Edit tour

Windows Analysis Report
QP6s4u5SZ8

Overview

General Information

Sample Name:	QP6s4u5SZ8 (renamed file extension from none to exe)
Analysis ID:	568311
MD5:	535b08cfd5bb887fda074d3ff3e5f34f
SHA1:	ad09a95386db11d2f90c4d5bb423a9af276619b7
SHA256:	430c12393a1714e3f5087e1338a3e3846ab62b18d816cc4916749a935f8dab44
Tags:	exeNimbleMamba
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Connects to a pastebin service (likely for C&C)

Machine Learning detection for sample

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Uses 32bit PE files

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

PE file contains strange resources

May sleep (evasive loops) to hinder dynamic analysis

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

JA3 SSL client fingerprint seen in connection with other malware

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Enables debug privileges

Classification

Process Tree

System is w10x64

QP6s4u5SZ8.exe (PID: 6588 cmdline: "C:\Users\user\Desktop\QP6s4u5SZ8.exe" MD5: 535B08CFD5BB887FDA074D3FF3E5F34F)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: QP6s4u5SZ8.exe	Virustotal: Detection: 43%			Perma Link
Source: QP6s4u5SZ8.exe	ReversingLabs: Detection: 53%

Machine Learning detection for sample

Source: QP6s4u5SZ8.exe

Joe Sandbox ML: detected

Source: QP6s4u5SZ8.exe

Static PE information: 32BIT_MACHINE, EXECUTABLE_IMAGE

Source: unknown

HTTPS traffic detected: 51.83.143.177:443 -> 192.168.2.3:49752 version: TLS 1.2

Source: QP6s4u5SZ8.exe

Static PE information: NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

Networking

Connects to a pastebin service (likely for C&C)

Source: unknown	DNS query: name: justpaste.it
Source: unknown	DNS query: name: justpaste.it
Source: unknown	DNS query: name: justpaste.it
Source: unknown	DNS query: name: justpaste.it
Source: unknown	DNS query: name: justpaste.it
Source: unknown	DNS query: name: justpaste.it
Source: unknown	DNS query: name: justpaste.it
Source: unknown	DNS query: name: justpaste.it

Source: global traffic	TCP traffic: 192.168.2.3:49751 -> 129.6.15.28:13
Source: global traffic	TCP traffic: 192.168.2.3:49758 -> 129.6.15.29:13
Source: global traffic	TCP traffic: 192.168.2.3:49768 -> 129.6.15.27:13
Source: global traffic	TCP traffic: 192.168.2.3:49781 -> 132.163.97.3:13
Source: global traffic	TCP traffic: 192.168.2.3:49797 -> 132.163.97.2:13
Source: global traffic	TCP traffic: 192.168.2.3:49802 -> 132.163.96.4:13
Source: global traffic	TCP traffic: 192.168.2.3:49807 -> 132.163.96.1:13
Source: global traffic	TCP traffic: 192.168.2.3:49812 -> 128.138.141.172:13
Source: global traffic	TCP traffic: 192.168.2.3:49817 -> 132.163.97.1:13
Source: global traffic	TCP traffic: 192.168.2.3:49941 -> 132.163.96.2:13
Source: global traffic	TCP traffic: 192.168.2.3:49976 -> 132.163.97.4:13
Source: global traffic	TCP traffic: 192.168.2.3:50003 -> 128.138.140.44:13
Source: global traffic	TCP traffic: 192.168.2.3:50065 -> 216.239.35.4:13
Source: global traffic	TCP traffic: 192.168.2.3:50065 -> 216.239.35.12:13

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.itConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it

Source: Joe Sandbox View

IP Address: 129.6.15.28 129.6.15.28

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:27:54 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:27:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:27:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:27:56 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:27:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:27:59 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:15 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:20 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:29 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:36 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:48 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:56 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:28:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:18 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin

Source: QP6s4u5SZ8.exe, 00000000.00000002.559492800.000000001B824000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: QP6s4u5SZ8.exe, 00000000.00000002.558692148.0000000002F1E000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558553301.0000000002E8E000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558937802.00000000030A4000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557731154.0000000002C1D000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559055992.000000000312C000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558407242.0000000002DFE000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559250790.00000000031B4000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557963761.0000000002CDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://justpaste.it
Source: QP6s4u5SZ8.exe, 00000000.00000002.557712149.0000000002C04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: QP6s4u5SZ8.exe	String found in binary or memory: https://api.dropboxapi.com/2/files/create_folder_v2
Source: QP6s4u5SZ8.exe	String found in binary or memory: https://api.dropboxapi.com/2/files/delete_v2
Source: QP6s4u5SZ8.exe	String found in binary or memory: https://api.dropboxapi.com/2/files/list_folder
Source: QP6s4u5SZ8.exe	String found in binary or memory: https://apia.ipify.org
Source: QP6s4u5SZ8.exe	String found in binary or memory: https://apia.ipify.org9https://myexternalip.com/raw
Source: QP6s4u5SZ8.exe	String found in binary or memory: https://content.dropboxapi.com/2/files/download
Source: QP6s4u5SZ8.exe	String found in binary or memory: https://content.dropboxapi.com/2/files/upload
Source: QP6s4u5SZ8.exe	String found in binary or memory: https://content.dropboxapi.com/2/files/upload1application/octet-stream
Source: QP6s4u5SZ8.exe, 00000000.00000002.557712149.0000000002C04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://justpaste.it
Source: QP6s4u5SZ8.exe	String found in binary or memory: https://justpaste.it/
Source: QP6s4u5SZ8.exe, 00000000.00000002.558952722.00000000030B6000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557902733.0000000002CAA000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559175571.0000000003190000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558536456.0000000002E7C000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558563685.0000000002EA0000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558692148.0000000002F1E000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558553301.0000000002E8E000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559008994.00000000030EC000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558518139.0000000002E6A000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557677904.0000000002BCC000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557938706.0000000002CCA000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558328813.0000000002DB2000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558937802.00000000030A4000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559119285.0000000003174000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558015563.0000000002D1C000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558642701.0000000002EE8000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558361855.0000000002DDA000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558613280.0000000002ED6000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558584905.0000000002EC4000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559024868.00000000030FE000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558665824.0000000002EFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://justpaste.it/RIjMwIzNwIDM
Source: QP6s4u5SZ8.exe, 00000000.00000002.558952722.00000000030B6000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557902733.0000000002CAA000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559175571.0000000003190000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558536456.0000000002E7C000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558563685.0000000002EA0000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558692148.0000000002F1E000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558553301.0000000002E8E000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559008994.00000000030EC000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558518139.0000000002E6A000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557938706.0000000002CCA000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558328813.0000000002DB2000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558937802.00000000030A4000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559119285.0000000003174000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558015563.0000000002D1C000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558642701.0000000002EE8000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558361855.0000000002DDA000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558613280.0000000002ED6000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558584905.0000000002EC4000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559024868.00000000030FE000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558665824.0000000002EFA000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559142376.0000000003182000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://justpaste.it8
Source: QP6s4u5SZ8.exe, 00000000.00000002.557712149.0000000002C04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://justpaste.itx
Source: QP6s4u5SZ8.exe	String found in binary or memory: https://myexternalip.com/raw
Source: QP6s4u5SZ8.exe, 00000000.00000002.557862775.0000000002C8C000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558952722.00000000030B6000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557902733.0000000002CAA000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558150278.0000000002D6E000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559175571.0000000003190000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558536456.0000000002E7C000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558563685.0000000002EA0000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558692148.0000000002F1E000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558109318.0000000002D62000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558553301.0000000002E8E000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559008994.00000000030EC000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558750796.0000000003011000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558518139.0000000002E6A000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557794361.0000000002C6C000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558037099.0000000002D55000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557883979.0000000002C95000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558795626.000000000302D000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558858743.0000000003051000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557938706.0000000002CCA000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558328813.0000000002DB2000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558211067.0000000002D86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://notification.justpaste.it/api/v1/stats/unread

Source: unknown

DNS traffic detected: queries for: time-a-g.nist.gov

Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.itConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it

Source: unknown

HTTPS traffic detected: 51.83.143.177:443 -> 192.168.2.3:49752 version: TLS 1.2

Source: QP6s4u5SZ8.exe

Static PE information: 32BIT_MACHINE, EXECUTABLE_IMAGE

Source: QP6s4u5SZ8.exe, 00000000.00000002.556820873.0000000000C79000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs QP6s4u5SZ8.exe
Source: QP6s4u5SZ8.exe, 00000000.00000000.288147445.00000000007AE000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameSysinternals.exe: vs QP6s4u5SZ8.exe
Source: QP6s4u5SZ8.exe	Binary or memory string: OriginalFilenameSysinternals.exe: vs QP6s4u5SZ8.exe

Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: QP6s4u5SZ8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Code function: 0_2_00007FFC082F52A6	0_2_00007FFC082F52A6
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Code function: 0_2_00007FFC082F0BCD	0_2_00007FFC082F0BCD
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Code function: 0_2_00007FFC082F6052	0_2_00007FFC082F6052

Source: QP6s4u5SZ8.exe	Virustotal: Detection: 43%
Source: QP6s4u5SZ8.exe	ReversingLabs: Detection: 53%

Source: QP6s4u5SZ8.exe

Static PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe

Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\ac26e2af62f23e37e645b5e44068a025\mscorlib.ni.dll

Jump to behavior

Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe

Mutant created: \Sessions\1\BaseNamedObjects\QP6s4u5SZ8

Source: classification engine

Classification label: mal60.troj.evad.winEXE@1/0@201/16

Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: QP6s4u5SZ8.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: QP6s4u5SZ8.exe

Static PE information: NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_BIOS

Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe

Window / User API: threadDelayed 762

Jump to behavior

Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe TID: 6380

Thread sleep time: -180000s >= -30000s

Jump to behavior

Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_ComputerSystem
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_ComputerSystem

Source: QP6s4u5SZ8.exe, 00000000.00000002.557581255.0000000002B33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware
Source: QP6s4u5SZ8.exe	Binary or memory string: model1Microsoft\|VMWare\|Virtual
Source: QP6s4u5SZ8.exe, 00000000.00000002.557581255.0000000002B33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 1:en-US:VMware\|VIRTUAL\|A M I\|Xen
Source: QP6s4u5SZ8.exe, 00000000.00000002.557581255.0000000002B33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmware
Source: QP6s4u5SZ8.exe, 00000000.00000002.559459739.000000001B7E0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll$$L]
Source: QP6s4u5SZ8.exe, 00000000.00000002.557581255.0000000002B33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 1:en-US:Microsoft\|VMWare\|Virtual
Source: QP6s4u5SZ8.exe	Binary or memory string: 1VMware\|VIRTUAL\|A M I\|XenEselect * from Win32_ComputerSystem
Source: QP6s4u5SZ8.exe, 00000000.00000002.557581255.0000000002B33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware\|VIRTUAL\|A M I\|Xen
Source: QP6s4u5SZ8.exe, 00000000.00000002.557581255.0000000002B33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMWare
Source: QP6s4u5SZ8.exe, 00000000.00000002.557581255.0000000002B33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Microsoft\|VMWare\|Virtual

Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Queries volume information: C:\Users\user\Desktop\QP6s4u5SZ8.exe VolumeInformation			Jump to behavior
Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\QP6s4u5SZ8.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	11 Windows Management Instrumentation	Path Interception	Path Interception	2 Virtualization/Sandbox Evasion	OS Credential Dumping	11 Security Software Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	1 Web Service	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Disable or Modify Tools	LSASS Memory	2 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	11 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	1 Application Window Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	1 Non-Standard Port	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	1 Remote System Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	3 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	122 System Information Discovery	SSH	Keylogging	Data Transfer Size Limits	3 Non-Application Layer Protocol	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Steganography	Cached Domain Credentials	System Owner/User Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	4 Application Layer Protocol	Jamming or Denial of Service		Abuse Accessibility Features

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
QP6s4u5SZ8.exe	43%	Virustotal		Browse
QP6s4u5SZ8.exe	3%	Metadefender		Browse
QP6s4u5SZ8.exe	53%	ReversingLabs	ByteCode-MSIL.Trojan.Generic
QP6s4u5SZ8.exe	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://justpaste.it8	0%	Avira URL Cloud	safe
https://justpaste.itx	0%	Avira URL Cloud	safe
https://api.dropboxapi.com/2/files/delete_v2	0%	Virustotal		Browse
https://api.dropboxapi.com/2/files/delete_v2	0%	Avira URL Cloud	safe
https://api.dropboxapi.com/2/files/list_folder	0%	Virustotal		Browse
https://api.dropboxapi.com/2/files/list_folder	0%	Avira URL Cloud	safe
https://content.dropboxapi.com/2/files/upload1application/octet-stream	0%	Avira URL Cloud	safe
https://content.dropboxapi.com/2/files/upload	0%	Avira URL Cloud	safe
https://apia.ipify.org9https://myexternalip.com/raw	0%	Avira URL Cloud	safe
https://content.dropboxapi.com/2/files/download	0%	Avira URL Cloud	safe
https://api.dropboxapi.com/2/files/create_folder_v2	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
justpaste.it	51.83.143.177	true	false	high
ntp1.glb.nist.gov	132.163.97.3	true	false	high
time-d-g.nist.gov	129.6.15.27	true	false	high
time.google.com	216.239.35.4	true	false	high
time-b-g.nist.gov	129.6.15.29	true	false	high
time-a-g.nist.gov	129.6.15.28	true	false	high
time.nist.gov	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://justpaste.it/RIjMwIzNwIDM	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://justpaste.it8	QP6s4u5SZ8.exe, 00000000.00000002.558952722.00000000030B6000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557902733.0000000002CAA000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559175571.0000000003190000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558536456.0000000002E7C000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558563685.0000000002EA0000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558692148.0000000002F1E000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558553301.0000000002E8E000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559008994.00000000030EC000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558518139.0000000002E6A000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557938706.0000000002CCA000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558328813.0000000002DB2000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558937802.00000000030A4000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559119285.0000000003174000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558015563.0000000002D1C000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558642701.0000000002EE8000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558361855.0000000002DDA000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558613280.0000000002ED6000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558584905.0000000002EC4000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559024868.00000000030FE000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558665824.0000000002EFA000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559142376.0000000003182000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://justpaste.itx	QP6s4u5SZ8.exe, 00000000.00000002.557712149.0000000002C04000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://justpaste.it	QP6s4u5SZ8.exe, 00000000.00000002.557712149.0000000002C04000.00000004.00000800.00020000.00000000.sdmp	false		high
https://api.dropboxapi.com/2/files/delete_v2	QP6s4u5SZ8.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://api.dropboxapi.com/2/files/list_folder	QP6s4u5SZ8.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://content.dropboxapi.com/2/files/upload1application/octet-stream	QP6s4u5SZ8.exe	false	Avira URL Cloud: safe	unknown
https://content.dropboxapi.com/2/files/upload	QP6s4u5SZ8.exe	false	Avira URL Cloud: safe	unknown
https://apia.ipify.org	QP6s4u5SZ8.exe	false		high
https://apia.ipify.org9https://myexternalip.com/raw	QP6s4u5SZ8.exe	false	Avira URL Cloud: safe	unknown
https://content.dropboxapi.com/2/files/download	QP6s4u5SZ8.exe	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	QP6s4u5SZ8.exe, 00000000.00000002.557712149.0000000002C04000.00000004.00000800.00020000.00000000.sdmp	false		high
https://justpaste.it/	QP6s4u5SZ8.exe	false		high
https://notification.justpaste.it/api/v1/stats/unread	QP6s4u5SZ8.exe, 00000000.00000002.557862775.0000000002C8C000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558952722.00000000030B6000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557902733.0000000002CAA000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558150278.0000000002D6E000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559175571.0000000003190000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558536456.0000000002E7C000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558563685.0000000002EA0000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558692148.0000000002F1E000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558109318.0000000002D62000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558553301.0000000002E8E000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559008994.00000000030EC000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558750796.0000000003011000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558518139.0000000002E6A000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557794361.0000000002C6C000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558037099.0000000002D55000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557883979.0000000002C95000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558795626.000000000302D000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558858743.0000000003051000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557938706.0000000002CCA000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558328813.0000000002DB2000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558211067.0000000002D86000.00000004.00000800.00020000.00000000.sdmp	false		high
https://myexternalip.com/raw	QP6s4u5SZ8.exe	false		high
http://justpaste.it	QP6s4u5SZ8.exe, 00000000.00000002.558692148.0000000002F1E000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558553301.0000000002E8E000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558937802.00000000030A4000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557731154.0000000002C1D000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559055992.000000000312C000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.558407242.0000000002DFE000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.559250790.00000000031B4000.00000004.00000800.00020000.00000000.sdmp, QP6s4u5SZ8.exe, 00000000.00000002.557963761.0000000002CDA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://api.dropboxapi.com/2/files/create_folder_v2	QP6s4u5SZ8.exe	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
51.83.143.177	justpaste.it	France	16276	OVHFR	false
129.6.15.29	time-b-g.nist.gov	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
132.163.97.2	unknown	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
129.6.15.28	time-a-g.nist.gov	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
132.163.97.3	ntp1.glb.nist.gov	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
132.163.96.4	unknown	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
129.6.15.27	time-d-g.nist.gov	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
132.163.97.4	unknown	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
216.239.35.4	time.google.com	United States	15169	GOOGLEUS	false
216.239.35.12	unknown	United States	15169	GOOGLEUS	false
128.138.141.172	unknown	United States	104	COLORADO-ASUS	false
128.138.140.44	unknown	United States	104	COLORADO-ASUS	false
132.163.96.1	unknown	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
132.163.97.1	unknown	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
132.163.96.2	unknown	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	34.0.0 Boulder Opal
Analysis ID:	568311
Start date:	08.02.2022
Start time:	08:26:49
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 6m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	QP6s4u5SZ8 (renamed file extension from none to exe)
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.troj.evad.winEXE@1/0@201/16
EGA Information:	Failed
HDC Information:	Successful, ratio: 13.3% (good quality ratio 9.9%) Quality average: 62.2% Quality standard deviation: 42%
HCA Information:	Successful, ratio: 100% Number of executed functions: 63 Number of non-executed functions: 0
Cookbook Comments:	Adjust boot time Enable AMSI

