882 CEST	57756	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:54.788620949 CEST	53	57756	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:54.932506084 CEST	52521	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:54.980634928 CEST	53	52521	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:55.105751991 CEST	54106	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:55.152298927 CEST	53	54106	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:55.301177979 CEST	52359	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:55.347321987 CEST	53	52359	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:55.469841003 CEST	57868	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:55.518179893 CEST	53	57868	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:55.652600050 CEST	55017	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:55.703550100 CEST	53	55017	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:55.852437973 CEST	64440	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:55.901207924 CEST	53	64440	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:56.034863949 CEST	61548	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:56.082787037 CEST	53	61548	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:56.172427893 CEST	54276	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:56.198894024 CEST	60123	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:56.227529049 CEST	53	54276	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:56.247347116 CEST	53	60123	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:56.374111891 CEST	52480	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:56.422983885 CEST	53	52480	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:56.547128916 CEST	65412	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:56.593251944 CEST	53	65412	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:56.722104073 CEST	49551	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:56.772574902 CEST	53	49551	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:56.908582926 CEST	63258	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:56.970618010 CEST	53	63258	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:57.108580112 CEST	57578	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:57.154674053 CEST	53	57578	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:57.279031992 CEST	60312	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:57.334932089 CEST	53	60312	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:57.471599102 CEST	54899	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:57.518682003 CEST	53	54899	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:57.645342112 CEST	53334	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:57.691529036 CEST	53	53334	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:57.812433958 CEST	61850	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:57.861618042 CEST	53	61850	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:57.996269941 CEST	59175	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:58.045171022 CEST	53	59175	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:58.164652109 CEST	56718	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:58.212883949 CEST	53	56718	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:58.347866058 CEST	54478	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:58.393805981 CEST	53	54478	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:58.513468027 CEST	58427	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:58.559518099 CEST	53	58427	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:58.670449972 CEST	65476	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:58.699768066 CEST	58076	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:58.728307009 CEST	53	65476	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:58.746387005 CEST	53	58076	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:58.869579077 CEST	60518	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:58.918541908 CEST	53	60518	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:59.042962074 CEST	55698	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:59.091665030 CEST	53	55698	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:59.216974020 CEST	53090	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:59.264094114 CEST	53	53090	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:59.411034107 CEST	55758	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:59.456938982 CEST	53	55758	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:59.591628075 CEST	65312	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:59.639405966 CEST	53	65312	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:59.777415991 CEST	64984	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:36:59.823313951 CEST	53	64984	8.8.8.8	192.168.2.22
Apr 6, 2021 19:36:59.957231045 CEST	53144	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:00.007119894 CEST	53	53144	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:00.155050039 CEST	62452	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:00.202641964 CEST	53	62452	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:00.324331045 CEST	64550	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:00.374819994 CEST	53	64550	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:00.492532969 CEST	59991	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:00.539469957 CEST	53	59991	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:00.674906015 CEST	64291	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:00.725589991 CEST	53	64291	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:00.860245943 CEST	52215	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:00.906590939 CEST	53	52215	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:01.051093102 CEST	53765	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:01.097083092 CEST	53	53765	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:01.155206919 CEST	57148	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:01.207084894 CEST	53	57148	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:01.233367920 CEST	53577	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:01.282056093 CEST	53	53577	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:01.417799950 CEST	51785	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:01.466864109 CEST	53	51785	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:01.610112906 CEST	51329	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:01.656336069 CEST	53	51329	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:01.783416986 CEST	55163	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:01.829665899 CEST	53	55163	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:01.971458912 CEST	53262	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:02.020364046 CEST	53	53262	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:02.160326958 CEST	63026	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:02.206531048 CEST	53	63026	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:02.334619045 CEST	61190	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:02.380959034 CEST	53	61190	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:02.522388935 CEST	64211	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:02.571772099 CEST	53	64211	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:02.698420048 CEST	57660	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:02.744750023 CEST	53	57660	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:02.874819040 CEST	62041	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:02.921135902 CEST	53	62041	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:03.052468061 CEST	64019	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:03.098485947 CEST	53	64019	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:03.236524105 CEST	60221	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:03.285371065 CEST	53	60221	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:03.421710014 CEST	63183	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:03.468713045 CEST	53	63183	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:03.597856045 CEST	54783	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:03.633913040 CEST	64343	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:03.646615028 CEST	53	54783	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:03.680123091 CEST	53	64343	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:03.769036055 CEST	56183	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:03.815238953 CEST	53	56183	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:03.953802109 CEST	60969	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:04.004038095 CEST	53	60969	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:04.126812935 CEST	49802	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:04.173531055 CEST	53	49802	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:04.302958012 CEST	65436	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:04.349060059 CEST	53	65436	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:04.472477913 CEST	63415	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:04.523000956 CEST	53	63415	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:04.657385111 CEST	62618	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:04.705108881 CEST	53	62618	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:04.832766056 CEST	53640	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:04.882098913 CEST	53	53640	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:05.006548882 CEST	54469	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:05.054758072 CEST	53	54469	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:05.178035975 CEST	53557	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:05.225748062 CEST	53	53557	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:05.360935926 CEST	58412	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:05.406837940 CEST	53	58412	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:05.539688110 CEST	56148	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:05.590020895 CEST	53	56148	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:05.721827984 CEST	62454	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:05.769479036 CEST	53	62454	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:05.893601894 CEST	55472	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:05.945020914 CEST	53	55472	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:06.062316895 CEST	50055	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:06.095909119 CEST	55079	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:06.108258009 CEST	53	50055	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:06.150445938 CEST	53	55079	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:06.249746084 CEST	55535	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:06.297446966 CEST	53	55535	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:06.428329945 CEST	65144	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:06.477161884 CEST	53	65144	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:06.610569954 CEST	52747	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:06.662727118 CEST	53	52747	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:06.784722090 CEST	61915	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:06.831127882 CEST	53	61915	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:07.034377098 CEST	56856	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:07.081259012 CEST	53	56856	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:07.206109047 CEST	51099	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:07.252202034 CEST	53	51099	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:07.385504007 CEST	52501	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:07.434900045 CEST	53	52501	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:07.562226057 CEST	60839	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:07.610835075 CEST	53	60839	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:07.743144035 CEST	51016	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:07.792016029 CEST	53	51016	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:07.934602976 CEST	63714	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:07.980612040 CEST	53	63714	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:08.111644983 CEST	57242	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:08.157979965 CEST	53	57242	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:08.292407990 CEST	57583	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:08.338654041 CEST	53	57583	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:08.466573000 CEST	55672	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:08.513087034 CEST	53	55672	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:08.590711117 CEST	56547	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:08.637459040 CEST	60599	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:08.638379097 CEST	53	56547	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:08.685655117 CEST	53	60599	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:08.821662903 CEST	57503	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:08.868743896 CEST	53	57503	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:09.007144928 CEST	54393	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:09.054908037 CEST	53	54393	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:09.195717096 CEST	49539	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:09.242978096 CEST	53	49539	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:09.381869078 CEST	52323	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:09.427706957 CEST	53	52323	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:09.551136971 CEST	51694	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:09.597045898 CEST	53	51694	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:09.748068094 CEST	51450	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:09.795893908 CEST	53	51450	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:09.913022995 CEST	49752	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:09.959871054 CEST	53	49752	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:10.111479044 CEST	57373	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:10.157757044 CEST	53	57373	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:10.270504951 CEST	58175	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:10.318562984 CEST	53	58175	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:10.446788073 CEST	63290	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:10.497915030 CEST	53	63290	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:10.621332884 CEST	54258	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:10.667419910 CEST	53	54258	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:10.786812067 CEST	53225	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:10.837328911 CEST	53	53225	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:10.963589907 CEST	62698	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:11.009990931 CEST	53	62698	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:11.147041082 CEST	52305	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:11.192979097 CEST	53	52305	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:11.317904949 CEST	49932	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:11.366538048 CEST	53	49932	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:11.438857079 CEST	62293	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:11.484775066 CEST	53	62293	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:11.495315075 CEST	62271	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:11.541352034 CEST	53	62271	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:11.670815945 CEST	49712	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:11.719652891 CEST	53	49712	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:11.844130039 CEST	57298	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:11.892091036 CEST	53	57298	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:12.063019991 CEST	53084	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:12.109268904 CEST	53	53084	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:12.236805916 CEST	61000	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:12.283054113 CEST	53	61000	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:12.417155027 CEST	49706	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:12.463227034 CEST	53	49706	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:12.586571932 CEST	57196	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:12.635654926 CEST	53	57196	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:12.749816895 CEST	52229	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:12.795675039 CEST	53	52229	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:12.936978102 CEST	65387	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:12.982868910 CEST	53	65387	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:13.108819008 CEST	56084	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:13.157841921 CEST	53	56084	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:13.306874990 CEST	50019	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:13.352705002 CEST	53	50019	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:13.466762066 CEST	63630	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:13.513750076 CEST	53	63630	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:13.640093088 CEST	49782	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:13.685921907 CEST	53	49782	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:13.820715904 CEST	60322	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:13.866683960 CEST	53	60322	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:13.987893105 CEST	51597	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:14.033802986 CEST	53	51597	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:14.057594061 CEST	55490	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:14.103871107 CEST	53	55490	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:14.173635006 CEST	61170	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:14.219700098 CEST	53	61170	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:14.341551065 CEST	54017	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:14.390681028 CEST	53	54017	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:14.521785021 CEST	53877	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:14.573865891 CEST	53	53877	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:14.709146976 CEST	57075	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:14.759907007 CEST	53	57075	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:14.926997900 CEST	52976	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:14.975723028 CEST	53	52976	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:15.088453054 CEST	52446	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:15.134331942 CEST	53	52446	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:15.253283024 CEST	54725	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:15.299251080 CEST	53	54725	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:15.415843964 CEST	52422	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:15.467781067 CEST	53	52422	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:15.602977991 CEST	57761	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:15.649000883 CEST	53	57761	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:15.783777952 CEST	56721	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:15.834681988 CEST	53	56721	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:15.953319073 CEST	57824	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:16.000642061 CEST	53	57824	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:16.118959904 CEST	59910	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:16.164879084 CEST	53	59910	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:16.289925098 CEST	53981	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:16.338090897 CEST	53	53981	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:16.463671923 CEST	62529	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:16.515149117 CEST	53	62529	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:16.643940926 CEST	64510	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:16.689853907 CEST	53	64510	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:16.816150904 CEST	63341	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:16.863282919 CEST	53	63341	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:16.898039103 CEST	51390	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:16.955508947 CEST	53	51390	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:16.977672100 CEST	51733	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:17.026767015 CEST	53	51733	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:17.183262110 CEST	55573	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:17.229188919 CEST	53	55573	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:17.351701975 CEST	54036	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:17.402348042 CEST	53	54036	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:17.536031008 CEST	50907	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:17.582012892 CEST	53	50907	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:17.703474998 CEST	56813	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:17.755497932 CEST	53	56813	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:17.866416931 CEST	63171	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:17.912583113 CEST	53	63171	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:18.050129890 CEST	62356	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:18.099061966 CEST	53	62356	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:18.231312037 CEST	55520	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:18.277192116 CEST	53	55520	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:18.414141893 CEST	63168	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:18.463021040 CEST	53	63168	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:18.585561037 CEST	49935	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:18.631607056 CEST	53	49935	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:18.761172056 CEST	61954	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:18.811350107 CEST	53	61954	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:18.953582048 CEST	61207	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:18.999566078 CEST	53	61207	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:19.113483906 CEST	63956	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:19.159344912 CEST	53	63956	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:19.294445992 CEST	64981	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:19.340456009 CEST	53	64981	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:19.462013960 CEST	56475	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:19.509887934 CEST	53	56475	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:19.634637117 CEST	60855	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:19.683533907 CEST	53	60855	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:19.780950069 CEST	50612	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:19.816342115 CEST	57478	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:19.838428020 CEST	53	50612	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:19.866552114 CEST	53	57478	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:20.021179914 CEST	54941	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:20.067193985 CEST	53	54941	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:20.195172071 CEST	61016	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:20.241122007 CEST	53	61016	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:20.377510071 CEST	53806	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:20.425535917 CEST	53	53806	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:20.558144093 CEST	60226	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:20.604119062 CEST	53	60226	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:20.732511997 CEST	49407	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:20.778887033 CEST	53	49407	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:20.904649019 CEST	63368	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:20.950577021 CEST	53	63368	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:21.075448990 CEST	61493	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:21.125329018 CEST	53	61493	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:21.252221107 CEST	56072	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:21.299587011 CEST	53	56072	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:21.422374964 CEST	62969	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:21.468539000 CEST	53	62969	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:21.587127924 CEST	64146	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:21.637506962 CEST	53	64146	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:21.758284092 CEST	56752	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:21.808919907 CEST	53	56752	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:21.924108982 CEST	56463	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:21.970252037 CEST	53	56463	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:22.099838018 CEST	50650	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:22.150264025 CEST	53	50650	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:22.290946960 CEST	54450	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:22.339715004 CEST	53	54450	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:22.452619076 CEST	64882	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:22.494591951 CEST	63635	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:22.498472929 CEST	53	64882	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:22.540779114 CEST	53	63635	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:22.616847992 CEST	52775	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:22.666625977 CEST	53	52775	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:22.799526930 CEST	55824	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:22.850260973 CEST	53	55824	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:22.971194029 CEST	59648	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:23.018465996 CEST	53	59648	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:23.161746979 CEST	49397	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:23.210721970 CEST	53	49397	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:23.335489988 CEST	51050	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:23.381438017 CEST	53	51050	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:23.515710115 CEST	62317	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:23.562921047 CEST	53	62317	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:23.685277939 CEST	51104	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:23.734291077 CEST	53	51104	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:23.860574961 CEST	50424	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:23.906795025 CEST	53	50424	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:24.043277025 CEST	50065	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:24.093605042 CEST	53	50065	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:24.254776955 CEST	63984	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:24.303863049 CEST	53	63984	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:24.440562963 CEST	63874	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:24.487134933 CEST	53	63874	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:24.606415987 CEST	64999	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:24.655390024 CEST	53	64999	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:24.792625904 CEST	60357	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:24.838933945 CEST	53	60357	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:25.001054049 CEST	64808	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:25.047070026 CEST	53	64808	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:25.169689894 CEST	58133	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:25.183235884 CEST	53873	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:25.216121912 CEST	53	58133	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:25.229305029 CEST	53	53873	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:25.343031883 CEST	52345	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:25.388962984 CEST	53	52345	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:25.533185959 CEST	63293	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:25.579075098 CEST	53	63293	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:25.697748899 CEST	53098	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:25.743732929 CEST	53	53098	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:25.857820034 CEST	54705	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:25.908587933 CEST	53	54705	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:26.035681009 CEST	57050	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:26.081691980 CEST	53	57050	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:26.210376978 CEST	57905	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:26.257045984 CEST	53	57905	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:26.376017094 CEST	52876	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:26.424860954 CEST	53	52876	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:26.540535927 CEST	52362	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:26.588615894 CEST	53	52362	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:26.723180056 CEST	49397	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:26.780843019 CEST	53	49397	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:26.907540083 CEST	50367	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:26.957856894 CEST	53	50367	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:27.079299927 CEST	50852	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:27.128237963 CEST	53	50852	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:27.246588945 CEST	65303	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:27.294722080 CEST	53	65303	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:27.416966915 CEST	59979	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:27.462970018 CEST	53	59979	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:27.591501951 CEST	63468	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:27.637485981 CEST	53	63468	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:27.795217991 CEST	52714	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:27.817647934 CEST	51073	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:27.844166040 CEST	53	52714	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:27.871952057 CEST	53	51073	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:27.961647034 CEST	61273	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:28.007646084 CEST	53	61273	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:28.150680065 CEST	53142	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:28.196870089 CEST	53	53142	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:28.355355978 CEST	62220	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:28.404191017 CEST	53	62220	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:28.524492979 CEST	50414	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:28.570419073 CEST	53	50414	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:28.714340925 CEST	62177	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:28.760385990 CEST	53	62177	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:28.886686087 CEST	58934	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:28.935939074 CEST	53	58934	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:29.063580036 CEST	57067	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:29.110840082 CEST	53	57067	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:29.229266882 CEST	51564	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:29.278954983 CEST	53	51564	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:29.394689083 CEST	59552	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:29.440725088 CEST	53	59552	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:29.561599016 CEST	49734	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:29.608987093 CEST	53	49734	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:29.727068901 CEST	58810	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:29.773649931 CEST	53	58810	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:29.897708893 CEST	57219	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:29.948302984 CEST	53	57219	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:30.086199999 CEST	50926	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:30.133024931 CEST	53	50926	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:30.253613949 CEST	57766	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:30.298407078 CEST	50369	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:30.302819014 CEST	53	57766	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:30.346333027 CEST	53	50369	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:30.439780951 CEST	54724	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:30.488646030 CEST	53	54724	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:30.621049881 CEST	59644	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:30.666908026 CEST	53	59644	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:30.787250042 CEST	63618	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:30.833345890 CEST	53	63618	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:30.963793993 CEST	49321	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:31.011964083 CEST	53	49321	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:31.142081022 CEST	57664	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:31.193532944 CEST	53	57664	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:31.325540066 CEST	64401	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:31.372510910 CEST	53	64401	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:31.495177031 CEST	59811	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:31.545578003 CEST	53	59811	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:31.659604073 CEST	54234	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:31.711004972 CEST	53	54234	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:31.830615997 CEST	57440	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:31.880001068 CEST	53	57440	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:32.010437965 CEST	52826	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:32.056906939 CEST	53	52826	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:32.174140930 CEST	52528	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:32.222004890 CEST	53	52528	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:32.358314037 CEST	54989	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:32.409020901 CEST	53	54989	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:32.555330992 CEST	63442	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:32.601516962 CEST	53	63442	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:32.718765974 CEST	57765	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:32.766482115 CEST	53	57765	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:32.797456980 CEST	54287	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:32.846327066 CEST	53	54287	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:32.909255981 CEST	53039	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:32.955342054 CEST	53	53039	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:33.079211950 CEST	50561	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:33.128062010 CEST	53	50561	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:33.258795977 CEST	50208	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:33.304685116 CEST	53	50208	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:33.432892084 CEST	51750	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:33.478806019 CEST	53	51750	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:33.603017092 CEST	57806	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:33.650604010 CEST	53	57806	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:33.785034895 CEST	63383	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:33.831058979 CEST	53	63383	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:33.958364964 CEST	56422	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:34.004410028 CEST	53	56422	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:34.128366947 CEST	52704	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:34.174283981 CEST	53	52704	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:34.314326048 CEST	56048	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:34.363290071 CEST	53	56048	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:34.486742973 CEST	58721	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:34.534101963 CEST	53	58721	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:34.657634974 CEST	62773	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:34.704749107 CEST	53	62773	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:34.830157995 CEST	49195	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:34.877959967 CEST	53	49195	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:35.029129028 CEST	59898	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:35.076464891 CEST	53	59898	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:35.216772079 CEST	64010	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:35.265609026 CEST	53	64010	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:35.391812086 CEST	52343	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:35.438915014 CEST	53	52343	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:35.573561907 CEST	54362	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:35.620981932 CEST	53	54362	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:35.719377041 CEST	49499	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:35.765249968 CEST	53	49499	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:35.767710924 CEST	54171	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:35.815371990 CEST	53	54171	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:35.932790995 CEST	50361	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:35.978962898 CEST	53	50361	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:36.122066975 CEST	65345	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:36.169920921 CEST	53	65345	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:36.291455984 CEST	55271	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:36.340281010 CEST	53	55271	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:36.496258020 CEST	60974	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:36.542144060 CEST	53	60974	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:36.672168970 CEST	56053	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:36.718108892 CEST	53	56053	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:36.838794947 CEST	52977	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:36.886449099 CEST	53	52977	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:37.009438038 CEST	53583	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:37.056665897 CEST	53	53583	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:37.190948963 CEST	53470	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:37.238543034 CEST	53	53470	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:37.365075111 CEST	54074	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:37.415096998 CEST	53	54074	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:37.546787024 CEST	55972	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:37.595204115 CEST	53	55972	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:37.720933914 CEST	49180	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:37.772075891 CEST	53	49180	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:37.884164095 CEST	57900	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:37.930041075 CEST	53	57900	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:38.069160938 CEST	51495	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:38.115529060 CEST	53	51495	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:38.226083994 CEST	65142	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:38.272242069 CEST	53	65142	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:38.438471079 CEST	57883	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:38.484591007 CEST	53	57883	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:38.582657099 CEST	50560	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:38.611440897 CEST	56586	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:38.628562927 CEST	53	50560	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:38.657463074 CEST	53	56586	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:38.773796082 CEST	49304	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:38.819968939 CEST	53	49304	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:38.970395088 CEST	58706	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:39.020773888 CEST	53	58706	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:39.136791945 CEST	58181	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:39.187567949 CEST	53	58181	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:39.324103117 CEST	62446	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:39.370894909 CEST	53	62446	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:39.496632099 CEST	65264	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:39.545412064 CEST	53	65264	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:39.667205095 CEST	53177	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:39.715637922 CEST	53	53177	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:39.841248989 CEST	65173	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:39.891978025 CEST	53	65173	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:40.006097078 CEST	63507	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:40.058655024 CEST	53	63507	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:40.192924976 CEST	58816	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:40.244543076 CEST	53	58816	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:40.396852016 CEST	52882	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:40.443057060 CEST	53	52882	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:40.566703081 CEST	64214	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:40.613445997 CEST	53	64214	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:40.737580061 CEST	58726	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:40.789772987 CEST	53	58726	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:40.944961071 CEST	51671	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:40.991019011 CEST	53	51671	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:41.119491100 CEST	50512	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:41.168745041 CEST	53	50512	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:41.253056049 CEST	64885	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:41.301011086 CEST	56337	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:41.301954985 CEST	53	64885	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:41.349771976 CEST	53	56337	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:41.470760107 CEST	58595	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:41.519941092 CEST	53	58595	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:41.653398037 CEST	63601	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:41.702341080 CEST	53	63601	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:41.825105906 CEST	55667	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:41.873939037 CEST	53	55667	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:41.995086908 CEST	54698	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:42.041280985 CEST	53	54698	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:42.157407999 CEST	55818	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:42.206226110 CEST	53	55818	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:42.338170052 CEST	52083	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:42.385411978 CEST	53	52083	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:42.505955935 CEST	62194	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:42.555011034 CEST	53	62194	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:42.676949024 CEST	62044	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:42.728254080 CEST	53	62044	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:42.848555088 CEST	51635	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:42.894651890 CEST	53	51635	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:43.018960953 CEST	59291	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:43.066566944 CEST	53	59291	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:43.211049080 CEST	59339	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:43.258692026 CEST	53	59339	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:43.381468058 CEST	62543	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:43.427357912 CEST	53	62543	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:43.572197914 CEST	51316	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:43.618278027 CEST	53	51316	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:43.734652042 CEST	54843	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:43.784924030 CEST	53	54843	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:43.905656099 CEST	54612	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:43.954395056 CEST	53	54612	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:44.072834969 CEST	63968	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:44.104145050 CEST	51055	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:44.128473997 CEST	53	63968	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:44.152920961 CEST	53	51055	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:44.276083946 CEST	58735	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:44.327733994 CEST	53	58735	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:44.473442078 CEST	55576	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:44.519279957 CEST	53	55576	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:44.650454998 CEST	55984	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:44.699263096 CEST	53	55984	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:44.818403959 CEST	53320	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:44.869532108 CEST	53	53320	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:44.992832899 CEST	60342	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:45.041583061 CEST	53	60342	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:45.153459072 CEST	52801	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:45.200486898 CEST	53	52801	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:45.324383020 CEST	50913	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:45.376173019 CEST	53	50913	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:45.516213894 CEST	51201	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:45.566534042 CEST	53	51201	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:45.685874939 CEST	55461	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:45.732048988 CEST	53	55461	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:45.858398914 CEST	51352	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:45.907174110 CEST	53	51352	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:46.036045074 CEST	51423	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:46.084249973 CEST	53	51423	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:46.198113918 CEST	62403	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:46.244000912 CEST	53	62403	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:46.375406027 CEST	60415	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:46.422892094 CEST	53	60415	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:46.569830894 CEST	58026	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:46.588033915 CEST	49529	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:46.615745068 CEST	53	58026	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:46.645266056 CEST	53	49529	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:46.736795902 CEST	56515	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:46.782839060 CEST	53	56515	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:46.925545931 CEST	59488	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:46.972821951 CEST	53	59488	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:47.102696896 CEST	57813	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:47.149749994 CEST	53	57813	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:47.284640074 CEST	62928	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:47.330586910 CEST	53	62928	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:47.446017027 CEST	62318	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:47.494343996 CEST	53	62318	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:47.622373104 CEST	64672	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:47.671485901 CEST	53	64672	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:47.808901072 CEST	59796	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:47.855022907 CEST	53	59796	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:47.980770111 CEST	62201	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:48.028465033 CEST	53	62201	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:48.152853966 CEST	57119	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:48.200279951 CEST	53	57119	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:48.334845066 CEST	62573	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:48.382241964 CEST	53	62573	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:48.508199930 CEST	59576	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:48.554337978 CEST	53	59576	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:48.721425056 CEST	62796	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:48.767853022 CEST	53	62796	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:48.883734941 CEST	55072	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:48.929847002 CEST	53	55072	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:49.054213047 CEST	64701	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:49.078656912 CEST	59409	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:49.100426912 CEST	53	64701	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:49.127810001 CEST	53	59409	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:49.244457960 CEST	50699	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:49.290523052 CEST	53	50699	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:49.415509939 CEST	57632	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:49.464487076 CEST	53	57632	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:49.605463982 CEST	57009	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:49.654530048 CEST	53	57009	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:49.771671057 CEST	50877	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:49.817569017 CEST	53	50877	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:49.953062057 CEST	53943	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:50.001105070 