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, WMIADAP.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe, wuapihost.exe
Excluded domains from analysis (whitelisted): ris.api.iris.microsoft.com, ctldl.windowsupdate.com, displaycatalog.mp.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, arc.msn.com
Execution Graph export aborted for target QP6s4u5SZ8.exe, PID 6588 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
08:27:54	API Interceptor	57x Sleep call for process: QP6s4u5SZ8.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link
129.6.15.29	VwVVw0oik4	Get hash	malicious	Browse
	TimeSync.exe	Get hash	malicious	Browse
	hak5MjyKgK.exe	Get hash	malicious	Browse
129.6.15.28	2X3f1ykTmM.exe	Get hash	malicious	Browse
	kr.exe	Get hash	malicious	Browse
	WjmYak325l.exe	Get hash	malicious	Browse
	F75rJPKdGb.exe	Get hash	malicious	Browse
	ozJy5Zf5cf.exe	Get hash	malicious	Browse
	tgduMePOh0.exe	Get hash	malicious	Browse
	8AcNX5GzVY.exe	Get hash	malicious	Browse
	QkAgFhbO4a.exe	Get hash	malicious	Browse
	zfpLjnr5P9.exe	Get hash	malicious	Browse
	8TTLURnXhM.exe	Get hash	malicious	Browse
	fK5LTFDKXC.exe	Get hash	malicious	Browse
	lHCBcjZBib.exe	Get hash	malicious	Browse
	KTi0r6xqtH.exe	Get hash	malicious	Browse
	Cx1HKT0xhO.exe	Get hash	malicious	Browse
	4i2nattkLT.exe	Get hash	malicious	Browse
	Z9GkJvygEk.exe	Get hash	malicious	Browse
	RZAcKBlQo0.exe	Get hash	malicious	Browse
	F1MwWrwBR7.exe	Get hash	malicious	Browse
	kecFPnbu5K.exe	Get hash	malicious	Browse
	5PfBAmWq3V.exe	Get hash	malicious	Browse
132.163.96.4	putty.exe	Get hash	malicious	Browse
	t21O0lgK1t.exe	Get hash	malicious	Browse
	dLlF0bPWxx.exe	Get hash	malicious	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
time-a-g.nist.gov	2X3f1ykTmM.exe	Get hash	malicious	Browse	129.6.15.28
	kr.exe	Get hash	malicious	Browse	129.6.15.28
	WjmYak325l.exe	Get hash	malicious	Browse	129.6.15.28
	F75rJPKdGb.exe	Get hash	malicious	Browse	129.6.15.28
	ozJy5Zf5cf.exe	Get hash	malicious	Browse	129.6.15.28
	tgduMePOh0.exe	Get hash	malicious	Browse	129.6.15.28
	8AcNX5GzVY.exe	Get hash	malicious	Browse	129.6.15.28
	QkAgFhbO4a.exe	Get hash	malicious	Browse	129.6.15.28
	zfpLjnr5P9.exe	Get hash	malicious	Browse	129.6.15.28
	8TTLURnXhM.exe	Get hash	malicious	Browse	129.6.15.28
	fK5LTFDKXC.exe	Get hash	malicious	Browse	129.6.15.28
	lHCBcjZBib.exe	Get hash	malicious	Browse	129.6.15.28
	KTi0r6xqtH.exe	Get hash	malicious	Browse	129.6.15.28
	Cx1HKT0xhO.exe	Get hash	malicious	Browse	129.6.15.28
	4i2nattkLT.exe	Get hash	malicious	Browse	129.6.15.28
	Z9GkJvygEk.exe	Get hash	malicious	Browse	129.6.15.28
	RZAcKBlQo0.exe	Get hash	malicious	Browse	129.6.15.28
	F1MwWrwBR7.exe	Get hash	malicious	Browse	129.6.15.28
	kecFPnbu5K.exe	Get hash	malicious	Browse	129.6.15.28
	5PfBAmWq3V.exe	Get hash	malicious	Browse	129.6.15.28
ntp1.glb.nist.gov	putty.exe	Get hash	malicious	Browse	132.163.96.4
	G1WdS7YlNd.exe	Get hash	malicious	Browse	132.163.97.6
	vXVSbqN7B6.exe	Get hash	malicious	Browse	132.163.96.3
	6ComlsB8Gq.exe	Get hash	malicious	Browse	132.163.96.3
	lrOc7QEBcV.exe	Get hash	malicious	Browse	132.163.96.2
	t21O0lgK1t.exe	Get hash	malicious	Browse	132.163.96.4
	GUg2wGYjhG.exe	Get hash	malicious	Browse	128.138.141.172
	ac1khvFT2V.exe	Get hash	malicious	Browse	128.138.141.172
	dLlF0bPWxx.exe	Get hash	malicious	Browse	132.163.96.4
	eNjIpT5RzD.exe	Get hash	malicious	Browse	132.163.96.3
	Plq7ADczmp.exe	Get hash	malicious	Browse	132.163.96.6
	SecuriteInfo.com.ArtemisC5924E341E9E.exe	Get hash	malicious	Browse	132.163.96.1
	SecuriteInfo.com.Generic.mg.4f18b3ddeaf967b7.exe	Get hash	malicious	Browse	132.163.97.1
	vlcwn.exe	Get hash	malicious	Browse	132.163.96.3
	hak5MjyKgK.exe	Get hash	malicious	Browse	132.163.96.3
time-b-g.nist.gov	TimeSync.exe	Get hash	malicious	Browse	129.6.15.29
time-b-g.nist.gov	hak5MjyKgK.exe	Get hash	malicious	Browse	129.6.15.29

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
OVHFR	Notice0802.xlsm	Get hash	malicious	Browse	54.38.242.185
	report 480187140.xlsm	Get hash	malicious	Browse	54.38.242.185
	DETAILS-08022022.xlsm	Get hash	malicious	Browse	54.38.242.185
	tIq0CYj6Ym.dll	Get hash	malicious	Browse	54.38.242.185
	E57ulQiwAe.dll	Get hash	malicious	Browse	54.38.242.185
	pack-0702.xlsm	Get hash	malicious	Browse	54.38.242.185
	lpvFWzd2vF.dll	Get hash	malicious	Browse	54.38.242.185
	h86SjlxQbm.dll	Get hash	malicious	Browse	54.38.242.185
	aTJAxhQs13.dll	Get hash	malicious	Browse	54.38.242.185
	VJndf5eO5Z.dll	Get hash	malicious	Browse	54.38.242.185
	8HIJPWBIXU.dll	Get hash	malicious	Browse	54.38.242.185
	cYuPU2nBZR.dll	Get hash	malicious	Browse	54.38.242.185
	oiZ4B527f2.dll	Get hash	malicious	Browse	54.38.242.185
	x7DBXRJjPx.dll	Get hash	malicious	Browse	54.38.242.185
	0PJhEDFJWD.dll	Get hash	malicious	Browse	54.38.242.185
	IOeSaezC1f.dll	Get hash	malicious	Browse	54.38.242.185
	093Iy2DLBd.dll	Get hash	malicious	Browse	54.38.242.185
	C074RbNqfp.dll	Get hash	malicious	Browse	54.38.242.185
	8HIJPWBIXU.dll	Get hash	malicious	Browse	54.38.242.185
	5AGw5CAIuC.dll	Get hash	malicious	Browse	54.38.242.185
US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	2X3f1ykTmM.exe	Get hash	malicious	Browse	129.6.15.28
	putty.exe	Get hash	malicious	Browse	132.163.96.4
	jerusalem.ppc	Get hash	malicious	Browse	129.6.121.81
	kr.exe	Get hash	malicious	Browse	129.6.15.28
	u9afRawaNV	Get hash	malicious	Browse	129.6.93.244
	G1WdS7YlNd.exe	Get hash	malicious	Browse	132.163.97.6
	vXVSbqN7B6.exe	Get hash	malicious	Browse	132.163.96.3
	6ComlsB8Gq.exe	Get hash	malicious	Browse	132.163.96.3
	lrOc7QEBcV.exe	Get hash	malicious	Browse	132.163.96.2
	t21O0lgK1t.exe	Get hash	malicious	Browse	132.163.96.4
	WjmYak325l.exe	Get hash	malicious	Browse	129.6.15.28
	F75rJPKdGb.exe	Get hash	malicious	Browse	129.6.15.28
	ozJy5Zf5cf.exe	Get hash	malicious	Browse	129.6.15.28
	tgduMePOh0.exe	Get hash	malicious	Browse	129.6.15.28
	VwVVw0oik4	Get hash	malicious	Browse	129.6.15.29
	8AcNX5GzVY.exe	Get hash	malicious	Browse	129.6.15.28
	QkAgFhbO4a.exe	Get hash	malicious	Browse	129.6.15.28
	zfpLjnr5P9.exe	Get hash	malicious	Browse	129.6.15.28
	8TTLURnXhM.exe	Get hash	malicious	Browse	129.6.15.28
	fK5LTFDKXC.exe	Get hash	malicious	Browse	129.6.15.28

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	PO - 4501226854,pdf.exe	Get hash	malicious	Browse	51.83.143.177
	Swift mesaj#U0131 4.02.2022.exe	Get hash	malicious	Browse	51.83.143.177
	#U7f8e#U91d1#U532f#U738728.84 (USD 40,257+5% #U7a05#Uff09.exe	Get hash	malicious	Browse	51.83.143.177
	Free Snipping Tool - 5.1.0.0.msi	Get hash	malicious	Browse	51.83.143.177
	vpn_installer.exe	Get hash	malicious	Browse	51.83.143.177
	CJe3dbR1rO.exe	Get hash	malicious	Browse	51.83.143.177
	INV_22498RDHL.exe	Get hash	malicious	Browse	51.83.143.177
	uGjO0f0gAu.exe	Get hash	malicious	Browse	51.83.143.177
	ZI4r47GK8D.exe	Get hash	malicious	Browse	51.83.143.177
	factura bancaria_7654.exe	Get hash	malicious	Browse	51.83.143.177
	YGIk6moSjA.exe	Get hash	malicious	Browse	51.83.143.177
	AutoInstall.exe	Get hash	malicious	Browse	51.83.143.177
	setup.exe	Get hash	malicious	Browse	51.83.143.177
	Vucutvtr.exe	Get hash	malicious	Browse	51.83.143.177
	invoice.Html	Get hash	malicious	Browse	51.83.143.177
	GiftBox..docx	Get hash	malicious	Browse	51.83.143.177
	xYWm6BV3NZ.exe	Get hash	malicious	Browse	51.83.143.177
	OwNqANDnRy.exe	Get hash	malicious	Browse	51.83.143.177
	xYWm6BV3NZ.exe	Get hash	malicious	Browse	51.83.143.177
	r1gnvYRnsz.exe	Get hash	malicious	Browse	51.83.143.177

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	4.613453286715136
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.83% Win32 Executable (generic) a (10002005/4) 49.78% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01%
File name:	QP6s4u5SZ8.exe
File size:	646144
MD5:	535b08cfd5bb887fda074d3ff3e5f34f
SHA1:	ad09a95386db11d2f90c4d5bb423a9af276619b7
SHA256:	430c12393a1714e3f5087e1338a3e3846ab62b18d816cc4916749a935f8dab44
SHA512:	466f7dd50c7227335fba041ffa555527cf152911fa4703d66af0f9b30d4cbb91554d2997cfd61ce25588c545f2f7cdfad4716b4345266969569c91c1b7f6df95
SSDEEP:	6144:RCz7QVZLD1qASA0E4s6daEVcK6k1QV7mV9n496btp1pzGJ7V:rVZFqZhumMP
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......a.....................6......V.... ........@.. .......................@............@................................

File Icon


Icon Hash:	e8d494caca8ad2a6

Static PE Info

General

Entrypoint:	0x40c356
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	32BIT_MACHINE, EXECUTABLE_IMAGE
DLL Characteristics:	NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x61998119 [Sat Nov 20 23:13:29 2021 UTC]
TLS Callbacks:
CLR (.Net) Version:	v4.0.30319
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xc30c	0x4a	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xe000	0x93220	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xa2000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0xa35c	0xa400	False	0.465891768293	data	5.6935610136	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.rsrc	0xe000	0x93220	0x93400	False	0.194524949597	data	4.45659771897	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xa2000	0xc	0x200	False	0.044921875	data	0.0815394123432	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
AFX_DIALOG_LAYOUT	0xe0e8	0x2	data	English	United States
AFX_DIALOG_LAYOUT	0xe10e	0x2	data	English	United States
AFX_DIALOG_LAYOUT	0xe134	0x2	data	English	United States
AFX_DIALOG_LAYOUT	0xe15a	0x2	data	English	United States
AFX_DIALOG_LAYOUT	0xe180	0x2	data	English	United States
AFX_DIALOG_LAYOUT	0xe1a6	0x2	data	English	United States
INI	0xe200	0x497	ASCII text, with CRLF line terminators	English	United States
RT_ICON	0xebc3	0x48e2	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	English	United States
RT_ICON	0x134c9	0x10828	dBase IV DBT, blocks size 0, block length 2048, next free block index 40, next free block 0, next used block 0	English	United States
RT_ICON	0x23d15	0x94a8	data	English	United States
RT_ICON	0x2d1e1	0x5488	data	English	United States
RT_ICON	0x3268d	0x4228	dBase IV DBT of \200.DBF, blocks size 0, block length 16896, next free block index 40, next free block 63743, next used block 251658240	English	United States
RT_ICON	0x368d9	0x25a8	data	English	United States
RT_ICON	0x38ea5	0x10a8	data	English	United States
RT_ICON	0x39f71	0x988	data	English	United States
RT_ICON	0x3a91d	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x3ada9	0x10a8	data	English	United States
RT_ICON	0x3be75	0x988	data	English	United States
RT_ICON	0x3c821	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x3ccad	0x10a8	data	English	United States
RT_ICON	0x3dd79	0x988	data	English	United States
RT_ICON	0x3e725	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x3ebb1	0x10a8	data	English	United States
RT_ICON	0x3fc7d	0x988	data	English	United States
RT_ICON	0x40629	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x40ab5	0x10a8	data	English	United States
RT_ICON	0x41b81	0x988	data	English	United States
RT_ICON	0x4252d	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x429b9	0x4228	dBase IV DBT of \200.DBF, blocks size 0, block length 16896, next free block index 40, next free block 4294967295, next used block 4294967295	English	United States
RT_ICON	0x46c05	0x10a8	data	English	United States
RT_ICON	0x47cd1	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x4815d	0x10a8	data	English	United States
RT_ICON	0x49229	0x988	data	English	United States
RT_ICON	0x49bd5	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x4a061	0x10a8	data	English	United States
RT_ICON	0x4b12d	0x988	data	English	United States
RT_ICON	0x4bad9	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x4bf65	0x10a8	data	English	United States
RT_ICON	0x4d031	0x988	data	English	United States
RT_ICON	0x4d9dd	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x4de69	0x10a8	data	English	United States
RT_ICON	0x4ef35	0x988	data	English	United States
RT_ICON	0x4f8e1	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x4fd6d	0x10a8	data	English	United States
RT_ICON	0x50e39	0x988	data	English	United States
RT_ICON	0x517e5	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x51c71	0x10a8	data	English	United States
RT_ICON	0x52d3d	0x988	data	English	United States
RT_ICON	0x536e9	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x53b75	0x10a8	data	English	United States
RT_ICON	0x54c41	0x988	data	English	United States
RT_ICON	0x555ed	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x55a79	0x10a8	data	English	United States
RT_ICON	0x56b45	0x988	data	English	United States
RT_ICON	0x574f1	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x5797d	0x10a8	data	English	United States
RT_ICON	0x58a49	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x58ed5	0x10a8	data	English	United States
RT_ICON	0x59fa1	0x988	data	English	United States
RT_ICON	0x5a94d	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x5add9	0x10a8	data	English	United States
RT_ICON	0x5bea5	0x988	data	English	United States
RT_ICON	0x5c851	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x5ccdd	0x10a8	data	English	United States
RT_ICON	0x5dda9	0x988	data	English	United States
RT_ICON	0x5e755	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x5ebe1	0x10a8	data	English	United States
RT_ICON	0x5fcad	0x988	data	English	United States
RT_ICON	0x60659	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x60ae5	0x10a8	data	English	United States
RT_ICON	0x61bb1	0x988	data	English	United States
RT_ICON	0x6255d	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x629e9	0x10a8	data	English	United States
RT_ICON	0x63ab5	0x988	data	English	United States
RT_ICON	0x64461	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x648ed	0x10a8	data	English	United States
RT_ICON	0x659b9	0x988	data	English	United States
RT_ICON	0x66365	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x667f1	0x10a8	data	English	United States
RT_ICON	0x678bd	0x988	data	English	United States
RT_ICON	0x68269	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x686f5	0x10a8	data	English	United States
RT_ICON	0x697c1	0x988	data	English	United States
RT_ICON	0x6a16d	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x6a5f9	0x10a8	data	English	United States
RT_ICON	0x6b6c5	0x988	data	English	United States
RT_ICON	0x6c071	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x6c4fd	0x10a8	data	English	United States
RT_ICON	0x6d5c9	0x988	data	English	United States
RT_ICON	0x6df75	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x6e401	0x10a8	data	English	United States
RT_ICON	0x6f4cd	0x988	data	English	United States
RT_ICON	0x6fe79	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x70305	0x10a8	data	English	United States
RT_ICON	0x713d1	0x988	data	English	United States
RT_ICON	0x71d7d	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x72209	0x10a8	data	English	United States
RT_ICON	0x732d5	0x988	data	English	United States
RT_ICON	0x73c81	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x7410d	0x10a8	data	English	United States
RT_ICON	0x751d9	0x988	data	English	United States
RT_ICON	0x75b85	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x76011	0x10a8	data	English	United States
RT_ICON	0x770dd	0x988	data	English	United States
RT_ICON	0x77a89	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x77f15	0x10a8	data	English	United States
RT_ICON	0x78fe1	0x988	data	English	United States
RT_ICON	0x7998d	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x79e19	0x10a8	data	English	United States
RT_ICON	0x7aee5	0x988	data	English	United States
RT_ICON	0x7b891	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x7bd1d	0x10a8	data	English	United States
RT_ICON	0x7cde9	0x988	data	English	United States
RT_ICON	0x7d795	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x7dc21	0x10a8	data	English	United States
RT_ICON	0x7eced	0x988	data	English	United States
RT_ICON	0x7f699	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x7fb25	0x10a8	data	English	United States
RT_ICON	0x80bf1	0x988	data	English	United States
RT_ICON	0x8159d	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x81a29	0x10a8	data	English	United States
RT_ICON	0x82af5	0x988	data	English	United States
RT_ICON	0x834a1	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x8392d	0x10a8	data	English	United States
RT_ICON	0x849f9	0x988	data	English	United States
RT_ICON	0x853a5	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x85831	0x10a8	data	English	United States
RT_ICON	0x868fd	0x988	data	English	United States
RT_ICON	0x872a9	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x87735	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x87bc1	0x988	data	English	United States
RT_ICON	0x8856d	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x889f9	0x10a8	data	English	United States
RT_ICON	0x89ac5	0x988	data	English	United States
RT_ICON	0x8a471	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x8a8fd	0x988	data	English	United States
RT_ICON	0x8b2a9	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x8b735	0x988	data	English	United States
RT_ICON	0x8c0e1	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x8c56d	0x988	data	English	United States
RT_ICON	0x8cf19	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x8d3a5	0x988	data	English	United States
RT_ICON	0x8dd51	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x8e1dd	0x988	data	English	United States
RT_ICON	0x8eb89	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x8f015	0x988	data	English	United States
RT_ICON	0x8f9c1	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x8fe4d	0x10a8	data	English	United States
RT_ICON	0x90f19	0x988	data	English	United States
RT_ICON	0x918c5	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x91d51	0x10a8	data	English	United States
RT_ICON	0x92e1d	0x988	data	English	United States
RT_ICON	0x937c9	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x93c55	0x10a8	data	English	United States
RT_ICON	0x94d21	0x988	data	English	United States
RT_ICON	0x956cd	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x95b59	0x10a8	data	English	United States
RT_ICON	0x96c25	0x988	data	English	United States
RT_ICON	0x975d1	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x97a5d	0x2868	dBase IV DBT, blocks size 0, block length 10240, next free block index 40, next free block 224, next used block 0	English	United States
RT_ICON	0x9a2e9	0xde8	data	English	United States
RT_ICON	0x9b0f5	0x668	dBase IV DBT of `.DBF, block length 1536, next free block index 40, next free block 2147549184, next used block 0	English	United States
RT_ICON	0x9b781	0x2e8	data	English	United States
RT_ICON	0x9ba8d	0x1e8	data	English	United States
RT_ICON	0x9bc99	0x128	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x9bde5	0x988	data	English	United States
RT_MENU	0x9c7b1	0x580	data	English	United States
RT_MENU	0x9cd55	0x258	data	English	United States
RT_DIALOG	0x9d011	0x180	data	English	United States
RT_DIALOG	0x9d1b5	0x60	data	English	United States
RT_DIALOG	0x9d239	0x240	data	English	United States
RT_DIALOG	0x9d49d	0x134	data	English	United States
RT_DIALOG	0x9d5f5	0x20e	data	English	United States
RT_DIALOG	0x9d827	0x22a	data	English	United States
RT_STRING	0x9dafd	0x8a	data	English	United States
RT_STRING	0x9dbab	0x3e	data	English	United States
RT_STRING	0x9dc0d	0xdc	data	English	United States
RT_STRING	0x9dd0d	0x2a8	data	English	United States
RT_STRING	0x9dfd9	0x102	data	English	United States
RT_STRING	0x9e0ff	0xaa	data	English	United States
RT_STRING	0x9e1cd	0x2a	data	English	United States
RT_STRING	0x9e21b	0x25c	data	English	United States
RT_STRING	0x9e49b	0x31c	data	English	United States
RT_STRING	0x9e7db	0x210	data	English	United States
RT_STRING	0x9ea0f	0x106	data	English	United States
RT_STRING	0x9eb39	0xe4	data	English	United States
RT_STRING	0x9ec41	0x1f8	data	English	United States
RT_STRING	0x9ee5d	0xae	data	English	United States
RT_STRING	0x9ef2f	0x44	data	English	United States
RT_ACCELERATOR	0x9efaf	0xb0	data	English	United States
RT_GROUP_ICON	0x9f24b	0x84	data	English	United States
RT_GROUP_ICON	0x9f2f3	0x84	data	English	United States
RT_GROUP_ICON	0x9f39b	0x30	data	English	United States
RT_GROUP_ICON	0x9f3ef	0x30	data	English	United States
RT_GROUP_ICON	0x9f443	0x30	data	English	United States
RT_GROUP_ICON	0x9f497	0x30	data	English	United States
RT_GROUP_ICON	0x9f4eb	0x30	data	English	United States
RT_GROUP_ICON	0x9f53f	0x30	data	English	United States
RT_GROUP_ICON	0x9f593	0x30	data	English	United States
RT_GROUP_ICON	0x9f5e7	0x22	data	English	United States
RT_GROUP_ICON	0x9f62d	0x30	data	English	United States
RT_GROUP_ICON	0x9f681	0x30	data	English	United States
RT_GROUP_ICON	0x9f6d5	0x30	data	English	United States
RT_GROUP_ICON	0x9f729	0x30	data	English	United States
RT_GROUP_ICON	0x9f77d	0x30	data	English	United States
RT_GROUP_ICON	0x9f7d1	0x30	data	English	United States
RT_GROUP_ICON	0x9f825	0x30	data	English	United States
RT_GROUP_ICON	0x9f879	0x30	data	English	United States
RT_GROUP_ICON	0x9f8cd	0x30	data	English	United States
RT_GROUP_ICON	0x9f921	0x30	data	English	United States
RT_GROUP_ICON	0x9f975	0x30	data	English	United States
RT_GROUP_ICON	0x9f9c9	0x30	data	English	United States
RT_GROUP_ICON	0x9fa1d	0x22	data	English	United States
RT_GROUP_ICON	0x9fa63	0x14	data	English	United States
RT_GROUP_ICON	0x9fa9b	0x30	data	English	United States
RT_GROUP_ICON	0x9faef	0x5a	data	English	United States
RT_GROUP_ICON	0x9fb6d	0x14	data	English	United States
RT_GROUP_ICON	0x9fba5	0x22	data	English	United States
RT_GROUP_ICON	0x9fbeb	0x30	data	English	United States
RT_GROUP_ICON	0x9fc3f	0x30	data	English	United States
RT_GROUP_ICON	0x9fc93	0x30	data	English	United States
RT_GROUP_ICON	0x9fce7	0x30	data	English	United States
RT_GROUP_ICON	0x9fd3b	0x30	data	English	United States
RT_GROUP_ICON	0x9fd8f	0x30	data	English	United States
RT_GROUP_ICON	0x9fde3	0x30	data	English	United States
RT_GROUP_ICON	0x9fe37	0x30	data	English	United States
RT_GROUP_ICON	0x9fe8b	0x30	data	English	United States
RT_GROUP_ICON	0x9fedf	0x30	data	English	United States
RT_GROUP_ICON	0x9ff33	0x30	data	English	United States
RT_GROUP_ICON	0x9ff87	0x30	data	English	United States
RT_GROUP_ICON	0x9ffdb	0x30	data	English	United States
RT_GROUP_ICON	0xa002f	0x30	data	English	United States
RT_GROUP_ICON	0xa0083	0x30	data	English	United States
RT_GROUP_ICON	0xa00d7	0x30	data	English	United States
RT_GROUP_ICON	0xa012b	0x30	data	English	United States
RT_GROUP_ICON	0xa017f	0x30	data	English	United States
RT_GROUP_ICON	0xa01d3	0x30	data	English	United States
RT_GROUP_ICON	0xa0227	0x22	data	English	United States
RT_GROUP_ICON	0xa026d	0x30	data	English	United States
RT_GROUP_ICON	0xa02c1	0x30	data	English	United States
RT_GROUP_ICON	0xa0315	0x22	data	English	United States
RT_GROUP_ICON	0xa035b	0x22	data	English	United States
RT_GROUP_ICON	0xa03a1	0x22	data	English	United States
RT_GROUP_ICON	0xa03e7	0x22	data	English	United States
RT_GROUP_ICON	0xa042d	0x30	data	English	United States
RT_VERSION	0xa0499	0x35c	data	English	United States
RT_MANIFEST	0xa0839	0x1ea	XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
RT_MANIFEST	0xa0a2f	0x7f1	XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators	English	United States