CEST	53	53943	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:50.119649887 CEST	62570	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:50.168603897 CEST	53	62570	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:50.296026945 CEST	58045	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:50.342554092 CEST	53	58045	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:50.476632118 CEST	52038	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:50.522769928 CEST	53	52038	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:50.670533895 CEST	57087	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:50.716571093 CEST	53	57087	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:50.834522963 CEST	57162	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:50.882675886 CEST	53	57162	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:51.016283989 CEST	63118	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:51.062350035 CEST	53	63118	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:51.189542055 CEST	61453	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:51.236061096 CEST	53	61453	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:51.348251104 CEST	53457	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:51.394440889 CEST	53	53457	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:51.530946970 CEST	58483	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:51.549000025 CEST	61586	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:51.577004910 CEST	53	58483	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:51.597821951 CEST	53	61586	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:51.692586899 CEST	65422	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:51.740605116 CEST	53	65422	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:51.871414900 CEST	64901	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:51.919450045 CEST	53	64901	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:52.042221069 CEST	53457	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:52.088712931 CEST	53	53457	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:52.219403028 CEST	52655	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:52.268448114 CEST	53	52655	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:52.403585911 CEST	56697	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:52.452581882 CEST	53	56697	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:52.579540968 CEST	50386	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:52.627249956 CEST	53	50386	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:52.769021034 CEST	56037	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:52.815294027 CEST	53	56037	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:52.950642109 CEST	58298	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:52.996881962 CEST	53	58298	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:53.129419088 CEST	57907	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:53.180356979 CEST	53	57907	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:53.312184095 CEST	55483	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:53.358282089 CEST	53	55483	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:53.505150080 CEST	53488	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:53.553940058 CEST	53	53488	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:53.677083015 CEST	57353	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:53.724348068 CEST	53	57353	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:53.858544111 CEST	50586	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:53.905966043 CEST	53	50586	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:54.034496069 CEST	62699	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:54.036163092 CEST	63752	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:54.081311941 CEST	53	62699	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:54.083389997 CEST	53	63752	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:54.203320980 CEST	63509	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:54.249538898 CEST	53	63509	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:54.390306950 CEST	63549	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:54.436424971 CEST	53	63549	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:54.569560051 CEST	61937	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:54.615660906 CEST	53	61937	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:54.750781059 CEST	59282	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:54.796900034 CEST	53	59282	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:54.924335957 CEST	60832	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:54.970582962 CEST	53	60832	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:55.115044117 CEST	60058	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:55.163486958 CEST	53	60058	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:55.290584087 CEST	53317	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:55.336723089 CEST	53	53317	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:55.465526104 CEST	59850	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:55.516057968 CEST	53	59850	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:55.644365072 CEST	61345	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:55.690359116 CEST	53	61345	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:55.851373911 CEST	55343	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:55.899378061 CEST	53	55343	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:56.023725986 CEST	63818	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:56.072683096 CEST	53	63818	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:56.203394890 CEST	54435	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:56.249474049 CEST	53	54435	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:56.376456022 CEST	63355	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:56.423702002 CEST	53	63355	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:56.523912907 CEST	59196	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:56.546782970 CEST	60455	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:56.569870949 CEST	53	59196	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:56.592978001 CEST	53	60455	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:56.724370003 CEST	58232	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:56.772032976 CEST	53	58232	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:56.919584036 CEST	60835	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:56.965620041 CEST	53	60835	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:57.101553917 CEST	56086	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:57.147747040 CEST	53	56086	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:57.271439075 CEST	55083	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:57.322194099 CEST	53	55083	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:57.462424994 CEST	65277	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:57.511332989 CEST	53	65277	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:57.645555019 CEST	55648	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:57.694010019 CEST	53	55648	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:57.823003054 CEST	56736	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:57.869462967 CEST	53	56736	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:57.999864101 CEST	59503	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:58.045892000 CEST	53	59503	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:58.172254086 CEST	62924	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:58.218285084 CEST	53	62924	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:58.346375942 CEST	57641	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:58.392780066 CEST	53	57641	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:58.519138098 CEST	61618	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:58.568190098 CEST	53	61618	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:58.686047077 CEST	61802	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:58.735080004 CEST	53	61802	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:58.863064051 CEST	51115	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:58.912050962 CEST	53	51115	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:59.031656027 CEST	52290	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:59.063579082 CEST	61266	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:59.082077026 CEST	53	52290	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:59.109524012 CEST	53	61266	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:59.234498024 CEST	52402	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:59.280607939 CEST	53	52402	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:59.396070957 CEST	50872	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:59.441994905 CEST	53	50872	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:59.586251974 CEST	55881	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:59.635225058 CEST	53	55881	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:59.755371094 CEST	62765	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:59.801498890 CEST	53	62765	8.8.8.8	192.168.2.22
Apr 6, 2021 19:37:59.937093973 CEST	56702	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:37:59.983911037 CEST	53	56702	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:00.098162889 CEST	54336	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:00.144877911 CEST	53	54336	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:00.275240898 CEST	60530	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:00.330797911 CEST	53	60530	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:00.453318119 CEST	53753	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:00.499289989 CEST	53	53753	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:00.617789030 CEST	61331	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:00.668886900 CEST	53	61331	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:00.792685032 CEST	65383	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:00.838687897 CEST	53	65383	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:00.975292921 CEST	60045	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:01.021611929 CEST	53	60045	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:01.144088030 CEST	60636	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:01.191406012 CEST	53	60636	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:01.328506947 CEST	59949	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:01.379906893 CEST	53	59949	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:01.527343035 CEST	51573	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:01.537906885 CEST	61725	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:01.577755928 CEST	53	51573	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:01.584033012 CEST	53	61725	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:01.698180914 CEST	55687	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:01.747505903 CEST	53	55687	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:01.885535955 CEST	65459	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:01.932015896 CEST	53	65459	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:02.056416988 CEST	62094	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:02.105653048 CEST	53	62094	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:02.243170023 CEST	57053	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:02.290122032 CEST	53	57053	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:02.420773029 CEST	53593	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:02.468754053 CEST	53	53593	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:02.603259087 CEST	64727	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:02.649487019 CEST	53	64727	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:02.782865047 CEST	62462	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:02.831124067 CEST	53	62462	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:02.971240997 CEST	54132	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:03.020086050 CEST	53	54132	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:03.141417980 CEST	53462	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:03.187439919 CEST	53	53462	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:03.316459894 CEST	61596	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:03.364408016 CEST	53	61596	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:03.492285013 CEST	64978	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:03.541186094 CEST	53	64978	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:03.670883894 CEST	52139	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:03.718975067 CEST	53	52139	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:03.847690105 CEST	65011	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:03.893829107 CEST	53	65011	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:04.017955065 CEST	53905	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:04.021478891 CEST	53282	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:04.067141056 CEST	53	53905	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:04.067490101 CEST	53	53282	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:04.228310108 CEST	55450	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:04.276479006 CEST	53	55450	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:04.397340059 CEST	65346	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:04.446321964 CEST	53	65346	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:04.581140041 CEST	63857	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:04.627332926 CEST	53	63857	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:04.759939909 CEST	57709	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:04.806052923 CEST	53	57709	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:04.930711985 CEST	61411	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:04.976862907 CEST	53	61411	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:05.113143921 CEST	56515	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:05.159373045 CEST	53	56515	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:05.286103964 CEST	53821	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:05.335764885 CEST	53	53821	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:05.515265942 CEST	55716	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:05.561233997 CEST	53	55716	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:05.712961912 CEST	62632	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:05.761895895 CEST	53	62632	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:05.905492067 CEST	57901	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:05.951483011 CEST	53	57901	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:06.093059063 CEST	62211	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:06.139239073 CEST	53	62211	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:06.275227070 CEST	54018	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:06.321448088 CEST	53	54018	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:06.441044092 CEST	65015	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:06.487046957 CEST	53	65015	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:06.509572029 CEST	58380	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:06.575295925 CEST	53	58380	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:06.615164995 CEST	52379	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:06.666240931 CEST	53	52379	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:06.795519114 CEST	64075	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:06.841949940 CEST	53	64075	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:06.985243082 CEST	63021	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:07.034255028 CEST	53	63021	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:07.161163092 CEST	65316	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:07.207590103 CEST	53	65316	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:07.328142881 CEST	64475	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:07.374176025 CEST	53	64475	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:07.513720036 CEST	61665	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:07.562041998 CEST	53	61665	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:07.698328972 CEST	53536	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:07.745760918 CEST	53	53536	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:07.876878977 CEST	61414	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:07.922846079 CEST	53	61414	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:08.067413092 CEST	52169	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:08.118736029 CEST	53	52169	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:08.252618074 CEST	49917	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:08.299247026 CEST	53	49917	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:08.490504026 CEST	52056	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:08.536484957 CEST	53	52056	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:08.663297892 CEST	65378	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:08.709589005 CEST	53	65378	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:08.849512100 CEST	60105	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:08.895714998 CEST	53	60105	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:09.096837044 CEST	60881	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:09.129297972 CEST	55917	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:09.142827034 CEST	53	60881	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:09.178015947 CEST	53	55917	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:09.320384979 CEST	50435	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:09.366353035 CEST	53	50435	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:09.598504066 CEST	59029	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:09.644542933 CEST	53	59029	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:10.193567038 CEST	64229	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:10.239617109 CEST	53	64229	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:10.884449959 CEST	65499	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:10.932245016 CEST	53	65499	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:11.068459034 CEST	56521	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:11.114489079 CEST	53	56521	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:11.327502012 CEST	64515	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:11.373464108 CEST	53	64515	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:11.493227005 CEST	61149	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:11.539562941 CEST	53	61149	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:11.566406012 CEST	54702	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:11.612560034 CEST	53	54702	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:11.671660900 CEST	61277	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:11.722209930 CEST	53	61277	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:11.854739904 CEST	53421	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:11.900804043 CEST	53	53421	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:12.038043022 CEST	61627	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:12.085539103 CEST	53	61627	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:12.221893072 CEST	49937	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:12.267929077 CEST	53	49937	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:12.396450996 CEST	53551	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:12.442684889 CEST	53	53551	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:12.582019091 CEST	54311	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:12.630037069 CEST	53	54311	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:12.780858994 CEST	56102	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:12.829272032 CEST	53	56102	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:12.963937044 CEST	56135	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:13.009826899 CEST	53	56135	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:13.179121971 CEST	49904	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:13.225379944 CEST	53	49904	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:13.399445057 CEST	55373	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:13.455024958 CEST	53	55373	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:13.599351883 CEST	49292	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:13.651653051 CEST	53	49292	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:13.790491104 CEST	53628	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:13.838156939 CEST	53	53628	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:13.970694065 CEST	63525	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:14.019963026 CEST	53	63525	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:14.043236971 CEST	55612	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:14.100127935 CEST	53	55612	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:14.152802944 CEST	49704	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:14.201769114 CEST	53	49704	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:14.323290110 CEST	63129	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:14.370290995 CEST	53	63129	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:14.497982025 CEST	49837	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:14.544150114 CEST	53	49837	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:14.667592049 CEST	63924	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:14.713498116 CEST	53	63924	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:14.840421915 CEST	62989	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:14.886490107 CEST	53	62989	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:15.002175093 CEST	64594	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:15.051497936 CEST	53	64594	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:15.214972019 CEST	57161	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:15.265008926 CEST	53	57161	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:15.445209980 CEST	54414	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:15.493901014 CEST	53	54414	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:15.612467051 CEST	53574	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:15.661529064 CEST	53	53574	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:15.792239904 CEST	64618	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:15.841680050 CEST	53	64618	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:15.979162931 CEST	51723	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:16.026818037 CEST	53	51723	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:16.204511881 CEST	61204	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:16.250638962 CEST	53	61204	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:16.381931067 CEST	58937	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:16.430991888 CEST	53	58937	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:16.523252010 CEST	65166	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:16.557300091 CEST	63062	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:16.569858074 CEST	53	65166	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:16.603332996 CEST	53	63062	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:16.723875046 CEST	59875	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:16.770932913 CEST	53	59875	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:16.889642000 CEST	52164	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:16.940881968 CEST	53	52164	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:17.077200890 CEST	62002	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:17.129560947 CEST	53	62002	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:17.252511978 CEST	51178	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:17.303787947 CEST	53	51178	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:17.497925043 CEST	50161	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:17.545563936 CEST	53	50161	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:17.686093092 CEST	65403	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:17.733232975 CEST	53	65403	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:17.867083073 CEST	60259	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:17.915251017 CEST	53	60259	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:18.071199894 CEST	55525	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:18.117177010 CEST	53	55525	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:18.243252039 CEST	64971	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:18.289356947 CEST	53	64971	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:18.413860083 CEST	56966	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:18.461764097 CEST	53	56966	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:18.599610090 CEST	63890	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:18.650573015 CEST	53	63890	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:18.779088020 CEST	54828	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:18.825834990 CEST	53	54828	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:18.961834908 CEST	64952	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:18.985028982 CEST	63905	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:19.009919882 CEST	53	64952	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:19.035726070 CEST	53	63905	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:19.143259048 CEST	52317	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:19.191822052 CEST	53	52317	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:19.314286947 CEST	63611	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:19.361972094 CEST	53	63611	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:19.497493029 CEST	62692	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:19.546380997 CEST	53	62692	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:19.703818083 CEST	55534	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:19.749814034 CEST	53	55534	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:20.292802095 CEST	50569	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:20.343597889 CEST	53	50569	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:20.469273090 CEST	56044	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:20.519891977 CEST	53	56044	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:20.640729904 CEST	53065	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:20.690007925 CEST	53	53065	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:20.811634064 CEST	54169	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:20.857659101 CEST	53	54169	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:20.980818033 CEST	51488	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:21.027187109 CEST	53	51488	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:21.146763086 CEST	59098	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:21.194776058 CEST	53	59098	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:21.781115055 CEST	57858	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:21.820899010 CEST	50464	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:21.829585075 CEST	53	57858	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:21.878319979 CEST	53	50464	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:21.955488920 CEST	61027	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:22.001560926 CEST	53	61027	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:22.124306917 CEST	60496	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:22.170859098 CEST	53	60496	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:22.297588110 CEST	54976	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:22.345005989 CEST	53	54976	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:22.455056906 CEST	64874	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:22.504760027 CEST	53	64874	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:22.654496908 CEST	61814	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:22.700571060 CEST	53	61814	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:22.824662924 CEST	58618	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:22.870699883 CEST	53	58618	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:22.992229939 CEST	63210	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:23.041404963 CEST	53	63210	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:23.208795071 CEST	64848	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:23.259429932 CEST	53	64848	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:23.379825115 CEST	61430	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:23.428673983 CEST	53	61430	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:23.571301937 CEST	51719	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:23.621412039 CEST	53	51719	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:23.744735003 CEST	55331	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:23.791091919 CEST	53	55331	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:23.913902044 CEST	56646	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:23.961950064 CEST	53	56646	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:24.092367887 CEST	56380	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:24.138371944 CEST	53	56380	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:24.275418043 CEST	57287	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:24.304415941 CEST	54702	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:24.324444056 CEST	53	57287	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:24.350552082 CEST	53	54702	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:24.446703911 CEST	51771	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:24.497311115 CEST	53	51771	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:24.630182981 CEST	56408	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:24.677355051 CEST	53	56408	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:24.799390078 CEST	50824	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:24.848297119 CEST	53	50824	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:24.981251955 CEST	51649	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:25.028441906 CEST	53	51649	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:25.157005072 CEST	59899	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:25.203136921 CEST	53	59899	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:25.342957973 CEST	65322	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:25.393640995 CEST	53	65322	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:25.523478031 CEST	54091	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:25.569863081 CEST	53	54091	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:25.692460060 CEST	52770	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:25.738466978 CEST	53	52770	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:25.867815971 CEST	61087	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:25.915574074 CEST	53	61087	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:26.037614107 CEST	58816	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:26.086637974 CEST	53	58816	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:26.209059954 CEST	63563	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:26.255073071 CEST	53	63563	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:26.381769896 CEST	56846	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:26.429328918 CEST	53	56846	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:26.564989090 CEST	49807	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:26.614057064 CEST	53	49807	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:26.735872984 CEST	55406	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:26.770564079 CEST	51662	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:26.783716917 CEST	53	55406	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:26.816497087 CEST	53	51662	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:26.919605017 CEST	57526	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:26.970263958 CEST	53	57526	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:27.105606079 CEST	61888	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:27.152595043 CEST	53	61888	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:27.286164045 CEST	63922	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:27.335469007 CEST	53	63922	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:27.478142023 CEST	53207	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:27.524386883 CEST	53	53207	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:27.651897907 CEST	64178	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:27.698133945 CEST	53	64178	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:27.847642899 CEST	57850	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:27.895833969 CEST	53	57850	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:28.015959978 CEST	57502	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:28.062336922 CEST	53	57502	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:28.206568003 CEST	63884	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:28.252672911 CEST	53	63884	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:28.379895926 CEST	64295	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:28.427480936 CEST	53	64295	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:28.542659044 CEST	57929	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:28.588978052 CEST	53	57929	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:28.739360094 CEST	59892	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:28.786786079 CEST	53	59892	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:28.905177116 CEST	64784	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:28.955003977 CEST	53	64784	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:29.075041056 CEST	61720	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:29.125591993 CEST	53	61720	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:29.246798992 CEST	61124	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:29.251560926 CEST	59550	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:29.297749996 CEST	53	59550	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:29.301918983 CEST	53	61124	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:29.436721087 CEST	55939	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:29.484471083 CEST	53	55939	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:29.607078075 CEST	49222	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:29.653316975 CEST	53	49222	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:29.800816059 CEST	65354	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:29.847033978 CEST	53	65354	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:29.968125105 CEST	54850	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:30.014920950 CEST	53	54850	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:30.142911911 CEST	54709	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:30.188934088 CEST	53	54709	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:30.308693886 CEST	59013	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:30.354876995 CEST	53	59013	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:30.482361078 CEST	57402	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:30.531375885 CEST	53	57402	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:30.652503967 CEST	56309	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:30.699915886 CEST	53	56309	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:30.825001955 CEST	60132	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:30.874428988 CEST	53	60132	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:30.992820024 CEST	51609	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:31.039819002 CEST	53	51609	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:31.170656919 CEST	52663	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:31.219489098 CEST	53	52663	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:31.349234104 CEST	61972	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:31.395318031 CEST	53	61972	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:31.525089979 CEST	64059	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:31.571309090 CEST	53	64059	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:31.719836950 CEST	63113	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:31.735059977 CEST	64369	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:31.768045902 CEST	53	63113	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:31.782413960 CEST	53	64369	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:31.888326883 CEST	61108	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:31.944178104 CEST	53	61108	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:32.089119911 CEST	60669	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:32.135552883 CEST	53	60669	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:32.267435074 CEST	51300	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:32.313513041 CEST	53	51300	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:32.433043003 CEST	58442	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:32.487896919 CEST	53	58442	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:32.639250994 CEST	57649	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:32.688652039 CEST	53	57649	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:32.803092957 CEST	51697	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:32.851834059 CEST	53	51697	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:32.989094973 CEST	51760	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:33.035284042 CEST	53	51760	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:33.167126894 CEST	60144	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:33.213548899 CEST	53	60144	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:33.338987112 CEST	50908	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:33.386205912 CEST	53	50908	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:33.515280008 CEST	62678	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:33.561486959 CEST	53	62678	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:33.680886030 CEST	55988	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:33.728787899 CEST	53	55988	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:33.859569073 CEST	59378	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:33.908207893 CEST	53	59378	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:34.038893938 CEST	54090	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:34.086992979 CEST	53	54090	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:34.202419043 CEST	59276	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:34.210398912 CEST	59996	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:34.248441935 CEST	53	59276	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:34.257359982 CEST	53	59996	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:34.395937920 CEST	63137	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:34.444742918 CEST	53	63137	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:34.592117071 CEST	57231	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:34.638170958 CEST	53	57231	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:34.764132977 CEST	59754	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:34.813647985 CEST	53	59754	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:34.953531981 CEST	65212	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:34.999938011 CEST	53	65212	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:35.135361910 CEST	62166	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:35.183446884 CEST	53	62166	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:35.305495977 CEST	50101	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:35.351624012 CEST	53	50101	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:35.477946997 CEST	61666	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:35.527003050 CEST	53	61666	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:35.643309116 CEST	64696	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:35.689631939 CEST	53	64696	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:35.820133924 CEST	51449	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:35.866084099 CEST	53	51449	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:35.992321968 CEST	60926	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:36.041984081 CEST	53	60926	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:36.172853947 CEST	64508	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:36.219408035 CEST	53	64508	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:36.362025023 CEST	58705	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:36.408268929 CEST	53	58705	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:36.541440964 CEST	52540	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:36.587711096 CEST	53	52540	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:36.699378014 CEST	58534	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:36.701637030 CEST	63158	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:36.746068001 CEST	53	58534	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:36.750411987 CEST	53	63158	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:36.947247982 CEST	51228	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:36.993359089 CEST	53	51228	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:37.217139959 CEST	65351	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:37.265175104 CEST	53	65351	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:37.402371883 CEST	59378	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:37.448551893 CEST	53	59378	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:37.792828083 CEST	63715	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:37.842123032 CEST	53	63715	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:37.973066092 CEST	57395	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:38.019195080 CEST	53	57395	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:38.243490934 CEST	53835	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:38.291444063 CEST	53	53835	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:38.693108082 CEST	60659	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:38.739064932 CEST	53	60659	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:38.955795050 CEST	59616	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:39.001805067 CEST	53	59616	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:39.718930960 CEST	50024	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:39.728374004 CEST	60395	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:39.765021086 CEST	53	50024	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:39.788184881 CEST	53	60395	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:39.902683973 CEST	65420	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:39.952893019 CEST	53	65420	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:40.086419106 CEST	53365	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:40.135356903 CEST	53	53365	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:40.321305037 CEST	54266	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:40.370230913 CEST	53	54266	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:40.542924881 CEST	59434	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:40.590842962 CEST	53	59434	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:40.729398966 CEST	58353	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:40.778172016 CEST	53	58353	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:40.908535004 CEST	50093	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:40.956505060 CEST	53	50093	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:41.082809925 CEST	63903	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:41.128978968 CEST	53	63903	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:41.281814098 CEST	55938	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:41.328011990 CEST	53	55938	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:41.450968027 CEST	65291	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:41.499880075 CEST	53	65291	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:41.635153055 CEST	57438	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:41.683012962 CEST	53	57438	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:41.807187080 CEST	53888	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:41.853288889 CEST	53	53888	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:41.992552042 CEST	52097	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:42.041572094 CEST	53	52097	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:42.180056095 CEST	57182	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:42.213982105 CEST	57809	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:42.227828026 CEST	53	57182	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:42.259912968 CEST	53	57809	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:42.370263100 CEST	58920	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:42.420455933 CEST	53	58920	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:42.542531013 CEST	56756	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:42.589231014 CEST	53	56756	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:42.710511923 CEST	57413	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:42.756437063 CEST	53	57413	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:42.908277988 CEST	61594	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:42.956068993 CEST	53	61594	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:43.103501081 CEST	56704	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:43.151124954 CEST	53	56704	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:43.283392906 CEST	65368	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:43.332200050 CEST	53	65368	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:43.467359066 CEST	65456	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:43.516078949 CEST	53	65456	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:43.642757893 CEST	57109	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:43.691771030 CEST	53	57109	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:43.818233967 CEST	52084	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:43.864443064 CEST	53	52084	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:43.999967098 CEST	56551	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:44.046092033 CEST	53	56551	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:44.190431118 CEST	60516	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:44.239358902 CEST	53	60516	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:44.361767054 CEST	56950	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:44.413070917 CEST	53	56950	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:44.539016962 CEST	61530	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:44.585094929 CEST	53	61530	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:44.695946932 CEST	60186	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:44.703476906 CEST	65360	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:44.749892950 CEST	53	65360	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:44.753612995 CEST	53	60186	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:44.910783052 CEST	60488	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:44.958522081 CEST	53	60488	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:45.081307888 CEST	53096	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:45.129836082 CEST	53	53096	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:45.256792068 CEST	55754	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:45.302865028 CEST	53	55754	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:45.437901020 CEST	56760	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:45.483932018 CEST	53	56760	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:45.613051891 CEST	58262	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:45.659207106 CEST	53	58262	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:45.804244041 CEST	59075	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:45.854847908 CEST	53	59075	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:45.975724936 CEST	50957	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:46.021761894 CEST	53	50957	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:46.186288118 CEST	65478	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:46.232311010 CEST	53	65478	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:46.370486021 CEST	53832	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:46.416913033 CEST	53	53832	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:46.555469990 CEST	60761	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:46.603454113 CEST	53	60761	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:46.732006073 CEST	52767	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:46.781021118 CEST	53	52767	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:46.913708925 CEST	57531	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:46.964704037 CEST	53	57531	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:47.103208065 CEST	50447	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:47.151890039 CEST	53	50447	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:47.184441090 CEST	62143	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:47.233361006 CEST	53	62143	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:47.284641027 CEST	56796	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:47.333729982 CEST	53	56796	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:47.481599092 CEST	63443	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:47.530339956 CEST	53	63443	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:47.663400888 CEST	65487	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:47.711304903 CEST	53	65487	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:47.840277910 CEST	50868	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:47.887053967 CEST	53	50868	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:48.016849041 CEST	56537	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:48.063106060 CEST	53	56537	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:48.193799019 CEST	64369	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:48.240263939 CEST	53	64369	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:48.370728970 CEST	60607	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:48.417036057 CEST	53	60607	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:48.552875042 CEST	60625	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:48.599112988 CEST	53	60625	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:48.740240097 CEST	55986	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:48.786489010 CEST	53	55986	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:48.904973984 CEST	52604	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:48.950913906 CEST	53	52604	8.8.8.8	192.168.2.22
Apr 6, 2021 19:38:49.059468985 CEST	50204	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:38:49.106698036 CEST	53	50204	8.8.8.8	192.168.2.22