Imports

DLL	Import
mscoree.dll	_CorExeMain

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 8, 2022 08:27:52.929502010 CET	49751	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:53.069914103 CET	13	49751	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:53.070130110 CET	49751	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:53.210535049 CET	13	49751	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:53.210576057 CET	13	49751	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:53.211817980 CET	49751	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:53.213757992 CET	49751	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:53.355201006 CET	13	49751	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:53.634545088 CET	49752	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:53.634592056 CET	443	49752	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:53.634692907 CET	49752	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:53.949994087 CET	49752	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:53.950028896 CET	443	49752	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:54.033456087 CET	443	49752	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:54.033592939 CET	49752	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:54.039294004 CET	49752	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:54.039310932 CET	443	49752	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:54.039529085 CET	443	49752	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:54.093055010 CET	49752	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:54.418546915 CET	49752	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:54.465864897 CET	443	49752	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:54.532361984 CET	443	49752	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:54.532387018 CET	443	49752	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:54.532394886 CET	443	49752	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:54.532447100 CET	443	49752	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:54.532469988 CET	49752	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:54.532541037 CET	49752	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:54.543757915 CET	49752	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:54.712649107 CET	49753	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:54.853019953 CET	13	49753	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:54.853178978 CET	49753	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:54.993627071 CET	13	49753	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:54.993674994 CET	13	49753	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:54.993808985 CET	49753	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:54.993973970 CET	49753	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:55.010791063 CET	49754	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:55.010874987 CET	443	49754	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:55.011028051 CET	49754	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:55.012378931 CET	49754	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:55.012409925 CET	443	49754	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:55.088280916 CET	443	49754	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:55.093009949 CET	49754	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:55.093056917 CET	443	49754	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:55.134114981 CET	13	49753	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:55.240801096 CET	443	49754	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:55.240828037 CET	443	49754	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:55.240884066 CET	443	49754	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:55.240962982 CET	49754	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:55.241955042 CET	49754	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:55.390161991 CET	49755	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:55.530724049 CET	13	49755	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:55.530853987 CET	49755	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:55.671164989 CET	13	49755	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:55.671189070 CET	13	49755	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:55.671505928 CET	49755	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:55.671596050 CET	49755	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:55.681632996 CET	49756	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:55.681689978 CET	443	49756	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:55.681775093 CET	49756	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:55.682238102 CET	49756	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:55.682255983 CET	443	49756	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:55.762237072 CET	443	49756	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:55.764748096 CET	49756	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:55.764805079 CET	443	49756	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:55.811836958 CET	13	49755	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:55.942414999 CET	443	49756	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:55.942445040 CET	443	49756	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:55.942496061 CET	443	49756	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:55.942636967 CET	49756	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:55.942780972 CET	49756	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:55.943574905 CET	49756	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:56.096703053 CET	49757	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:56.237054110 CET	13	49757	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:56.237319946 CET	49757	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:56.378540993 CET	13	49757	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:56.378570080 CET	13	49757	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:56.378635883 CET	49757	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:56.379004955 CET	49757	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:56.410965919 CET	49758	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:27:56.519159079 CET	13	49757	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:56.551317930 CET	13	49758	129.6.15.29	192.168.2.3
Feb 8, 2022 08:27:56.551459074 CET	49758	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:27:56.692683935 CET	13	49758	129.6.15.29	192.168.2.3
Feb 8, 2022 08:27:56.692708015 CET	13	49758	129.6.15.29	192.168.2.3
Feb 8, 2022 08:27:56.693591118 CET	49758	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:27:56.693779945 CET	49758	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:27:56.708435059 CET	49759	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:56.708476067 CET	443	49759	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:56.708681107 CET	49759	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:56.709110975 CET	49759	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:56.709121943 CET	443	49759	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:56.787898064 CET	443	49759	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:56.789798975 CET	49759	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:56.789834976 CET	443	49759	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:56.835261106 CET	13	49758	129.6.15.29	192.168.2.3
Feb 8, 2022 08:27:56.944024086 CET	443	49759	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:56.944056034 CET	443	49759	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:56.944108009 CET	443	49759	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:56.944188118 CET	49759	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:56.944211960 CET	49759	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:56.945077896 CET	49759	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:57.094381094 CET	49760	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:57.234788895 CET	13	49760	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:57.234925032 CET	49760	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:57.375298977 CET	13	49760	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:57.375324011 CET	13	49760	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:57.375376940 CET	49760	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:57.375546932 CET	49760	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:57.399725914 CET	49761	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:27:57.515763044 CET	13	49760	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:57.540195942 CET	13	49761	129.6.15.29	192.168.2.3
Feb 8, 2022 08:27:57.540313959 CET	49761	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:27:57.681011915 CET	13	49761	129.6.15.29	192.168.2.3
Feb 8, 2022 08:27:57.681031942 CET	13	49761	129.6.15.29	192.168.2.3
Feb 8, 2022 08:27:57.682450056 CET	49761	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:27:57.682712078 CET	49761	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:27:57.696748018 CET	49762	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:57.696816921 CET	443	49762	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:57.696959972 CET	49762	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:57.697460890 CET	49762	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:57.697484016 CET	443	49762	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:57.777987003 CET	443	49762	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:57.780330896 CET	49762	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:57.780378103 CET	443	49762	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:57.823055983 CET	13	49761	129.6.15.29	192.168.2.3
Feb 8, 2022 08:27:57.998262882 CET	443	49762	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:57.998291016 CET	443	49762	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:57.998343945 CET	443	49762	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:57.998476982 CET	49762	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:57.998538971 CET	49762	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:58.000053883 CET	49762	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:58.171848059 CET	49763	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:58.311974049 CET	13	49763	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:58.312201977 CET	49763	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:58.452370882 CET	13	49763	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:58.452403069 CET	13	49763	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:58.452500105 CET	49763	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:58.452903986 CET	49763	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:58.476653099 CET	49764	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:27:58.593254089 CET	13	49763	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:58.616976023 CET	13	49764	129.6.15.29	192.168.2.3
Feb 8, 2022 08:27:58.617129087 CET	49764	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:27:58.757476091 CET	13	49764	129.6.15.29	192.168.2.3
Feb 8, 2022 08:27:58.757509947 CET	13	49764	129.6.15.29	192.168.2.3
Feb 8, 2022 08:27:58.757577896 CET	49764	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:27:58.757747889 CET	49764	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:27:58.764260054 CET	49765	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:58.764298916 CET	443	49765	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:58.764401913 CET	49765	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:58.764857054 CET	49765	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:58.764874935 CET	443	49765	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:58.845138073 CET	443	49765	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:58.846872091 CET	49765	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:58.846900940 CET	443	49765	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:58.898171902 CET	13	49764	129.6.15.29	192.168.2.3
Feb 8, 2022 08:27:59.030740023 CET	443	49765	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:59.030776024 CET	443	49765	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:59.030841112 CET	443	49765	51.83.143.177	192.168.2.3
Feb 8, 2022 08:27:59.030944109 CET	49765	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:59.030998945 CET	49765	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:59.031764984 CET	49765	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:27:59.198045969 CET	49766	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:59.338577032 CET	13	49766	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:59.338742971 CET	49766	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:59.479151964 CET	13	49766	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:59.479249954 CET	49766	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:59.480226040 CET	49766	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:27:59.507646084 CET	49767	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:27:59.620729923 CET	13	49766	129.6.15.28	192.168.2.3
Feb 8, 2022 08:27:59.648238897 CET	13	49767	129.6.15.29	192.168.2.3
Feb 8, 2022 08:27:59.648360968 CET	49767	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:27:59.788908005 CET	13	49767	129.6.15.29	192.168.2.3
Feb 8, 2022 08:27:59.788953066 CET	13	49767	129.6.15.29	192.168.2.3
Feb 8, 2022 08:27:59.789076090 CET	49767	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:27:59.789215088 CET	49767	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:27:59.816062927 CET	49768	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:27:59.929698944 CET	13	49767	129.6.15.29	192.168.2.3
Feb 8, 2022 08:27:59.956655025 CET	13	49768	129.6.15.27	192.168.2.3
Feb 8, 2022 08:27:59.956753016 CET	49768	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:00.097420931 CET	13	49768	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:00.097453117 CET	13	49768	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:00.097569942 CET	49768	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:00.097892046 CET	49768	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:00.106559038 CET	49769	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:00.106604099 CET	443	49769	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:00.107171059 CET	49769	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:00.107599020 CET	49769	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:00.107615948 CET	443	49769	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:00.187798977 CET	443	49769	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:00.234231949 CET	49769	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:00.238367081 CET	13	49768	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:00.259901047 CET	49769	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:00.259923935 CET	443	49769	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:00.397169113 CET	443	49769	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:00.397197008 CET	443	49769	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:00.397202969 CET	443	49769	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:00.397255898 CET	443	49769	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:00.397284985 CET	49769	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:00.397310019 CET	49769	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:00.398222923 CET	49769	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:00.550672054 CET	49770	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:00.691031933 CET	13	49770	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:00.691453934 CET	49770	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:00.831814051 CET	13	49770	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:00.831934929 CET	49770	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:00.832077980 CET	49770	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:00.859076023 CET	49771	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:00.972197056 CET	13	49770	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:00.999211073 CET	13	49771	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:00.999315023 CET	49771	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:01.139377117 CET	13	49771	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:01.139420033 CET	13	49771	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:01.139576912 CET	49771	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:01.519285917 CET	49771	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:01.544923067 CET	49772	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:01.659342051 CET	13	49771	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:01.685123920 CET	13	49772	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:01.685302019 CET	49772	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:01.825592995 CET	13	49772	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:01.825615883 CET	13	49772	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:01.828325033 CET	49772	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:01.828409910 CET	49772	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:01.837069988 CET	49773	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:01.837142944 CET	443	49773	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:01.837249041 CET	49773	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:01.837681055 CET	49773	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:01.837707996 CET	443	49773	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:01.914729118 CET	443	49773	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:01.916768074 CET	49773	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:01.916798115 CET	443	49773	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:01.968538046 CET	13	49772	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:02.094379902 CET	443	49773	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:02.094414949 CET	443	49773	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:02.094480038 CET	443	49773	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:02.094655037 CET	49773	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:02.144424915 CET	49773	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:03.380757093 CET	49774	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:03.520914078 CET	13	49774	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:03.521156073 CET	49774	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:03.661204100 CET	13	49774	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:03.661334991 CET	49774	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:03.661442995 CET	49774	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:03.687450886 CET	49775	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:03.801568031 CET	13	49774	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:03.827716112 CET	13	49775	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:03.827863932 CET	49775	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:03.968210936 CET	13	49775	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:03.968272924 CET	13	49775	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:03.968399048 CET	49775	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:03.968550920 CET	49775	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:03.991450071 CET	49776	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:04.108668089 CET	13	49775	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:04.131810904 CET	13	49776	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:04.131923914 CET	49776	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:04.272056103 CET	13	49776	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:04.272083044 CET	13	49776	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:04.272197008 CET	49776	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:04.272393942 CET	49776	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:04.338614941 CET	49777	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:04.338656902 CET	443	49777	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:04.338737965 CET	49777	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:04.339200974 CET	49777	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:04.339221954 CET	443	49777	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:04.412621975 CET	13	49776	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:04.420438051 CET	443	49777	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:04.423036098 CET	49777	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:04.423084974 CET	443	49777	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:04.595299959 CET	443	49777	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:04.595361948 CET	443	49777	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:04.595464945 CET	49777	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:04.595478058 CET	443	49777	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:04.595537901 CET	49777	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:04.596460104 CET	49777	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:04.751063108 CET	49778	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:04.891232014 CET	13	49778	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:04.891392946 CET	49778	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:05.031485081 CET	13	49778	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:05.031583071 CET	49778	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:05.031721115 CET	49778	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:05.056550026 CET	49779	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:05.171724081 CET	13	49778	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:05.196866989 CET	13	49779	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:05.197009087 CET	49779	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:05.337337971 CET	13	49779	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:05.337466955 CET	49779	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:05.337594032 CET	49779	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:05.362823009 CET	49780	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:05.477933884 CET	13	49779	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:05.503416061 CET	13	49780	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:05.503567934 CET	49780	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:05.644081116 CET	13	49780	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:05.644112110 CET	13	49780	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:05.645742893 CET	49780	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:05.646146059 CET	49780	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:05.673804998 CET	49781	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:05.786652088 CET	13	49780	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:05.821708918 CET	13	49781	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:05.821824074 CET	49781	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:05.970011950 CET	13	49781	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:05.970045090 CET	13	49781	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:05.970139980 CET	49781	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:05.970341921 CET	49781	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:05.979823112 CET	49782	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:05.979867935 CET	443	49782	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:05.979970932 CET	49782	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:05.980380058 CET	49782	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:05.980393887 CET	443	49782	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:06.059585094 CET	443	49782	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:06.062297106 CET	49782	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:06.062340021 CET	443	49782	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:06.118150949 CET	13	49781	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:06.251239061 CET	443	49782	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:06.251266003 CET	443	49782	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:06.251319885 CET	443	49782	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:06.251383066 CET	49782	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:06.252345085 CET	49782	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:06.429606915 CET	49783	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:06.570118904 CET	13	49783	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:06.570420027 CET	49783	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:06.710874081 CET	13	49783	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:06.711004972 CET	49783	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:06.711124897 CET	49783	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:06.737443924 CET	49784	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:06.851413965 CET	13	49783	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:06.878124952 CET	13	49784	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:06.878228903 CET	49784	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:07.018708944 CET	13	49784	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:07.018742085 CET	13	49784	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:07.018820047 CET	49784	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:07.019046068 CET	49784	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:07.028147936 CET	49785	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:07.028217077 CET	443	49785	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:07.028336048 CET	49785	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:07.028806925 CET	49785	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:07.028830051 CET	443	49785	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:07.109750986 CET	443	49785	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:07.111857891 CET	49785	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:07.111901999 CET	443	49785	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:07.159452915 CET	13	49784	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:07.289735079 CET	443	49785	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:07.289764881 CET	443	49785	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:07.289822102 CET	443	49785	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:07.289848089 CET	49785	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:07.289902925 CET	49785	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:07.291100979 CET	49785	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:07.463176966 CET	49786	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:07.603559017 CET	13	49786	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:07.603702068 CET	49786	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:07.744194984 CET	13	49786	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:07.744424105 CET	49786	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:07.744447947 CET	49786	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:07.769756079 CET	49787	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:07.885222912 CET	13	49786	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:07.909984112 CET	13	49787	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:07.910152912 CET	49787	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:08.050288916 CET	13	49787	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:08.050322056 CET	13	49787	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:08.050436974 CET	49787	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:08.050601959 CET	49787	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:08.061908960 CET	49788	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:08.061955929 CET	443	49788	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:08.062365055 CET	49788	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:08.062923908 CET	49788	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:08.062937975 CET	443	49788	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:08.135914087 CET	443	49788	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:08.138092041 CET	49788	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:08.138127089 CET	443	49788	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:08.190752983 CET	13	49787	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:08.293905020 CET	443	49788	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:08.293947935 CET	443	49788	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:08.294018030 CET	443	49788	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:08.294076920 CET	49788	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:08.294116020 CET	49788	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:08.295217991 CET	49788	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:08.456799030 CET	49791	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:08.597304106 CET	13	49791	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:08.597410917 CET	49791	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:08.737916946 CET	13	49791	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:08.738078117 CET	49791	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:08.738229990 CET	49791	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:08.764862061 CET	49792	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:08.879949093 CET	13	49791	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:08.906270027 CET	13	49792	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:08.906543016 CET	49792	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:09.046878099 CET	13	49792	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:09.046924114 CET	13	49792	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:09.047321081 CET	49792	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:09.047457933 CET	49792	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:09.054142952 CET	49793	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:09.054209948 CET	443	49793	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:09.054347992 CET	49793	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:09.054863930 CET	49793	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:09.054889917 CET	443	49793	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:09.135919094 CET	443	49793	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:09.137931108 CET	49793	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:09.137974977 CET	443	49793	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:09.187710047 CET	13	49792	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:09.293737888 CET	443	49793	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:09.293772936 CET	443	49793	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:09.293875933 CET	443	49793	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:09.293926001 CET	49793	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:09.293976068 CET	49793	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:09.295120955 CET	49793	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:09.463082075 CET	49794	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:09.606128931 CET	13	49794	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:09.606270075 CET	49794	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:09.746464968 CET	13	49794	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:09.746542931 CET	49794	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:09.746642113 CET	49794	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:09.772305012 CET	49795	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:09.886646032 CET	13	49794	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:09.912684917 CET	13	49795	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:09.912811041 CET	49795	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:10.053170919 CET	13	49795	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:10.053203106 CET	13	49795	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:10.053291082 CET	49795	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:10.053438902 CET	49795	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:10.077394962 CET	49796	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:10.193713903 CET	13	49795	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:10.217801094 CET	13	49796	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:10.217921019 CET	49796	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:10.358402967 CET	13	49796	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:10.358427048 CET	13	49796	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:10.358517885 CET	49796	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:10.358716011 CET	49796	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:10.384064913 CET	49797	13	192.168.2.3	132.163.97.2
Feb 8, 2022 08:28:10.499031067 CET	13	49796	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:10.536145926 CET	13	49797	132.163.97.2	192.168.2.3
Feb 8, 2022 08:28:10.536235094 CET	49797	13	192.168.2.3	132.163.97.2
Feb 8, 2022 08:28:10.688338995 CET	13	49797	132.163.97.2	192.168.2.3
Feb 8, 2022 08:28:10.688357115 CET	13	49797	132.163.97.2	192.168.2.3
Feb 8, 2022 08:28:10.689697981 CET	49797	13	192.168.2.3	132.163.97.2
Feb 8, 2022 08:28:10.689810038 CET	49797	13	192.168.2.3	132.163.97.2
Feb 8, 2022 08:28:10.699393988 CET	49798	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:10.699451923 CET	443	49798	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:10.699542046 CET	49798	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:10.700068951 CET	49798	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:10.700089931 CET	443	49798	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:10.779934883 CET	443	49798	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:10.782409906 CET	49798	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:10.782440901 CET	443	49798	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:10.841830015 CET	13	49797	132.163.97.2	192.168.2.3
Feb 8, 2022 08:28:10.940956116 CET	443	49798	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:10.940985918 CET	443	49798	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:10.941046953 CET	443	49798	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:10.941102028 CET	49798	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:10.941150904 CET	49798	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:10.942145109 CET	49798	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:11.102885962 CET	49799	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:11.243458986 CET	13	49799	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:11.244333982 CET	49799	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:11.384943962 CET	13	49799	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:11.385099888 CET	49799	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:11.385163069 CET	49799	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:11.411462069 CET	49800	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:11.525794029 CET	13	49799	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:11.551814079 CET	13	49800	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:11.552051067 CET	49800	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:11.692518950 CET	13	49800	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:11.692544937 CET	13	49800	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:11.692842007 CET	49800	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:11.692866087 CET	49800	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:11.720449924 CET	49801	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:11.833233118 CET	13	49800	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:11.860893965 CET	13	49801	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:11.861114979 CET	49801	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:12.001636028 CET	13	49801	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:12.001667023 CET	13	49801	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:12.001760960 CET	49801	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:12.001961946 CET	49801	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:12.027317047 CET	49802	13	192.168.2.3	132.163.96.4
Feb 8, 2022 08:28:12.142658949 CET	13	49801	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:12.175946951 CET	13	49802	132.163.96.4	192.168.2.3
Feb 8, 2022 08:28:12.176306009 CET	49802	13	192.168.2.3	132.163.96.4
Feb 8, 2022 08:28:12.323236942 CET	13	49802	132.163.96.4	192.168.2.3
Feb 8, 2022 08:28:12.323265076 CET	13	49802	132.163.96.4	192.168.2.3
Feb 8, 2022 08:28:12.323478937 CET	49802	13	192.168.2.3	132.163.96.4
Feb 8, 2022 08:28:12.323640108 CET	49802	13	192.168.2.3	132.163.96.4
Feb 8, 2022 08:28:12.333673000 CET	49803	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:12.333739042 CET	443	49803	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:12.333885908 CET	49803	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:12.334487915 CET	49803	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:12.334505081 CET	443	49803	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:12.414143085 CET	443	49803	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:12.416136026 CET	49803	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:12.416157961 CET	443	49803	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:12.470447063 CET	13	49802	132.163.96.4	192.168.2.3
Feb 8, 2022 08:28:12.590059996 CET	443	49803	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:12.590086937 CET	443	49803	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:12.590140104 CET	443	49803	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:12.590183020 CET	49803	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:12.590243101 CET	49803	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:12.591403008 CET	49803	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:12.766426086 CET	49804	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:12.906945944 CET	13	49804	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:12.907160997 CET	49804	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:13.047688007 CET	13	49804	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:13.047847033 CET	49804	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:13.047955990 CET	49804	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:13.072082043 CET	49805	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:13.188230038 CET	13	49804	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:13.212290049 CET	13	49805	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:13.212407112 CET	49805	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:13.352703094 CET	13	49805	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:13.352725983 CET	13	49805	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:13.353024960 CET	49805	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:13.353085995 CET	49805	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:13.375829935 CET	49806	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:13.493885994 CET	13	49805	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:13.516060114 CET	13	49806	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:13.516386032 CET	49806	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:13.656699896 CET	13	49806	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:13.656814098 CET	49806	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:13.656904936 CET	49806	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:13.683427095 CET	49807	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:13.797204018 CET	13	49806	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:13.830240965 CET	13	49807	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:13.830339909 CET	49807	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:13.977232933 CET	13	49807	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:13.977276087 CET	13	49807	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:13.977436066 CET	49807	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:13.977549076 CET	49807	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:13.983859062 CET	49808	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:13.983923912 CET	443	49808	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:13.984023094 CET	49808	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:13.984339952 CET	49808	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:13.984368086 CET	443	49808	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:14.067255974 CET	443	49808	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:14.070648909 CET	49808	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:14.070683002 CET	443	49808	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:14.124233961 CET	13	49807	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:14.222142935 CET	443	49808	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:14.222179890 CET	443	49808	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:14.222249031 CET	443	49808	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:14.222297907 CET	49808	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:14.222357035 CET	49808	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:14.223377943 CET	49808	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:14.425942898 CET	49809	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:14.566276073 CET	13	49809	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:14.569693089 CET	49809	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:14.710031986 CET	13	49809	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:14.710175991 CET	49809	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:14.711561918 CET	49809	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:14.736742973 CET	49810	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:14.851871967 CET	13	49809	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:14.876929045 CET	13	49810	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:14.877036095 CET	49810	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:15.017162085 CET	13	49810	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:15.017257929 CET	49810	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:15.017359018 CET	49810	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:15.041151047 CET	49811	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:15.157315969 CET	13	49810	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:15.181363106 CET	13	49811	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:15.181469917 CET	49811	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:15.321768999 CET	13	49811	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:15.321882963 CET	49811	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:15.321974039 CET	49811	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:15.344527006 CET	49812	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:15.462229967 CET	13	49811	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:15.489173889 CET	13	49812	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:15.489284992 CET	49812	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:15.633480072 CET	13	49812	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:15.633513927 CET	13	49812	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:15.633707047 CET	49812	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:15.633807898 CET	49812	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:15.665819883 CET	49813	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:15.665874958 CET	443	49813	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:15.665968895 CET	49813	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:15.666461945 CET	49813	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:15.666471958 CET	443	49813	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:15.743017912 CET	443	49813	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:15.745188951 CET	49813	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:15.745206118 CET	443	49813	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:15.778122902 CET	13	49812	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:15.890068054 CET	443	49813	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:15.890095949 CET	443	49813	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:15.890155077 CET	443	49813	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:15.890156984 CET	49813	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:15.890197992 CET	49813	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:15.890954971 CET	49813	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:16.067049980 CET	49814	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:16.207786083 CET	13	49814	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:16.207891941 CET	49814	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:16.348562002 CET	13	49814	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:16.348747015 CET	49814	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:16.348922014 CET	49814	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:16.376406908 CET	49815	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:16.489495993 CET	13	49814	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:16.516746998 CET	13	49815	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:16.516902924 CET	49815	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:16.657120943 CET	13	49815	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:16.657201052 CET	49815	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:16.657301903 CET	49815	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:16.680331945 CET	49816	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:16.797532082 CET	13	49815	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:16.820938110 CET	13	49816	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:16.821078062 CET	49816	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:16.961456060 CET	13	49816	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:16.961575985 CET	49816	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:16.961672068 CET	49816	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:16.986428976 CET	49817	13	192.168.2.3	132.163.97.1