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 6, 2021 19:35:45.233656883 CEST	192.168.2.22	8.8.8.8	d00a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Apr 6, 2021 19:35:36.137125969 CEST	192.168.2.22	8.8.8.8	0xd372	Standard query (0)	metaflip.io	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:39.489626884 CEST	192.168.2.22	8.8.8.8	0xd7b1	Standard query (0)	partsapp.com.br	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:40.470395088 CEST	192.168.2.22	8.8.8.8	0xe631	Standard query (0)	columbia.aula-web.net	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:41.654264927 CEST	192.168.2.22	8.8.8.8	0x1e93	Standard query (0)	tajushariya.com	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:43.086404085 CEST	192.168.2.22	8.8.8.8	0x3690	Standard query (0)	agenbolatermurah.com	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:44.158518076 CEST	192.168.2.22	8.8.8.8	0x3690	Standard query (0)	agenbolatermurah.com	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:44.824902058 CEST	192.168.2.22	8.8.8.8	0xc330	Standard query (0)	aws.amazon.com	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:44.906500101 CEST	192.168.2.22	8.8.8.8	0x6848	Standard query (0)	aws.amazon.com	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:47.846592903 CEST	192.168.2.22	8.8.8.8	0x8766	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:50.343298912 CEST	192.168.2.22	8.8.8.8	0x4177	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:52.836795092 CEST	192.168.2.22	8.8.8.8	0x4335	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:55.331228971 CEST	192.168.2.22	8.8.8.8	0x63f2	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:57.835201979 CEST	192.168.2.22	8.8.8.8	0x96ce	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:00.331211090 CEST	192.168.2.22	8.8.8.8	0xc117	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:02.814538002 CEST	192.168.2.22	8.8.8.8	0xfe5f	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:05.298871994 CEST	192.168.2.22	8.8.8.8	0x24c2	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:07.816678047 CEST	192.168.2.22	8.8.8.8	0x6b14	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:10.308917999 CEST	192.168.2.22	8.8.8.8	0x7db3	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:12.803281069 CEST	192.168.2.22	8.8.8.8	0xe8b6	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:15.297872066 CEST	192.168.2.22	8.8.8.8	0x9744	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:16.179481030 CEST	192.168.2.22	8.8.8.8	0xd277	Standard query (0)	aws.amazon.com	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:16.247292995 CEST	192.168.2.22	8.8.8.8	0x79c2	Standard query (0)	aws.amazon.com	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:17.672786951 CEST	192.168.2.22	8.8.8.8	0xd366	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:17.799909115 CEST	192.168.2.22	8.8.8.8	0x7bc7	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:17.879045010 CEST	192.168.2.22	8.8.8.8	0x48fa	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:18.090595007 CEST	192.168.2.22	8.8.8.8	0xa9be	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:18.284327030 CEST	192.168.2.22	8.8.8.8	0xf98e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:18.473706961 CEST	192.168.2.22	8.8.8.8	0xdadb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:18.828723907 CEST	192.168.2.22	8.8.8.8	0xc4cd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:19.021471977 CEST	192.168.2.22	8.8.8.8	0x5f4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:19.261431932 CEST	192.168.2.22	8.8.8.8	0xc693	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:19.466202021 CEST	192.168.2.22	8.8.8.8	0x5345	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:19.659653902 CEST	192.168.2.22	8.8.8.8	0x2980	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:19.857697964 CEST	192.168.2.22	8.8.8.8	0x83b6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:20.056922913 CEST	192.168.2.22	8.8.8.8	0xdf09	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:20.261230946 CEST	192.168.2.22	8.8.8.8	0x74e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:20.346158028 CEST	192.168.2.22	8.8.8.8	0xb4a9	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:20.481821060 CEST	192.168.2.22	8.8.8.8	0x900b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:20.693258047 CEST	192.168.2.22	8.8.8.8	0xdcd3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:20.933017969 CEST	192.168.2.22	8.8.8.8	0xf764	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:21.137475967 CEST	192.168.2.22	8.8.8.8	0x444c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:21.334577084 CEST	192.168.2.22	8.8.8.8	0xb3b7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:21.511698961 CEST	192.168.2.22	8.8.8.8	0x9876	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:21.720818043 CEST	192.168.2.22	8.8.8.8	0xe182	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:21.922323942 CEST	192.168.2.22	8.8.8.8	0x9255	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:22.113008976 CEST	192.168.2.22	8.8.8.8	0x87fc	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:22.322094917 CEST	192.168.2.22	8.8.8.8	0xde2a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:22.533502102 CEST	192.168.2.22	8.8.8.8	0xef26	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:22.724620104 CEST	192.168.2.22	8.8.8.8	0xb4ad	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:22.838228941 CEST	192.168.2.22	8.8.8.8	0x42fa	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:22.925374985 CEST	192.168.2.22	8.8.8.8	0xf890	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:23.115191936 CEST	192.168.2.22	8.8.8.8	0x50e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:23.330302000 CEST	192.168.2.22	8.8.8.8	0xe4a9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:23.525396109 CEST	192.168.2.22	8.8.8.8	0x7858	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:23.716440916 CEST	192.168.2.22	8.8.8.8	0x7ab7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:23.910854101 CEST	192.168.2.22	8.8.8.8	0xc120	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:24.115884066 CEST	192.168.2.22	8.8.8.8	0x10b2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:24.480736017 CEST	192.168.2.22	8.8.8.8	0x37fb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:24.663889885 CEST	192.168.2.22	8.8.8.8	0xa5e1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:24.854388952 CEST	192.168.2.22	8.8.8.8	0x71f6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:25.059902906 CEST	192.168.2.22	8.8.8.8	0x6a7b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:25.239742994 CEST	192.168.2.22	8.8.8.8	0x251e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:25.321590900 CEST	192.168.2.22	8.8.8.8	0x16ff	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:25.492512941 CEST	192.168.2.22	8.8.8.8	0x23ef	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:25.699820042 CEST	192.168.2.22	8.8.8.8	0xcfb6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:25.913938999 CEST	192.168.2.22	8.8.8.8	0xd96a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:26.166996956 CEST	192.168.2.22	8.8.8.8	0xc1bc	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:26.362685919 CEST	192.168.2.22	8.8.8.8	0xc2e8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:26.588087082 CEST	192.168.2.22	8.8.8.8	0x125	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:26.850569010 CEST	192.168.2.22	8.8.8.8	0x47b2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:27.030610085 CEST	192.168.2.22	8.8.8.8	0x8d7e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:27.231368065 CEST	192.168.2.22	8.8.8.8	0x88b0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:27.431425095 CEST	192.168.2.22	8.8.8.8	0x5129	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:27.606967926 CEST	192.168.2.22	8.8.8.8	0xab81	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:27.797789097 CEST	192.168.2.22	8.8.8.8	0x1f17	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:27.815926075 CEST	192.168.2.22	8.8.8.8	0xe82b	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:28.032005072 CEST	192.168.2.22	8.8.8.8	0xe74d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:28.300306082 CEST	192.168.2.22	8.8.8.8	0x386d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:28.576062918 CEST	192.168.2.22	8.8.8.8	0x2510	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:28.831423044 CEST	192.168.2.22	8.8.8.8	0x126	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:29.120851994 CEST	192.168.2.22	8.8.8.8	0x322	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:29.446841002 CEST	192.168.2.22	8.8.8.8	0x2f4c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:29.646418095 CEST	192.168.2.22	8.8.8.8	0x67da	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:29.873347044 CEST	192.168.2.22	8.8.8.8	0xd561	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:30.071108103 CEST	192.168.2.22	8.8.8.8	0x98af	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:30.292124033 CEST	192.168.2.22	8.8.8.8	0xc2be	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:30.318037987 CEST	192.168.2.22	8.8.8.8	0xf41e	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:30.486824989 CEST	192.168.2.22	8.8.8.8	0xa8c7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:30.684063911 CEST	192.168.2.22	8.8.8.8	0xc21a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:30.893956900 CEST	192.168.2.22	8.8.8.8	0x6074	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:31.078867912 CEST	192.168.2.22	8.8.8.8	0x415f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:31.257278919 CEST	192.168.2.22	8.8.8.8	0xb7ba	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:31.454668045 CEST	192.168.2.22	8.8.8.8	0x1b61	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:31.640161991 CEST	192.168.2.22	8.8.8.8	0x7463	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:31.838002920 CEST	192.168.2.22	8.8.8.8	0x7c3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:32.017920017 CEST	192.168.2.22	8.8.8.8	0xff60	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:32.223304033 CEST	192.168.2.22	8.8.8.8	0x9ea4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:32.422225952 CEST	192.168.2.22	8.8.8.8	0xd78c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:32.604650974 CEST	192.168.2.22	8.8.8.8	0xe56c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:32.872615099 CEST	192.168.2.22	8.8.8.8	0xd280	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:32.877154112 CEST	192.168.2.22	8.8.8.8	0x8547	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:33.226604939 CEST	192.168.2.22	8.8.8.8	0xf95a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:33.411539078 CEST	192.168.2.22	8.8.8.8	0x5bea	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:33.815419912 CEST	192.168.2.22	8.8.8.8	0x1560	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:34.016172886 CEST	192.168.2.22	8.8.8.8	0xcd05	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:34.188574076 CEST	192.168.2.22	8.8.8.8	0x9874	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:34.373506069 CEST	192.168.2.22	8.8.8.8	0x1ca	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:34.884202957 CEST	192.168.2.22	8.8.8.8	0x5c9e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:35.070255995 CEST	192.168.2.22	8.8.8.8	0x15ad	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:36.116987944 CEST	192.168.2.22	8.8.8.8	0x9d56	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:36.216833115 CEST	192.168.2.22	8.8.8.8	0x89f	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:36.295813084 CEST	192.168.2.22	8.8.8.8	0x6524	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:36.465683937 CEST	192.168.2.22	8.8.8.8	0x66de	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:36.631361961 CEST	192.168.2.22	8.8.8.8	0x5e40	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:36.819865942 CEST	192.168.2.22	8.8.8.8	0xc51b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:36.988800049 CEST	192.168.2.22	8.8.8.8	0x8771	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:37.257400990 CEST	192.168.2.22	8.8.8.8	0xc141	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:37.448842049 CEST	192.168.2.22	8.8.8.8	0xf65a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:37.628514051 CEST	192.168.2.22	8.8.8.8	0x837a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:37.805069923 CEST	192.168.2.22	8.8.8.8	0xf5f0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:38.060878038 CEST	192.168.2.22	8.8.8.8	0x5b11	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:38.280234098 CEST	192.168.2.22	8.8.8.8	0xfd9d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:38.454212904 CEST	192.168.2.22	8.8.8.8	0x51f5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:38.630655050 CEST	192.168.2.22	8.8.8.8	0xa8ab	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:38.739043951 CEST	192.168.2.22	8.8.8.8	0x5275	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:38.808923960 CEST	192.168.2.22	8.8.8.8	0x12bf	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:39.057017088 CEST	192.168.2.22	8.8.8.8	0x3fb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:39.285995007 CEST	192.168.2.22	8.8.8.8	0x9c79	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:39.515069008 CEST	192.168.2.22	8.8.8.8	0x3926	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:39.754087925 CEST	192.168.2.22	8.8.8.8	0x61e5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:39.991471052 CEST	192.168.2.22	8.8.8.8	0x6d6b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:40.281938076 CEST	192.168.2.22	8.8.8.8	0xc5ae	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:40.538321018 CEST	192.168.2.22	8.8.8.8	0x5c70	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:40.803672075 CEST	192.168.2.22	8.8.8.8	0xf57d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:41.121234894 CEST	192.168.2.22	8.8.8.8	0x8cf9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:41.240986109 CEST	192.168.2.22	8.8.8.8	0x699d	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:41.397893906 CEST	192.168.2.22	8.8.8.8	0x901f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:41.726876020 CEST	192.168.2.22	8.8.8.8	0x69ff	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:42.010631084 CEST	192.168.2.22	8.8.8.8	0x162a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:42.261653900 CEST	192.168.2.22	8.8.8.8	0xfd31	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:42.527062893 CEST	192.168.2.22	8.8.8.8	0xbbe7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:42.806523085 CEST	192.168.2.22	8.8.8.8	0xa4d6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:43.078768015 CEST	192.168.2.22	8.8.8.8	0xf0c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:43.267930984 CEST	192.168.2.22	8.8.8.8	0xf438	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:43.443906069 CEST	192.168.2.22	8.8.8.8	0x52d9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:43.725967884 CEST	192.168.2.22	8.8.8.8	0x775c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:43.735095024 CEST	192.168.2.22	8.8.8.8	0xd196	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:43.991578102 CEST	192.168.2.22	8.8.8.8	0xcf1a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:44.293545961 CEST	192.168.2.22	8.8.8.8	0x3964	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:44.536412001 CEST	192.168.2.22	8.8.8.8	0xd0a8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:44.826736927 CEST	192.168.2.22	8.8.8.8	0xe6e2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:45.097667933 CEST	192.168.2.22	8.8.8.8	0x8b5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:45.366111994 CEST	192.168.2.22	8.8.8.8	0xb8c2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:45.604413033 CEST	192.168.2.22	8.8.8.8	0x20ba	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:45.786500931 CEST	192.168.2.22	8.8.8.8	0xb1a9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:45.965044022 CEST	192.168.2.22	8.8.8.8	0x97e9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:46.131656885 CEST	192.168.2.22	8.8.8.8	0x8f12	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:46.229585886 CEST	192.168.2.22	8.8.8.8	0x25dd	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:46.305361032 CEST	192.168.2.22	8.8.8.8	0x2fea	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:46.482002974 CEST	192.168.2.22	8.8.8.8	0x38b8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:46.664236069 CEST	192.168.2.22	8.8.8.8	0xcff9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:46.837809086 CEST	192.168.2.22	8.8.8.8	0x26df	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:47.013334990 CEST	192.168.2.22	8.8.8.8	0x46be	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:47.184865952 CEST	192.168.2.22	8.8.8.8	0x5780	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:47.387356043 CEST	192.168.2.22	8.8.8.8	0xd66e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:47.553055048 CEST	192.168.2.22	8.8.8.8	0x119a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:47.732084990 CEST	192.168.2.22	8.8.8.8	0xc8a8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:47.898159981 CEST	192.168.2.22	8.8.8.8	0xcbe4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:48.084307909 CEST	192.168.2.22	8.8.8.8	0xdf12	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:48.272094965 CEST	192.168.2.22	8.8.8.8	0x264d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:48.457078934 CEST	192.168.2.22	8.8.8.8	0x8267	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:48.652059078 CEST	192.168.2.22	8.8.8.8	0x82ad	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:48.686547041 CEST	192.168.2.22	8.8.8.8	0xc494	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:48.833695889 CEST	192.168.2.22	8.8.8.8	0xba9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:49.015856981 CEST	192.168.2.22	8.8.8.8	0x9d55	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:49.190787077 CEST	192.168.2.22	8.8.8.8	0x38b1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:49.356460094 CEST	192.168.2.22	8.8.8.8	0x9665	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:49.536844969 CEST	192.168.2.22	8.8.8.8	0xd755	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:49.711152077 CEST	192.168.2.22	8.8.8.8	0xe77b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:49.899955034 CEST	192.168.2.22	8.8.8.8	0x5d13	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:50.076857090 CEST	192.168.2.22	8.8.8.8	0xc878	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:50.260812998 CEST	192.168.2.22	8.8.8.8	0x5a25	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:50.438448906 CEST	192.168.2.22	8.8.8.8	0x6aea	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:50.611718893 CEST	192.168.2.22	8.8.8.8	0x18db	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:50.825449944 CEST	192.168.2.22	8.8.8.8	0xe97e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:51.012044907 CEST	192.168.2.22	8.8.8.8	0x7ca6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:51.204231977 CEST	192.168.2.22	8.8.8.8	0x741f	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:51.213184118 CEST	192.168.2.22	8.8.8.8	0x5f09	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:51.389925003 CEST	192.168.2.22	8.8.8.8	0x2acf	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:51.566467047 CEST	192.168.2.22	8.8.8.8	0x8a9a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:51.749661922 CEST	192.168.2.22	8.8.8.8	0x1439	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:51.931509018 CEST	192.168.2.22	8.8.8.8	0x4e9e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:52.106955051 CEST	192.168.2.22	8.8.8.8	0xeada	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:52.284025908 CEST	192.168.2.22	8.8.8.8	0xb9b8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:52.464056969 CEST	192.168.2.22	8.8.8.8	0xd243	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:52.640108109 CEST	192.168.2.22	8.8.8.8	0xb114	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:52.815110922 CEST	192.168.2.22	8.8.8.8	0xa611	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:52.989859104 CEST	192.168.2.22	8.8.8.8	0xa809	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:53.164561987 CEST	192.168.2.22	8.8.8.8	0x6158	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:53.340703011 CEST	192.168.2.22	8.8.8.8	0x44c6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:53.514827967 CEST	192.168.2.22	8.8.8.8	0x39b3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:53.683840990 CEST	192.168.2.22	8.8.8.8	0x7db2	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:53.692327023 CEST	192.168.2.22	8.8.8.8	0xd71e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:53.859879017 CEST	192.168.2.22	8.8.8.8	0x32de	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:54.031747103 CEST	192.168.2.22	8.8.8.8	0x8106	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:54.213190079 CEST	192.168.2.22	8.8.8.8	0x491	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:54.395225048 CEST	192.168.2.22	8.8.8.8	0x5989	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:54.571655989 CEST	192.168.2.22	8.8.8.8	0xfb86	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:54.742714882 CEST	192.168.2.22	8.8.8.8	0xdbd9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:54.932506084 CEST	192.168.2.22	8.8.8.8	0x9f83	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:55.105751991 CEST	192.168.2.22	8.8.8.8	0x45a1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:55.301177979 CEST	192.168.2.22	8.8.8.8	0xd869	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:55.469841003 CEST	192.168.2.22	8.8.8.8	0xd5f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:55.652600050 CEST	192.168.2.22	8.8.8.8	0x4c27	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:55.852437973 CEST	192.168.2.22	8.8.8.8	0x47fc	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:56.034863949 CEST	192.168.2.22	8.8.8.8	0x61c6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:56.172427893 CEST	192.168.2.22	8.8.8.8	0x4d1f	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:56.198894024 CEST	192.168.2.22	8.8.8.8	0x89f1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:56.374111891 CEST	192.168.2.22	8.8.8.8	0xde1a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:56.547128916 CEST	192.168.2.22	8.8.8.8	0xe9fa	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:56.722104073 CEST	192.168.2.22	8.8.8.8	0x55ea	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:56.908582926 CEST	192.168.2.22	8.8.8.8	0x860c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:57.108580112 CEST	192.168.2.22	8.8.8.8	0x93ff	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:57.279031992 CEST	192.168.2.22	8.8.8.8	0xbb07	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:57.471599102 CEST	192.168.2.22	8.8.8.8	0x8124	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:57.645342112 CEST	192.168.2.22	8.8.8.8	0x30c2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:57.812433958 CEST	192.168.2.22	8.8.8.8	0x5eb8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:57.996269941 CEST	192.168.2.22	8.8.8.8	0xdccb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:58.164652109 CEST	192.168.2.22	8.8.8.8	0x932c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:58.347866058 CEST	192.168.2.22	8.8.8.8	0xb068	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:58.513468027 CEST	192.168.2.22	8.8.8.8	0x5d37	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:58.670449972 CEST	192.168.2.22	8.8.8.8	0x36ab	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:58.699768066 CEST	192.168.2.22	8.8.8.8	0xb89c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:58.869579077 CEST	192.168.2.22	8.8.8.8	0xdcf3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:59.042962074 CEST	192.168.2.22	8.8.8.8	0x2ed0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:59.216974020 CEST	192.168.2.22	8.8.8.8	0xd409	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:59.411034107 CEST	192.168.2.22	8.8.8.8	0x67a7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:59.591628075 CEST	192.168.2.22	8.8.8.8	0x556	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:59.777415991 CEST	192.168.2.22	8.8.8.8	0x7fd9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:59.957231045 CEST	192.168.2.22	8.8.8.8	0x2310	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:00.155050039 CEST	192.168.2.22	8.8.8.8	0xbfe0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:00.324331045 CEST	192.168.2.22	8.8.8.8	0xd2c3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:00.492532969 CEST	192.168.2.22	8.8.8.8	0x3458	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:00.674906015 CEST	192.168.2.22	8.8.8.8	0x22e6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:00.860245943 CEST	192.168.2.22	8.8.8.8	0xe057	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:01.051093102 CEST	192.168.2.22	8.8.8.8	0x5b9e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:01.155206919 CEST	192.168.2.22	8.8.8.8	0xbba5	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:01.233367920 CEST	192.168.2.22	8.8.8.8	0x3186	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:01.417799950 CEST	192.168.2.22	8.8.8.8	0x55a3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:01.610112906 CEST	192.168.2.22	8.8.8.8	0x9e31	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:01.783416986 CEST	192.168.2.22	8.8.8.8	0xbec3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:01.971458912 CEST	192.168.2.22	8.8.8.8	0xf624	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:02.160326958 CEST	192.168.2.22	8.8.8.8	0x90dd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:02.334619045 CEST	192.168.2.22	8.8.8.8	0x30d4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:02.522388935 CEST	192.168.2.22	8.8.8.8	0xda0d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:02.698420048 CEST	192.168.2.22	8.8.8.8	0x3feb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:02.874819040 CEST	192.168.2.22	8.8.8.8	0x8add	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:03.052468061 CEST	192.168.2.22	8.8.8.8	0xf9c5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:03.236524105 CEST	192.168.2.22	8.8.8.8	0x45ee	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:03.421710014 CEST	192.168.2.22	8.8.8.8	0x468e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:03.597856045 CEST	192.168.2.22	8.8.8.8	0xb551	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:03.633913040 CEST	192.168.2.22	8.8.8.8	0xcc8	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:03.769036055 CEST	192.168.2.22	8.8.8.8	0x7de3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:03.953802109 CEST	192.168.2.22	8.8.8.8	0x97a4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:04.126812935 CEST	192.168.2.22	8.8.8.8	0x9b85	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:04.302958012 CEST	192.168.2.22	8.8.8.8	0xbb61	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:04.472477913 CEST	192.168.2.22	8.8.8.8	0x4e31	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:04.657385111 CEST	192.168.2.22	8.8.8.8	0x1e88	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:04.832766056 CEST	192.168.2.22	8.8.8.8	0x85f6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:05.006548882 CEST	192.168.2.22	8.8.8.8	0x6b38	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:05.178035975 CEST	192.168.2.22	8.8.8.8	0x8830	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:05.360935926 CEST	192.168.2.22	8.8.8.8	0xea50	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:05.539688110 CEST	192.168.2.22	8.8.8.8	0x8db3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:05.721827984 CEST	192.168.2.22	8.8.8.8	0x4b4f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:05.893601894 CEST	192.168.2.22	8.8.8.8	0xee0f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:06.062316895 CEST	192.168.2.22	8.8.8.8	0x55f3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:06.095909119 CEST	192.168.2.22	8.8.8.8	0x8817	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:06.249746084 CEST	192.168.2.22	8.8.8.8	0x7ea7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:06.428329945 CEST	192.168.2.22	8.8.8.8	0xfc65	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:06.610569954 CEST	192.168.2.22	8.8.8.8	0x4026	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:06.784722090 CEST	192.168.2.22	8.8.8.8	0x6ab7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:07.034377098 CEST	192.168.2.22	8.8.8.8	0xbdad	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:07.206109047 CEST	192.168.2.22	8.8.8.8	0xdf9f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:07.385504007 CEST	192.168.2.22	8.8.8.8	0x8534	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:07.562226057 CEST	192.168.2.22	8.8.8.8	0xb8ae	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:07.743144035 CEST	192.168.2.22	8.8.8.8	0x7f5d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:07.934602976 CEST	192.168.2.22	8.8.8.8	0x46ad	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:08.111644983 CEST	192.168.2.22	8.8.8.8	0x638f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:08.292407990 CEST	192.168.2.22	8.8.8.8	0xf038	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:08.466573000 CEST	192.168.2.22	8.8.8.8	0xb1a3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:08.590711117 CEST	192.168.2.22	8.8.8.8	0x39e3	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:08.637459040 CEST	192.168.2.22	8.8.8.8	0x5c6d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:08.821662903 CEST	192.168.2.22	8.8.8.8	0xbba0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:09.007144928 CEST	192.168.2.22	8.8.8.8	0x5777	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:09.195717096 CEST	192.168.2.22	8.8.8.8	0x69df	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:09.381869078 CEST	192.168.2.22	8.8.8.8	0x3a6a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:09.551136971 CEST	192.168.2.22	8.8.8.8	0xb9b0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:09.748068094 CEST	192.168.2.22	8.8.8.8	0x9ef7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:09.913022995 CEST	192.168.2.22	8.8.8.8	0x4ff	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:10.111479044 CEST	192.168.2.22	8.8.8.8	0xbb23	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:10.270504951 CEST	192.168.2.22	8.8.8.8	0x8546	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:10.446788073 CEST	192.168.2.22	8.8.8.8	0x5948	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:10.621332884 CEST	192.168.2.22	8.8.8.8	0xa8ed	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:10.786812067 CEST	192.168.2.22	8.8.8.8	0x1a7f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:10.963589907 CEST	192.168.2.22	8.8.8.8	0xeb80	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:11.147041082 CEST	192.168.2.22	8.8.8.8	0xd33e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:11.317904949 CEST	192.168.2.22	8.8.8.8	0x8381	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:11.438857079 CEST	192.168.2.22	8.8.8.8	0x9f99	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:11.495315075 CEST	192.168.2.22	8.8.8.8	0xeeda	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:11.670815945 CEST	192.168.2.22	8.8.8.8	0xfd7c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:11.844130039 CEST	192.168.2.22	8.8.8.8	0x4b78	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:12.063019991 CEST	192.168.2.22	8.8.8.8	0x1c44	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:12.236805916 CEST	192.168.2.22	8.8.8.8	0xc9ae	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:12.417155027 CEST	192.168.2.22	8.8.8.8	0x9625	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:12.586571932 CEST	192.168.2.22	8.8.8.8	0xf17e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:12.749816895 CEST	192.168.2.22	8.8.8.8	0xf234	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:12.936978102 CEST	192.168.2.22	8.8.8.8	0x3ac	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:13.108819008 CEST	192.168.2.22	8.8.8.8	0xd932	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:13.306874990 CEST	192.168.2.22	8.8.8.8	0x3814	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:13.466762066 CEST	192.168.2.22	8.8.8.8	0xe1b4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:13.640093088 CEST	192.168.2.22	8.8.8.8	0x6cca	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:13.820715904 CEST	192.168.2.22	8.8.8.8	0x6aae	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:13.987893105 CEST	192.168.2.22	8.8.8.8	0xb3dd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:14.057594061 CEST	192.168.2.22	8.8.8.8	0x71e7	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:14.173635006 CEST	192.168.2.22	8.8.8.8	0xafd0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:14.341551065 CEST	192.168.2.22	8.8.8.8	0x7bce	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:14.521785021 CEST	192.168.2.22	8.8.8.8	0x8f9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:14.709146976 CEST	192.168.2.22	8.8.8.8	0x8c8a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:14.926997900 CEST	192.168.2.22	8.8.8.8	0x13b9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:15.088453054 CEST	192.168.2.22	8.8.8.8	0xcb7b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:15.253283024 CEST	192.168.2.22	8.8.8.8	0xd966	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:15.415843964 CEST	192.168.2.22	8.8.8.8	0x611a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:15.602977991 CEST	192.168.2.22	8.8.8.8	0xbfe2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:15.783777952 CEST	192.168.2.22	8.8.8.8	0xbe35	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:15.953319073 CEST	192.168.2.22	8.8.8.8	0x1ebb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:16.118959904 CEST	192.168.2.22	8.8.8.8	0xa6f0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:16.289925098 CEST	192.168.2.22	8.8.8.8	0x94f0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:16.463671923 CEST	192.168.2.22	8.8.8.8	0x5938	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:16.643940926 CEST	192.168.2.22	8.8.8.8	0x1dba	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:16.816150904 CEST	192.168.2.22	8.8.8.8	0x7544	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:16.898039103 CEST	192.168.2.22	8.8.8.8	0x1ba9	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:16.977672100 CEST	192.168.2.22	8.8.8.8	0x712c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:17.183262110 CEST	192.168.2.22	8.8.8.8	0xccae	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:17.351701975 CEST	192.168.2.22	8.8.8.8	0xb4e0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:17.536031008 CEST	192.168.2.22	8.8.8.8	0xdc4b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:17.703474998 CEST	192.168.2.22	8.8.8.8	0x9a87	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:17.866416931 CEST	192.168.2.22	8.8.8.8	0x29e8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:18.050129890 CEST	192.168.2.22	8.8.8.8	0x9b88	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:18.231312037 CEST	192.168.2.22	8.8.8.8	0xb559	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:18.414141893 CEST	192.168.2.22	8.8.8.8	0xfc24	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:18.585561037 CEST	192.168.2.22	8.8.8.8	0x729b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:18.761172056 CEST	192.168.2.22	8.8.8.8	0xf2e1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:18.953582048 CEST	192.168.2.22	8.8.8.8	0xfbb5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:19.113483906 CEST	192.168.2.22	8.8.8.8	0x8f92	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:19.294445992 CEST	192.168.2.22	8.8.8.8	0xa56b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:19.462013960 CEST	192.168.2.22	8.8.8.8	0xb878	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:19.634637117 CEST	192.168.2.22	8.8.8.8	0xd51	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:19.780950069 CEST	192.168.2.22	8.8.8.8	0x65f0	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:19.816342115 CEST	192.168.2.22	8.8.8.8	0xc931	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:20.021179914 CEST	192.168.2.22	8.8.8.8	0x3910	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:20.195172071 CEST	192.168.2.22	8.8.8.8	0xcb7c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:20.377510071 CEST	192.168.2.22	8.8.8.8	0xaac7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:20.558144093 CEST	192.168.2.22	8.8.8.8	0x5773	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:20.732511997 CEST	192.168.2.22	8.8.8.8	0x2842	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:20.904649019 CEST	192.168.2.22	8.8.8.8	0x7f41	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:21.075448990 CEST	192.168.2.22	8.8.8.8	0xd7b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:21.252221107 CEST	192.168.2.22	8.8.8.8	0x2b36	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:21.422374964 CEST	192.168.2.22	8.8.8.8	0xacc8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:21.587127924 CEST	192.168.2.22	8.8.8.8	0x681a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:21.758284092 CEST	192.168.2.22	8.8.8.8	0xc9f4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:21.924108982 CEST	192.168.2.22	8.8.8.8	0x373f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:22.099838018 CEST	192.168.2.22	8.8.8.8	0xb67a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:22.290946960 CEST	192.168.2.22	8.8.8.8	0x4204	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:22.452619076 CEST	192.168.2.22	8.8.8.8	0x969e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:22.494591951 CEST	192.168.2.22	8.8.8.8	0x1504	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:22.616847992 CEST	192.168.2.22	8.8.8.8	0x2620	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:22.799526930 CEST	192.168.2.22	8.8.8.8	0x98b9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:22.971194029 CEST	192.168.2.22	8.8.8.8	0xe1c8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:23.161746979 CEST	192.168.2.22	8.8.8.8	0xb630	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:23.335489988 CEST	192.168.2.22	8.8.8.8	0x8f39	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:23.515710115 CEST	192.168.2.22	8.8.8.8	0xb018	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:23.685277939 CEST	192.168.2.22	8.8.8.8	0x8165	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:23.860574961 CEST	192.168.2.22	8.8.8.8	0x522c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:24.043277025 CEST	192.168.2.22	8.8.8.8	0xfbbf	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:24.254776955 CEST	192.168.2.22	8.8.8.8	0xca53	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:24.440562963 CEST	192.168.2.22	8.8.8.8	0x3408	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:24.606415987 CEST	192.168.2.22	8.8.8.8	0xd1f6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:24.792625904 CEST	192.168.2.22	8.8.8.8	0x6212	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:25.001054049 CEST	192.168.2.22	8.8.8.8	0xba20	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:25.169689894 CEST	192.168.2.22	8.8.8.8	0x80cc	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:25.183235884 CEST	192.168.2.22	8.8.8.8	0x19cd	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:25.343031883 CEST	192.168.2.22	8.8.8.8	0xade8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:25.533185959 CEST	192.168.2.22	8.8.8.8	0xc376	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:25.697748899 CEST	192.168.2.22	8.8.8.8	0x3fa2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:25.857820034 CEST	192.168.2.22	8.8.8.8	0xdd8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:26.035681009 CEST	192.168.2.22	8.8.8.8	0x8ab5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:26.210376978 CEST	192.168.2.22	8.8.8.8	0x7457	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:26.376017094 CEST	192.168.2.22	8.8.8.8	0x232b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:26.540535927 CEST	192.168.2.22	8.8.8.8	0x1971	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:26.723180056 CEST	192.168.2.22	8.8.8.8	0xff14	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:26.907540083 CEST	192.168.2.22	8.8.8.8	0x2d8b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:27.079299927 CEST	192.168.2.22	8.8.8.8	0x740d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:27.246588945 CEST	192.168.2.22	8.8.8.8	0x8792	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:27.416966915 CEST	192.168.2.22	8.8.8.8	0xb74c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:27.591501951 CEST	192.168.2.22	8.8.8.8	0x402b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:27.795217991 CEST	192.168.2.22	8.8.8.8	0xf843	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:27.817647934 CEST	192.168.2.22	8.8.8.8	0x42cf	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:27.961647034 CEST	192.168.2.22	8.8.8.8	0xd549	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:28.150680065 CEST	192.168.2.22	8.8.8.8	0x8d98	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:28.355355978 CEST	192.168.2.22	8.8.8.8	0xee8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:28.524492979 CEST	192.168.2.22	8.8.8.8	0x8699	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:28.714340925 CEST	192.168.2.22	8.8.8.8	0xb59a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:28.886686087 CEST	192.168.2.22	8.8.8.8	0x508a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:29.063580036 CEST	192.168.2.22	8.8.8.8	0xdb9d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:29.229266882 CEST	192.168.2.22	8.8.8.8	0xef1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:29.394689083 CEST	192.168.2.22	8.8.8.8	0xb342	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:29.561599016 CEST	192.168.2.22	8.8.8.8	0xb8d0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:29.727068901 CEST	192.168.2.22	8.8.8.8	0xe703	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:29.897708893 CEST	192.168.2.22	8.8.8.8	0x41ed	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:30.086199999 CEST	192.168.2.22	8.8.8.8	0xbe0e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:30.253613949 CEST	192.168.2.22	8.8.8.8	0xe880	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:30.298407078 CEST	192.168.2.22	8.8.8.8	0xe611	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:30.439780951 CEST	192.168.2.22	8.8.8.8	0x3514	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:30.621049881 CEST	192.168.2.22	8.8.8.8	0x38d8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:30.787250042 CEST	192.168.2.22	8.8.8.8	0x2d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:30.963793993 CEST	192.168.2.22	8.8.8.8	0x5620	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:31.142081022 CEST	192.168.2.22	8.8.8.8	0x2bae	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:31.325540066 CEST	192.168.2.22	8.8.8.8	0x31e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:31.495177031 CEST	192.168.2.22	8.8.8.8	0xff7f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:31.659604073 CEST	192.168.2.22	8.8.8.8	0xf4b0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:31.830615997 CEST	192.168.2.22	8.8.8.8	0xb221	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:32.010437965 CEST	192.168.2.22	8.8.8.8	0xd27	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:32.174140930 CEST	192.168.2.22	8.8.8.8	0x5520	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:32.358314037 CEST	192.168.2.22	8.8.8.8	0x9043	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:32.555330992 CEST	192.168.2.22	8.8.8.8	0xb0d4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:32.718765974 CEST	192.168.2.22	8.8.8.8	0xaa43	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:32.797456980 CEST	192.168.2.22	8.8.8.8	0x2723	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:32.909255981 CEST	192.168.2.22	8.8.8.8	0xcb5f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:33.079211950 CEST	192.168.2.22	8.8.8.8	0xdc82	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:33.258795977 CEST	192.168.2.22	8.8.8.8	0xf21c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:33.432892084 CEST	192.168.2.22	8.8.8.8	0x457b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:33.603017092 CEST	192.168.2.22	8.8.8.8	0xce1f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:33.785034895 CEST	192.168.2.22	8.8.8.8	0x4032	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:33.958364964 CEST	192.168.2.22	8.8.8.8	0x2661	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:34.128366947 CEST	192.168.2.22	8.8.8.8	0x57f8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:34.314326048 CEST	192.168.2.22	8.8.8.8	0x7143	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:34.486742973 CEST	192.168.2.22	8.8.8.8	0x8a7e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:34.657634974 CEST	192.168.2.22	8.8.8.8	0xa48f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:34.830157995 CEST	192.168.2.22	8.8.8.8	0xfba5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:35.029129028 CEST	192.168.2.22	8.8.8.8	0xea6e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:35.216772079 CEST	192.168.2.22	8.8.8.8	0x3099	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:35.391812086 CEST	192.168.2.22	8.8.8.8	0xec07	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:35.573561907 CEST	192.168.2.22	8.8.8.8	0x5b1d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:35.719377041 CEST	192.168.2.22	8.8.8.8	0xa13	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:35.767710924 CEST	192.168.2.22	8.8.8.8	0x1e93	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:35.932790995 CEST	192.168.2.22	8.8.8.8	0x475d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:36.122066975 CEST	192.168.2.22	8.8.8.8	0x91c8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:36.291455984 CEST	192.168.2.22	8.8.8.8	0xcff8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:36.496258020 CEST	192.168.2.22	8.8.8.8	0x14de	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:36.672168970 CEST	192.168.2.22	8.8.8.8	0x3c38	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:36.838794947 CEST	192.168.2.22	8.8.8.8	0x8741	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:37.009438038 CEST	192.168.2.22	8.8.8.8	0xaefe	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:37.190948963 CEST	192.168.2.22	8.8.8.8	0x49c4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:37.365075111 CEST	192.168.2.22	8.8.8.8	0x81aa	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:37.546787024 CEST	192.168.2.22	8.8.8.8	0x9dcf	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:37.720933914 CEST	192.168.2.22	8.8.8.8	0x67d2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:37.884164095 CEST	192.168.2.22	8.8.8.8	0x4e5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:38.069160938 CEST	192.168.2.22	8.8.8.8	0xc4d5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:38.226083994 CEST	192.168.2.22	8.8.8.8	0xbe0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:38.438471079 CEST	192.168.2.22	8.8.8.8	0x4b39	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:38.582657099 CEST	192.168.2.22	8.8.8.8	0xf74	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:38.611440897 CEST	192.168.2.22	8.8.8.8	0xb0d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:38.773796082 CEST	192.168.2.22	8.8.8.8	0xbe36	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:38.970395088 CEST	192.168.2.22	8.8.8.8	0x3c09	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:39.136791945 CEST	192.168.2.22	8.8.8.8	0xef0e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:39.324103117 CEST	192.168.2.22	8.8.8.8	0x70f2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:39.496632099 CEST	192.168.2.22	8.8.8.8	0xc1d7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:39.667205095 CEST	192.168.2.22	8.8.8.8	0x2445	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:39.841248989 CEST	192.168.2.22	8.8.8.8	0x188d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:40.006097078 CEST	192.168.2.22	8.8.8.8	0x35e9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:40.192924976 CEST	192.168.2.22	8.8.8.8	0x3374	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:40.396852016 CEST	192.168.2.22	8.8.8.8	0x5b99	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:40.566703081 CEST	192.168.2.22	8.8.8.8	0x98b2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:40.737580061 CEST	192.168.2.22	8.8.8.8	0xd49b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:40.944961071 CEST	192.168.2.22	8.8.8.8	0x6afd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:41.119491100 CEST	192.168.2.22	8.8.8.8	0x44c3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:41.253056049 CEST	192.168.2.22	8.8.8.8	0xec98	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:41.301011086 CEST	192.168.2.22	8.8.8.8	0x30e0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:41.470760107 CEST	192.168.2.22	8.8.8.8	0xa405	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:41.653398037 CEST	192.168.2.22	8.8.8.8	0x2904	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:41.825105906 CEST	192.168.2.22	8.8.8.8	0x3cab	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:41.995086908 CEST	192.168.2.22	8.8.8.8	0x8790	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:42.157407999 CEST	192.168.2.22	8.8.8.8	0x24b8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:42.338170052 CEST	192.168.2.22	8.8.8.8	0x221a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:42.505955935 CEST	192.168.2.22	8.8.8.8	0x46d1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:42.676949024 CEST	192.168.2.22	8.8.8.8	0x8aad	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:42.848555088 CEST	192.168.2.22	8.8.8.8	0x744f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:43.018960953 CEST	192.168.2.22	8.8.8.8	0x371c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:43.211049080 CEST	192.168.2.22	8.8.8.8	0xa1b5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:43.381468058 CEST	192.168.2.22	8.8.8.8	0xb1da	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:43.572197914 CEST	192.168.2.22	8.8.8.8	0xb263	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:43.734652042 CEST	192.168.2.22	8.8.8.8	0x2922	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:43.905656099 CEST	192.168.2.22	8.8.8.8	0x9a48	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:44.072834969 CEST	192.168.2.22	8.8.8.8	0x73d3	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:44.104145050 CEST	192.168.2.22	8.8.8.8	0x3792	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:44.276083946 CEST	192.168.2.22	8.8.8.8	0x9d67	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:44.473442078 CEST	192.168.2.22	8.8.8.8	0xb797	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:44.650454998 CEST	192.168.2.22	8.8.8.8	0xb133	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:44.818403959 CEST	192.168.2.22	8.8.8.8	0x2427	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:44.992832899 CEST	192.168.2.22	8.8.8.8	0xc2d6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:45.153459072 CEST	192.168.2.22	8.8.8.8	0x3146	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:45.324383020 CEST	192.168.2.22	8.8.8.8	0xcb88	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:45.516213894 CEST	192.168.2.22	8.8.8.8	0xf0dd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:45.685874939 CEST	192.168.2.22	8.8.8.8	0x8a9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:45.858398914 CEST	192.168.2.22	8.8.8.8	0x28e3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:46.036045074 CEST	192.168.2.22	8.8.8.8	0xa923	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:46.198113918 CEST	192.168.2.22	8.8.8.8	0x28cd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:46.375406027 CEST	192.168.2.22	8.8.8.8	0xd645	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:46.569830894 CEST	192.168.2.22	8.8.8.8	0xb1ad	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:46.588033915 CEST	192.168.2.22	8.8.8.8	0x18a3	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:46.736795902 CEST	192.168.2.22	8.8.8.8	0xc4d5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:46.925545931 CEST	192.168.2.22	8.8.8.8	0x5ea3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:47.102696896 CEST	192.168.2.22	8.8.8.8	0x40d4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:47.284640074 CEST	192.168.2.22	8.8.8.8	0xfffc	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:47.446017027 CEST	192.168.2.22	8.8.8.8	0x528f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:47.622373104 CEST	192.168.2.22	8.8.8.8	0xbe82	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:47.808901072 CEST	192.168.2.22	8.8.8.8	0x8680	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:47.980770111 CEST	192.168.2.22	8.8.8.8	0x4678	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:48.152853966 CEST	192.168.2.22	8.8.8.8	0xecc6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:48.334845066 CEST	192.168.2.22	8.8.8.8	0xf27f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:48.508199930 CEST	192.168.2.22	8.8.8.8	0x5a56	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:48.721425056 CEST	192.168.2.22	8.8.8.8	0x21d1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:48.883734941 CEST	192.168.2.22	8.8.8.8	0x4d21	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:49.054213047 CEST	192.168.2.22	8.8.8.8	0xf2dc	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:49.078656912 CEST	192.168.2.22	8.8.8.8	0x1165	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:49.244457960 CEST	192.168.2.22	8.8.8.8	0xc05e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:49.415509939 CEST	192.168.2.22	8.8.8.8	0x3350	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:49.605463982 CEST	192.168.2.22	8.8.8.8	0xc228	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:49.771671057 CEST	192.168.2.22	8.8.8.8	0x9ec5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:49.953062057 CEST	192.168.2.22	8.8.8.8	0xe841	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:50.119649887 CEST	192.168.2.22	8.8.8.8	0x5dd2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:50.296026945 CEST	192.168.2.22	8.8.8.8	0x424f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:50.476632118 CEST	192.168.2.22	8.8.8.8	0x61da	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:50.670533895 CEST	192.168.2.22	8.8.8.8	0xfbdf	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:50.834522963 CEST	192.168.2.22	8.8.8.8	0xc06	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:51.016283989 CEST	192.168.2.22	8.8.8.8	0x6b1b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:51.189542055 CEST	192.168.2.22	8.8.8.8	0xd191	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:51.348251104 CEST	192.168.2.22	8.8.8.8	0xd1a4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:51.530946970 CEST	192.168.2.22	8.8.8.8	0xef75	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:51.549000025 CEST	192.168.2.22	8.8.8.8	0x2c09	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:51.692586899 CEST	192.168.2.22	8.8.8.8	0xbc36	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:51.871414900 CEST	192.168.2.22	8.8.8.8	0xb139	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:52.042221069 CEST	192.168.2.22	8.8.8.8	0xb899	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:52.219403028 CEST	192.168.2.22	8.8.8.8	0xb062	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:52.403585911 CEST	192.168.2.22	8.8.8.8	0xfb5f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:52.579540968 CEST	192.168.2.22	8.8.8.8	0xb29a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:52.769021034 CEST	192.168.2.22	8.8.8.8	0x55e1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:52.950642109 CEST	192.168.2.22	8.8.8.8	0x665a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:53.129419088 CEST	192.168.2.22	8.8.8.8	0x7812	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:53.312184095 CEST	192.168.2.22	8.8.8.8	0x801a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:53.505150080 CEST	192.168.2.22	8.8.8.8	0x66a6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:53.677083015 CEST	192.168.2.22	8.8.8.8	0x7a4b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:53.858544111 CEST	192.168.2.22	8.8.8.8	0x8cfd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:54.034496069 CEST	192.168.2.22	8.8.8.8	0x5db9	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:54.036163092 CEST	192.168.2.22	8.8.8.8	0xa766	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:54.203320980 CEST	192.168.2.22	8.8.8.8	0xd00d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:54.390306950 CEST	192.168.2.22	8.8.8.8	0xee8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:54.569560051 CEST	192.168.2.22	8.8.8.8	0xfba7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:54.750781059 CEST	192.168.2.22	8.8.8.8	0xe6b1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:54.924335957 CEST	192.168.2.22	8.8.8.8	0xbcfe	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:55.115044117 CEST	192.168.2.22	8.8.8.8	0x43fe	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:55.290584087 CEST	192.168.2.22	8.8.8.8	0xc264	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:55.465526104 CEST	192.168.2.22	8.8.8.8	0xd943	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:55.644365072 CEST	192.168.2.22	8.8.8.8	0x1748	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:55.851373911 CEST	192.168.2.22	8.8.8.8	0xbbf9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:56.023725986 CEST	192.168.2.22	8.8.8.8	0x800d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:56.203394890 CEST	192.168.2.22	8.8.8.8	0xc8ca	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:56.376456022 CEST	192.168.2.22	8.8.8.8	0x11e4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:56.523912907 CEST	192.168.2.22	8.8.8.8	0xc627	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:56.546782970 CEST	192.168.2.22	8.8.8.8	0x4639	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:56.724370003 CEST	192.168.2.22	8.8.8.8	0xc37c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:56.919584036 CEST	192.168.2.22	8.8.8.8	0x9197	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:57.101553917 CEST	192.168.2.22	8.8.8.8	0x742d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:57.271439075 CEST	192.168.2.22	8.8.8.8	0x7ff1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:57.462424994 CEST	192.168.2.22	8.8.8.8	0x38bc	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:57.645555019 CEST	192.168.2.22	8.8.8.8	0x8e18	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:57.823003054 CEST	192.168.2.22	8.8.8.8	0x3527	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:57.999864101 CEST	192.168.2.22	8.8.8.8	0x576e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:58.172254086 CEST	192.168.2.22	8.8.8.8	0x958e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:58.346375942 CEST	192.168.2.22	8.8.8.8	0xdd05	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:58.519138098 CEST	192.168.2.22	8.8.8.8	0xce9b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:58.686047077 CEST	192.168.2.22	8.8.8.8	0x9a5b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:58.863064051 CEST	192.168.2.22	8.8.8.8	0xa30c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:59.031656027 CEST	192.168.2.22	8.8.8.8	0x499e	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:59.063579082 CEST	192.168.2.22	8.8.8.8	0xc6ba	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:59.234498024 CEST	192.168.2.22	8.8.8.8	0xd5da	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:59.396070957 CEST	192.168.2.22	8.8.8.8	0x9ba	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:59.586251974 CEST	192.168.2.22	8.8.8.8	0x644e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:59.755371094 CEST	192.168.2.22	8.8.8.8	0xfaf0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:59.937093973 CEST	192.168.2.22	8.8.8.8	0xd2ae	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:00.098162889 CEST	192.168.2.22	8.8.8.8	0xe10	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:00.275240898 CEST	192.168.2.22	8.8.8.8	0xc5cb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:00.453318119 CEST	192.168.2.22	8.8.8.8	0x7cb4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:00.617789030 CEST	192.168.2.22	8.8.8.8	0xc736	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:00.792685032 CEST	192.168.2.22	8.8.8.8	0xb8b1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:00.975292921 CEST	192.168.2.22	8.8.8.8	0x755c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:01.144088030 CEST	192.168.2.22	8.8.8.8	0xdc72	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:01.328506947 CEST	192.168.2.22	8.8.8.8	0x5d27	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:01.527343035 CEST	192.168.2.22	8.8.8.8	0xab6c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:01.537906885 CEST	192.168.2.22	8.8.8.8	0xe799	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:01.698180914 CEST	192.168.2.22	8.8.8.8	0x9a3e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:01.885535955 CEST	192.168.2.22	8.8.8.8	0xb01d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:02.056416988 CEST	192.168.2.22	8.8.8.8	0x5f75	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:02.243170023 CEST	192.168.2.22	8.8.8.8	0xfd6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:02.420773029 CEST	192.168.2.22	8.8.8.8	0x6e7f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:02.603259087 CEST	192.168.2.22	8.8.8.8	0x2a28	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:02.782865047 CEST	192.168.2.22	8.8.8.8	0x6a01	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:02.971240997 CEST	192.168.2.22	8.8.8.8	0x7d64	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:03.141417980 CEST	192.168.2.22	8.8.8.8	0xf5d4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:03.316459894 CEST	192.168.2.22	8.8.8.8	0x9c4d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:03.492285013 CEST	192.168.2.22	8.8.8.8	0x5ed0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:03.670883894 CEST	192.168.2.22	8.8.8.8	0x7486	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:03.847690105 CEST	192.168.2.22	8.8.8.8	0x4cff	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:04.017955065 CEST	192.168.2.22	8.8.8.8	0x5072	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:04.021478891 CEST	192.168.2.22	8.8.8.8	0x6236	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:04.228310108 CEST	192.168.2.22	8.8.8.8	0xd473	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:04.397340059 CEST	192.168.2.22	8.8.8.8	0x8ecb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:04.581140041 CEST	192.168.2.22	8.8.8.8	0xe957	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:04.759939909 CEST	192.168.2.22	8.8.8.8	0xfe41	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:04.930711985 CEST	192.168.2.22	8.8.8.8	0xc263	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:05.113143921 CEST	192.168.2.22	8.8.8.8	0xf1c5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:05.286103964 CEST	192.168.2.22	8.8.8.8	0xdc60	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:05.515265942 CEST	192.168.2.22	8.8.8.8	0xcb92	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:05.712961912 CEST	192.168.2.22	8.8.8.8	0xbe54	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:05.905492067 CEST	192.168.2.22	8.8.8.8	0xb260	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:06.093059063 CEST	192.168.2.22	8.8.8.8	0xc2fe	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:06.275227070 CEST	192.168.2.22	8.8.8.8	0xdae4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:06.441044092 CEST	192.168.2.22	8.8.8.8	0xc965	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:06.509572029 CEST	192.168.2.22	8.8.8.8	0x5485	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:06.615164995 CEST	192.168.2.22	8.8.8.8	0xc12d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:06.795519114 CEST	192.168.2.22	8.8.8.8	0xd690	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:06.985243082 CEST	192.168.2.22	8.8.8.8	0xe3e0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:07.161163092 CEST	192.168.2.22	8.8.8.8	0x162c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:07.328142881 CEST	192.168.2.22	8.8.8.8	0xb244	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:07.513720036 CEST	192.168.2.22	8.8.8.8	0x3a61	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:07.698328972 CEST	192.168.2.22	8.8.8.8	0xecd2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:07.876878977 CEST	192.168.2.22	8.8.8.8	0x9733	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:08.067413092 CEST	192.168.2.22	8.8.8.8	0x6a1f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:08.252618074 CEST	192.168.2.22	8.8.8.8	0x2e1d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:08.490504026 CEST	192.168.2.22	8.8.8.8	0x85ab	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:08.663297892 CEST	192.168.2.22	8.8.8.8	0x457b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:08.849512100 CEST	192.168.2.22	8.8.8.8	0x543b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:09.096837044 CEST	192.168.2.22	8.8.8.8	0xff96	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:09.129297972 CEST	192.168.2.22	8.8.8.8	0xa816	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:09.320384979 CEST	192.168.2.22	8.8.8.8	0x6ffb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:09.598504066 CEST	192.168.2.22	8.8.8.8	0xe19f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:10.193567038 CEST	192.168.2.22	8.8.8.8	0x3611	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:10.884449959 CEST	192.168.2.22	8.8.8.8	0x2436	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:11.068459034 CEST	192.168.2.22	8.8.8.8	0xe434	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:11.327502012 CEST	192.168.2.22	8.8.8.8	0x7d71	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:11.493227005 CEST	192.168.2.22	8.8.8.8	0x3a4c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:11.566406012 CEST	192.168.2.22	8.8.8.8	0x238	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:11.671660900 CEST	192.168.2.22	8.8.8.8	0xaf3c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:11.854739904 CEST	192.168.2.22	8.8.8.8	0x578c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:12.038043022 CEST	192.168.2.22	8.8.8.8	0x6f17	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:12.221893072 CEST	192.168.2.22	8.8.8.8	0xd5f7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:12.396450996 CEST	192.168.2.22	8.8.8.8	0xfed	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:12.582019091 CEST	192.168.2.22	8.8.8.8	0x2c80	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:12.780858994 CEST	192.168.2.22	8.8.8.8	0xa48c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:12.963937044 CEST	192.168.2.22	8.8.8.8	0x86b8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:13.179121971 CEST	192.168.2.22	8.8.8.8	0xee9d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:13.399445057 CEST	192.168.2.22	8.8.8.8	0x6ea8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:13.599351883 CEST	192.168.2.22	8.8.8.8	0x29c1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:13.790491104 CEST	192.168.2.22	8.8.8.8	0xe7dd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:13.970694065 CEST	192.168.2.22	8.8.8.8	0x9d2a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:14.043236971 CEST	192.168.2.22	8.8.8.8	0xf461	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:14.152802944 CEST	192.168.2.22	8.8.8.8	0xb572	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:14.323290110 CEST	192.168.2.22	8.8.8.8	0xc4e4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:14.497982025 CEST	192.168.2.22	8.8.8.8	0x46fb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:14.667592049 CEST	192.168.2.22	8.8.8.8	0x3526	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:14.840421915 CEST	192.168.2.22	8.8.8.8	0x6d0b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:15.002175093 CEST	192.168.2.22	8.8.8.8	0xb306	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:15.214972019 CEST	192.168.2.22	8.8.8.8	0x9a38	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:15.445209980 CEST	192.168.2.22	8.8.8.8	0x8224	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:15.612467051 CEST	192.168.2.22	8.8.8.8	0x6e35	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:15.792239904 CEST	192.168.2.22	8.8.8.8	0xe18f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:15.979162931 CEST	192.168.2.22	8.8.8.8	0x6fed	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:16.204511881 CEST	192.168.2.22	8.8.8.8	0xd1c0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:16.381931067 CEST	192.168.2.22	8.8.8.8	0xe7f1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:16.523252010 CEST	192.168.2.22	8.8.8.8	0x3012	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:16.557300091 CEST	192.168.2.22	8.8.8.8	0xae20	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:16.723875046 CEST	192.168.2.22	8.8.8.8	0x5c08	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:16.889642000 CEST	192.168.2.22	8.8.8.8	0x1831	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:17.077200890 CEST	192.168.2.22	8.8.8.8	0x21a1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:17.252511978 CEST	192.168.2.22	8.8.8.8	0x263e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:17.497925043 CEST	192.168.2.22	8.8.8.8	0x43bd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:17.686093092 CEST	192.168.2.22	8.8.8.8	0x3b50	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:17.867083073 CEST	192.168.2.22	8.8.8.8	0xc14e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:18.071199894 CEST	192.168.2.22	8.8.8.8	0x6b61	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:18.243252039 CEST	192.168.2.22	8.8.8.8	0x5f84	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:18.413860083 CEST	192.168.2.22	8.8.8.8	0x16fb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:18.599610090 CEST	192.168.2.22	8.8.8.8	0x42ea	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:18.779088020 CEST	192.168.2.22	8.8.8.8	0xde86	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:18.961834908 CEST	192.168.2.22	8.8.8.8	0xec8a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:18.985028982 CEST	192.168.2.22	8.8.8.8	0x588d	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:19.143259048 CEST	192.168.2.22	8.8.8.8	0xcb30	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:19.314286947 CEST	192.168.2.22	8.8.8.8	0xb148	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:19.497493029 CEST	192.168.2.22	8.8.8.8	0xf47b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:19.703818083 CEST	192.168.2.22	8.8.8.8	0xa409	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:20.292802095 CEST	192.168.2.22	8.8.8.8	0x8f2f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:20.469273090 CEST	192.168.2.22	8.8.8.8	0xd7d7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:20.640729904 CEST	192.168.2.22	8.8.8.8	