Feb 8, 2022 08:28:17.101999044 CET	13	49816	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:17.134533882 CET	13	49817	132.163.97.1	192.168.2.3
Feb 8, 2022 08:28:17.135555029 CET	49817	13	192.168.2.3	132.163.97.1
Feb 8, 2022 08:28:17.283788919 CET	13	49817	132.163.97.1	192.168.2.3
Feb 8, 2022 08:28:17.283859015 CET	13	49817	132.163.97.1	192.168.2.3
Feb 8, 2022 08:28:17.283970118 CET	49817	13	192.168.2.3	132.163.97.1
Feb 8, 2022 08:28:17.284167051 CET	49817	13	192.168.2.3	132.163.97.1
Feb 8, 2022 08:28:17.292428017 CET	49818	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:17.292494059 CET	443	49818	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:17.293843031 CET	49818	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:17.294183969 CET	49818	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:17.294210911 CET	443	49818	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:17.373987913 CET	443	49818	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:17.376610041 CET	49818	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:17.376631021 CET	443	49818	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:17.432349920 CET	13	49817	132.163.97.1	192.168.2.3
Feb 8, 2022 08:28:17.548897028 CET	443	49818	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:17.548949003 CET	443	49818	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:17.549056053 CET	443	49818	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:17.549134016 CET	49818	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:17.549185991 CET	49818	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:17.550122976 CET	49818	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:17.710501909 CET	49819	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:17.851155996 CET	13	49819	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:17.851320028 CET	49819	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:17.991923094 CET	13	49819	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:17.992034912 CET	49819	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:17.992145061 CET	49819	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:18.014966965 CET	49820	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:18.132745028 CET	13	49819	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:18.155342102 CET	13	49820	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:18.155553102 CET	49820	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:18.296070099 CET	13	49820	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:18.296216011 CET	49820	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:18.296626091 CET	49820	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:18.326680899 CET	49821	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:18.436829090 CET	13	49820	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:18.466981888 CET	13	49821	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:18.467097044 CET	49821	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:18.607445955 CET	13	49821	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:18.607572079 CET	49821	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:18.607697010 CET	49821	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:18.636924982 CET	49822	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:18.748007059 CET	13	49821	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:18.785557985 CET	13	49822	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:18.785687923 CET	49822	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:18.934199095 CET	13	49822	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:18.934231997 CET	13	49822	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:18.934338093 CET	49822	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:18.934602022 CET	49822	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:18.944433928 CET	49823	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:18.944483042 CET	443	49823	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:18.944566965 CET	49823	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:18.944966078 CET	49823	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:18.944978952 CET	443	49823	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:19.021469116 CET	443	49823	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:19.023350000 CET	49823	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:19.023387909 CET	443	49823	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:19.082767010 CET	13	49822	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:19.168298006 CET	443	49823	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:19.168327093 CET	443	49823	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:19.168385029 CET	443	49823	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:19.168421984 CET	49823	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:19.168457985 CET	49823	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:19.169553995 CET	49823	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:19.338968039 CET	49824	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:19.479512930 CET	13	49824	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:19.479603052 CET	49824	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:19.620233059 CET	13	49824	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:19.620340109 CET	49824	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:19.620414972 CET	49824	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:19.642632961 CET	49825	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:19.761101007 CET	13	49824	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:19.783453941 CET	13	49825	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:19.783602953 CET	49825	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:19.925216913 CET	13	49825	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:19.925314903 CET	49825	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:19.925422907 CET	49825	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:19.950769901 CET	49826	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:20.066040993 CET	13	49825	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:20.091264963 CET	13	49826	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:20.091408968 CET	49826	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:20.231972933 CET	13	49826	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:20.232424021 CET	49826	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:20.232518911 CET	49826	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:20.259706974 CET	49827	13	192.168.2.3	132.163.97.2
Feb 8, 2022 08:28:20.374980927 CET	13	49826	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:20.409156084 CET	13	49827	132.163.97.2	192.168.2.3
Feb 8, 2022 08:28:20.409357071 CET	49827	13	192.168.2.3	132.163.97.2
Feb 8, 2022 08:28:20.558891058 CET	13	49827	132.163.97.2	192.168.2.3
Feb 8, 2022 08:28:20.558913946 CET	13	49827	132.163.97.2	192.168.2.3
Feb 8, 2022 08:28:20.559123993 CET	49827	13	192.168.2.3	132.163.97.2
Feb 8, 2022 08:28:20.559294939 CET	49827	13	192.168.2.3	132.163.97.2
Feb 8, 2022 08:28:20.568694115 CET	49828	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:20.568738937 CET	443	49828	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:20.568840981 CET	49828	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:20.569262028 CET	49828	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:20.569273949 CET	443	49828	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:20.646303892 CET	443	49828	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:20.650773048 CET	49828	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:20.650829077 CET	443	49828	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:20.708702087 CET	13	49827	132.163.97.2	192.168.2.3
Feb 8, 2022 08:28:20.874222040 CET	443	49828	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:20.874250889 CET	443	49828	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:20.874320984 CET	443	49828	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:20.874336004 CET	49828	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:20.874372005 CET	49828	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:20.875204086 CET	49828	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:21.038167000 CET	49829	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:21.178571939 CET	13	49829	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:21.178719044 CET	49829	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:21.319091082 CET	13	49829	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:21.319190979 CET	49829	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:21.319263935 CET	49829	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:21.341274977 CET	49830	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:21.461143970 CET	13	49829	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:21.482161045 CET	13	49830	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:21.482254028 CET	49830	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:21.622771025 CET	13	49830	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:21.622884035 CET	49830	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:21.623022079 CET	49830	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:21.648262978 CET	49831	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:21.763387918 CET	13	49830	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:21.789026976 CET	13	49831	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:21.789108038 CET	49831	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:21.929796934 CET	13	49831	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:21.929975033 CET	49831	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:21.930015087 CET	49831	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:21.951705933 CET	49832	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:22.070636988 CET	13	49831	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:22.101150990 CET	13	49832	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:22.101322889 CET	49832	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:22.249650955 CET	13	49832	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:22.249682903 CET	13	49832	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:22.249757051 CET	49832	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:22.249900103 CET	49832	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:22.256227970 CET	49833	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:22.256274939 CET	443	49833	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:22.256372929 CET	49833	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:22.256742001 CET	49833	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:22.256759882 CET	443	49833	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:22.338360071 CET	443	49833	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:22.339859009 CET	49833	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:22.339904070 CET	443	49833	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:22.398077011 CET	13	49832	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:22.519084930 CET	443	49833	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:22.519114971 CET	443	49833	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:22.519212008 CET	49833	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:22.519231081 CET	443	49833	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:22.519265890 CET	443	49833	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:22.519290924 CET	49833	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:22.519316912 CET	49833	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:22.520183086 CET	49833	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:22.671996117 CET	49834	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:22.812215090 CET	13	49834	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:22.812421083 CET	49834	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:22.952651978 CET	13	49834	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:22.952805042 CET	49834	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:22.952999115 CET	49834	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:22.982265949 CET	49835	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:23.093228102 CET	13	49834	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:23.122720957 CET	13	49835	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:23.122855902 CET	49835	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:23.263437986 CET	13	49835	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:23.263528109 CET	49835	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:23.263700962 CET	49835	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:23.288266897 CET	49836	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:23.406146049 CET	13	49835	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:23.428852081 CET	13	49836	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:23.428937912 CET	49836	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:23.569500923 CET	13	49836	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:23.570209026 CET	49836	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:23.570332050 CET	49836	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:23.599735975 CET	49837	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:23.710886955 CET	13	49836	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:23.749278069 CET	13	49837	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:23.749430895 CET	49837	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:23.898874044 CET	13	49837	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:23.898909092 CET	13	49837	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:23.899199963 CET	49837	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:23.899286985 CET	49837	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:23.906641960 CET	49838	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:23.906708002 CET	443	49838	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:23.906842947 CET	49838	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:23.907391071 CET	49838	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:23.907407999 CET	443	49838	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:23.982964039 CET	443	49838	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:23.985743046 CET	49838	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:23.985785961 CET	443	49838	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:24.050789118 CET	13	49837	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:24.131771088 CET	443	49838	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:24.131813049 CET	443	49838	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:24.131870985 CET	443	49838	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:24.131956100 CET	49838	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:24.132015944 CET	49838	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:24.132965088 CET	49838	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:24.285339117 CET	49839	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:24.425895929 CET	13	49839	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:24.426064014 CET	49839	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:24.566546917 CET	13	49839	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:24.566632032 CET	49839	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:24.566761971 CET	49839	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:24.592089891 CET	49840	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:24.707246065 CET	13	49839	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:24.732659101 CET	13	49840	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:24.732768059 CET	49840	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:24.873286009 CET	13	49840	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:24.873383045 CET	49840	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:24.873466015 CET	49840	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:24.899040937 CET	49841	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:25.013926983 CET	13	49840	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:25.039335012 CET	13	49841	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:25.040026903 CET	49841	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:25.180279970 CET	13	49841	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:25.180357933 CET	49841	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:25.180464983 CET	49841	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:25.205641031 CET	49842	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:25.320705891 CET	13	49841	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:25.354124069 CET	13	49842	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:25.354552031 CET	49842	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:25.502070904 CET	13	49842	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:25.502089977 CET	13	49842	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:25.502165079 CET	49842	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:25.502630949 CET	49842	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:25.529190063 CET	49843	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:25.529247046 CET	443	49843	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:25.529324055 CET	49843	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:25.530299902 CET	49843	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:25.530318975 CET	443	49843	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:25.607892990 CET	443	49843	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:25.609982967 CET	49843	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:25.610027075 CET	443	49843	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:25.650532961 CET	13	49842	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:25.741010904 CET	443	49843	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:25.741039038 CET	443	49843	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:25.741105080 CET	443	49843	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:25.741311073 CET	49843	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:25.742338896 CET	49843	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:25.888812065 CET	49844	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:26.029269934 CET	13	49844	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:26.029553890 CET	49844	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:26.170037985 CET	13	49844	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:26.171049118 CET	49844	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:26.171199083 CET	49844	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:26.198033094 CET	49845	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:26.311578035 CET	13	49844	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:26.339520931 CET	13	49845	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:26.339773893 CET	49845	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:26.480415106 CET	13	49845	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:26.480681896 CET	49845	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:26.480880022 CET	49845	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:26.508712053 CET	49846	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:26.621634007 CET	13	49845	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:26.649642944 CET	13	49846	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:26.649766922 CET	49846	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:26.790407896 CET	13	49846	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:26.790509939 CET	49846	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:26.790596008 CET	49846	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:26.819977999 CET	49847	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:26.931268930 CET	13	49846	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:26.969144106 CET	13	49847	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:26.969281912 CET	49847	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:27.119008064 CET	13	49847	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:27.119050026 CET	13	49847	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:27.119127035 CET	49847	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:27.119313955 CET	49847	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:27.124618053 CET	49848	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:27.124722004 CET	443	49848	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:27.124826908 CET	49848	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:27.125348091 CET	49848	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:27.125391960 CET	443	49848	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:27.203764915 CET	443	49848	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:27.205385923 CET	49848	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:27.205420017 CET	443	49848	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:27.267719984 CET	13	49847	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:27.420049906 CET	443	49848	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:27.420119047 CET	443	49848	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:27.420231104 CET	443	49848	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:27.420231104 CET	49848	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:27.420285940 CET	49848	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:27.421140909 CET	49848	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:27.580282927 CET	49849	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:27.720684052 CET	13	49849	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:27.720846891 CET	49849	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:27.861102104 CET	13	49849	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:27.861268044 CET	49849	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:27.861396074 CET	49849	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:27.885451078 CET	49850	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:28.001578093 CET	13	49849	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:28.025664091 CET	13	49850	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:28.025825024 CET	49850	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:28.166131973 CET	13	49850	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:28.166218996 CET	49850	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:28.166343927 CET	49850	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:28.192312002 CET	49851	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:28.306483984 CET	13	49850	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:28.332984924 CET	13	49851	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:28.333091021 CET	49851	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:28.473660946 CET	13	49851	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:28.473772049 CET	49851	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:28.473887920 CET	49851	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:28.498080015 CET	49852	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:28.614387035 CET	13	49851	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:28.650227070 CET	13	49852	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:28.650377989 CET	49852	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:28.803369999 CET	13	49852	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:28.803395987 CET	13	49852	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:28.804183960 CET	49852	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:28.804327965 CET	49852	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:28.836206913 CET	49853	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:28.836265087 CET	443	49853	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:28.836333036 CET	49853	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:28.836765051 CET	49853	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:28.836791039 CET	443	49853	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:28.914051056 CET	443	49853	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:28.915904999 CET	49853	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:28.915944099 CET	443	49853	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:28.956329107 CET	13	49852	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:29.077626944 CET	443	49853	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:29.077677965 CET	443	49853	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:29.077779055 CET	443	49853	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:29.077882051 CET	49853	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:29.077929020 CET	49853	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:29.078843117 CET	49853	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:29.232847929 CET	49854	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:29.373558998 CET	13	49854	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:29.374124050 CET	49854	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:29.514836073 CET	13	49854	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:29.515160084 CET	49854	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:29.515364885 CET	49854	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:29.546798944 CET	49855	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:29.656076908 CET	13	49854	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:29.687239885 CET	13	49855	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:29.687618971 CET	49855	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:29.828006029 CET	13	49855	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:29.829204082 CET	49855	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:29.829257011 CET	49855	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:29.857867002 CET	49856	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:29.969588995 CET	13	49855	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:29.998413086 CET	13	49856	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:29.998963118 CET	49856	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:30.139446020 CET	13	49856	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:30.139535904 CET	49856	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:30.139650106 CET	49856	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:30.165715933 CET	49857	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:30.282217026 CET	13	49856	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:30.314344883 CET	13	49857	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:30.314593077 CET	49857	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:30.463201046 CET	13	49857	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:30.463228941 CET	13	49857	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:30.463371038 CET	49857	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:30.463458061 CET	49857	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:30.468919992 CET	49858	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:30.468976021 CET	443	49858	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:30.469096899 CET	49858	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:30.469465971 CET	49858	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:30.469492912 CET	443	49858	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:30.550324917 CET	443	49858	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:30.552500010 CET	49858	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:30.552530050 CET	443	49858	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:30.611855030 CET	13	49857	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:30.708029032 CET	443	49858	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:30.708156109 CET	443	49858	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:30.708236933 CET	443	49858	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:30.708270073 CET	49858	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:30.708390951 CET	49858	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:30.709992886 CET	49858	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:30.858155966 CET	49859	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:30.998586893 CET	13	49859	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:30.998689890 CET	49859	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:31.138978958 CET	13	49859	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:31.139050961 CET	49859	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:31.139153957 CET	49859	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:31.161164999 CET	49860	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:31.279419899 CET	13	49859	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:31.301613092 CET	13	49860	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:31.301733017 CET	49860	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:31.442204952 CET	13	49860	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:31.442296028 CET	49860	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:31.442411900 CET	49860	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:31.468602896 CET	49861	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:31.582735062 CET	13	49860	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:31.608961105 CET	13	49861	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:31.609047890 CET	49861	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:31.749422073 CET	13	49861	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:31.749500990 CET	49861	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:31.749640942 CET	49861	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:31.775682926 CET	49862	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:31.892407894 CET	13	49861	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:31.924204111 CET	13	49862	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:31.924349070 CET	49862	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:32.074883938 CET	13	49862	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:32.074907064 CET	13	49862	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:32.074990988 CET	49862	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:32.075229883 CET	49862	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:32.082771063 CET	49864	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:32.082811117 CET	443	49864	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:32.082886934 CET	49864	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:32.083471060 CET	49864	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:32.083482981 CET	443	49864	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:32.160717010 CET	443	49864	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:32.205617905 CET	49864	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:32.223437071 CET	13	49862	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:32.224941015 CET	49864	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:32.224963903 CET	443	49864	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:32.368469954 CET	443	49864	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:32.368503094 CET	443	49864	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:32.368511915 CET	443	49864	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:32.368571997 CET	443	49864	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:32.368717909 CET	49864	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:32.368733883 CET	49864	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:32.369793892 CET	49864	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:32.522953987 CET	49865	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:32.663527012 CET	13	49865	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:32.663636923 CET	49865	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:32.804280996 CET	13	49865	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:32.804364920 CET	49865	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:32.804491043 CET	49865	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:32.828506947 CET	49866	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:32.944945097 CET	13	49865	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:32.968888044 CET	13	49866	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:32.969491005 CET	49866	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:33.109755039 CET	13	49866	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:33.109874964 CET	49866	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:33.109998941 CET	49866	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:33.137414932 CET	49867	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:33.254066944 CET	13	49866	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:33.278245926 CET	13	49867	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:33.278373003 CET	49867	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:33.418776035 CET	13	49867	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:33.418860912 CET	49867	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:33.418946028 CET	49867	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:33.441667080 CET	49868	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:33.559705973 CET	13	49867	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:33.593928099 CET	13	49868	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:33.594026089 CET	49868	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:33.746176004 CET	13	49868	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:33.746205091 CET	13	49868	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:33.746285915 CET	49868	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:33.746464014 CET	49868	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:33.751641035 CET	49869	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:33.751686096 CET	443	49869	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:33.752145052 CET	49869	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:33.752172947 CET	49869	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:33.752181053 CET	443	49869	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:33.830471039 CET	443	49869	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:33.833463907 CET	49869	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:33.833491087 CET	443	49869	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:33.898549080 CET	13	49868	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:33.987320900 CET	443	49869	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:33.987350941 CET	443	49869	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:33.987416029 CET	443	49869	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:33.987548113 CET	49869	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:34.000668049 CET	49869	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:34.183669090 CET	49870	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:34.324224949 CET	13	49870	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:34.324318886 CET	49870	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:34.464813948 CET	13	49870	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:34.464922905 CET	49870	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:34.465030909 CET	49870	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:34.524805069 CET	49871	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:34.605465889 CET	13	49870	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:34.665426970 CET	13	49871	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:34.665544987 CET	49871	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:34.806056023 CET	13	49871	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:34.806242943 CET	49871	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:35.198014021 CET	49871	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:35.260226011 CET	49872	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:35.338546038 CET	13	49871	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:35.400827885 CET	13	49872	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:35.400984049 CET	49872	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:35.541610003 CET	13	49872	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:35.541676044 CET	49872	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:35.542076111 CET	49872	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:35.564158916 CET	49873	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:35.682636023 CET	13	49872	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:35.713805914 CET	13	49873	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:35.714011908 CET	49873	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:35.863732100 CET	13	49873	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:35.863776922 CET	13	49873	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:35.863955021 CET	49873	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:36.761907101 CET	49873	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:36.767637968 CET	49874	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:36.767680883 CET	443	49874	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:36.767772913 CET	49874	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:36.772054911 CET	49874	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:36.772087097 CET	443	49874	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:36.849435091 CET	443	49874	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:36.860642910 CET	49874	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:36.860694885 CET	443	49874	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:36.911870956 CET	13	49873	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:37.026984930 CET	443	49874	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:37.027017117 CET	443	49874	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:37.027080059 CET	443	49874	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:37.027085066 CET	49874	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:37.027128935 CET	49874	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:37.027934074 CET	49874	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:37.212272882 CET	49875	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:37.352485895 CET	13	49875	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:37.352747917 CET	49875	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:37.492986917 CET	13	49875	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:37.493138075 CET	49875	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:37.493211985 CET	49875	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:37.553963900 CET	49876	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:37.634510994 CET	13	49875	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:37.694672108 CET	13	49876	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:37.694778919 CET	49876	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:37.835401058 CET	13	49876	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:37.835509062 CET	49876	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:37.835608959 CET	49876	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:37.861042976 CET	49878	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:37.976181030 CET	13	49876	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:38.001353979 CET	13	49878	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:38.001492023 CET	49878	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:38.141887903 CET	13	49878	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:38.142101049 CET	49878	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:38.142180920 CET	49878	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:38.165906906 CET	49879	13	192.168.2.3	132.163.97.2