0x549c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:20.811634064 CEST	192.168.2.22	8.8.8.8	0x3ae3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:20.980818033 CEST	192.168.2.22	8.8.8.8	0x639	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:21.146763086 CEST	192.168.2.22	8.8.8.8	0x7c8f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:21.781115055 CEST	192.168.2.22	8.8.8.8	0x7b1b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:21.820899010 CEST	192.168.2.22	8.8.8.8	0x241a	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:21.955488920 CEST	192.168.2.22	8.8.8.8	0xac31	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:22.124306917 CEST	192.168.2.22	8.8.8.8	0xb2dc	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:22.297588110 CEST	192.168.2.22	8.8.8.8	0x9470	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:22.455056906 CEST	192.168.2.22	8.8.8.8	0x61b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:22.654496908 CEST	192.168.2.22	8.8.8.8	0x21fa	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:22.824662924 CEST	192.168.2.22	8.8.8.8	0x9a93	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:22.992229939 CEST	192.168.2.22	8.8.8.8	0xab4d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:23.208795071 CEST	192.168.2.22	8.8.8.8	0xab57	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:23.379825115 CEST	192.168.2.22	8.8.8.8	0x896d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:23.571301937 CEST	192.168.2.22	8.8.8.8	0x1e9e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:23.744735003 CEST	192.168.2.22	8.8.8.8	0x5aeb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:23.913902044 CEST	192.168.2.22	8.8.8.8	0xf0b2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:24.092367887 CEST	192.168.2.22	8.8.8.8	0xbfaa	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:24.275418043 CEST	192.168.2.22	8.8.8.8	0xfc74	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:24.304415941 CEST	192.168.2.22	8.8.8.8	0xd1a1	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:24.446703911 CEST	192.168.2.22	8.8.8.8	0x9090	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:24.630182981 CEST	192.168.2.22	8.8.8.8	0xd3ae	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:24.799390078 CEST	192.168.2.22	8.8.8.8	0x89f0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:24.981251955 CEST	192.168.2.22	8.8.8.8	0x58c7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:25.157005072 CEST	192.168.2.22	8.8.8.8	0x9531	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:25.342957973 CEST	192.168.2.22	8.8.8.8	0x62e5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:25.523478031 CEST	192.168.2.22	8.8.8.8	0x27c1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:25.692460060 CEST	192.168.2.22	8.8.8.8	0xd49	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:25.867815971 CEST	192.168.2.22	8.8.8.8	0x43b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:26.037614107 CEST	192.168.2.22	8.8.8.8	0x9c38	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:26.209059954 CEST	192.168.2.22	8.8.8.8	0xaef	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:26.381769896 CEST	192.168.2.22	8.8.8.8	0xc194	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:26.564989090 CEST	192.168.2.22	8.8.8.8	0xe1e6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:26.735872984 CEST	192.168.2.22	8.8.8.8	0x9e69	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:26.770564079 CEST	192.168.2.22	8.8.8.8	0x44b	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:26.919605017 CEST	192.168.2.22	8.8.8.8	0xe905	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:27.105606079 CEST	192.168.2.22	8.8.8.8	0x58a4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:27.286164045 CEST	192.168.2.22	8.8.8.8	0xfd6d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:27.478142023 CEST	192.168.2.22	8.8.8.8	0x7144	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:27.651897907 CEST	192.168.2.22	8.8.8.8	0xf135	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:27.847642899 CEST	192.168.2.22	8.8.8.8	0x6641	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:28.015959978 CEST	192.168.2.22	8.8.8.8	0x79e7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:28.206568003 CEST	192.168.2.22	8.8.8.8	0x96e4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:28.379895926 CEST	192.168.2.22	8.8.8.8	0xccb2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:28.542659044 CEST	192.168.2.22	8.8.8.8	0xea13	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:28.739360094 CEST	192.168.2.22	8.8.8.8	0xb5ae	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:28.905177116 CEST	192.168.2.22	8.8.8.8	0xb59f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:29.075041056 CEST	192.168.2.22	8.8.8.8	0xca45	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:29.246798992 CEST	192.168.2.22	8.8.8.8	0x28a7	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:29.251560926 CEST	192.168.2.22	8.8.8.8	0x3177	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:29.436721087 CEST	192.168.2.22	8.8.8.8	0xd460	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:29.607078075 CEST	192.168.2.22	8.8.8.8	0xe938	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:29.800816059 CEST	192.168.2.22	8.8.8.8	0xe069	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:29.968125105 CEST	192.168.2.22	8.8.8.8	0x5dfe	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:30.142911911 CEST	192.168.2.22	8.8.8.8	0xa444	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:30.308693886 CEST	192.168.2.22	8.8.8.8	0x3155	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:30.482361078 CEST	192.168.2.22	8.8.8.8	0x8c27	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:30.652503967 CEST	192.168.2.22	8.8.8.8	0xb8e6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:30.825001955 CEST	192.168.2.22	8.8.8.8	0x32fa	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:30.992820024 CEST	192.168.2.22	8.8.8.8	0x975b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:31.170656919 CEST	192.168.2.22	8.8.8.8	0x58e4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:31.349234104 CEST	192.168.2.22	8.8.8.8	0x8d09	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:31.525089979 CEST	192.168.2.22	8.8.8.8	0x936a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:31.719836950 CEST	192.168.2.22	8.8.8.8	0xdea9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:31.735059977 CEST	192.168.2.22	8.8.8.8	0xb14d	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:31.888326883 CEST	192.168.2.22	8.8.8.8	0x32c7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:32.089119911 CEST	192.168.2.22	8.8.8.8	0x7a63	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:32.267435074 CEST	192.168.2.22	8.8.8.8	0x2b7e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:32.433043003 CEST	192.168.2.22	8.8.8.8	0xfd32	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:32.639250994 CEST	192.168.2.22	8.8.8.8	0xc910	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:32.803092957 CEST	192.168.2.22	8.8.8.8	0x44b2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:32.989094973 CEST	192.168.2.22	8.8.8.8	0x927f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:33.167126894 CEST	192.168.2.22	8.8.8.8	0x3ff	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:33.338987112 CEST	192.168.2.22	8.8.8.8	0x116e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:33.515280008 CEST	192.168.2.22	8.8.8.8	0x5d88	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:33.680886030 CEST	192.168.2.22	8.8.8.8	0xafc9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:33.859569073 CEST	192.168.2.22	8.8.8.8	0x1de2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:34.038893938 CEST	192.168.2.22	8.8.8.8	0xf51d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:34.202419043 CEST	192.168.2.22	8.8.8.8	0xa140	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:34.210398912 CEST	192.168.2.22	8.8.8.8	0xcaa2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:34.395937920 CEST	192.168.2.22	8.8.8.8	0xb716	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:34.592117071 CEST	192.168.2.22	8.8.8.8	0xe9a2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:34.764132977 CEST	192.168.2.22	8.8.8.8	0x9886	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:34.953531981 CEST	192.168.2.22	8.8.8.8	0x562c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:35.135361910 CEST	192.168.2.22	8.8.8.8	0xf0b5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:35.305495977 CEST	192.168.2.22	8.8.8.8	0x65fe	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:35.477946997 CEST	192.168.2.22	8.8.8.8	0xc2a8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:35.643309116 CEST	192.168.2.22	8.8.8.8	0x17b9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:35.820133924 CEST	192.168.2.22	8.8.8.8	0x823b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:35.992321968 CEST	192.168.2.22	8.8.8.8	0xf12e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:36.172853947 CEST	192.168.2.22	8.8.8.8	0xe6b6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:36.362025023 CEST	192.168.2.22	8.8.8.8	0xf454	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:36.541440964 CEST	192.168.2.22	8.8.8.8	0xe8c2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:36.699378014 CEST	192.168.2.22	8.8.8.8	0x6a44	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:36.701637030 CEST	192.168.2.22	8.8.8.8	0x3f79	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:36.947247982 CEST	192.168.2.22	8.8.8.8	0xa513	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:37.217139959 CEST	192.168.2.22	8.8.8.8	0xe433	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:37.402371883 CEST	192.168.2.22	8.8.8.8	0x4522	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:37.792828083 CEST	192.168.2.22	8.8.8.8	0xfb76	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:37.973066092 CEST	192.168.2.22	8.8.8.8	0xe80c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:38.243490934 CEST	192.168.2.22	8.8.8.8	0xe33e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:38.693108082 CEST	192.168.2.22	8.8.8.8	0x6b6d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:38.955795050 CEST	192.168.2.22	8.8.8.8	0x7904	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:39.718930960 CEST	192.168.2.22	8.8.8.8	0x1198	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:39.728374004 CEST	192.168.2.22	8.8.8.8	0xeee0	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:39.902683973 CEST	192.168.2.22	8.8.8.8	0x1c01	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:40.086419106 CEST	192.168.2.22	8.8.8.8	0x2f0f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:40.321305037 CEST	192.168.2.22	8.8.8.8	0x34f4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:40.542924881 CEST	192.168.2.22	8.8.8.8	0x52be	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:40.729398966 CEST	192.168.2.22	8.8.8.8	0xa62	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:40.908535004 CEST	192.168.2.22	8.8.8.8	0xdf3a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:41.082809925 CEST	192.168.2.22	8.8.8.8	0xb53f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:41.281814098 CEST	192.168.2.22	8.8.8.8	0xf034	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:41.450968027 CEST	192.168.2.22	8.8.8.8	0xb38b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:41.635153055 CEST	192.168.2.22	8.8.8.8	0xd3a2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:41.807187080 CEST	192.168.2.22	8.8.8.8	0xf45b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:41.992552042 CEST	192.168.2.22	8.8.8.8	0x6b46	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:42.180056095 CEST	192.168.2.22	8.8.8.8	0xc1cb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:42.213982105 CEST	192.168.2.22	8.8.8.8	0xcbb3	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:42.370263100 CEST	192.168.2.22	8.8.8.8	0xfaea	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:42.542531013 CEST	192.168.2.22	8.8.8.8	0x42e4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:42.710511923 CEST	192.168.2.22	8.8.8.8	0xede0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:42.908277988 CEST	192.168.2.22	8.8.8.8	0x28aa	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:43.103501081 CEST	192.168.2.22	8.8.8.8	0x6b69	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:43.283392906 CEST	192.168.2.22	8.8.8.8	0x19e8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:43.467359066 CEST	192.168.2.22	8.8.8.8	0x2b1d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:43.642757893 CEST	192.168.2.22	8.8.8.8	0xb3ae	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:43.818233967 CEST	192.168.2.22	8.8.8.8	0x378	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:43.999967098 CEST	192.168.2.22	8.8.8.8	0xd491	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:44.190431118 CEST	192.168.2.22	8.8.8.8	0xb33c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:44.361767054 CEST	192.168.2.22	8.8.8.8	0x546d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:44.539016962 CEST	192.168.2.22	8.8.8.8	0x7936	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:44.695946932 CEST	192.168.2.22	8.8.8.8	0x4c26	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:44.703476906 CEST	192.168.2.22	8.8.8.8	0xcae9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:44.910783052 CEST	192.168.2.22	8.8.8.8	0x9e29	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:45.081307888 CEST	192.168.2.22	8.8.8.8	0xf3e1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:45.256792068 CEST	192.168.2.22	8.8.8.8	0x14ff	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:45.437901020 CEST	192.168.2.22	8.8.8.8	0x1927	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:45.613051891 CEST	192.168.2.22	8.8.8.8	0xfe03	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:45.804244041 CEST	192.168.2.22	8.8.8.8	0x78c1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:45.975724936 CEST	192.168.2.22	8.8.8.8	0x4619	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:46.186288118 CEST	192.168.2.22	8.8.8.8	0xe218	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:46.370486021 CEST	192.168.2.22	8.8.8.8	0x6e0a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:46.555469990 CEST	192.168.2.22	8.8.8.8	0x5b5e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:46.732006073 CEST	192.168.2.22	8.8.8.8	0xc9cb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:46.913708925 CEST	192.168.2.22	8.8.8.8	0xb9ae	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:47.103208065 CEST	192.168.2.22	8.8.8.8	0xfc47	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:47.184441090 CEST	192.168.2.22	8.8.8.8	0x1536	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:47.284641027 CEST	192.168.2.22	8.8.8.8	0xc908	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:47.481599092 CEST	192.168.2.22	8.8.8.8	0x4853	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:47.663400888 CEST	192.168.2.22	8.8.8.8	0x5664	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:47.840277910 CEST	192.168.2.22	8.8.8.8	0xde51	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:48.016849041 CEST	192.168.2.22	8.8.8.8	0xb399	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:48.193799019 CEST	192.168.2.22	8.8.8.8	0x2c8e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:48.370728970 CEST	192.168.2.22	8.8.8.8	0xcc1b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:48.552875042 CEST	192.168.2.22	8.8.8.8	0x87e9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:48.740240097 CEST	192.168.2.22	8.8.8.8	0x89fd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:48.904973984 CEST	192.168.2.22	8.8.8.8	0x3bfd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:49.059468985 CEST	192.168.2.22	8.8.8.8	0x8c03	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Apr 6, 2021 19:35:36.425247908 CEST	8.8.8.8	192.168.2.22	0xd372	No error (0)	metaflip.io		192.185.48.186	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:39.543775082 CEST	8.8.8.8	192.168.2.22	0xd7b1	No error (0)	partsapp.com.br		192.185.214.87	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:40.643868923 CEST	8.8.8.8	192.168.2.22	0xe631	No error (0)	columbia.aula-web.net		50.87.146.86	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:41.848874092 CEST	8.8.8.8	192.168.2.22	0x1e93	No error (0)	tajushariya.com		199.79.62.99	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:44.158269882 CEST	8.8.8.8	192.168.2.22	0x3690	Server failure (2)	agenbolatermurah.com	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:44.892538071 CEST	8.8.8.8	192.168.2.22	0xc330	No error (0)	aws.amazon.com	tp.8e49140c2-frontier.amazon.com		CNAME (Canonical name)	IN (0x0001)
Apr 6, 2021 19:35:44.892538071 CEST	8.8.8.8	192.168.2.22	0xc330	No error (0)	tp.8e49140c2-frontier.amazon.com	dr49lng3n1n2s.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Apr 6, 2021 19:35:44.892538071 CEST	8.8.8.8	192.168.2.22	0xc330	No error (0)	dr49lng3n1n2s.cloudfront.net		143.204.3.74	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:44.969774008 CEST	8.8.8.8	192.168.2.22	0x6848	No error (0)	aws.amazon.com	tp.8e49140c2-frontier.amazon.com		CNAME (Canonical name)	IN (0x0001)
Apr 6, 2021 19:35:44.969774008 CEST	8.8.8.8	192.168.2.22	0x6848	No error (0)	tp.8e49140c2-frontier.amazon.com	dr49lng3n1n2s.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Apr 6, 2021 19:35:44.969774008 CEST	8.8.8.8	192.168.2.22	0x6848	No error (0)	dr49lng3n1n2s.cloudfront.net		143.204.3.74	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:45.233510017 CEST	8.8.8.8	192.168.2.22	0x3690	Server failure (2)	agenbolatermurah.com	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:47.905324936 CEST	8.8.8.8	192.168.2.22	0x8766	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:50.402719975 CEST	8.8.8.8	192.168.2.22	0x4177	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:52.895401001 CEST	8.8.8.8	192.168.2.22	0x4335	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:55.394992113 CEST	8.8.8.8	192.168.2.22	0x63f2	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:35:57.891355038 CEST	8.8.8.8	192.168.2.22	0x96ce	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:00.392870903 CEST	8.8.8.8	192.168.2.22	0xc117	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:02.868995905 CEST	8.8.8.8	192.168.2.22	0xfe5f	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:05.357808113 CEST	8.8.8.8	192.168.2.22	0x24c2	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:07.874599934 CEST	8.8.8.8	192.168.2.22	0x6b14	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:10.363790989 CEST	8.8.8.8	192.168.2.22	0x7db3	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:12.859426022 CEST	8.8.8.8	192.168.2.22	0xe8b6	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:15.355676889 CEST	8.8.8.8	192.168.2.22	0x9744	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:16.235996962 CEST	8.8.8.8	192.168.2.22	0xd277	No error (0)	aws.amazon.com	tp.8e49140c2-frontier.amazon.com		CNAME (Canonical name)	IN (0x0001)
Apr 6, 2021 19:36:16.235996962 CEST	8.8.8.8	192.168.2.22	0xd277	No error (0)	tp.8e49140c2-frontier.amazon.com	dr49lng3n1n2s.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Apr 6, 2021 19:36:16.235996962 CEST	8.8.8.8	192.168.2.22	0xd277	No error (0)	dr49lng3n1n2s.cloudfront.net		143.204.3.74	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:16.301940918 CEST	8.8.8.8	192.168.2.22	0x79c2	No error (0)	aws.amazon.com	tp.8e49140c2-frontier.amazon.com		CNAME (Canonical name)	IN (0x0001)
Apr 6, 2021 19:36:16.301940918 CEST	8.8.8.8	192.168.2.22	0x79c2	No error (0)	tp.8e49140c2-frontier.amazon.com	dr49lng3n1n2s.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Apr 6, 2021 19:36:16.301940918 CEST	8.8.8.8	192.168.2.22	0x79c2	No error (0)	dr49lng3n1n2s.cloudfront.net		143.204.3.74	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:17.736104965 CEST	8.8.8.8	192.168.2.22	0xd366	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:17.857254982 CEST	8.8.8.8	192.168.2.22	0x7bc7	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:17.933339119 CEST	8.8.8.8	192.168.2.22	0x48fa	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:18.145066023 CEST	8.8.8.8	192.168.2.22	0xa9be	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:18.338862896 CEST	8.8.8.8	192.168.2.22	0xf98e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:18.528184891 CEST	8.8.8.8	192.168.2.22	0xdadb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:18.876478910 CEST	8.8.8.8	192.168.2.22	0xc4cd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:19.083251953 CEST	8.8.8.8	192.168.2.22	0x5f4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:19.324871063 CEST	8.8.8.8	192.168.2.22	0xc693	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:19.522948027 CEST	8.8.8.8	192.168.2.22	0x5345	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:19.715971947 CEST	8.8.8.8	192.168.2.22	0x2980	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:19.912062883 CEST	8.8.8.8	192.168.2.22	0x83b6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:20.116415024 CEST	8.8.8.8	192.168.2.22	0xdf09	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:20.307106972 CEST	8.8.8.8	192.168.2.22	0x74e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:20.403281927 CEST	8.8.8.8	192.168.2.22	0xb4a9	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:20.541081905 CEST	8.8.8.8	192.168.2.22	0x900b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:20.750017881 CEST	8.8.8.8	192.168.2.22	0xdcd3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:20.994478941 CEST	8.8.8.8	192.168.2.22	0xf764	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:21.192076921 CEST	8.8.8.8	192.168.2.22	0x444c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:21.380764961 CEST	8.8.8.8	192.168.2.22	0xb3b7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:21.571089983 CEST	8.8.8.8	192.168.2.22	0x9876	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:21.777422905 CEST	8.8.8.8	192.168.2.22	0xe182	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:21.968228102 CEST	8.8.8.8	192.168.2.22	0x9255	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:22.167390108 CEST	8.8.8.8	192.168.2.22	0x87fc	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:22.379254103 CEST	8.8.8.8	192.168.2.22	0xde2a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:22.592026949 CEST	8.8.8.8	192.168.2.22	0xef26	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:22.772957087 CEST	8.8.8.8	192.168.2.22	0xb4ad	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:22.886979103 CEST	8.8.8.8	192.168.2.22	0x42fa	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:22.971462011 CEST	8.8.8.8	192.168.2.22	0xf890	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:23.161987066 CEST	8.8.8.8	192.168.2.22	0x50e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:23.377444029 CEST	8.8.8.8	192.168.2.22	0xe4a9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:23.574239969 CEST	8.8.8.8	192.168.2.22	0x7858	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:23.762428045 CEST	8.8.8.8	192.168.2.22	0x7ab7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:23.957479000 CEST	8.8.8.8	192.168.2.22	0xc120	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:24.161765099 CEST	8.8.8.8	192.168.2.22	0x10b2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:24.530757904 CEST	8.8.8.8	192.168.2.22	0x37fb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:24.709784031 CEST	8.8.8.8	192.168.2.22	0xa5e1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:24.913845062 CEST	8.8.8.8	192.168.2.22	0x71f6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:25.108118057 CEST	8.8.8.8	192.168.2.22	0x6a7b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:25.293937922 CEST	8.8.8.8	192.168.2.22	0x251e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:25.378568888 CEST	8.8.8.8	192.168.2.22	0x16ff	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:25.548268080 CEST	8.8.8.8	192.168.2.22	0x23ef	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:25.750637054 CEST	8.8.8.8	192.168.2.22	0xcfb6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:25.963754892 CEST	8.8.8.8	192.168.2.22	0xd96a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:26.221399069 CEST	8.8.8.8	192.168.2.22	0xc1bc	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:26.417303085 CEST	8.8.8.8	192.168.2.22	0xc2e8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:26.644500017 CEST	8.8.8.8	192.168.2.22	0x125	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:26.899437904 CEST	8.8.8.8	192.168.2.22	0x47b2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:27.085365057 CEST	8.8.8.8	192.168.2.22	0x8d7e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:27.289777994 CEST	8.8.8.8	192.168.2.22	0x88b0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:27.478826046 CEST	8.8.8.8	192.168.2.22	0x5129	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:27.654603958 CEST	8.8.8.8	192.168.2.22	0xab81	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:27.845401049 CEST	8.8.8.8	192.168.2.22	0x1f17	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:27.873532057 CEST	8.8.8.8	192.168.2.22	0xe82b	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:28.082180023 CEST	8.8.8.8	192.168.2.22	0xe74d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:28.357707024 CEST	8.8.8.8	192.168.2.22	0x386d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:28.623466015 CEST	8.8.8.8	192.168.2.22	0x2510	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:28.879307032 CEST	8.8.8.8	192.168.2.22	0x126	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:29.179820061 CEST	8.8.8.8	192.168.2.22	0x322	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:29.495584011 CEST	8.8.8.8	192.168.2.22	0x2f4c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:29.694730997 CEST	8.8.8.8	192.168.2.22	0x67da	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:29.919368029 CEST	8.8.8.8	192.168.2.22	0xd561	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:30.135358095 CEST	8.8.8.8	192.168.2.22	0x98af	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:30.346826077 CEST	8.8.8.8	192.168.2.22	0xc2be	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:30.372534037 CEST	8.8.8.8	192.168.2.22	0xf41e	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:30.541258097 CEST	8.8.8.8	192.168.2.22	0xa8c7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:30.731415033 CEST	8.8.8.8	192.168.2.22	0xc21a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:30.940021038 CEST	8.8.8.8	192.168.2.22	0x6074	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:31.127651930 CEST	8.8.8.8	192.168.2.22	0x415f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:31.306453943 CEST	8.8.8.8	192.168.2.22	0xb7ba	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:31.500567913 CEST	8.8.8.8	192.168.2.22	0x1b61	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:31.689196110 CEST	8.8.8.8	192.168.2.22	0x7463	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:31.885118008 CEST	8.8.8.8	192.168.2.22	0x7c3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:32.075129032 CEST	8.8.8.8	192.168.2.22	0xff60	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:32.269953012 CEST	8.8.8.8	192.168.2.22	0x9ea4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:32.471493006 CEST	8.8.8.8	192.168.2.22	0xd78c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:32.659054995 CEST	8.8.8.8	192.168.2.22	0xe56c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:32.921516895 CEST	8.8.8.8	192.168.2.22	0xd280	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:32.924493074 CEST	8.8.8.8	192.168.2.22	0x8547	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:33.275885105 CEST	8.8.8.8	192.168.2.22	0xf95a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:33.460458994 CEST	8.8.8.8	192.168.2.22	0x5bea	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:33.864224911 CEST	8.8.8.8	192.168.2.22	0x1560	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:34.062098980 CEST	8.8.8.8	192.168.2.22	0xcd05	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:34.234946012 CEST	8.8.8.8	192.168.2.22	0x9874	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:34.422507048 CEST	8.8.8.8	192.168.2.22	0x1ca	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:34.931473017 CEST	8.8.8.8	192.168.2.22	0x5c9e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:35.116287947 CEST	8.8.8.8	192.168.2.22	0x15ad	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:36.163029909 CEST	8.8.8.8	192.168.2.22	0x9d56	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:36.276655912 CEST	8.8.8.8	192.168.2.22	0x89f	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:36.341650963 CEST	8.8.8.8	192.168.2.22	0x6524	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:36.511831999 CEST	8.8.8.8	192.168.2.22	0x66de	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:36.678879023 CEST	8.8.8.8	192.168.2.22	0x5e40	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:36.866157055 CEST	8.8.8.8	192.168.2.22	0xc51b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:37.037826061 CEST	8.8.8.8	192.168.2.22	0x8771	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:37.306787014 CEST	8.8.8.8	192.168.2.22	0xc141	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:37.504345894 CEST	8.8.8.8	192.168.2.22	0xf65a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:37.683876991 CEST	8.8.8.8	192.168.2.22	0x837a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:37.853719950 CEST	8.8.8.8	192.168.2.22	0xf5f0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:38.111294985 CEST	8.8.8.8	192.168.2.22	0x5b11	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:38.329044104 CEST	8.8.8.8	192.168.2.22	0xfd9d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:38.507600069 CEST	8.8.8.8	192.168.2.22	0x51f5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:38.681490898 CEST	8.8.8.8	192.168.2.22	0xa8ab	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:38.793664932 CEST	8.8.8.8	192.168.2.22	0x5275	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:38.854741096 CEST	8.8.8.8	192.168.2.22	0x12bf	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:39.104387045 CEST	8.8.8.8	192.168.2.22	0x3fb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:39.334992886 CEST	8.8.8.8	192.168.2.22	0x9c79	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:39.563930988 CEST	8.8.8.8	192.168.2.22	0x3926	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:39.805354118 CEST	8.8.8.8	192.168.2.22	0x61e5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:40.039519072 CEST	8.8.8.8	192.168.2.22	0x6d6b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:40.329593897 CEST	8.8.8.8	192.168.2.22	0xc5ae	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:40.587184906 CEST	8.8.8.8	192.168.2.22	0x5c70	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:40.859613895 CEST	8.8.8.8	192.168.2.22	0xf57d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:41.167093039 CEST	8.8.8.8	192.168.2.22	0x8cf9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:41.297482014 CEST	8.8.8.8	192.168.2.22	0x699d	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:41.457772970 CEST	8.8.8.8	192.168.2.22	0x901f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:41.777553082 CEST	8.8.8.8	192.168.2.22	0x69ff	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:42.056910038 CEST	8.8.8.8	192.168.2.22	0x162a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:42.311079979 CEST	8.8.8.8	192.168.2.22	0xfd31	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:42.578414917 CEST	8.8.8.8	192.168.2.22	0xbbe7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:42.863167048 CEST	8.8.8.8	192.168.2.22	0xa4d6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:43.125004053 CEST	8.8.8.8	192.168.2.22	0xf0c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:43.314171076 CEST	8.8.8.8	192.168.2.22	0xf438	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:43.491615057 CEST	8.8.8.8	192.168.2.22	0x52d9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:43.773960114 CEST	8.8.8.8	192.168.2.22	0x775c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:43.789509058 CEST	8.8.8.8	192.168.2.22	0xd196	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:44.038954020 CEST	8.8.8.8	192.168.2.22	0xcf1a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:44.342452049 CEST	8.8.8.8	192.168.2.22	0x3964	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:44.582551003 CEST	8.8.8.8	192.168.2.22	0xd0a8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:44.881262064 CEST	8.8.8.8	192.168.2.22	0xe6e2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:45.146435976 CEST	8.8.8.8	192.168.2.22	0x8b5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:45.411995888 CEST	8.8.8.8	192.168.2.22	0xb8c2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:45.650341034 CEST	8.8.8.8	192.168.2.22	0x20ba	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:45.833425999 CEST	8.8.8.8	192.168.2.22	0xb1a9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:46.015721083 CEST	8.8.8.8	192.168.2.22	0x97e9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:46.180838108 CEST	8.8.8.8	192.168.2.22	0x8f12	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:46.276206017 CEST	8.8.8.8	192.168.2.22	0x25dd	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:46.351461887 CEST	8.8.8.8	192.168.2.22	0x2fea	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:46.531446934 CEST	8.8.8.8	192.168.2.22	0x38b8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:46.713201046 CEST	8.8.8.8	192.168.2.22	0xcff9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:46.888993025 CEST	8.8.8.8	192.168.2.22	0x26df	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:47.059444904 CEST	8.8.8.8	192.168.2.22	0x46be	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:47.235099077 CEST	8.8.8.8	192.168.2.22	0x5780	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:47.436594963 CEST	8.8.8.8	192.168.2.22	0xd66e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:47.599680901 CEST	8.8.8.8	192.168.2.22	0x119a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:47.779345989 CEST	8.8.8.8	192.168.2.22	0xc8a8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:47.946181059 CEST	8.8.8.8	192.168.2.22	0xcbe4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:48.133445024 CEST	8.8.8.8	192.168.2.22	0xdf12	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:48.321207047 CEST	8.8.8.8	192.168.2.22	0x264d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:48.504182100 CEST	8.8.8.8	192.168.2.22	0x8267	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:48.701400995 CEST	8.8.8.8	192.168.2.22	0x82ad	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:48.734016895 CEST	8.8.8.8	192.168.2.22	0xc494	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:48.880402088 CEST	8.8.8.8	192.168.2.22	0xba9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:49.062361002 CEST	8.8.8.8	192.168.2.22	0x9d55	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:49.236880064 CEST	8.8.8.8	192.168.2.22	0x38b1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:49.402327061 CEST	8.8.8.8	192.168.2.22	0x9665	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:49.582681894 CEST	8.8.8.8	192.168.2.22	0xd755	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:49.761981964 CEST	8.8.8.8	192.168.2.22	0xe77b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:49.947999001 CEST	8.8.8.8	192.168.2.22	0x5d13	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:50.122746944 CEST	8.8.8.8	192.168.2.22	0xc878	