Feb 8, 2022 08:28:38.282407999 CET	13	49878	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:38.318093061 CET	13	49879	132.163.97.2	192.168.2.3
Feb 8, 2022 08:28:38.318209887 CET	49879	13	192.168.2.3	132.163.97.2
Feb 8, 2022 08:28:38.471064091 CET	13	49879	132.163.97.2	192.168.2.3
Feb 8, 2022 08:28:38.471088886 CET	13	49879	132.163.97.2	192.168.2.3
Feb 8, 2022 08:28:38.471170902 CET	49879	13	192.168.2.3	132.163.97.2
Feb 8, 2022 08:28:38.471357107 CET	49879	13	192.168.2.3	132.163.97.2
Feb 8, 2022 08:28:38.496834040 CET	49881	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:38.496891975 CET	443	49881	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:38.498790026 CET	49881	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:38.499236107 CET	49881	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:38.499263048 CET	443	49881	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:38.582145929 CET	443	49881	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:38.585774899 CET	49881	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:38.585825920 CET	443	49881	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:38.623467922 CET	13	49879	132.163.97.2	192.168.2.3
Feb 8, 2022 08:28:38.740974903 CET	443	49881	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:38.741007090 CET	443	49881	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:38.741075993 CET	443	49881	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:38.741122007 CET	49881	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:38.741146088 CET	49881	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:38.741898060 CET	49881	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:38.897501945 CET	49882	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:39.037955999 CET	13	49882	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:39.038199902 CET	49882	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:39.178546906 CET	13	49882	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:39.178648949 CET	49882	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:39.178718090 CET	49882	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:39.204219103 CET	49884	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:39.318948984 CET	13	49882	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:39.344721079 CET	13	49884	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:39.347778082 CET	49884	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:39.488313913 CET	13	49884	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:39.491767883 CET	49884	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:39.491879940 CET	49884	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:39.513288021 CET	49886	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:39.632260084 CET	13	49884	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:39.653726101 CET	13	49886	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:39.653914928 CET	49886	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:39.794873953 CET	13	49886	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:39.795016050 CET	49886	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:39.795209885 CET	49886	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:39.822076082 CET	49888	13	192.168.2.3	132.163.97.1
Feb 8, 2022 08:28:39.935646057 CET	13	49886	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:39.971625090 CET	13	49888	132.163.97.1	192.168.2.3
Feb 8, 2022 08:28:39.971735954 CET	49888	13	192.168.2.3	132.163.97.1
Feb 8, 2022 08:28:40.121978998 CET	13	49888	132.163.97.1	192.168.2.3
Feb 8, 2022 08:28:40.122004986 CET	13	49888	132.163.97.1	192.168.2.3
Feb 8, 2022 08:28:40.122061014 CET	49888	13	192.168.2.3	132.163.97.1
Feb 8, 2022 08:28:40.122281075 CET	49888	13	192.168.2.3	132.163.97.1
Feb 8, 2022 08:28:40.130022049 CET	49892	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:40.130064011 CET	443	49892	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:40.130142927 CET	49892	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:40.130625010 CET	49892	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:40.130640984 CET	443	49892	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:40.210432053 CET	443	49892	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:40.212662935 CET	49892	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:40.212690115 CET	443	49892	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:40.271621943 CET	13	49888	132.163.97.1	192.168.2.3
Feb 8, 2022 08:28:40.374563932 CET	443	49892	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:40.374588013 CET	443	49892	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:40.374650955 CET	443	49892	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:40.374696970 CET	49892	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:40.374758959 CET	49892	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:40.376255989 CET	49892	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:40.537065983 CET	49895	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:40.677467108 CET	13	49895	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:40.677620888 CET	49895	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:40.818075895 CET	13	49895	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:40.818175077 CET	49895	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:40.818360090 CET	49895	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:40.844299078 CET	49898	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:40.958754063 CET	13	49895	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:40.984885931 CET	13	49898	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:40.985009909 CET	49898	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:41.125228882 CET	13	49898	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:41.125310898 CET	49898	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:41.125406981 CET	49898	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:41.150013924 CET	49901	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:41.265713930 CET	13	49898	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:41.290112972 CET	13	49901	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:41.290395975 CET	49901	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:41.430557966 CET	13	49901	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:41.434036016 CET	49901	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:41.434134960 CET	49901	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:41.457597971 CET	49903	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:41.574271917 CET	13	49901	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:41.615492105 CET	13	49903	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:41.615691900 CET	49903	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:41.773559093 CET	13	49903	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:41.773576021 CET	13	49903	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:41.774019003 CET	49903	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:41.774102926 CET	49903	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:41.779891014 CET	49906	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:41.779994011 CET	443	49906	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:41.780826092 CET	49906	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:41.781155109 CET	49906	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:41.781203032 CET	443	49906	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:41.862582922 CET	443	49906	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:41.865199089 CET	49906	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:41.865237951 CET	443	49906	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:41.931350946 CET	13	49903	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:42.025271893 CET	443	49906	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:42.025307894 CET	443	49906	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:42.025404930 CET	443	49906	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:42.025459051 CET	49906	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:42.025494099 CET	49906	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:42.026439905 CET	49906	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:42.174264908 CET	49909	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:42.314362049 CET	13	49909	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:42.314480066 CET	49909	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:42.455059052 CET	13	49909	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:42.456060886 CET	49909	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:42.456228971 CET	49909	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:42.483407974 CET	49911	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:42.596451998 CET	13	49909	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:42.623867989 CET	13	49911	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:42.623986006 CET	49911	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:42.764561892 CET	13	49911	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:42.764580011 CET	13	49911	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:42.764681101 CET	49911	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:42.764905930 CET	49911	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:42.796935081 CET	49913	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:42.796984911 CET	443	49913	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:42.797169924 CET	49913	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:42.797641993 CET	49913	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:42.797660112 CET	443	49913	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:42.878985882 CET	443	49913	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:42.881711960 CET	49913	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:42.881746054 CET	443	49913	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:42.905374050 CET	13	49911	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:43.102962017 CET	443	49913	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:43.102999926 CET	443	49913	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:43.103070974 CET	443	49913	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:43.103146076 CET	49913	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:43.103234053 CET	49913	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:43.104825020 CET	49913	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:43.267231941 CET	49917	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:43.407633066 CET	13	49917	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:43.407752037 CET	49917	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:43.548435926 CET	13	49917	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:43.548513889 CET	49917	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:43.548598051 CET	49917	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:43.572968006 CET	49919	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:43.688947916 CET	13	49917	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:43.713633060 CET	13	49919	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:43.713747978 CET	49919	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:43.854372978 CET	13	49919	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:43.854397058 CET	13	49919	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:43.854497910 CET	49919	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:43.854696035 CET	49919	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:43.860249996 CET	49921	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:43.860302925 CET	443	49921	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:43.860383034 CET	49921	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:43.860977888 CET	49921	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:43.860994101 CET	443	49921	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:43.939740896 CET	443	49921	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:43.941391945 CET	49921	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:43.941425085 CET	443	49921	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:43.995160103 CET	13	49919	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:44.098491907 CET	443	49921	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:44.098525047 CET	443	49921	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:44.098591089 CET	443	49921	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:44.098644972 CET	49921	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:44.098676920 CET	49921	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:44.099458933 CET	49921	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:44.251904964 CET	49924	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:44.392343044 CET	13	49924	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:44.392472982 CET	49924	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:44.532912016 CET	13	49924	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:44.533037901 CET	49924	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:44.533160925 CET	49924	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:44.561002016 CET	49927	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:44.673532963 CET	13	49924	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:44.701318979 CET	13	49927	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:44.701445103 CET	49927	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:44.841881990 CET	13	49927	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:44.841926098 CET	13	49927	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:44.842371941 CET	49927	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:44.842566013 CET	49927	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:44.849909067 CET	49929	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:44.850034952 CET	443	49929	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:44.850300074 CET	49929	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:44.850649118 CET	49929	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:44.850677967 CET	443	49929	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:44.923645973 CET	443	49929	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:44.925971985 CET	49929	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:44.926011086 CET	443	49929	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:44.983474016 CET	13	49927	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:45.102489948 CET	443	49929	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:45.102520943 CET	443	49929	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:45.102572918 CET	443	49929	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:45.102602959 CET	49929	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:45.102627993 CET	49929	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:45.103559971 CET	49929	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:45.260982037 CET	49933	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:45.401304007 CET	13	49933	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:45.401468039 CET	49933	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:45.541989088 CET	13	49933	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:45.542160988 CET	49933	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:45.542398930 CET	49933	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:45.570106030 CET	49934	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:45.682651997 CET	13	49933	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:45.710599899 CET	13	49934	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:45.710761070 CET	49934	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:45.851130009 CET	13	49934	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:45.851154089 CET	13	49934	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:45.852307081 CET	49934	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:45.852369070 CET	49934	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:45.879410028 CET	49935	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:45.995203972 CET	13	49934	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:46.021538973 CET	13	49935	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:46.021676064 CET	49935	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:46.162022114 CET	13	49935	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:46.162111998 CET	49935	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:46.162213087 CET	49935	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:46.186192036 CET	49936	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:46.302295923 CET	13	49935	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:46.334135056 CET	13	49936	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:46.334284067 CET	49936	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:46.482225895 CET	13	49936	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:46.482258081 CET	13	49936	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:46.482338905 CET	49936	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:46.482543945 CET	49936	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:28:46.489614964 CET	49937	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:46.489656925 CET	443	49937	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:46.489729881 CET	49937	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:46.490134954 CET	49937	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:46.490149021 CET	443	49937	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:46.566550970 CET	443	49937	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:46.568198919 CET	49937	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:46.568234921 CET	443	49937	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:46.630350113 CET	13	49936	132.163.97.3	192.168.2.3
Feb 8, 2022 08:28:46.729813099 CET	443	49937	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:46.729918003 CET	443	49937	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:46.730021000 CET	49937	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:46.730041981 CET	443	49937	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:46.730066061 CET	443	49937	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:46.730093002 CET	49937	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:46.730122089 CET	49937	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:46.730856895 CET	49937	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:46.877038002 CET	49938	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:47.017426968 CET	13	49938	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:47.017560959 CET	49938	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:47.158015966 CET	13	49938	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:47.158128023 CET	49938	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:47.158246040 CET	49938	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:47.180529118 CET	49939	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:47.298583031 CET	13	49938	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:47.320749044 CET	13	49939	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:47.322526932 CET	49939	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:47.462795973 CET	13	49939	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:47.462826014 CET	13	49939	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:47.463079929 CET	49939	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:47.463277102 CET	49939	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:47.487581968 CET	49940	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:47.603410006 CET	13	49939	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:47.627974987 CET	13	49940	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:47.628456116 CET	49940	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:47.768802881 CET	13	49940	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:47.772494078 CET	49940	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:47.772559881 CET	49940	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:47.795545101 CET	49941	13	192.168.2.3	132.163.96.2
Feb 8, 2022 08:28:47.913225889 CET	13	49940	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:47.944180965 CET	13	49941	132.163.96.2	192.168.2.3
Feb 8, 2022 08:28:47.944305897 CET	49941	13	192.168.2.3	132.163.96.2
Feb 8, 2022 08:28:48.093133926 CET	13	49941	132.163.96.2	192.168.2.3
Feb 8, 2022 08:28:48.093153000 CET	13	49941	132.163.96.2	192.168.2.3
Feb 8, 2022 08:28:48.093262911 CET	49941	13	192.168.2.3	132.163.96.2
Feb 8, 2022 08:28:48.093405008 CET	49941	13	192.168.2.3	132.163.96.2
Feb 8, 2022 08:28:48.100951910 CET	49942	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:48.101011992 CET	443	49942	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:48.101119041 CET	49942	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:48.101556063 CET	49942	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:48.101577044 CET	443	49942	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:48.182322979 CET	443	49942	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:48.184753895 CET	49942	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:48.184813976 CET	443	49942	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:48.242119074 CET	13	49941	132.163.96.2	192.168.2.3
Feb 8, 2022 08:28:48.346193075 CET	443	49942	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:48.346226931 CET	443	49942	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:48.346299887 CET	443	49942	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:48.346328020 CET	49942	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:48.346366882 CET	49942	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:48.347435951 CET	49942	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:48.509584904 CET	49943	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:48.649964094 CET	13	49943	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:48.650120020 CET	49943	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:48.790338993 CET	13	49943	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:48.792603970 CET	49943	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:48.792681932 CET	49943	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:48.822173119 CET	49944	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:48.933999062 CET	13	49943	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:48.962511063 CET	13	49944	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:48.963325024 CET	49944	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:49.103482962 CET	13	49944	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:49.103511095 CET	13	49944	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:49.103842974 CET	49944	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:49.104276896 CET	49944	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:49.132694960 CET	49945	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:49.244489908 CET	13	49944	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:49.273199081 CET	13	49945	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:49.273356915 CET	49945	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:49.413700104 CET	13	49945	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:49.413793087 CET	49945	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:49.413949966 CET	49945	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:49.439040899 CET	49946	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:49.554316998 CET	13	49945	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:49.584028959 CET	13	49946	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:49.584188938 CET	49946	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:49.728617907 CET	13	49946	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:49.728641987 CET	13	49946	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:49.728748083 CET	49946	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:49.728893995 CET	49946	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:49.747806072 CET	49947	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:49.747843027 CET	443	49947	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:49.747963905 CET	49947	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:49.748354912 CET	49947	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:49.748370886 CET	443	49947	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:49.828766108 CET	443	49947	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:49.831084013 CET	49947	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:49.831114054 CET	443	49947	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:49.873217106 CET	13	49946	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:49.980532885 CET	443	49947	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:49.980572939 CET	443	49947	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:49.980639935 CET	49947	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:49.980643034 CET	443	49947	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:49.980685949 CET	49947	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:49.981724977 CET	49947	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:50.158883095 CET	49948	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:50.299194098 CET	13	49948	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:50.299320936 CET	49948	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:50.439614058 CET	13	49948	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:50.440246105 CET	49948	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:50.440404892 CET	49948	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:50.466262102 CET	49949	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:50.580579042 CET	13	49948	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:50.606295109 CET	13	49949	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:50.606477976 CET	49949	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:50.746781111 CET	13	49949	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:50.746916056 CET	49949	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:50.747020006 CET	49949	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:50.772209883 CET	49950	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:50.887130022 CET	13	49949	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:50.912707090 CET	13	49950	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:50.914088011 CET	49950	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:51.054677010 CET	13	49950	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:51.054758072 CET	49950	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:51.054862022 CET	49950	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:51.079354048 CET	49951	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:51.195214033 CET	13	49950	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:51.227576017 CET	13	49951	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:51.227694035 CET	49951	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:51.375931025 CET	13	49951	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:51.375961065 CET	13	49951	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:51.379978895 CET	49951	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:51.380369902 CET	49951	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:51.389719963 CET	49952	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:51.389771938 CET	443	49952	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:51.389899015 CET	49952	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:51.390640974 CET	49952	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:51.390656948 CET	443	49952	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:51.472891092 CET	443	49952	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:51.475013018 CET	49952	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:51.475044966 CET	443	49952	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:51.528589010 CET	13	49951	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:51.634879112 CET	443	49952	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:51.634915113 CET	443	49952	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:51.634983063 CET	443	49952	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:51.635052919 CET	49952	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:51.635112047 CET	49952	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:51.636007071 CET	49952	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:51.789871931 CET	49953	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:51.930324078 CET	13	49953	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:51.930476904 CET	49953	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:52.070739031 CET	13	49953	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:52.070813894 CET	49953	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:52.070986986 CET	49953	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:52.103792906 CET	49954	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:52.211252928 CET	13	49953	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:52.244360924 CET	13	49954	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:52.244532108 CET	49954	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:52.386233091 CET	13	49954	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:52.386320114 CET	49954	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:52.386396885 CET	49954	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:52.413578033 CET	49955	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:52.527571917 CET	13	49954	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:52.554220915 CET	13	49955	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:52.554358006 CET	49955	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:52.694996119 CET	13	49955	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:52.695125103 CET	49955	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:52.695389032 CET	49955	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:52.720880985 CET	49956	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:52.835989952 CET	13	49955	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:52.871854067 CET	13	49956	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:52.871970892 CET	49956	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:53.022888899 CET	13	49956	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:53.022918940 CET	13	49956	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:53.023042917 CET	49956	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:53.023268938 CET	49956	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:28:53.030487061 CET	49957	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:53.030548096 CET	443	49957	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:53.030669928 CET	49957	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:53.031241894 CET	49957	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:53.031266928 CET	443	49957	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:53.112912893 CET	443	49957	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:53.130706072 CET	49957	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:53.130737066 CET	443	49957	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:53.174036026 CET	13	49956	132.163.96.1	192.168.2.3
Feb 8, 2022 08:28:53.289880037 CET	443	49957	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:53.289908886 CET	443	49957	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:53.289966106 CET	443	49957	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:53.289994955 CET	49957	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:53.290051937 CET	49957	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:53.290941000 CET	49957	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:53.946505070 CET	49958	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:54.087081909 CET	13	49958	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:54.087212086 CET	49958	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:54.227629900 CET	13	49958	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:54.227797031 CET	49958	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:54.227894068 CET	49958	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:54.251986027 CET	49959	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:54.368268013 CET	13	49958	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:54.392283916 CET	13	49959	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:54.392466068 CET	49959	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:54.532699108 CET	13	49959	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:54.532891035 CET	49959	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:55.625433922 CET	49959	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:55.652301073 CET	49962	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:55.765616894 CET	13	49959	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:55.792632103 CET	13	49962	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:55.792840958 CET	49962	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:55.933212996 CET	13	49962	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:55.933362007 CET	49962	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:55.933464050 CET	49962	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:55.959568977 CET	49964	13	192.168.2.3	132.163.97.2
Feb 8, 2022 08:28:56.073664904 CET	13	49962	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:56.111707926 CET	13	49964	132.163.97.2	192.168.2.3
Feb 8, 2022 08:28:56.111848116 CET	49964	13	192.168.2.3	132.163.97.2
Feb 8, 2022 08:28:56.263911009 CET	13	49964	132.163.97.2	192.168.2.3
Feb 8, 2022 08:28:56.263926029 CET	13	49964	132.163.97.2	192.168.2.3
Feb 8, 2022 08:28:56.264064074 CET	49964	13	192.168.2.3	132.163.97.2
Feb 8, 2022 08:28:56.264348030 CET	49964	13	192.168.2.3	132.163.97.2
Feb 8, 2022 08:28:56.297818899 CET	49967	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:56.297875881 CET	443	49967	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:56.297996044 CET	49967	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:56.298583984 CET	49967	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:56.298598051 CET	443	49967	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:56.416403055 CET	13	49964	132.163.97.2	192.168.2.3
Feb 8, 2022 08:28:56.639429092 CET	443	49967	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:56.641570091 CET	49967	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:56.641613007 CET	443	49967	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:56.793169022 CET	443	49967	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:56.793204069 CET	443	49967	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:56.793262959 CET	443	49967	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:56.793294907 CET	49967	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:56.793345928 CET	49967	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:56.794413090 CET	49967	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:56.942229986 CET	49968	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:57.082438946 CET	13	49968	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:57.082690001 CET	49968	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:57.223395109 CET	13	49968	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:57.223632097 CET	49968	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:57.223848104 CET	49968	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:57.255310059 CET	49969	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:57.364614964 CET	13	49968	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:57.395581961 CET	13	49969	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:57.397358894 CET	49969	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:57.538187027 CET	13	49969	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:57.538355112 CET	49969	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:57.538476944 CET	49969	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:57.564341068 CET	49970	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:57.680519104 CET	13	49969	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:57.705679893 CET	13	49970	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:57.705921888 CET	49970	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:57.847579002 CET	13	49970	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:57.847842932 CET	49970	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:57.847980976 CET	49970	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:57.881767035 CET	49971	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:57.988922119 CET	13	49970	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:58.026501894 CET	13	49971	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:58.026834011 CET	49971	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:58.171252966 CET	13	49971	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:58.171305895 CET	13	49971	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:58.171544075 CET	49971	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:58.171725988 CET	49971	13	192.168.2.3	128.138.141.172
Feb 8, 2022 08:28:58.179919004 CET	49972	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:58.179986000 CET	443	49972	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:58.180130005 CET	49972	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:58.180571079 CET	49972	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:58.180597067 CET	443	49972	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:58.258831024 CET	443	49972	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:58.261482000 CET	49972	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:58.261517048 CET	443	49972	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:58.316056013 CET	13	49971	128.138.141.172	192.168.2.3
Feb 8, 2022 08:28:58.408282995 CET	443	49972	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:58.408320904 CET	443	49972	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:58.408395052 CET	443	49972	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:58.408560991 CET	49972	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:58.408579111 CET	49972	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:58.409569979 CET	49972	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:58.579025030 CET	49973	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:58.721235037 CET	13	49973	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:58.721483946 CET	49973	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:58.863281012 CET	13	49973	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:58.863444090 CET	49973	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:58.863509893 CET	49973	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:28:58.888609886 CET	49974	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:59.003746986 CET	13	49973	129.6.15.28	192.168.2.3
Feb 8, 2022 08:28:59.028958082 CET	13	49974	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:59.029120922 CET	49974	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:59.169482946 CET	13	49974	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:59.169666052 CET	49974	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:59.169897079 CET	49974	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:28:59.193825006 CET	49975	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:59.310148001 CET	13	49974	129.6.15.29	192.168.2.3
Feb 8, 2022 08:28:59.334090948 CET	13	49975	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:59.334244013 CET	49975	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:59.474417925 CET	13	49975	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:59.474534035 CET	49975	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:59.474663019 CET	49975	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:28:59.499624014 CET	49976	13	192.168.2.3	132.163.97.4
Feb 8, 2022 08:28:59.614722013 CET	13	49975	129.6.15.27	192.168.2.3
Feb 8, 2022 08:28:59.651793003 CET	13	49976	132.163.97.4	192.168.2.3
Feb 8, 2022 08:28:59.651928902 CET	49976	13	192.168.2.3	132.163.97.4
Feb 8, 2022 08:28:59.804152012 CET	13	49976	132.163.97.4	192.168.2.3
Feb 8, 2022 08:28:59.804202080 CET	13	49976	132.163.97.4	192.168.2.3
Feb 8, 2022 08:28:59.804282904 CET	49976	13	192.168.2.3	132.163.97.4
Feb 8, 2022 08:28:59.804470062 CET	49976	13	192.168.2.3	132.163.97.4
Feb 8, 2022 08:28:59.811707020 CET	49977	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:59.811755896 CET	443	49977	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:59.811847925 CET	49977	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:59.812273979 CET	49977	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:59.812295914 CET	443	49977	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:59.891447067 CET	443	49977	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:59.893846035 CET	49977	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:28:59.893883944 CET	443	49977	51.83.143.177	192.168.2.3
Feb 8, 2022 08:28:59.957743883 CET	13	49976	132.163.97.4	192.168.2.3
Feb 8, 2022 08:29:00.040941954 CET	443	49977	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:00.040991068 CET	443	49977	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:00.041059017 CET	49977	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:00.041071892 CET	443	49977	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:00.041124105 CET	49977	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:00.041929007 CET	49977	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:00.192918062 CET	49978	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:00.333215952 CET	13	49978	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:00.333328962 CET	49978	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:00.473572016 CET	13	49978	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:00.477585077 CET	49978	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:00.477686882 CET	49978	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:00.501176119 CET	49979	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:00.618087053 CET	13	49978	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:00.641546965 CET	13	49979	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:00.641674995 CET	49979	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:00.782073021 CET	13	49979	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:00.782212019 CET	49979	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:00.782288074 CET	49979	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:00.809326887 CET	49980	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:00.922619104 CET	13	49979	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:00.949670076 CET	13	49980	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:00.949783087 CET	49980	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:01.090332985 CET	13	49980	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:01.090593100 CET	49980	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:01.090943098 CET	49980	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:01.119518042 CET	49981	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:29:01.231503010 CET	13	49980	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:01.266408920 CET	13	49981	132.163.96.1	192.168.2.3