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:50.309537888 CEST	8.8.8.8	192.168.2.22	0x5a25	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:50.484322071 CEST	8.8.8.8	192.168.2.22	0x6aea	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:50.668335915 CEST	8.8.8.8	192.168.2.22	0x18db	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:50.888242960 CEST	8.8.8.8	192.168.2.22	0xe97e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:51.066414118 CEST	8.8.8.8	192.168.2.22	0x7ca6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:51.250205040 CEST	8.8.8.8	192.168.2.22	0x741f	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:51.262105942 CEST	8.8.8.8	192.168.2.22	0x5f09	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:51.438874006 CEST	8.8.8.8	192.168.2.22	0x2acf	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:51.612327099 CEST	8.8.8.8	192.168.2.22	0x8a9a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:51.798420906 CEST	8.8.8.8	192.168.2.22	0x1439	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:51.977644920 CEST	8.8.8.8	192.168.2.22	0x4e9e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:52.152868986 CEST	8.8.8.8	192.168.2.22	0xeada	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:52.330019951 CEST	8.8.8.8	192.168.2.22	0xb9b8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:52.510094881 CEST	8.8.8.8	192.168.2.22	0xd243	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:52.687549114 CEST	8.8.8.8	192.168.2.22	0xb114	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:52.861021042 CEST	8.8.8.8	192.168.2.22	0xa611	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:53.038561106 CEST	8.8.8.8	192.168.2.22	0xa809	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:53.213341951 CEST	8.8.8.8	192.168.2.22	0x6158	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:53.386735916 CEST	8.8.8.8	192.168.2.22	0x44c6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:53.561526060 CEST	8.8.8.8	192.168.2.22	0x39b3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:53.739248991 CEST	8.8.8.8	192.168.2.22	0xd71e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:53.740195036 CEST	8.8.8.8	192.168.2.22	0x7db2	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:53.907088995 CEST	8.8.8.8	192.168.2.22	0x32de	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:54.077692986 CEST	8.8.8.8	192.168.2.22	0x8106	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:54.261339903 CEST	8.8.8.8	192.168.2.22	0x491	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:54.441154003 CEST	8.8.8.8	192.168.2.22	0x5989	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:54.617497921 CEST	8.8.8.8	192.168.2.22	0xfb86	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:54.788620949 CEST	8.8.8.8	192.168.2.22	0xdbd9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:54.980634928 CEST	8.8.8.8	192.168.2.22	0x9f83	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:55.152298927 CEST	8.8.8.8	192.168.2.22	0x45a1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:55.347321987 CEST	8.8.8.8	192.168.2.22	0xd869	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:55.518179893 CEST	8.8.8.8	192.168.2.22	0xd5f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:55.703550100 CEST	8.8.8.8	192.168.2.22	0x4c27	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:55.901207924 CEST	8.8.8.8	192.168.2.22	0x47fc	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:56.082787037 CEST	8.8.8.8	192.168.2.22	0x61c6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:56.227529049 CEST	8.8.8.8	192.168.2.22	0x4d1f	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:56.247347116 CEST	8.8.8.8	192.168.2.22	0x89f1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:56.422983885 CEST	8.8.8.8	192.168.2.22	0xde1a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:56.593251944 CEST	8.8.8.8	192.168.2.22	0xe9fa	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:56.772574902 CEST	8.8.8.8	192.168.2.22	0x55ea	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:56.970618010 CEST	8.8.8.8	192.168.2.22	0x860c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:57.154674053 CEST	8.8.8.8	192.168.2.22	0x93ff	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:57.334932089 CEST	8.8.8.8	192.168.2.22	0xbb07	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:57.518682003 CEST	8.8.8.8	192.168.2.22	0x8124	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:57.691529036 CEST	8.8.8.8	192.168.2.22	0x30c2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:57.861618042 CEST	8.8.8.8	192.168.2.22	0x5eb8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:58.045171022 CEST	8.8.8.8	192.168.2.22	0xdccb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:58.212883949 CEST	8.8.8.8	192.168.2.22	0x932c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:58.393805981 CEST	8.8.8.8	192.168.2.22	0xb068	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:58.559518099 CEST	8.8.8.8	192.168.2.22	0x5d37	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:58.728307009 CEST	8.8.8.8	192.168.2.22	0x36ab	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:58.746387005 CEST	8.8.8.8	192.168.2.22	0xb89c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:58.918541908 CEST	8.8.8.8	192.168.2.22	0xdcf3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:59.091665030 CEST	8.8.8.8	192.168.2.22	0x2ed0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:59.264094114 CEST	8.8.8.8	192.168.2.22	0xd409	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:59.456938982 CEST	8.8.8.8	192.168.2.22	0x67a7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:59.639405966 CEST	8.8.8.8	192.168.2.22	0x556	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:36:59.823313951 CEST	8.8.8.8	192.168.2.22	0x7fd9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:00.007119894 CEST	8.8.8.8	192.168.2.22	0x2310	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:00.202641964 CEST	8.8.8.8	192.168.2.22	0xbfe0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:00.374819994 CEST	8.8.8.8	192.168.2.22	0xd2c3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:00.539469957 CEST	8.8.8.8	192.168.2.22	0x3458	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:00.725589991 CEST	8.8.8.8	192.168.2.22	0x22e6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:00.906590939 CEST	8.8.8.8	192.168.2.22	0xe057	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:01.097083092 CEST	8.8.8.8	192.168.2.22	0x5b9e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:01.207084894 CEST	8.8.8.8	192.168.2.22	0xbba5	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:01.282056093 CEST	8.8.8.8	192.168.2.22	0x3186	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:01.466864109 CEST	8.8.8.8	192.168.2.22	0x55a3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:01.656336069 CEST	8.8.8.8	192.168.2.22	0x9e31	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:01.829665899 CEST	8.8.8.8	192.168.2.22	0xbec3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:02.020364046 CEST	8.8.8.8	192.168.2.22	0xf624	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:02.206531048 CEST	8.8.8.8	192.168.2.22	0x90dd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:02.380959034 CEST	8.8.8.8	192.168.2.22	0x30d4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:02.571772099 CEST	8.8.8.8	192.168.2.22	0xda0d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:02.744750023 CEST	8.8.8.8	192.168.2.22	0x3feb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:02.921135902 CEST	8.8.8.8	192.168.2.22	0x8add	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:03.098485947 CEST	8.8.8.8	192.168.2.22	0xf9c5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:03.285371065 CEST	8.8.8.8	192.168.2.22	0x45ee	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:03.468713045 CEST	8.8.8.8	192.168.2.22	0x468e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:03.646615028 CEST	8.8.8.8	192.168.2.22	0xb551	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:03.680123091 CEST	8.8.8.8	192.168.2.22	0xcc8	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:03.815238953 CEST	8.8.8.8	192.168.2.22	0x7de3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:04.004038095 CEST	8.8.8.8	192.168.2.22	0x97a4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:04.173531055 CEST	8.8.8.8	192.168.2.22	0x9b85	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:04.349060059 CEST	8.8.8.8	192.168.2.22	0xbb61	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:04.523000956 CEST	8.8.8.8	192.168.2.22	0x4e31	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:04.705108881 CEST	8.8.8.8	192.168.2.22	0x1e88	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:04.882098913 CEST	8.8.8.8	192.168.2.22	0x85f6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:05.054758072 CEST	8.8.8.8	192.168.2.22	0x6b38	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:05.225748062 CEST	8.8.8.8	192.168.2.22	0x8830	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:05.406837940 CEST	8.8.8.8	192.168.2.22	0xea50	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:05.590020895 CEST	8.8.8.8	192.168.2.22	0x8db3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:05.769479036 CEST	8.8.8.8	192.168.2.22	0x4b4f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:05.945020914 CEST	8.8.8.8	192.168.2.22	0xee0f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:06.108258009 CEST	8.8.8.8	192.168.2.22	0x55f3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:06.150445938 CEST	8.8.8.8	192.168.2.22	0x8817	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:06.297446966 CEST	8.8.8.8	192.168.2.22	0x7ea7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:06.477161884 CEST	8.8.8.8	192.168.2.22	0xfc65	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:06.662727118 CEST	8.8.8.8	192.168.2.22	0x4026	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:06.831127882 CEST	8.8.8.8	192.168.2.22	0x6ab7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:07.081259012 CEST	8.8.8.8	192.168.2.22	0xbdad	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:07.252202034 CEST	8.8.8.8	192.168.2.22	0xdf9f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:07.434900045 CEST	8.8.8.8	192.168.2.22	0x8534	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:07.610835075 CEST	8.8.8.8	192.168.2.22	0xb8ae	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:07.792016029 CEST	8.8.8.8	192.168.2.22	0x7f5d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:07.980612040 CEST	8.8.8.8	192.168.2.22	0x46ad	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:08.157979965 CEST	8.8.8.8	192.168.2.22	0x638f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:08.338654041 CEST	8.8.8.8	192.168.2.22	0xf038	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:08.513087034 CEST	8.8.8.8	192.168.2.22	0xb1a3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:08.638379097 CEST	8.8.8.8	192.168.2.22	0x39e3	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:08.685655117 CEST	8.8.8.8	192.168.2.22	0x5c6d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:08.868743896 CEST	8.8.8.8	192.168.2.22	0xbba0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:09.054908037 CEST	8.8.8.8	192.168.2.22	0x5777	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:09.242978096 CEST	8.8.8.8	192.168.2.22	0x69df	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:09.427706957 CEST	8.8.8.8	192.168.2.22	0x3a6a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:09.597045898 CEST	8.8.8.8	192.168.2.22	0xb9b0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:09.795893908 CEST	8.8.8.8	192.168.2.22	0x9ef7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:09.959871054 CEST	8.8.8.8	192.168.2.22	0x4ff	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:10.157757044 CEST	8.8.8.8	192.168.2.22	0xbb23	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:10.318562984 CEST	8.8.8.8	192.168.2.22	0x8546	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:10.497915030 CEST	8.8.8.8	192.168.2.22	0x5948	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:10.667419910 CEST	8.8.8.8	192.168.2.22	0xa8ed	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:10.837328911 CEST	8.8.8.8	192.168.2.22	0x1a7f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:11.009990931 CEST	8.8.8.8	192.168.2.22	0xeb80	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:11.192979097 CEST	8.8.8.8	192.168.2.22	0xd33e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:11.366538048 CEST	8.8.8.8	192.168.2.22	0x8381	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:11.484775066 CEST	8.8.8.8	192.168.2.22	0x9f99	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:11.541352034 CEST	8.8.8.8	192.168.2.22	0xeeda	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:11.719652891 CEST	8.8.8.8	192.168.2.22	0xfd7c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:11.892091036 CEST	8.8.8.8	192.168.2.22	0x4b78	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:12.109268904 CEST	8.8.8.8	192.168.2.22	0x1c44	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:12.283054113 CEST	8.8.8.8	192.168.2.22	0xc9ae	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:12.463227034 CEST	8.8.8.8	192.168.2.22	0x9625	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:12.635654926 CEST	8.8.8.8	192.168.2.22	0xf17e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:12.795675039 CEST	8.8.8.8	192.168.2.22	0xf234	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:12.982868910 CEST	8.8.8.8	192.168.2.22	0x3ac	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:13.157841921 CEST	8.8.8.8	192.168.2.22	0xd932	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:13.352705002 CEST	8.8.8.8	192.168.2.22	0x3814	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:13.513750076 CEST	8.8.8.8	192.168.2.22	0xe1b4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:13.685921907 CEST	8.8.8.8	192.168.2.22	0x6cca	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:13.866683960 CEST	8.8.8.8	192.168.2.22	0x6aae	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:14.033802986 CEST	8.8.8.8	192.168.2.22	0xb3dd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:14.103871107 CEST	8.8.8.8	192.168.2.22	0x71e7	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:14.219700098 CEST	8.8.8.8	192.168.2.22	0xafd0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:14.390681028 CEST	8.8.8.8	192.168.2.22	0x7bce	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:14.573865891 CEST	8.8.8.8	192.168.2.22	0x8f9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:14.759907007 CEST	8.8.8.8	192.168.2.22	0x8c8a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:14.975723028 CEST	8.8.8.8	192.168.2.22	0x13b9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:15.134331942 CEST	8.8.8.8	192.168.2.22	0xcb7b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:15.299251080 CEST	8.8.8.8	192.168.2.22	0xd966	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:15.467781067 CEST	8.8.8.8	192.168.2.22	0x611a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:15.649000883 CEST	8.8.8.8	192.168.2.22	0xbfe2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:15.834681988 CEST	8.8.8.8	192.168.2.22	0xbe35	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:16.000642061 CEST	8.8.8.8	192.168.2.22	0x1ebb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:16.164879084 CEST	8.8.8.8	192.168.2.22	0xa6f0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:16.338090897 CEST	8.8.8.8	192.168.2.22	0x94f0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:16.515149117 CEST	8.8.8.8	192.168.2.22	0x5938	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:16.689853907 CEST	8.8.8.8	192.168.2.22	0x1dba	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:16.863282919 CEST	8.8.8.8	192.168.2.22	0x7544	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:16.955508947 CEST	8.8.8.8	192.168.2.22	0x1ba9	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:17.026767015 CEST	8.8.8.8	192.168.2.22	0x712c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:17.229188919 CEST	8.8.8.8	192.168.2.22	0xccae	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:17.402348042 CEST	8.8.8.8	192.168.2.22	0xb4e0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:17.582012892 CEST	8.8.8.8	192.168.2.22	0xdc4b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:17.755497932 CEST	8.8.8.8	192.168.2.22	0x9a87	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:17.912583113 CEST	8.8.8.8	192.168.2.22	0x29e8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:18.099061966 CEST	8.8.8.8	192.168.2.22	0x9b88	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:18.277192116 CEST	8.8.8.8	192.168.2.22	0xb559	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:18.463021040 CEST	8.8.8.8	192.168.2.22	0xfc24	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:18.631607056 CEST	8.8.8.8	192.168.2.22	0x729b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:18.811350107 CEST	8.8.8.8	192.168.2.22	0xf2e1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:18.999566078 CEST	8.8.8.8	192.168.2.22	0xfbb5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:19.159344912 CEST	8.8.8.8	192.168.2.22	0x8f92	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:19.340456009 CEST	8.8.8.8	192.168.2.22	0xa56b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:19.509887934 CEST	8.8.8.8	192.168.2.22	0xb878	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:19.683533907 CEST	8.8.8.8	192.168.2.22	0xd51	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:19.838428020 CEST	8.8.8.8	192.168.2.22	0x65f0	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:19.866552114 CEST	8.8.8.8	192.168.2.22	0xc931	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:20.067193985 CEST	8.8.8.8	192.168.2.22	0x3910	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:20.241122007 CEST	8.8.8.8	192.168.2.22	0xcb7c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:20.425535917 CEST	8.8.8.8	192.168.2.22	0xaac7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:20.604119062 CEST	8.8.8.8	192.168.2.22	0x5773	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:20.778887033 CEST	8.8.8.8	192.168.2.22	0x2842	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:20.950577021 CEST	8.8.8.8	192.168.2.22	0x7f41	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:21.125329018 CEST	8.8.8.8	192.168.2.22	0xd7b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:21.299587011 CEST	8.8.8.8	192.168.2.22	0x2b36	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:21.468539000 CEST	8.8.8.8	192.168.2.22	0xacc8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:21.637506962 CEST	8.8.8.8	192.168.2.22	0x681a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:21.808919907 CEST	8.8.8.8	192.168.2.22	0xc9f4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:21.970252037 CEST	8.8.8.8	192.168.2.22	0x373f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:22.150264025 CEST	8.8.8.8	192.168.2.22	0xb67a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:22.339715004 CEST	8.8.8.8	192.168.2.22	0x4204	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:22.498472929 CEST	8.8.8.8	192.168.2.22	0x969e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:22.540779114 CEST	8.8.8.8	192.168.2.22	0x1504	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:22.666625977 CEST	8.8.8.8	192.168.2.22	0x2620	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:22.850260973 CEST	8.8.8.8	192.168.2.22	0x98b9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:23.018465996 CEST	8.8.8.8	192.168.2.22	0xe1c8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:23.210721970 CEST	8.8.8.8	192.168.2.22	0xb630	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:23.381438017 CEST	8.8.8.8	192.168.2.22	0x8f39	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:23.562921047 CEST	8.8.8.8	192.168.2.22	0xb018	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:23.734291077 CEST	8.8.8.8	192.168.2.22	0x8165	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:23.906795025 CEST	8.8.8.8	192.168.2.22	0x522c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:24.093605042 CEST	8.8.8.8	192.168.2.22	0xfbbf	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:24.303863049 CEST	8.8.8.8	192.168.2.22	0xca53	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:24.487134933 CEST	8.8.8.8	192.168.2.22	0x3408	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:24.655390024 CEST	8.8.8.8	192.168.2.22	0xd1f6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:24.838933945 CEST	8.8.8.8	192.168.2.22	0x6212	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:25.047070026 CEST	8.8.8.8	192.168.2.22	0xba20	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:25.216121912 CEST	8.8.8.8	192.168.2.22	0x80cc	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:25.229305029 CEST	8.8.8.8	192.168.2.22	0x19cd	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:25.388962984 CEST	8.8.8.8	192.168.2.22	0xade8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:25.579075098 CEST	8.8.8.8	192.168.2.22	0xc376	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:25.743732929 CEST	8.8.8.8	192.168.2.22	0x3fa2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:25.908587933 CEST	8.8.8.8	192.168.2.22	0xdd8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:26.081691980 CEST	8.8.8.8	192.168.2.22	0x8ab5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:26.257045984 CEST	8.8.8.8	192.168.2.22	0x7457	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:26.424860954 CEST	8.8.8.8	192.168.2.22	0x232b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:26.588615894 CEST	8.8.8.8	192.168.2.22	0x1971	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:26.780843019 CEST	8.8.8.8	192.168.2.22	0xff14	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:26.957856894 CEST	8.8.8.8	192.168.2.22	0x2d8b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:27.128237963 CEST	8.8.8.8	192.168.2.22	0x740d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:27.294722080 CEST	8.8.8.8	192.168.2.22	0x8792	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:27.462970018 CEST	8.8.8.8	192.168.2.22	0xb74c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:27.637485981 CEST	8.8.8.8	192.168.2.22	0x402b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:27.844166040 CEST	8.8.8.8	192.168.2.22	0xf843	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:27.871952057 CEST	8.8.8.8	192.168.2.22	0x42cf	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:28.007646084 CEST	8.8.8.8	192.168.2.22	0xd549	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:28.196870089 CEST	8.8.8.8	192.168.2.22	0x8d98	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:28.404191017 CEST	8.8.8.8	192.168.2.22	0xee8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:28.570419073 CEST	8.8.8.8	192.168.2.22	0x8699	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:28.760385990 CEST	8.8.8.8	192.168.2.22	0xb59a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:28.935939074 CEST	8.8.8.8	192.168.2.22	0x508a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:29.110840082 CEST	8.8.8.8	192.168.2.22	0xdb9d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:29.278954983 CEST	8.8.8.8	192.168.2.22	0xef1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:29.440725088 CEST	8.8.8.8	192.168.2.22	0xb342	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:29.608987093 CEST	8.8.8.8	192.168.2.22	0xb8d0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:29.773649931 CEST	8.8.8.8	192.168.2.22	0xe703	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:29.948302984 CEST	8.8.8.8	192.168.2.22	0x41ed	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:30.133024931 CEST	8.8.8.8	192.168.2.22	0xbe0e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:30.302819014 CEST	8.8.8.8	192.168.2.22	0xe880	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:30.346333027 CEST	8.8.8.8	192.168.2.22	0xe611	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:30.488646030 CEST	8.8.8.8	192.168.2.22	0x3514	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:30.666908026 CEST	8.8.8.8	192.168.2.22	0x38d8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:30.833345890 CEST	8.8.8.8	192.168.2.22	0x2d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:31.011964083 CEST	8.8.8.8	192.168.2.22	0x5620	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:31.193532944 CEST	8.8.8.8	192.168.2.22	0x2bae	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:31.372510910 CEST	8.8.8.8	192.168.2.22	0x31e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:31.545578003 CEST	8.8.8.8	192.168.2.22	0xff7f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:31.711004972 CEST	8.8.8.8	192.168.2.22	0xf4b0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:31.880001068 CEST	8.8.8.8	192.168.2.22	0xb221	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:32.056906939 CEST	8.8.8.8	192.168.2.22	0xd27	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:32.222004890 CEST	8.8.8.8	192.168.2.22	0x5520	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:32.409020901 CEST	8.8.8.8	192.168.2.22	0x9043	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:32.601516962 CEST	8.8.8.8	192.168.2.22	0xb0d4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:32.766482115 CEST	8.8.8.8	192.168.2.22	0xaa43	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:32.846327066 CEST	8.8.8.8	192.168.2.22	0x2723	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:32.955342054 CEST	8.8.8.8	192.168.2.22	0xcb5f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:33.128062010 CEST	8.8.8.8	192.168.2.22	0xdc82	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:33.304685116 CEST	8.8.8.8	192.168.2.22	0xf21c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:33.478806019 CEST	8.8.8.8	192.168.2.22	0x457b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:33.650604010 CEST	8.8.8.8	192.168.2.22	0xce1f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:33.831058979 CEST	8.8.8.8	192.168.2.22	0x4032	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:34.004410028 CEST	8.8.8.8	192.168.2.22	0x2661	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:34.174283981 CEST	8.8.8.8	192.168.2.22	0x57f8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:34.363290071 CEST	8.8.8.8	192.168.2.22	0x7143	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:34.534101963 CEST	8.8.8.8	192.168.2.22	0x8a7e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:34.704749107 CEST	8.8.8.8	192.168.2.22	0xa48f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:34.877959967 CEST	8.8.8.8	192.168.2.22	0xfba5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:35.076464891 CEST	8.8.8.8	192.168.2.22	0xea6e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:35.265609026 CEST	8.8.8.8	192.168.2.22	0x3099	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:35.438915014 CEST	8.8.8.8	192.168.2.22	0xec07	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:35.620981932 CEST	8.8.8.8	192.168.2.22	0x5b1d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:35.765249968 CEST	8.8.8.8	192.168.2.22	0xa13	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:35.815371990 CEST	8.8.8.8	192.168.2.22	0x1e93	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:35.978962898 CEST	8.8.8.8	192.168.2.22	0x475d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:36.169920921 CEST	8.8.8.8	192.168.2.22	0x91c8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:36.340281010 CEST	8.8.8.8	192.168.2.22	0xcff8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:36.542144060 CEST	8.8.8.8	192.168.2.22	0x14de	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:36.718108892 CEST	8.8.8.8	192.168.2.22	0x3c38	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:36.886449099 CEST	8.8.8.8	192.168.2.22	0x8741	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:37.056665897 CEST	8.8.8.8	192.168.2.22	0xaefe	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:37.238543034 CEST	8.8.8.8	192.168.2.22	0x49c4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:37.415096998 CEST	8.8.8.8	192.168.2.22	0x81aa	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:37.595204115 CEST	8.8.8.8	192.168.2.22	0x9dcf	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:37.772075891 CEST	8.8.8.8	192.168.2.22	0x67d2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:37.930041075 CEST	8.8.8.8	192.168.2.22	0x4e5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:38.115529060 CEST	8.8.8.8	192.168.2.22	0xc4d5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:38.272242069 CEST	8.8.8.8	192.168.2.22	0xbe0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:38.484591007 CEST	8.8.8.8	192.168.2.22	0x4b39	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:38.628562927 CEST	8.8.8.8	192.168.2.22	0xf74	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:38.657463074 CEST	8.8.8.8	192.168.2.22	0xb0d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:38.819968939 CEST	8.8.8.8	192.168.2.22	0xbe36	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:39.020773888 CEST	8.8.8.8	192.168.2.22	0x3c09	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:39.187567949 CEST	8.8.8.8	192.168.2.22	0xef0e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:39.370894909 CEST	8.8.8.8	192.168.2.22	0x70f2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:39.545412064 CEST	8.8.8.8	192.168.2.22	0xc1d7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:39.715637922 CEST	8.8.8.8	192.168.2.22	0x2445	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:39.891978025 CEST	8.8.8.8	192.168.2.22	0x188d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:40.058655024 CEST	8.8.8.8	192.168.2.22	0x35e9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:40.244543076 CEST	8.8.8.8	192.168.2.22	0x3374	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:40.443057060 CEST	8.8.8.8	192.168.2.22	0x5b99	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:40.613445997 CEST	8.8.8.8	192.168.2.22	0x98b2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:40.789772987 CEST	8.8.8.8	192.168.2.22	0xd49b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:40.991019011 CEST	8.8.8.8	192.168.2.22	0x6afd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:41.168745041 CEST	8.8.8.8	192.168.2.22	0x44c3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:41.301954985 CEST	8.8.8.8	192.168.2.22	0xec98	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:41.349771976 CEST	8.8.8.8	192.168.2.22	0x30e0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:41.519941092 CEST	8.8.8.8	192.168.2.22	0xa405	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:41.702341080 CEST	8.8.8.8	192.168.2.22	0x2904	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:41.873939037 CEST	8.8.8.8	192.168.2.22	0x3cab	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:42.041280985 CEST	8.8.8.8	192.168.2.22	0x8790	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:42.206226110 CEST	8.8.8.8	192.168.2.22	0x24b8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:42.385411978 CEST	8.8.8.8	192.168.2.22	0x221a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:42.555011034 CEST	8.8.8.8	192.168.2.22	0x46d1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:42.728254080 CEST	8.8.8.8	192.168.2.22	0x8aad	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:42.894651890 CEST	8.8.8.8	192.168.2.22	0x744f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:43.066566944 CEST	8.8.8.8	192.168.2.22	0x371c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:43.258692026 CEST	8.8.8.8	192.168.2.22	0xa1b5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:43.427357912 CEST	8.8.8.8	192.168.2.22	0xb1da	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:43.618278027 CEST	8.8.8.8	192.168.2.22	0xb263	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:43.784924030 CEST	8.8.8.8	192.168.2.22	0x2922	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:43.954395056 CEST	8.8.8.8	192.168.2.22	0x9a48	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:44.128473997 CEST	8.8.8.8	192.168.2.22	0x73d3	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:44.152920961 CEST	8.8.8.8	192.168.2.22	0x3792	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:44.327733994 CEST	8.8.8.8	192.168.2.22	0x9d67	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:44.519279957 CEST	8.8.8.8	192.168.2.22	0xb797	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:44.699263096 CEST	8.8.8.8	192.168.2.22	0xb133	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:44.869532108 CEST	8.8.8.8	192.168.2.22	0x2427	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:45.041583061 CEST	8.8.8.8	192.168.2.22	0xc2d6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:45.200486898 CEST	8.8.8.8	192.168.2.22	0x3146	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:45.376173019 CEST	8.8.8.8	192.168.2.22	0xcb88	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:45.566534042 CEST	8.8.8.8	192.168.2.22	0xf0dd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:45.732048988 CEST	8.8.8.8	192.168.2.22	0x8a9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:45.907174110 CEST	8.8.8.8	192.168.2.22	0x28e3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:46.084249973 CEST	8.8.8.8	192.168.2.22	0xa923	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:46.244000912 CEST	8.8.8.8	192.168.2.22	0x28cd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:46.422892094 CEST	8.8.8.8	192.168.2.22	0xd645	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:46.615745068 CEST	8.8.8.8	192.168.2.22	0xb1ad	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:46.645266056 CEST	8.8.8.8	192.168.2.22	0x18a3	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:46.782839060 CEST	8.8.8.8	192.168.2.22	0xc4d5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:46.972821951 CEST	8.8.8.8	192.168.2.22	0x5ea3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:47.149749994 CEST	8.8.8.8	192.168.2.22	0x40d4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:47.330586910 CEST	8.8.8.8	192.168.2.22	0xfffc	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:47.494343996 CEST	8.8.8.8	192.168.2.22	0x528f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:47.671485901 CEST	8.8.8.8	192.168.2.22	0xbe82	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:47.855022907 CEST	8.8.8.8	192.168.2.22	0x8680	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:48.028465033 CEST	8.8.8.8	192.168.2.22	0x4678	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:48.200279951 CEST	8.8.8.8	192.168.2.22	0xecc6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:48.382241964 CEST	8.8.8.8	192.168.2.22	0xf27f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:48.554337978 CEST	8.8.8.8	192.168.2.22	0x5a56	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:48.767853022 CEST	8.8.8.8	192.168.2.22	0x21d1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:48.929847002 CEST	8.8.8.8	192.168.2.22	0x4d21	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:49.100426912 CEST	8.8.8.8	192.168.2.22	0xf2dc	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:49.127810001 CEST	8.8.8.8	192.168.2.22	0x1165	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:49.290523052 CEST	8.8.8.8	192.168.2.22	0xc05e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:49.464487076 CEST	8.8.8.8	192.168.2.22	0x3350	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:49.654530048 CEST	8.8.8.8	192.168.2.22	0xc228	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:49.817569017 CEST	8.8.8.8	192.168.2.22	0x9ec5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:50.001105070 