Feb 8, 2022 08:29:01.266582012 CET	49981	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:29:01.413420916 CET	13	49981	132.163.96.1	192.168.2.3
Feb 8, 2022 08:29:01.413470030 CET	13	49981	132.163.96.1	192.168.2.3
Feb 8, 2022 08:29:01.413559914 CET	49981	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:29:01.413729906 CET	49981	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:29:01.419368982 CET	49982	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:01.419424057 CET	443	49982	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:01.419667959 CET	49982	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:01.420017004 CET	49982	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:01.420044899 CET	443	49982	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:01.499828100 CET	443	49982	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:01.501688957 CET	49982	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:01.501730919 CET	443	49982	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:01.560471058 CET	13	49981	132.163.96.1	192.168.2.3
Feb 8, 2022 08:29:01.684048891 CET	443	49982	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:01.684075117 CET	443	49982	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:01.684130907 CET	443	49982	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:01.684212923 CET	49982	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:01.685079098 CET	49982	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:01.832248926 CET	49983	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:01.972548008 CET	13	49983	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:01.972806931 CET	49983	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:02.113262892 CET	13	49983	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:02.113456964 CET	49983	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:02.113671064 CET	49983	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:02.144556999 CET	49984	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:02.253943920 CET	13	49983	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:02.284929991 CET	13	49984	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:02.285072088 CET	49984	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:02.425381899 CET	13	49984	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:02.425513983 CET	49984	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:02.425677061 CET	49984	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:02.451545954 CET	49985	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:02.565900087 CET	13	49984	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:02.592119932 CET	13	49985	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:02.592231035 CET	49985	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:02.732826948 CET	13	49985	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:02.732944012 CET	49985	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:02.733216047 CET	49985	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:02.759974957 CET	49986	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:02.873599052 CET	13	49985	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:02.907870054 CET	13	49986	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:02.908241034 CET	49986	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:03.056176901 CET	13	49986	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:03.056227922 CET	13	49986	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:03.056329012 CET	49986	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:03.056757927 CET	49986	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:03.066936970 CET	49987	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:03.066982031 CET	443	49987	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:03.067090988 CET	49987	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:03.067439079 CET	49987	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:03.067445993 CET	443	49987	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:03.150178909 CET	443	49987	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:03.152425051 CET	49987	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:03.152460098 CET	443	49987	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:03.204929113 CET	13	49986	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:03.328063011 CET	443	49987	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:03.328085899 CET	443	49987	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:03.328223944 CET	49987	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:03.328234911 CET	443	49987	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:03.328308105 CET	49987	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:03.329519987 CET	49987	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:03.518240929 CET	49988	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:03.659722090 CET	13	49988	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:03.659940958 CET	49988	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:03.803817034 CET	13	49988	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:03.805876017 CET	49988	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:03.805954933 CET	49988	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:03.835794926 CET	49989	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:03.947838068 CET	13	49988	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:03.977461100 CET	13	49989	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:03.977933884 CET	49989	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:04.122049093 CET	13	49989	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:04.122078896 CET	13	49989	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:04.122162104 CET	49989	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:04.122327089 CET	49989	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:04.127799988 CET	49990	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:04.127854109 CET	443	49990	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:04.127927065 CET	49990	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:04.128303051 CET	49990	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:04.128319025 CET	443	49990	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:04.208447933 CET	443	49990	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:04.211030006 CET	49990	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:04.211081982 CET	443	49990	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:04.265330076 CET	13	49989	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:04.354294062 CET	443	49990	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:04.354346037 CET	443	49990	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:04.354408026 CET	443	49990	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:04.354490042 CET	49990	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:04.356347084 CET	49990	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:04.504633904 CET	49991	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:04.645406961 CET	13	49991	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:04.645632982 CET	49991	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:04.786335945 CET	13	49991	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:04.786492109 CET	49991	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:04.787004948 CET	49991	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:04.812477112 CET	49992	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:04.928261995 CET	13	49991	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:04.953100920 CET	13	49992	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:04.953219891 CET	49992	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:05.094101906 CET	13	49992	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:05.094125986 CET	13	49992	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:05.094187975 CET	49992	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:05.094351053 CET	49992	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:05.100431919 CET	49993	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:05.100491047 CET	443	49993	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:05.100596905 CET	49993	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:05.101099968 CET	49993	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:05.101125002 CET	443	49993	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:05.180835009 CET	443	49993	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:05.182933092 CET	49993	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:05.182962894 CET	443	49993	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:05.235207081 CET	13	49992	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:05.332782984 CET	443	49993	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:05.332808018 CET	443	49993	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:05.332869053 CET	443	49993	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:05.332964897 CET	49993	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:05.333036900 CET	49993	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:05.334408998 CET	49993	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:05.493179083 CET	49994	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:05.636198044 CET	13	49994	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:05.636296034 CET	49994	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:05.778021097 CET	13	49994	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:05.778125048 CET	49994	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:05.778194904 CET	49994	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:05.801830053 CET	49995	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:05.918536901 CET	13	49994	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:05.942280054 CET	13	49995	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:05.942394972 CET	49995	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:06.082432032 CET	13	49995	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:06.082461119 CET	13	49995	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:06.082559109 CET	49995	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:06.082798004 CET	49995	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:06.108804941 CET	49996	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:06.223625898 CET	13	49995	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:06.250665903 CET	13	49996	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:06.252604008 CET	49996	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:06.394224882 CET	13	49996	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:06.396239042 CET	49996	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:06.396317959 CET	49996	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:06.421166897 CET	49997	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:06.536742926 CET	13	49996	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:06.569567919 CET	13	49997	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:06.569693089 CET	49997	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:06.717679977 CET	13	49997	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:06.717710018 CET	13	49997	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:06.717839956 CET	49997	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:06.718138933 CET	49997	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:06.728796959 CET	49998	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:06.728833914 CET	443	49998	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:06.728931904 CET	49998	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:06.729486942 CET	49998	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:06.729504108 CET	443	49998	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:06.828011036 CET	443	49998	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:06.829638004 CET	49998	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:06.829663038 CET	443	49998	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:06.865833044 CET	13	49997	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:06.977308035 CET	443	49998	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:06.977351904 CET	443	49998	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:06.977462053 CET	49998	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:06.977478981 CET	443	49998	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:06.977514982 CET	443	49998	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:06.977534056 CET	49998	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:06.977574110 CET	49998	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:06.978598118 CET	49998	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:07.126024008 CET	49999	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:07.268309116 CET	13	49999	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:07.268454075 CET	49999	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:07.408668041 CET	13	49999	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:07.408745050 CET	49999	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:07.408866882 CET	49999	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:07.434575081 CET	50001	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:07.549226999 CET	13	49999	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:07.575153112 CET	13	50001	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:07.575294018 CET	50001	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:07.715780020 CET	13	50001	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:07.715799093 CET	13	50001	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:07.715948105 CET	50001	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:07.716288090 CET	50001	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:07.746783018 CET	50002	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:07.856647015 CET	13	50001	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:07.886965036 CET	13	50002	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:07.887069941 CET	50002	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:08.027268887 CET	13	50002	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:08.027363062 CET	50002	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:08.027460098 CET	50002	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:08.049134016 CET	50003	13	192.168.2.3	128.138.140.44
Feb 8, 2022 08:29:08.167598009 CET	13	50002	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:08.196422100 CET	13	50003	128.138.140.44	192.168.2.3
Feb 8, 2022 08:29:08.196594954 CET	50003	13	192.168.2.3	128.138.140.44
Feb 8, 2022 08:29:08.345124960 CET	13	50003	128.138.140.44	192.168.2.3
Feb 8, 2022 08:29:08.345199108 CET	13	50003	128.138.140.44	192.168.2.3
Feb 8, 2022 08:29:08.345237017 CET	13	50003	128.138.140.44	192.168.2.3
Feb 8, 2022 08:29:08.345407963 CET	50003	13	192.168.2.3	128.138.140.44
Feb 8, 2022 08:29:08.346116066 CET	50003	13	192.168.2.3	128.138.140.44
Feb 8, 2022 08:29:08.385809898 CET	50005	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:08.385879993 CET	443	50005	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:08.385996103 CET	50005	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:08.386492014 CET	50005	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:08.386514902 CET	443	50005	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:08.462388992 CET	443	50005	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:08.466715097 CET	50005	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:08.466758966 CET	443	50005	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:08.493663073 CET	13	50003	128.138.140.44	192.168.2.3
Feb 8, 2022 08:29:08.627275944 CET	443	50005	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:08.627305031 CET	443	50005	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:08.627357960 CET	443	50005	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:08.627432108 CET	50005	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:08.627465010 CET	50005	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:08.628649950 CET	50005	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:08.792186022 CET	50008	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:08.932607889 CET	13	50008	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:08.932734013 CET	50008	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:09.073237896 CET	13	50008	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:09.073353052 CET	50008	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:09.073465109 CET	50008	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:09.097769022 CET	50010	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:09.213810921 CET	13	50008	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:09.238270044 CET	13	50010	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:09.240993023 CET	50010	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:09.381387949 CET	13	50010	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:09.381567955 CET	50010	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:09.381623983 CET	50010	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:09.405811071 CET	50013	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:09.522249937 CET	13	50010	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:09.545979977 CET	13	50013	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:09.550420046 CET	50013	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:09.690550089 CET	13	50013	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:09.691463947 CET	50013	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:09.691557884 CET	50013	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:09.716595888 CET	50015	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:09.831552029 CET	13	50013	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:09.864352942 CET	13	50015	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:09.866378069 CET	50015	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:10.014231920 CET	13	50015	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:10.014259100 CET	13	50015	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:10.014363050 CET	50015	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:10.014566898 CET	50015	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:10.032337904 CET	50017	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:10.032409906 CET	443	50017	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:10.033884048 CET	50017	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:10.034365892 CET	50017	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:10.034395933 CET	443	50017	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:10.114526987 CET	443	50017	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:10.117757082 CET	50017	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:10.117783070 CET	443	50017	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:10.162292957 CET	13	50015	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:10.275012016 CET	443	50017	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:10.275044918 CET	443	50017	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:10.275106907 CET	443	50017	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:10.275185108 CET	50017	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:10.275638103 CET	50017	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:10.276479006 CET	50017	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:10.428327084 CET	50020	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:10.568749905 CET	13	50020	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:10.568905115 CET	50020	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:10.709239006 CET	13	50020	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:10.709353924 CET	50020	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:10.709506035 CET	50020	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:10.733385086 CET	50022	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:10.849720001 CET	13	50020	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:10.873519897 CET	13	50022	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:10.873708963 CET	50022	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:11.013902903 CET	13	50022	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:11.014046907 CET	50022	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:11.014271021 CET	50022	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:11.038556099 CET	50025	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:11.154372931 CET	13	50022	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:11.178988934 CET	13	50025	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:11.179219007 CET	50025	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:11.319582939 CET	13	50025	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:11.319722891 CET	50025	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:11.319925070 CET	50025	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:11.351764917 CET	50028	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:29:11.460237026 CET	13	50025	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:11.502912045 CET	13	50028	132.163.96.1	192.168.2.3
Feb 8, 2022 08:29:11.503122091 CET	50028	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:29:11.654337883 CET	13	50028	132.163.96.1	192.168.2.3
Feb 8, 2022 08:29:11.654381990 CET	13	50028	132.163.96.1	192.168.2.3
Feb 8, 2022 08:29:11.654455900 CET	50028	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:29:11.654613018 CET	50028	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:29:11.659986973 CET	50030	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:11.660029888 CET	443	50030	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:11.660118103 CET	50030	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:11.660410881 CET	50030	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:11.660439014 CET	443	50030	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:11.734316111 CET	443	50030	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:11.735824108 CET	50030	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:11.735857010 CET	443	50030	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:11.805565119 CET	13	50028	132.163.96.1	192.168.2.3
Feb 8, 2022 08:29:11.927295923 CET	443	50030	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:11.927331924 CET	443	50030	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:11.927401066 CET	443	50030	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:11.927426100 CET	50030	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:11.930511951 CET	50030	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:11.930533886 CET	50030	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:12.086635113 CET	50033	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:12.226917982 CET	13	50033	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:12.227185011 CET	50033	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:12.367537022 CET	13	50033	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:12.367650986 CET	50033	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:12.367758036 CET	50033	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:12.394738913 CET	50035	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:12.507939100 CET	13	50033	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:12.534799099 CET	13	50035	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:12.534950972 CET	50035	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:12.675024986 CET	13	50035	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:12.676851034 CET	50035	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:12.677058935 CET	50035	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:12.700134039 CET	50038	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:12.818720102 CET	13	50035	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:12.841124058 CET	13	50038	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:12.841237068 CET	50038	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:12.981496096 CET	13	50038	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:12.981599092 CET	50038	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:12.981667995 CET	50038	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:13.005281925 CET	50040	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:29:13.121916056 CET	13	50038	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:13.156491041 CET	13	50040	132.163.96.1	192.168.2.3
Feb 8, 2022 08:29:13.156680107 CET	50040	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:29:13.307760954 CET	13	50040	132.163.96.1	192.168.2.3
Feb 8, 2022 08:29:13.307777882 CET	13	50040	132.163.96.1	192.168.2.3
Feb 8, 2022 08:29:13.307946920 CET	50040	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:29:13.308228016 CET	50040	13	192.168.2.3	132.163.96.1
Feb 8, 2022 08:29:13.322174072 CET	50041	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:13.322228909 CET	443	50041	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:13.322313070 CET	50041	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:13.322839975 CET	50041	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:13.322858095 CET	443	50041	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:13.401668072 CET	443	50041	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:13.403666019 CET	50041	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:13.403701067 CET	443	50041	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:13.459201097 CET	13	50040	132.163.96.1	192.168.2.3
Feb 8, 2022 08:29:13.556696892 CET	443	50041	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:13.556730032 CET	443	50041	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:13.556792974 CET	443	50041	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:13.556866884 CET	50041	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:13.557742119 CET	50041	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:13.711232901 CET	50042	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:13.851604939 CET	13	50042	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:13.851774931 CET	50042	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:13.992172003 CET	13	50042	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:13.992192030 CET	13	50042	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:13.992299080 CET	50042	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:13.992502928 CET	50042	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:13.998414993 CET	50043	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:13.998450041 CET	443	50043	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:13.998539925 CET	50043	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:13.998984098 CET	50043	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:13.998992920 CET	443	50043	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:14.075762033 CET	443	50043	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:14.077395916 CET	50043	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:14.077439070 CET	443	50043	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:14.132786036 CET	13	50042	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:14.239835978 CET	443	50043	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:14.239880085 CET	443	50043	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:14.239955902 CET	443	50043	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:14.240144014 CET	50043	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:14.242340088 CET	50043	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:14.410274982 CET	50044	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:14.550646067 CET	13	50044	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:14.550760984 CET	50044	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:14.691044092 CET	13	50044	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:14.691076994 CET	13	50044	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:14.691272974 CET	50044	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:14.691370010 CET	50044	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:14.698642969 CET	50045	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:14.698683977 CET	443	50045	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:14.699081898 CET	50045	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:14.699451923 CET	50045	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:14.699465036 CET	443	50045	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:14.780190945 CET	443	50045	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:14.782872915 CET	50045	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:14.782898903 CET	443	50045	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:14.831551075 CET	13	50044	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:14.935069084 CET	443	50045	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:14.935116053 CET	443	50045	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:14.935184002 CET	443	50045	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:14.935197115 CET	50045	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:14.935249090 CET	50045	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:14.936111927 CET	50045	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:15.073642969 CET	50046	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:15.214169979 CET	13	50046	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:15.214291096 CET	50046	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:15.354788065 CET	13	50046	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:15.354810953 CET	13	50046	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:15.356735945 CET	50046	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:15.356859922 CET	50046	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:15.381371021 CET	50047	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:15.497364044 CET	13	50046	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:15.521503925 CET	13	50047	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:15.521914959 CET	50047	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:15.662211895 CET	13	50047	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:15.662911892 CET	50047	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:15.663032055 CET	50047	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:15.688760996 CET	50048	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:15.803082943 CET	13	50047	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:15.829199076 CET	13	50048	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:15.829385042 CET	50048	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:15.969810009 CET	13	50048	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:15.969968081 CET	50048	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:15.970136881 CET	50048	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:15.996053934 CET	50049	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:16.110495090 CET	13	50048	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:16.148350000 CET	13	50049	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:16.148507118 CET	50049	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:16.300600052 CET	13	50049	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:16.300625086 CET	13	50049	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:16.301501989 CET	50049	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:16.301565886 CET	50049	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:16.308361053 CET	50050	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:16.308413029 CET	443	50050	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:16.308499098 CET	50050	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:16.308876038 CET	50050	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:16.308891058 CET	443	50050	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:16.381866932 CET	443	50050	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:16.383876085 CET	50050	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:16.383898973 CET	443	50050	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:16.453679085 CET	13	50049	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:16.549942970 CET	443	50050	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:16.549968004 CET	443	50050	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:16.550024986 CET	443	50050	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:16.550113916 CET	50050	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:16.550235033 CET	50050	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:16.552721024 CET	50050	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:16.698522091 CET	50051	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:16.838793039 CET	13	50051	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:16.838924885 CET	50051	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:16.979175091 CET	13	50051	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:16.979202986 CET	13	50051	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:16.979285955 CET	50051	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:16.979552031 CET	50051	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:17.005558968 CET	50052	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:17.119796991 CET	13	50051	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:17.145797014 CET	13	50052	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:17.146024942 CET	50052	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:17.286237001 CET	13	50052	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:17.286421061 CET	50052	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:17.286664963 CET	50052	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:17.310992002 CET	50053	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:17.426855087 CET	13	50052	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:17.451342106 CET	13	50053	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:17.451441050 CET	50053	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:17.591766119 CET	13	50053	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:17.591928959 CET	50053	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:17.592016935 CET	50053	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:17.618052006 CET	50054	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:17.732352018 CET	13	50053	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:17.767790079 CET	13	50054	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:17.767944098 CET	50054	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:17.917642117 CET	13	50054	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:17.917668104 CET	13	50054	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:17.917757034 CET	50054	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:17.917994022 CET	50054	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:17.925196886 CET	50055	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:17.925252914 CET	443	50055	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:17.925342083 CET	50055	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:17.925829887 CET	50055	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:17.925873041 CET	443	50055	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:18.007071018 CET	443	50055	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:18.009541035 CET	50055	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:18.009584904 CET	443	50055	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:18.067639112 CET	13	50054	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:18.162265062 CET	443	50055	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:18.162288904 CET	443	50055	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:18.162359953 CET	443	50055	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:18.162386894 CET	50055	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:18.162448883 CET	50055	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:18.163409948 CET	50055	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:18.312871933 CET	50056	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:18.453407049 CET	13	50056	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:18.453598022 CET	50056	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:18.593951941 CET	13	50056	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:18.594891071 CET	50056	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:18.594971895 CET	50056	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:18.624324083 CET	50057	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:18.735266924 CET	13	50056	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:18.765064955 CET	13	50057	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:18.766298056 CET	50057	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:18.906927109 CET	13	50057	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:18.907041073 CET	50057	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:18.907151937 CET	50057	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:18.930723906 CET	50058	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:19.047736883 CET	13	50057	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:19.071212053 CET	13	50058	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:19.073733091 CET	50058	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:19.214128971 CET	13	50058	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:19.214266062 CET	50058	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:19.214413881 CET	50058	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:19.239535093 CET	50059	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:19.354798079 CET	13	50058	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:19.389096975 CET	13	50059	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:19.389281034 CET	50059	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:19.538697958 CET	13	50059	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:19.538723946 CET	13	50059	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:19.538836956 CET	50059	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:19.539099932 CET	50059	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:19.570400000 CET	50060	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:19.570460081 CET	443	50060	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:19.570544958 CET	50060	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:19.570961952 CET	50060	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:19.570982933 CET	443	50060	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:19.648453951 CET	443	50060	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:19.650679111 CET	50060	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:19.650726080 CET	443	50060	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:19.688431025 CET	13	50059	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:19.819025993 CET	443	50060	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:19.819057941 CET	443	50060	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:19.819118023 CET	443	50060	51.83.143.177	192.168.2.3
Feb 8, 2022 08:29:19.819242001 CET	50060	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:19.820374966 CET	50060	443	192.168.2.3	51.83.143.177
Feb 8, 2022 08:29:19.966825962 CET	50061	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:20.107151031 CET	13	50061	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:20.107321024 CET	50061	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:20.247545958 CET	13	50061	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:20.247667074 CET	50061	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:20.247729063 CET	50061	13	192.168.2.3	129.6.15.28
Feb 8, 2022 08:29:20.271631956 CET	50062	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:20.387952089 CET	13	50061	129.6.15.28	192.168.2.3
Feb 8, 2022 08:29:20.412985086 CET	13	50062	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:20.413136959 CET	50062	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:20.553371906 CET	13	50062	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:20.553442001 CET	50062	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:20.553556919 CET	50062	13	192.168.2.3	129.6.15.29
Feb 8, 2022 08:29:20.575576067 CET	50063	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:20.694528103 CET	13	50062	129.6.15.29	192.168.2.3
Feb 8, 2022 08:29:20.716775894 CET	13	50063	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:20.717024088 CET	50063	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:20.857513905 CET	13	50063	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:20.857630014 CET	50063	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:20.857722044 CET	50063	13	192.168.2.3	129.6.15.27
Feb 8, 2022 08:29:20.882111073 CET	50064	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:20.998270988 CET	13	50063	129.6.15.27	192.168.2.3
Feb 8, 2022 08:29:21.031910896 CET	13	50064	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:21.032089949 CET	50064	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:21.181912899 CET	13	50064	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:21.181935072 CET	13	50064	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:21.185620070 CET	50064	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:21.185889959 CET	50064	13	192.168.2.3	132.163.97.3
Feb 8, 2022 08:29:21.212656975 CET	50065	13	192.168.2.3	216.239.35.4
Feb 8, 2022 08:29:21.335630894 CET	13	50064	132.163.97.3	192.168.2.3
Feb 8, 2022 08:29:24.225605965 CET	50065	13	192.168.2.3	216.239.35.4
Feb 8, 2022 08:29:30.226125002 CET	50065	13	192.168.2.3	216.239.35.4
Feb 8, 2022 08:29:42.259268999 CET	50065	13	192.168.2.3	216.239.35.12
Feb 8, 2022 08:29:45.274295092 CET	50065	13	192.168.2.3	216.239.35.12
Feb 8, 2022 08:29:51.274678946 CET	50065	13	192.168.2.3	216.239.35.12

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 8, 2022 08:27:52.900151968 CET	64021	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:27:52.918426991 CET	53	64021	8.8.8.8	192.168.2.3
Feb 8, 2022 08:27:53.580511093 CET	60784	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:27:53.598248005 CET	53	60784	8.8.8.8	192.168.2.3
Feb 8, 2022 08:27:54.692825079 CET	51143	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:27:54.711051941 CET	53	51143	8.8.8.8	192.168.2.3
Feb 8, 2022 08:27:55.370429039 CET	56009	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:27:55.388688087 CET	53	56009	8.8.8.8	192.168.2.3
Feb 8, 2022 08:27:56.076062918 CET	59026	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:27:56.095124006 CET	53	59026	8.8.8.8	192.168.2.3
Feb 8, 2022 08:27:56.389321089 CET	49572	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:27:56.408350945 CET	53	49572	8.8.8.8	192.168.2.3
Feb 8, 2022 08:27:57.074168921 CET	60823	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:27:57.092468977 CET	53	60823	8.8.8.8	192.168.2.3
Feb 8, 2022 08:27:57.379751921 CET	52130	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:27:57.398580074 CET	53	52130	8.8.8.8	192.168.2.3
Feb 8, 2022 08:27:58.153096914 CET	55102	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:27:58.169729948 CET	53	55102	8.8.8.8	192.168.2.3
Feb 8, 2022 08:27:58.458429098 CET	56236	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:27:58.475128889 CET	53	56236	8.8.8.8	192.168.2.3
Feb 8, 2022 08:27:59.178143024 CET	56527	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:27:59.196475029 CET	53	56527	8.8.8.8	192.168.2.3
Feb 8, 2022 08:27:59.487168074 CET	49559	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:27:59.505919933 CET	53	49559	8.8.8.8	192.168.2.3
Feb 8, 2022 08:27:59.794985056 CET	52650	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:27:59.813519001 CET	53	52650	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:00.530827045 CET	63297	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:00.549297094 CET	53	63297	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:00.836235046 CET	58361	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:00.854748011 CET	53	58361	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:01.524723053 CET	53615	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:01.543188095 CET	53	53615	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:03.312635899 CET	50728	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:03.331826925 CET	53	50728	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:03.667471886 CET	53777	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:03.685704947 CET	53	53777	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:03.972455978 CET	57106	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:03.988768101 CET	53	57106	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:04.318603039 CET	60352	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:04.337353945 CET	53	60352	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:04.732891083 CET	56773	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:04.749453068 CET	53	56773	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:05.038088083 CET	60982	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:05.054231882 CET	53	60982	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:05.342875957 CET	58058	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:05.360949993 CET	53	58058	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:05.651963949 CET	64367	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:05.670041084 CET	53	64367	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:06.409693956 CET	51539	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:06.427854061 CET	53	51539	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:06.717504025 CET	55393	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:06.735728025 CET	53	55393	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:07.443620920 CET	50585	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:07.459842920 CET	53	50585	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:07.749958992 CET	63456	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:07.768125057 CET	53	63456	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:08.434761047 CET	55108	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:08.453573942 CET	53	55108	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:08.742235899 CET	58942	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:08.760441065 CET	53	58942	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:09.444698095 CET	64432	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:09.461225033 CET	53	64432	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:09.751739025 CET	49250	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:09.770530939 CET	53	49250	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:10.057694912 CET	63490	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:10.076137066 CET	53	63490	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:10.364167929 CET	65110	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:10.382216930 CET	53	65110	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:11.084486961 CET	61120	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:11.100627899 CET	53	61120	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:11.389533043 CET	53079	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:11.409383059 CET	53	53079	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:11.699223042 CET	50824	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:11.718285084 CET	53	50824	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:12.007293940 CET	56706	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:12.025753975 CET	53	56706	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:12.745970011 CET	53569	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:12.764189959 CET	53	53569	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:13.053946972 CET	62855	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:13.070744991 CET	53	62855	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:13.357609034 CET	51046	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:13.374562979 CET	53	51046	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:13.663809061 CET	65501	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:13.682014942 CET	53	65501	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:14.404448032 CET	53465	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:14.422661066 CET	53	53465	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:14.717967033 CET	49290	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:14.734751940 CET	53	49290	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:15.022758961 CET	59754	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:15.039362907 CET	53	59754	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:15.326843977 CET	49234	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:15.342952013 CET	53	49234	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:15.646111965 CET	58720	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:15.664469004 CET	53	58720	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:16.047641993 CET	57447	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:16.065620899 CET	53	57447	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:16.356225014 CET	63583	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:16.374625921 CET	53	63583	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:16.662323952 CET	64099	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:16.678874969 CET	53	64099	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:16.966007948 CET	64610	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:16.984400988 CET	53	64610	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:17.692289114 CET	51989	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:17.708776951 CET	53	51989	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:17.997200966 CET	53152	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:18.013664961 CET	53	53152	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:18.307250977 CET	61590	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:18.323776960 CET	53	61590	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:18.617077112 CET	56077	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:18.635232925 CET	53	56077	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:19.319434881 CET	57951	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:19.337699890 CET	53	57951	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:19.624849081 CET	53276	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:19.641277075 CET	53	53276	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:19.930505991 CET	60135	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:19.949301004 CET	53	60135	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:20.237760067 CET	49849	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:20.258421898 CET	53	49849	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:21.018642902 CET	60253	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:21.036957026 CET	53	60253	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:21.323564053 CET	58706	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:21.340195894 CET	53	58706	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:21.627903938 CET	62677	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:21.646574020 CET	53	62677	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:21.934262037 CET	62595	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:21.950380087 CET	53	62595	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:22.651187897 CET	51189	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:22.670715094 CET	53	51189	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:22.962224007 CET	49967	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:22.980845928 CET	53	49967	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:23.270190001 CET	51454	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:23.287169933 CET	53	51454	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:23.581293106 CET	57163	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:23.597769976 CET	53	57163	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:24.266849041 CET	56360	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:24.283333063 CET	53	56360	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:24.572438955 CET	49258	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:24.590557098 CET	53	49258	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:24.878966093 CET	56195	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:24.897331953 CET	53	56195	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:25.184638977 CET	53021	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:25.202728033 CET	53	53021	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:25.868853092 CET	52618	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:25.887365103 CET	53	52618	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:26.177112103 CET	51633	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:26.196037054 CET	53	51633	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:26.487175941 CET	64383	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:26.506649017 CET	53	64383	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:26.794553041 CET	50346	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:26.814941883 CET	53	50346	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:27.560448885 CET	50281	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:27.578934908 CET	53	50281	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:27.866909981 CET	56328	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:27.883397102 CET	53	56328	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:28.172087908 CET	56921	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:28.190763950 CET	53	56921	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:28.479543924 CET	59529	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:28.495975971 CET	53	59529	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:28.817958117 CET	64853	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:28.834899902 CET	53	64853	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:29.212732077 CET	56317	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:29.231352091 CET	53	56317	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:29.525230885 CET	51570	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:29.543729067 CET	53	51570	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:29.836601973 CET	53663	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:29.854906082 CET	53	53663	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:30.144871950 CET	60070	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:30.163103104 CET	53	60070	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:30.837536097 CET	58750	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:30.856894016 CET	53	58750	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:31.143486023 CET	60727	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:31.159887075 CET	53	60727	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:31.448354959 CET	63753	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:31.467159033 CET	53	63753	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:31.755446911 CET	54609	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:31.773865938 CET	53	54609	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:32.502391100 CET	56219	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:32.521078110 CET	53	56219	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:32.808778048 CET	52312	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:32.826926947 CET	53	52312	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:33.115581036 CET	64731	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:33.134237051 CET	53	64731	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:33.423383951 CET	59130	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:33.440402031 CET	53	59130	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:34.161403894 CET	51636	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:34.179614067 CET	53	51636	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:34.470863104 CET	60432	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:34.489187002 CET	53	60432	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:35.204870939 CET	64271	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:35.223285913 CET	53	64271	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:35.546082020 CET	51973	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:35.562443018 CET	53	51973	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:37.189865112 CET	63193	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:37.208127022 CET	53	63193	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:37.497879982 CET	53946	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:37.514410019 CET	53	53946	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:37.841149092 CET	55029	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:37.859635115 CET	53	55029	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:38.146378040 CET	59613	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:38.164417982 CET	53	59613	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:38.877629995 CET	51235	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:38.895953894 CET	53	51235	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:39.183125019 CET	55150	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:39.201205015 CET	53	55150	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:39.495621920 CET	62723	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:39.511868954 CET	53	62723	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:39.802484989 CET	55857	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:39.820607901 CET	53	55857	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:40.517457962 CET	56679	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:40.535607100 CET	53	56679	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:40.823405981 CET	64513	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:40.839840889 CET	53	64513	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:41.129703999 CET	50725	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:41.148196936 CET	53	50725	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:41.438497066 CET	60883	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:41.454782963 CET	53	60883	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:42.153646946 CET	49731	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:42.172485113 CET	53	49731	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:42.460608959 CET	61357	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:42.479484081 CET	53	61357	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:42.777919054 CET	52520	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:42.794970989 CET	53	52520	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:43.246694088 CET	52476	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:43.264826059 CET	53	52476	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:43.553220987 CET	49196	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:43.571499109 CET	53	49196	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:44.231302977 CET	63569	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:44.249747992 CET	53	63569	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:44.540863037 CET	60463	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:44.559381008 CET	53	60463	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:45.241453886 CET	61914	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:45.259538889 CET	53	61914	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:45.548502922 CET	65348	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:45.566978931 CET	53	65348	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:45.858045101 CET	58302	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:45.876835108 CET	53	58302	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:46.166224957 CET	59725	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:46.184658051 CET	53	59725	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:46.857350111 CET	53091	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:46.875756979 CET	53	53091	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:47.162630081 CET	62067	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:47.179236889 CET	53	62067	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:47.467619896 CET	64437	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:47.485949039 CET	53	64437	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:47.777420044 CET	53489	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:47.793827057 CET	53	53489	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:48.489051104 CET	55822	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:48.505131960 CET	53	55822	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:48.798713923 CET	60635	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:48.816803932 CET	53	60635	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:49.114228010 CET	64398	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:49.130762100 CET	53	64398	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:49.419570923 CET	54979	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:49.437680006 CET	53	54979	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:50.139614105 CET	60067	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:50.157699108 CET	53	60067	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:50.446361065 CET	51743	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:50.464699030 CET	53	51743	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:50.752496958 CET	49334	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:50.769280910 CET	53	49334	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:51.058914900 CET	59505	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:51.077056885 CET	53	59505	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:51.769717932 CET	52010	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:51.788038015 CET	53	52010	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:52.083313942 CET	53081	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:52.101433992 CET	53	53081	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:52.391993046 CET	60661	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:52.408966064 CET	53	60661	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:52.700890064 CET	54639	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:52.719074965 CET	53	54639	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:53.923233986 CET	55921	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:53.941390991 CET	53	55921	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:54.232144117 CET	54909	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:54.250564098 CET	53	54909	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:55.631788015 CET	54823	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:55.650684118 CET	53	54823	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:55.939305067 CET	49327	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:55.957782030 CET	53	49327	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:56.277389050 CET	60448	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:56.295495033 CET	53	60448	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:56.923825026 CET	54355	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:56.940423965 CET	53	54355	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:57.233547926 CET	55631	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:57.253390074 CET	53	55631	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:57.544085979 CET	54331	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:57.562818050 CET	53	54331	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:57.858604908 CET	62604	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:57.877495050 CET	53	62604	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:58.557868958 CET	56194	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:58.576771975 CET	53	56194	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:58.868902922 CET	59228	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:58.887026072 CET	53	59228	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:59.175076962 CET	57569	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:59.191616058 CET	53	57569	8.8.8.8	192.168.2.3
Feb 8, 2022 08:28:59.478853941 CET	58561	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:28:59.497251034 CET	53	58561	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:00.172933102 CET	60687	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:00.191183090 CET	53	60687	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:00.481878042 CET	56196	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:00.499985933 CET	53	56196	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:00.787698984 CET	61720	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:00.806318045 CET	53	61720	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:01.102113008 CET	62036	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:01.118156910 CET	53	62036	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:01.814344883 CET	57484	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:01.830852985 CET	53	57484	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:02.124505997 CET	61385	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:02.142709017 CET	53	61385	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:02.429821968 CET	57796	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:02.448404074 CET	53	57796	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:02.740442991 CET	60411	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:02.758743048 CET	53	60411	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:03.497920036 CET	54676	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:03.516767025 CET	53	54676	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:03.811676025 CET	63562	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:03.831502914 CET	53	63562	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:04.485649109 CET	62098	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:04.502985954 CET	53	62098	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:04.792309999 CET	58296	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:04.810429096 CET	53	58296	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:05.473082066 CET	60434	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:05.491266966 CET	53	60434	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:05.782387018 CET	49485	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:05.800704956 CET	53	49485	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:06.088208914 CET	51033	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:06.106966972 CET	53	51033	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:06.400120020 CET	58362	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:06.418299913 CET	53	58362	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:07.106611967 CET	56918	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:07.124828100 CET	53	56918	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:07.414017916 CET	59490	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:07.432776928 CET	53	59490	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:07.724952936 CET	59091	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:07.743671894 CET	53	59091	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:08.031558990 CET	52267	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:08.047772884 CET	53	52267	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:08.365627050 CET	63382	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:08.383797884 CET	53	63382	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:08.774676085 CET	62388	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:08.790976048 CET	53	62388	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:09.078080893 CET	60033	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:09.096143961 CET	53	60033	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:09.385410070 CET	51748	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:09.404108047 CET	53	51748	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:09.696472883 CET	58531	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:09.714718103 CET	53	58531	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:10.408595085 CET	50501	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:10.426755905 CET	53	50501	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:10.715337992 CET	54716	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:10.731374979 CET	53	54716	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:11.018203974 CET	50919	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:11.036099911 CET	53	50919	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:11.330853939 CET	56996	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:11.349204063 CET	53	56996	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:12.068844080 CET	51675	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:12.085308075 CET	53	51675	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:12.373197079 CET	50228	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:12.391235113 CET	53	50228	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:12.681015968 CET	57537	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:12.699044943 CET	53	57537	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:12.985416889 CET	57235	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:13.003492117 CET	53	57235	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:13.692593098 CET	64913	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:13.709700108 CET	53	64913	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:14.390110016 CET	64048	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:14.408236027 CET	53	64048	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:15.054106951 CET	63383	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:15.072272062 CET	53	63383	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:15.360883951 CET	50191	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:15.379784107 CET	53	50191	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:15.667500019 CET	51407	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:15.685614109 CET	53	51407	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:15.976187944 CET	53718	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:15.994503975 CET	53	53718	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:16.680247068 CET	50568	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:16.696820021 CET	53	50568	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:16.983669043 CET	49390	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:17.002531052 CET	53	49390	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:17.292316914 CET	55390	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:17.309278965 CET	53	55390	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:17.597718000 CET	62361	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:17.616199017 CET	53	62361	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:18.291930914 CET	60943	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:18.310167074 CET	53	60943	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:18.599070072 CET	55146	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:18.617275953 CET	53	55146	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:18.911001921 CET	60457	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:18.928997993 CET	53	60457	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:19.219559908 CET	49531	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:19.237869978 CET	53	49531	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:19.551544905 CET	53721	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:19.568542004 CET	53	53721	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:19.948400021 CET	58302	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:19.965058088 CET	53	58302	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:20.251527071 CET	49685	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:20.269874096 CET	53	49685	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:20.557406902 CET	50324	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:20.574217081 CET	53	50324	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:20.862137079 CET	52683	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:20.880594015 CET	53	52683	8.8.8.8	192.168.2.3
Feb 8, 2022 08:29:21.191745996 CET	56443	53	192.168.2.3	8.8.8.8
Feb 8, 2022 08:29:21.210407019 CET	53	56443	8.8.8.8	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Feb 8, 2022 08:27:52.900151968 CET	192.168.2.3	8.8.8.8	0x11bf	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:53.580511093 CET	192.168.2.3	8.8.8.8	0x6e1	Standard query (0)	justpaste.it	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:54.692825079 CET	192.168.2.3	8.8.8.8	0xdd65	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:55.370429039 CET	192.168.2.3	8.8.8.8	0x73e4	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:56.076062918 CET	192.168.2.3	8.8.8.8	0xe8c7	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:56.389321089 CET	192.168.2.3	8.8.8.8	0xbcdd	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:57.074168921 CET	192.168.2.3	8.8.8.8	0xf51f	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:57.379751921 CET	192.168.2.3	8.8.8.8	0x9824	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:58.153096914 CET	192.168.2.3	8.8.8.8	0xb17	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:58.458429098 CET	192.168.2.3	8.8.8.8	0xe3d	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:59.178143024 CET	192.168.2.3	8.8.8.8	0xf3cb	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:59.487168074 CET	192.168.2.3	8.8.8.8	0x8e6	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:59.794985056 CET	192.168.2.3	8.8.8.8	0xdc05	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:00.530827045 CET	192.168.2.3	8.8.8.8	0x27fa	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:00.836235046 CET	192.168.2.3	8.8.8.8	0x6f20	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:01.524723053 CET	192.168.2.3	8.8.8.8	0x86af	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:03.312635899 CET	192.168.2.3	8.8.8.8	0xc016	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:03.667471886 CET	192.168.2.3	8.8.8.8	0x18c8	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:03.972455978 CET	192.168.2.3	8.8.8.8	0xc331	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:04.318603039 CET	192.168.2.3	8.8.8.8	0x714c	Standard query (0)	justpaste.it	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:04.732891083 CET	192.168.2.3	8.8.8.8	0xbf07	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:05.038088083 CET	192.168.2.3	8.8.8.8	0x7bee	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:05.342875957 CET	192.168.2.3	8.8.8.8	0x8173	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:05.651963949 CET	192.168.2.3	8.8.8.8	0x28df	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:06.409693956 CET	192.168.2.3	8.8.8.8	0x3dae	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:06.717504025 CET	192.168.2.3	8.8.8.8	0x9919	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:07.443620920 CET	192.168.2.3	8.8.8.8	0xf06a	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:07.749958992 CET	192.168.2.3	8.8.8.8	0xac8f	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:08.434761047 CET	192.168.2.3	8.8.8.8	0xd40c	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:08.742235899 CET	192.168.2.3	8.8.8.8	0x78c8	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:09.444698095 CET	192.168.2.3	8.8.8.8	0x5f64	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:09.751739025 CET	192.168.2.3	8.8.8.8	0x4c3f	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:10.057694912 CET	192.168.2.3	8.8.8.8	0x7375	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:10.364167929 CET	192.168.2.3	8.8.8.8	0xa9d8	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:11.084486961 CET	192.168.2.3	8.8.8.8	0x4093	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:11.389533043 CET	192.168.2.3	8.8.8.8	0xdcef	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:11.699223042 CET	192.168.2.3	8.8.8.8	0x24b0	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:12.007293940 CET	192.168.2.3	8.8.8.8	0xa057	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:12.745970011 CET	192.168.2.3	8.8.8.8	0x8852	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:13.053946972 CET	192.168.2.3	8.8.8.8	0xb389	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:13.357609034 CET	192.168.2.3	8.8.8.8	0x2886	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:13.663809061 CET	192.168.2.3	8.8.8.8	0x59d8	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:14.404448032 CET	192.168.2.3	8.8.8.8	0xa04	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:14.717967033 CET	192.168.2.3	8.8.8.8	0x7cf1	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:15.022758961 CET	192.168.2.3	8.8.8.8	0xa7d5	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:15.326843977 CET	192.168.2.3	8.8.8.8	0x87e9	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:15.646111965 CET	192.168.2.3	8.8.8.8	0xb010	Standard query (0)	justpaste.it	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:16.047641993 CET	192.168.2.3	8.8.8.8	0x3bc1	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:16.356225014 CET	192.168.2.3	8.8.8.8	0x1ba8	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:16.662323952 CET	192.168.2.3	8.8.8.8	0xa9c6	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:16.966007948 CET	192.168.2.3	8.8.8.8	0xc3ec	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:17.692289114 CET	192.168.2.3	8.8.8.8	0xf312	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:17.997200966 CET	192.168.2.3	8.8.8.8	0x3ba2	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:18.307250977 CET	192.168.2.3	8.8.8.8	0x46b5	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:18.617077112 CET	192.168.2.3	8.8.8.8	0xf080	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:19.319434881 CET	192.168.2.3	8.8.8.8	0xc92	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:19.624849081 CET	192.168.2.3	8.8.8.8	0xefdb	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:19.930505991 CET	192.168.2.3	8.8.8.8	0x57d2	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:20.237760067 CET	192.168.2.3	8.8.8.8	0x6b25	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:21.018642902 CET	192.168.2.3	8.8.8.8	0x425a	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:21.323564053 CET	192.168.2.3	8.8.8.8	0xd1eb	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:21.627903938 CET	192.168.2.3	8.8.8.8	0x548	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:21.934262037 CET	192.168.2.3	8.8.8.8	0x316a	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:22.651187897 CET	192.168.2.3	8.8.8.8	0x4e1b	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:22.962224007 CET	192.168.2.3	8.8.8.8	0x714a	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:23.270190001 CET	192.168.2.3	8.8.8.8	0x7cb2	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:23.581293106 CET	192.168.2.3	8.8.8.8	0xfbc3	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:24.266849041 CET	192.168.2.3	8.8.8.8	0xcea8	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:24.572438955 CET	192.168.2.3	8.8.8.8	0x64c8	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:24.878966093 CET	192.168.2.3	8.8.8.8	0x2b13	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:25.184638977 CET	192.168.2.3	8.8.8.8	0xfb56	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:25.868853092 CET	192.168.2.3	8.8.8.8	0x5eb9	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:26.177112103 CET	192.168.2.3	8.8.8.8	0xfa9e	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:26.487175941 CET	192.168.2.3	8.8.8.8	0x782c	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:26.794553041 CET	192.168.2.3	8.8.8.8	0xc858	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:27.560448885 CET	192.168.2.3	8.8.8.8	0x3630	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:27.866909981 CET	192.168.2.3	8.8.8.8	0x7875	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:28.172087908 CET	192.168.2.3	8.8.8.8	0x5018	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:28.479543924 CET	192.168.2.3	8.8.8.8	0x2e2c	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:28.817958117 CET	192.168.2.3	8.8.8.8	0xa4ef	Standard query (0)	justpaste.it	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:29.212732077 CET	192.168.2.3	8.8.8.8	0xaee0	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:29.525230885 CET	192.168.2.3	8.8.8.8	0x705a	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:29.836601973 CET	192.168.2.3	8.8.8.8	0xdd5d	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:30.144871950 CET	192.168.2.3	8.8.8.8	0xf748	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:30.837536097 CET	192.168.2.3	8.8.8.8	0x59e0	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:31.143486023 CET	192.168.2.3	8.8.8.8	0xab4e	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:31.448354959 CET	192.168.2.3	8.8.8.8	0x1a3	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:31.755446911 CET	192.168.2.3	8.8.8.8	0xedef	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:32.502391100 CET	192.168.2.3	8.8.8.8	0xdcde	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:32.808778048 CET	192.168.2.3	8.8.8.8	0x3b71	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:33.115581036 CET	192.168.2.3	8.8.8.8	0x653d	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:33.423383951 CET	192.168.2.3	8.8.8.8	0x986	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:34.161403894 CET	192.168.2.3	8.8.8.8	0x53ab	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:34.470863104 CET	192.168.2.3	8.8.8.8	0x869d	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:35.204870939 CET	192.168.2.3	8.8.8.8	0x19f5	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:35.546082020 CET	192.168.2.3	8.8.8.8	0x4b62	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:37.189865112 CET	192.168.2.3	8.8.8.8	0x4db3	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:37.497879982 CET	192.168.2.3	8.8.8.8	0xf987	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:37.841149092 CET	192.168.2.3	8.8.8.8	0x1d23	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:38.146378040 CET	192.168.2.3	8.8.8.8	0xd5c7	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:38.877629995 CET	192.168.2.3	8.8.8.8	0x82fb	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:39.183125019 CET	192.168.2.3	8.8.8.8	0x2aa8	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:39.495621920 CET	192.168.2.3	8.8.8.8	0x2aa2	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:39.802484989 CET	192.168.2.3	8.8.8.8	0xead0	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:40.517457962 CET	192.168.2.3	8.8.8.8	0x2314	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:40.823405981 CET	192.168.2.3	8.8.8.8	0xcece	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:41.129703999 CET	192.168.2.3	8.8.8.8	0x3a10	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:41.438497066 CET	192.168.2.3	8.8.8.8	0xbb2c	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:42.153646946 CET	192.168.2.3	8.8.8.8	0xe9b1	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:42.460608959 CET	192.168.2.3	8.8.8.8	0x3426	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:42.777919054 CET	192.168.2.3	8.8.8.8	0x47bb	Standard query (0)	justpaste.it	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:43.246694088 CET	192.168.2.3	8.8.8.8	0xa8db	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:43.553220987 CET	192.168.2.3	8.8.8.8	0xd234	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:44.231302977 CET	192.168.2.3	8.8.8.8	0xe8c2	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:44.540863037 CET	192.168.2.3	8.8.8.8	0x85a3	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:45.241453886 CET	192.168.2.3	8.8.8.8	0xb4fd	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:45.548502922 CET	192.168.2.3	8.8.8.8	0x3d7a	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:45.858045101 CET	192.168.2.3	8.8.8.8	0x4417	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:46.166224957 CET	192.168.2.3	8.8.8.8	0xda34	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:46.857350111 CET	192.168.2.3	8.8.8.8	0x6d74	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:47.162630081 CET	192.168.2.3	8.8.8.8	0x50e2	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:47.467619896 CET	192.168.2.3	8.8.8.8	0x1e44	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:47.777420044 CET	192.168.2.3	8.8.8.8	0xcb0f	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:48.489051104 CET	192.168.2.3	8.8.8.8	0x301f	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:48.798713923 CET	192.168.2.3	8.8.8.8	0xa60f	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:49.114228010 CET	192.168.2.3	8.8.8.8	0x604	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:49.419570923 CET	192.168.2.3	8.8.8.8	0xcbb6	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:50.139614105 CET	192.168.2.3	8.8.8.8	0xdee6	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:50.446361065 CET	192.168.2.3	8.8.8.8	0xff73	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:50.752496958 CET	192.168.2.3	8.8.8.8	0x9ede	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:51.058914900 CET	192.168.2.3	8.8.8.8	0x4d63	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:51.769717932 CET	192.168.2.3	8.8.8.8	0x1d5c	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:52.083313942 CET	192.168.2.3	8.8.8.8	0xfc96	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:52.391993046 CET	192.168.2.3	8.8.8.8	0x9fd3	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:52.700890064 CET	192.168.2.3	8.8.8.8	0x3397	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:53.923233986 CET	192.168.2.3	8.8.8.8	0xa3da	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:54.232144117 CET	192.168.2.3	8.8.8.8	0x88e9	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:55.631788015 CET	192.168.2.3	8.8.8.8	0x1bf7	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:55.939305067 CET	192.168.2.3	8.8.8.8	0xf37e	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:56.277389050 CET	192.168.2.3	8.8.8.8	0xcc6c	Standard query (0)	justpaste.it	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:56.923825026 CET	192.168.2.3	8.8.8.8	0x2b53	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:57.233547926 CET	192.168.2.3	8.8.8.8	0xee0e	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:57.544085979 CET	192.168.2.3	8.8.8.8	0xf713	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:57.858604908 CET	192.168.2.3	8.8.8.8	0xa906	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:58.557868958 CET	192.168.2.3	8.8.8.8	0x3e9	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:58.868902922 CET	192.168.2.3	8.8.8.8	0xba74	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:59.175076962 CET	192.168.2.3	8.8.8.8	0xb973	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:59.478853941 CET	192.168.2.3	8.8.8.8	0x5d0b	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:00.172933102 CET	192.168.2.3	8.8.8.8	0xcd15	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:00.481878042 CET	192.168.2.3	8.8.8.8	0xf62f	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:00.787698984 CET	192.168.2.3	8.8.8.8	0xbf1	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:01.102113008 CET	192.168.2.3	8.8.8.8	0xbda1	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:01.814344883 CET	192.168.2.3	8.8.8.8	0xac9	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:02.124505997 CET	192.168.2.3	8.8.8.8	0x5701	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:02.429821968 CET	192.168.2.3	8.8.8.8	0x89cd	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:02.740442991 CET	192.168.2.3	8.8.8.8	0xf189	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:03.497920036 CET	192.168.2.3	8.8.8.8	0x281b	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:03.811676025 CET	192.168.2.3	8.8.8.8	0x862b	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:04.485649109 CET	192.168.2.3	8.8.8.8	0xef6e	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:04.792309999 CET	192.168.2.3	8.8.8.8	0x78cc	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:05.473082066 CET	192.168.2.3	8.8.8.8	0xa418	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:05.782387018 CET	192.168.2.3	8.8.8.8	0xef22	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:06.088208914 CET	192.168.2.3	8.8.8.8	0x64bf	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:06.400120020 CET	192.168.2.3	8.8.8.8	0xa22	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:07.106611967 CET	192.168.2.3	8.8.8.8	0xdcea	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:07.414017916 CET	192.168.2.3	8.8.8.8	0x87c0	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:07.724952936 CET	192.168.2.3	8.8.8.8	0xacee	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:08.031558990 CET	192.168.2.3	8.8.8.8	0x42ef	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:08.365627050 CET	192.168.2.3	8.8.8.8	0x6db3	Standard query (0)	justpaste.it	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:08.774676085 CET	192.168.2.3	8.8.8.8	0x4e71	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:09.078080893 CET	192.168.2.3	8.8.8.8	0x907b	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:09.385410070 CET	192.168.2.3	8.8.8.8	0x238a	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:09.696472883 CET	192.168.2.3	8.8.8.8	0xd3fb	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:10.408595085 CET	192.168.2.3	8.8.8.8	0xfb1d	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:10.715337992 CET	192.168.2.3	8.8.8.8	0xdb28	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:11.018203974 CET	192.168.2.3	8.8.8.8	0x124c	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:11.330853939 CET	192.168.2.3	8.8.8.8	0x523	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:12.068844080 CET	192.168.2.3	8.8.8.8	0xacab	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:12.373197079 CET	192.168.2.3	8.8.8.8	