CEST	8.8.8.8	192.168.2.22	0xe841	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:50.168603897 CEST	8.8.8.8	192.168.2.22	0x5dd2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:50.342554092 CEST	8.8.8.8	192.168.2.22	0x424f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:50.522769928 CEST	8.8.8.8	192.168.2.22	0x61da	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:50.716571093 CEST	8.8.8.8	192.168.2.22	0xfbdf	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:50.882675886 CEST	8.8.8.8	192.168.2.22	0xc06	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:51.062350035 CEST	8.8.8.8	192.168.2.22	0x6b1b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:51.236061096 CEST	8.8.8.8	192.168.2.22	0xd191	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:51.394440889 CEST	8.8.8.8	192.168.2.22	0xd1a4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:51.577004910 CEST	8.8.8.8	192.168.2.22	0xef75	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:51.597821951 CEST	8.8.8.8	192.168.2.22	0x2c09	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:51.740605116 CEST	8.8.8.8	192.168.2.22	0xbc36	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:51.919450045 CEST	8.8.8.8	192.168.2.22	0xb139	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:52.088712931 CEST	8.8.8.8	192.168.2.22	0xb899	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:52.268448114 CEST	8.8.8.8	192.168.2.22	0xb062	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:52.452581882 CEST	8.8.8.8	192.168.2.22	0xfb5f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:52.627249956 CEST	8.8.8.8	192.168.2.22	0xb29a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:52.815294027 CEST	8.8.8.8	192.168.2.22	0x55e1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:52.996881962 CEST	8.8.8.8	192.168.2.22	0x665a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:53.180356979 CEST	8.8.8.8	192.168.2.22	0x7812	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:53.358282089 CEST	8.8.8.8	192.168.2.22	0x801a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:53.553940058 CEST	8.8.8.8	192.168.2.22	0x66a6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:53.724348068 CEST	8.8.8.8	192.168.2.22	0x7a4b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:53.905966043 CEST	8.8.8.8	192.168.2.22	0x8cfd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:54.081311941 CEST	8.8.8.8	192.168.2.22	0x5db9	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:54.083389997 CEST	8.8.8.8	192.168.2.22	0xa766	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:54.249538898 CEST	8.8.8.8	192.168.2.22	0xd00d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:54.436424971 CEST	8.8.8.8	192.168.2.22	0xee8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:54.615660906 CEST	8.8.8.8	192.168.2.22	0xfba7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:54.796900034 CEST	8.8.8.8	192.168.2.22	0xe6b1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:54.970582962 CEST	8.8.8.8	192.168.2.22	0xbcfe	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:55.163486958 CEST	8.8.8.8	192.168.2.22	0x43fe	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:55.336723089 CEST	8.8.8.8	192.168.2.22	0xc264	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:55.516057968 CEST	8.8.8.8	192.168.2.22	0xd943	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:55.690359116 CEST	8.8.8.8	192.168.2.22	0x1748	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:55.899378061 CEST	8.8.8.8	192.168.2.22	0xbbf9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:56.072683096 CEST	8.8.8.8	192.168.2.22	0x800d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:56.249474049 CEST	8.8.8.8	192.168.2.22	0xc8ca	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:56.423702002 CEST	8.8.8.8	192.168.2.22	0x11e4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:56.569870949 CEST	8.8.8.8	192.168.2.22	0xc627	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:56.592978001 CEST	8.8.8.8	192.168.2.22	0x4639	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:56.772032976 CEST	8.8.8.8	192.168.2.22	0xc37c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:56.965620041 CEST	8.8.8.8	192.168.2.22	0x9197	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:57.147747040 CEST	8.8.8.8	192.168.2.22	0x742d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:57.322194099 CEST	8.8.8.8	192.168.2.22	0x7ff1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:57.511332989 CEST	8.8.8.8	192.168.2.22	0x38bc	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:57.694010019 CEST	8.8.8.8	192.168.2.22	0x8e18	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:57.869462967 CEST	8.8.8.8	192.168.2.22	0x3527	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:58.045892000 CEST	8.8.8.8	192.168.2.22	0x576e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:58.218285084 CEST	8.8.8.8	192.168.2.22	0x958e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:58.392780066 CEST	8.8.8.8	192.168.2.22	0xdd05	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:58.568190098 CEST	8.8.8.8	192.168.2.22	0xce9b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:58.735080004 CEST	8.8.8.8	192.168.2.22	0x9a5b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:58.912050962 CEST	8.8.8.8	192.168.2.22	0xa30c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:59.082077026 CEST	8.8.8.8	192.168.2.22	0x499e	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:59.109524012 CEST	8.8.8.8	192.168.2.22	0xc6ba	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:59.280607939 CEST	8.8.8.8	192.168.2.22	0xd5da	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:59.441994905 CEST	8.8.8.8	192.168.2.22	0x9ba	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:59.635225058 CEST	8.8.8.8	192.168.2.22	0x644e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:59.801498890 CEST	8.8.8.8	192.168.2.22	0xfaf0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:37:59.983911037 CEST	8.8.8.8	192.168.2.22	0xd2ae	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:00.144877911 CEST	8.8.8.8	192.168.2.22	0xe10	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:00.330797911 CEST	8.8.8.8	192.168.2.22	0xc5cb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:00.499289989 CEST	8.8.8.8	192.168.2.22	0x7cb4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:00.668886900 CEST	8.8.8.8	192.168.2.22	0xc736	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:00.838687897 CEST	8.8.8.8	192.168.2.22	0xb8b1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:01.021611929 CEST	8.8.8.8	192.168.2.22	0x755c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:01.191406012 CEST	8.8.8.8	192.168.2.22	0xdc72	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:01.379906893 CEST	8.8.8.8	192.168.2.22	0x5d27	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:01.577755928 CEST	8.8.8.8	192.168.2.22	0xab6c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:01.584033012 CEST	8.8.8.8	192.168.2.22	0xe799	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:01.747505903 CEST	8.8.8.8	192.168.2.22	0x9a3e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:01.932015896 CEST	8.8.8.8	192.168.2.22	0xb01d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:02.105653048 CEST	8.8.8.8	192.168.2.22	0x5f75	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:02.290122032 CEST	8.8.8.8	192.168.2.22	0xfd6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:02.468754053 CEST	8.8.8.8	192.168.2.22	0x6e7f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:02.649487019 CEST	8.8.8.8	192.168.2.22	0x2a28	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:02.831124067 CEST	8.8.8.8	192.168.2.22	0x6a01	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:03.020086050 CEST	8.8.8.8	192.168.2.22	0x7d64	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:03.187439919 CEST	8.8.8.8	192.168.2.22	0xf5d4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:03.364408016 CEST	8.8.8.8	192.168.2.22	0x9c4d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:03.541186094 CEST	8.8.8.8	192.168.2.22	0x5ed0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:03.718975067 CEST	8.8.8.8	192.168.2.22	0x7486	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:03.893829107 CEST	8.8.8.8	192.168.2.22	0x4cff	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:04.067141056 CEST	8.8.8.8	192.168.2.22	0x5072	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:04.067490101 CEST	8.8.8.8	192.168.2.22	0x6236	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:04.276479006 CEST	8.8.8.8	192.168.2.22	0xd473	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:04.446321964 CEST	8.8.8.8	192.168.2.22	0x8ecb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:04.627332926 CEST	8.8.8.8	192.168.2.22	0xe957	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:04.806052923 CEST	8.8.8.8	192.168.2.22	0xfe41	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:04.976862907 CEST	8.8.8.8	192.168.2.22	0xc263	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:05.159373045 CEST	8.8.8.8	192.168.2.22	0xf1c5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:05.335764885 CEST	8.8.8.8	192.168.2.22	0xdc60	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:05.561233997 CEST	8.8.8.8	192.168.2.22	0xcb92	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:05.761895895 CEST	8.8.8.8	192.168.2.22	0xbe54	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:05.951483011 CEST	8.8.8.8	192.168.2.22	0xb260	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:06.139239073 CEST	8.8.8.8	192.168.2.22	0xc2fe	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:06.321448088 CEST	8.8.8.8	192.168.2.22	0xdae4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:06.487046957 CEST	8.8.8.8	192.168.2.22	0xc965	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:06.575295925 CEST	8.8.8.8	192.168.2.22	0x5485	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:06.666240931 CEST	8.8.8.8	192.168.2.22	0xc12d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:06.841949940 CEST	8.8.8.8	192.168.2.22	0xd690	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:07.034255028 CEST	8.8.8.8	192.168.2.22	0xe3e0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:07.207590103 CEST	8.8.8.8	192.168.2.22	0x162c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:07.374176025 CEST	8.8.8.8	192.168.2.22	0xb244	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:07.562041998 CEST	8.8.8.8	192.168.2.22	0x3a61	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:07.745760918 CEST	8.8.8.8	192.168.2.22	0xecd2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:07.922846079 CEST	8.8.8.8	192.168.2.22	0x9733	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:08.118736029 CEST	8.8.8.8	192.168.2.22	0x6a1f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:08.299247026 CEST	8.8.8.8	192.168.2.22	0x2e1d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:08.536484957 CEST	8.8.8.8	192.168.2.22	0x85ab	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:08.709589005 CEST	8.8.8.8	192.168.2.22	0x457b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:08.895714998 CEST	8.8.8.8	192.168.2.22	0x543b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:09.142827034 CEST	8.8.8.8	192.168.2.22	0xff96	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:09.178015947 CEST	8.8.8.8	192.168.2.22	0xa816	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:09.366353035 CEST	8.8.8.8	192.168.2.22	0x6ffb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:09.644542933 CEST	8.8.8.8	192.168.2.22	0xe19f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:10.239617109 CEST	8.8.8.8	192.168.2.22	0x3611	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:10.932245016 CEST	8.8.8.8	192.168.2.22	0x2436	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:11.114489079 CEST	8.8.8.8	192.168.2.22	0xe434	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:11.373464108 CEST	8.8.8.8	192.168.2.22	0x7d71	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:11.539562941 CEST	8.8.8.8	192.168.2.22	0x3a4c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:11.612560034 CEST	8.8.8.8	192.168.2.22	0x238	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:11.722209930 CEST	8.8.8.8	192.168.2.22	0xaf3c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:11.900804043 CEST	8.8.8.8	192.168.2.22	0x578c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:12.085539103 CEST	8.8.8.8	192.168.2.22	0x6f17	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:12.267929077 CEST	8.8.8.8	192.168.2.22	0xd5f7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:12.442684889 CEST	8.8.8.8	192.168.2.22	0xfed	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:12.630037069 CEST	8.8.8.8	192.168.2.22	0x2c80	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:12.829272032 CEST	8.8.8.8	192.168.2.22	0xa48c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:13.009826899 CEST	8.8.8.8	192.168.2.22	0x86b8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:13.225379944 CEST	8.8.8.8	192.168.2.22	0xee9d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:13.455024958 CEST	8.8.8.8	192.168.2.22	0x6ea8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:13.651653051 CEST	8.8.8.8	192.168.2.22	0x29c1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:13.838156939 CEST	8.8.8.8	192.168.2.22	0xe7dd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:14.019963026 CEST	8.8.8.8	192.168.2.22	0x9d2a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:14.100127935 CEST	8.8.8.8	192.168.2.22	0xf461	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:14.201769114 CEST	8.8.8.8	192.168.2.22	0xb572	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:14.370290995 CEST	8.8.8.8	192.168.2.22	0xc4e4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:14.544150114 CEST	8.8.8.8	192.168.2.22	0x46fb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:14.713498116 CEST	8.8.8.8	192.168.2.22	0x3526	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:14.886490107 CEST	8.8.8.8	192.168.2.22	0x6d0b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:15.051497936 CEST	8.8.8.8	192.168.2.22	0xb306	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:15.265008926 CEST	8.8.8.8	192.168.2.22	0x9a38	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:15.493901014 CEST	8.8.8.8	192.168.2.22	0x8224	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:15.661529064 CEST	8.8.8.8	192.168.2.22	0x6e35	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:15.841680050 CEST	8.8.8.8	192.168.2.22	0xe18f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:16.026818037 CEST	8.8.8.8	192.168.2.22	0x6fed	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:16.250638962 CEST	8.8.8.8	192.168.2.22	0xd1c0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:16.430991888 CEST	8.8.8.8	192.168.2.22	0xe7f1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:16.569858074 CEST	8.8.8.8	192.168.2.22	0x3012	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:16.603332996 CEST	8.8.8.8	192.168.2.22	0xae20	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:16.770932913 CEST	8.8.8.8	192.168.2.22	0x5c08	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:16.940881968 CEST	8.8.8.8	192.168.2.22	0x1831	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:17.129560947 CEST	8.8.8.8	192.168.2.22	0x21a1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:17.303787947 CEST	8.8.8.8	192.168.2.22	0x263e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:17.545563936 CEST	8.8.8.8	192.168.2.22	0x43bd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:17.733232975 CEST	8.8.8.8	192.168.2.22	0x3b50	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:17.915251017 CEST	8.8.8.8	192.168.2.22	0xc14e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:18.117177010 CEST	8.8.8.8	192.168.2.22	0x6b61	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:18.289356947 CEST	8.8.8.8	192.168.2.22	0x5f84	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:18.461764097 CEST	8.8.8.8	192.168.2.22	0x16fb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:18.650573015 CEST	8.8.8.8	192.168.2.22	0x42ea	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:18.825834990 CEST	8.8.8.8	192.168.2.22	0xde86	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:19.009919882 CEST	8.8.8.8	192.168.2.22	0xec8a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:19.035726070 CEST	8.8.8.8	192.168.2.22	0x588d	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:19.191822052 CEST	8.8.8.8	192.168.2.22	0xcb30	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:19.361972094 CEST	8.8.8.8	192.168.2.22	0xb148	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:19.546380997 CEST	8.8.8.8	192.168.2.22	0xf47b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:19.749814034 CEST	8.8.8.8	192.168.2.22	0xa409	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:20.343597889 CEST	8.8.8.8	192.168.2.22	0x8f2f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:20.519891977 CEST	8.8.8.8	192.168.2.22	0xd7d7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:20.690007925 CEST	8.8.8.8	192.168.2.22	0x549c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:20.857659101 CEST	8.8.8.8	192.168.2.22	0x3ae3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:21.027187109 CEST	8.8.8.8	192.168.2.22	0x639	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:21.194776058 CEST	8.8.8.8	192.168.2.22	0x7c8f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:21.829585075 CEST	8.8.8.8	192.168.2.22	0x7b1b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:21.878319979 CEST	8.8.8.8	192.168.2.22	0x241a	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:22.001560926 CEST	8.8.8.8	192.168.2.22	0xac31	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:22.170859098 CEST	8.8.8.8	192.168.2.22	0xb2dc	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:22.345005989 CEST	8.8.8.8	192.168.2.22	0x9470	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:22.504760027 CEST	8.8.8.8	192.168.2.22	0x61b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:22.700571060 CEST	8.8.8.8	192.168.2.22	0x21fa	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:22.870699883 CEST	8.8.8.8	192.168.2.22	0x9a93	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:23.041404963 CEST	8.8.8.8	192.168.2.22	0xab4d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:23.259429932 CEST	8.8.8.8	192.168.2.22	0xab57	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:23.428673983 CEST	8.8.8.8	192.168.2.22	0x896d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:23.621412039 CEST	8.8.8.8	192.168.2.22	0x1e9e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:23.791091919 CEST	8.8.8.8	192.168.2.22	0x5aeb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:23.961950064 CEST	8.8.8.8	192.168.2.22	0xf0b2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:24.138371944 CEST	8.8.8.8	192.168.2.22	0xbfaa	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:24.324444056 CEST	8.8.8.8	192.168.2.22	0xfc74	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:24.350552082 CEST	8.8.8.8	192.168.2.22	0xd1a1	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:24.497311115 CEST	8.8.8.8	192.168.2.22	0x9090	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:24.677355051 CEST	8.8.8.8	192.168.2.22	0xd3ae	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:24.848297119 CEST	8.8.8.8	192.168.2.22	0x89f0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:25.028441906 CEST	8.8.8.8	192.168.2.22	0x58c7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:25.203136921 CEST	8.8.8.8	192.168.2.22	0x9531	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:25.393640995 CEST	8.8.8.8	192.168.2.22	0x62e5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:25.569863081 CEST	8.8.8.8	192.168.2.22	0x27c1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:25.738466978 CEST	8.8.8.8	192.168.2.22	0xd49	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:25.915574074 CEST	8.8.8.8	192.168.2.22	0x43b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:26.086637974 CEST	8.8.8.8	192.168.2.22	0x9c38	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:26.255073071 CEST	8.8.8.8	192.168.2.22	0xaef	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:26.429328918 CEST	8.8.8.8	192.168.2.22	0xc194	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:26.614057064 CEST	8.8.8.8	192.168.2.22	0xe1e6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:26.783716917 CEST	8.8.8.8	192.168.2.22	0x9e69	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:26.816497087 CEST	8.8.8.8	192.168.2.22	0x44b	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:26.970263958 CEST	8.8.8.8	192.168.2.22	0xe905	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:27.152595043 CEST	8.8.8.8	192.168.2.22	0x58a4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:27.335469007 CEST	8.8.8.8	192.168.2.22	0xfd6d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:27.524386883 CEST	8.8.8.8	192.168.2.22	0x7144	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:27.698133945 CEST	8.8.8.8	192.168.2.22	0xf135	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:27.895833969 CEST	8.8.8.8	192.168.2.22	0x6641	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:28.062336922 CEST	8.8.8.8	192.168.2.22	0x79e7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:28.252672911 CEST	8.8.8.8	192.168.2.22	0x96e4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:28.427480936 CEST	8.8.8.8	192.168.2.22	0xccb2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:28.588978052 CEST	8.8.8.8	192.168.2.22	0xea13	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:28.786786079 CEST	8.8.8.8	192.168.2.22	0xb5ae	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:28.955003977 CEST	8.8.8.8	192.168.2.22	0xb59f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:29.125591993 CEST	8.8.8.8	192.168.2.22	0xca45	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:29.297749996 CEST	8.8.8.8	192.168.2.22	0x3177	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:29.301918983 CEST	8.8.8.8	192.168.2.22	0x28a7	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:29.484471083 CEST	8.8.8.8	192.168.2.22	0xd460	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:29.653316975 CEST	8.8.8.8	192.168.2.22	0xe938	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:29.847033978 CEST	8.8.8.8	192.168.2.22	0xe069	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:30.014920950 CEST	8.8.8.8	192.168.2.22	0x5dfe	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:30.188934088 CEST	8.8.8.8	192.168.2.22	0xa444	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:30.354876995 CEST	8.8.8.8	192.168.2.22	0x3155	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:30.531375885 CEST	8.8.8.8	192.168.2.22	0x8c27	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:30.699915886 CEST	8.8.8.8	192.168.2.22	0xb8e6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:30.874428988 CEST	8.8.8.8	192.168.2.22	0x32fa	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:31.039819002 CEST	8.8.8.8	192.168.2.22	0x975b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:31.219489098 CEST	8.8.8.8	192.168.2.22	0x58e4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:31.395318031 CEST	8.8.8.8	192.168.2.22	0x8d09	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:31.571309090 CEST	8.8.8.8	192.168.2.22	0x936a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:31.768045902 CEST	8.8.8.8	192.168.2.22	0xdea9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:31.782413960 CEST	8.8.8.8	192.168.2.22	0xb14d	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:31.944178104 CEST	8.8.8.8	192.168.2.22	0x32c7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:32.135552883 CEST	8.8.8.8	192.168.2.22	0x7a63	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:32.313513041 CEST	8.8.8.8	192.168.2.22	0x2b7e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:32.487896919 CEST	8.8.8.8	192.168.2.22	0xfd32	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:32.688652039 CEST	8.8.8.8	192.168.2.22	0xc910	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:32.851834059 CEST	8.8.8.8	192.168.2.22	0x44b2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:33.035284042 CEST	8.8.8.8	192.168.2.22	0x927f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:33.213548899 CEST	8.8.8.8	192.168.2.22	0x3ff	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:33.386205912 CEST	8.8.8.8	192.168.2.22	0x116e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:33.561486959 CEST	8.8.8.8	192.168.2.22	0x5d88	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:33.728787899 CEST	8.8.8.8	192.168.2.22	0xafc9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:33.908207893 CEST	8.8.8.8	192.168.2.22	0x1de2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:34.086992979 CEST	8.8.8.8	192.168.2.22	0xf51d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:34.248441935 CEST	8.8.8.8	192.168.2.22	0xa140	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:34.257359982 CEST	8.8.8.8	192.168.2.22	0xcaa2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:34.444742918 CEST	8.8.8.8	192.168.2.22	0xb716	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:34.638170958 CEST	8.8.8.8	192.168.2.22	0xe9a2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:34.813647985 CEST	8.8.8.8	192.168.2.22	0x9886	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:34.999938011 CEST	8.8.8.8	192.168.2.22	0x562c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:35.183446884 CEST	8.8.8.8	192.168.2.22	0xf0b5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:35.351624012 CEST	8.8.8.8	192.168.2.22	0x65fe	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:35.527003050 CEST	8.8.8.8	192.168.2.22	0xc2a8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:35.689631939 CEST	8.8.8.8	192.168.2.22	0x17b9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:35.866084099 CEST	8.8.8.8	192.168.2.22	0x823b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:36.041984081 CEST	8.8.8.8	192.168.2.22	0xf12e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:36.219408035 CEST	8.8.8.8	192.168.2.22	0xe6b6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:36.408268929 CEST	8.8.8.8	192.168.2.22	0xf454	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:36.587711096 CEST	8.8.8.8	192.168.2.22	0xe8c2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:36.746068001 CEST	8.8.8.8	192.168.2.22	0x6a44	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:36.750411987 CEST	8.8.8.8	192.168.2.22	0x3f79	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:36.993359089 CEST	8.8.8.8	192.168.2.22	0xa513	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:37.265175104 CEST	8.8.8.8	192.168.2.22	0xe433	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:37.448551893 CEST	8.8.8.8	192.168.2.22	0x4522	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:37.842123032 CEST	8.8.8.8	192.168.2.22	0xfb76	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:38.019195080 CEST	8.8.8.8	192.168.2.22	0xe80c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:38.291444063 CEST	8.8.8.8	192.168.2.22	0xe33e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:38.739064932 CEST	8.8.8.8	192.168.2.22	0x6b6d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:39.001805067 CEST	8.8.8.8	192.168.2.22	0x7904	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:39.765021086 CEST	8.8.8.8	192.168.2.22	0x1198	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:39.788184881 CEST	8.8.8.8	192.168.2.22	0xeee0	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:39.952893019 CEST	8.8.8.8	192.168.2.22	0x1c01	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:40.135356903 CEST	8.8.8.8	192.168.2.22	0x2f0f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:40.370230913 CEST	8.8.8.8	192.168.2.22	0x34f4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:40.590842962 CEST	8.8.8.8	192.168.2.22	0x52be	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:40.778172016 CEST	8.8.8.8	192.168.2.22	0xa62	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:40.956505060 CEST	8.8.8.8	192.168.2.22	0xdf3a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:41.128978968 CEST	8.8.8.8	192.168.2.22	0xb53f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:41.328011990 CEST	8.8.8.8	192.168.2.22	0xf034	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:41.499880075 CEST	8.8.8.8	192.168.2.22	0xb38b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:41.683012962 CEST	8.8.8.8	192.168.2.22	0xd3a2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:41.853288889 CEST	8.8.8.8	192.168.2.22	0xf45b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:42.041572094 CEST	8.8.8.8	192.168.2.22	0x6b46	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:42.227828026 CEST	8.8.8.8	192.168.2.22	0xc1cb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:42.259912968 CEST	8.8.8.8	192.168.2.22	0xcbb3	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:42.420455933 CEST	8.8.8.8	192.168.2.22	0xfaea	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:42.589231014 CEST	8.8.8.8	192.168.2.22	0x42e4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:42.756437063 CEST	8.8.8.8	192.168.2.22	0xede0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:42.956068993 CEST	8.8.8.8	192.168.2.22	0x28aa	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:43.151124954 CEST	8.8.8.8	192.168.2.22	0x6b69	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:43.332200050 CEST	8.8.8.8	192.168.2.22	0x19e8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:43.516078949 CEST	8.8.8.8	192.168.2.22	0x2b1d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:43.691771030 CEST	8.8.8.8	192.168.2.22	0xb3ae	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:43.864443064 CEST	8.8.8.8	192.168.2.22	0x378	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:44.046092033 CEST	8.8.8.8	192.168.2.22	0xd491	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:44.239358902 CEST	8.8.8.8	192.168.2.22	0xb33c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:44.413070917 CEST	8.8.8.8	192.168.2.22	0x546d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:44.585094929 CEST	8.8.8.8	192.168.2.22	0x7936	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:44.749892950 CEST	8.8.8.8	192.168.2.22	0xcae9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:44.753612995 CEST	8.8.8.8	192.168.2.22	0x4c26	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:44.958522081 CEST	8.8.8.8	192.168.2.22	0x9e29	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:45.129836082 CEST	8.8.8.8	192.168.2.22	0xf3e1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:45.302865028 CEST	8.8.8.8	192.168.2.22	0x14ff	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:45.483932018 CEST	8.8.8.8	192.168.2.22	0x1927	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:45.659207106 CEST	8.8.8.8	192.168.2.22	0xfe03	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:45.854847908 CEST	8.8.8.8	192.168.2.22	0x78c1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:46.021761894 CEST	8.8.8.8	192.168.2.22	0x4619	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:46.232311010 CEST	8.8.8.8	192.168.2.22	0xe218	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:46.416913033 CEST	8.8.8.8	192.168.2.22	0x6e0a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:46.603454113 CEST	8.8.8.8	192.168.2.22	0x5b5e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:46.781021118 CEST	8.8.8.8	192.168.2.22	0xc9cb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:46.964704037 CEST	8.8.8.8	192.168.2.22	0xb9ae	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:47.151890039 CEST	8.8.8.8	192.168.2.22	0xfc47	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:47.233361006 CEST	8.8.8.8	192.168.2.22	0x1536	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:47.333729982 CEST	8.8.8.8	192.168.2.22	0xc908	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:47.530339956 CEST	8.8.8.8	192.168.2.22	0x4853	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:47.711304903 CEST	8.8.8.8	192.168.2.22	0x5664	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:47.887053967 CEST	8.8.8.8	192.168.2.22	0xde51	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:48.063106060 CEST	8.8.8.8	192.168.2.22	0xb399	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:48.240263939 CEST	8.8.8.8	192.168.2.22	0x2c8e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:48.417036057 CEST	8.8.8.8	192.168.2.22	0xcc1b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:48.599112988 CEST	8.8.8.8	192.168.2.22	0x87e9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:48.786489010 CEST	8.8.8.8	192.168.2.22	0x89fd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:48.950913906 CEST	8.8.8.8	192.168.2.22	0x3bfd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:38:49.106698036 CEST	8.8.8.8	192.168.2.22	0x8c03	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Apr 6, 2021 19:35:36.783931971 CEST	192.185.48.186	443	192.168.2.22	49167	CN=autodiscover.metaflip.io CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Tue Mar 30 02:52:09 CEST 2021 Wed Oct 07 21:21:40 CEST 2020	Mon Jun 28 02:52:09 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Apr 6, 2021 19:35:36.783931971 CEST	192.185.48.186	443	192.168.2.22	49167	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		7dcce5b76c8b17472d024758970a406b
Apr 6, 2021 19:35:39.879769087 CEST	192.185.214.87	443	192.168.2.22	49170	CN=www.partsapp.com.br CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Mar 31 10:12:03 CEST 2021 Wed Oct 07 21:21:40 CEST 2020	Tue Jun 29 10:12:03 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Apr 6, 2021 19:35:39.879769087 CEST	192.185.214.87	443	192.168.2.22	49170	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		7dcce5b76c8b17472d024758970a406b
Apr 6, 2021 19:35:41.026943922 CEST	50.87.146.86	443	192.168.2.22	49171	CN=www.columbia.aula-web.net CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Tue Mar 16 08:24:20 CET 2021 Wed Oct 07 21:21:40 CEST 2020	Mon Jun 14 09:24:20 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Apr 6, 2021 19:35:41.026943922 CEST	50.87.146.86	443	192.168.2.22	49171	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		7dcce5b76c8b17472d024758970a406b
Apr 6, 2021 19:35:42.182872057 CEST	199.79.62.99	443	192.168.2.22	49172	CN=webdisk.hashmati.com CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Feb 18 18:24:39 CET 2021 Wed Oct 07 21:21:40 CEST 2020	Wed May 19 19:24:39 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Apr 6, 2021 19:35:42.182872057 CEST	199.79.62.99	443	192.168.2.22	49172	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		7dcce5b76c8b17472d024758970a406b
Apr 6, 2021 19:35:45.067708969 CEST	143.204.3.74	443	192.168.2.22	49173	CN=aws.amazon.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 30 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Thu Sep 23 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	769,49172-49171-57-51-53-47-49162-49161-56-50-10-19-5-4,0-10-11-23-65281,23-24,0	05af1f5ca1b87cc9cc9b25185115607d
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Apr 6, 2021 19:36:16.404540062 CEST	143.204.3.74	443	192.168.2.22	49174	CN=aws.amazon.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 30 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Thu Sep 23 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	769,49172-49171-57-51-53-47-49162-49161-56-50-10-19-5-4,0-10-11-23-65281,23-24,0	05af1f5ca1b87cc9cc9b25185115607d
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034

Code Manipulations

Statistics

Behavior

Click to jump to process

System Behavior

Analysis Process: EXCEL.EXE PID: 2296 Parent PID: 584

General

Start time:	19:35:37
Start date:	06/04/2021
Path:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
Imagebase:	0x13f3e0000
File size:	27641504 bytes
MD5 hash:	5FB0A0F93382ECD19F5F499A5CAA59F0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Analysis Process: rundll32.exe PID: 2316 Parent PID: 2296

General

Start time:	19:35:48
Start date:	06/04/2021
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32 ..\ksjvoefv.skd,DllRegisterServer
Imagebase:	0xff430000
File size:	45568 bytes
MD5 hash:	DD81D91FF3B0763C392422865C9AC12E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2341336889.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2340656783.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2347303586.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2353273837.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2346946398.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2324539894.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2324305529.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2313180906.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2353071481.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2312959484.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2294844286.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2347372775.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2307293375.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2324432561.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2312752671.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2300737619.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2359025585.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2288787523.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2300503265.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2358776145.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2359409712.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2353386032.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2359132350.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2318924371.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2306619325.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2306955212.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2300848573.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2318582057.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2318854529.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2289125454.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2307060040.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000002.2499534316.00000000000DD000.00000004.00000020.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2353251472.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2313048515.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2318832417.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2294985377.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2289046679.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2324458781.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2347597509.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2295056636.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2294958860.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2289433187.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2341036692.00000000000DD000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2301147013.0000000000152000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000003.2340962857.0000000000152000.00000004.00000001.sdmp, Author: Joe Security
Reputation:	high

Analysis Process: rundll32.exe PID: 2928 Parent PID: 2296

General

Start time:	19:36:19
Start date:	06/04/2021
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32 ..\ksjvoefv.skd1,DllRegisterServer
Imagebase:	0xff430000
File size:	45568 bytes
MD5 hash:	DD81D91FF3B0763C392422865C9AC12E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Analysis Process: rundll32.exe PID: 260 Parent PID: 2296

General

Start time:	19:36:19
Start date:	06/04/2021
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32 ..\ksjvoefv.skd2,DllRegisterServer
Imagebase:	0xff430000
File size:	45568 bytes
MD5 hash:	DD81D91FF3B0763C392422865C9AC12E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Analysis Process: rundll32.exe PID: 2864 Parent PID: 2296

General

Start time:	19:36:19
Start date:	06/04/2021
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32 ..\ksjvoefv.skd3,DllRegisterServer
Imagebase:	0xff430000
File size:	45568 bytes
MD5 hash:	DD81D91FF3B0763C392422865C9AC12E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Analysis Process: rundll32.exe PID: 268 Parent PID: 2296

General

Start time:	19:36:50
Start date:	06/04/2021
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32 ..\ksjvoefv.skd4,DllRegisterServer
Imagebase:	0xff430000
File size:	45568 bytes
MD5 hash:	DD81D91FF3B0763C392422865C9AC12E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Disassembly

Code Analysis

Reset < >

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Anti-virus, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads.
Tactics:	Defense Evasion
Data Sources:	DLL monitoring, Loaded DLLs, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report document-1251000362.xlsm

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Threatname: IcedID

Yara Overview

Memory Dumps

Sigma Overview

Signature Overview

AV Detection:

Compliance:

Software Vulnerabilities:

Networking:

E-Banking Fraud:

System Summary:

Persistence and Installation Behavior:

Boot Survival:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

Anti Debugging:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Stealing of Sensitive Information:

Remote Access Functionality:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

Contacted IPs

Public

Private

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static OLE Info

General

OLE File "document-1251000362.xlsm"

Indicators

Macro 4.0 Code

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics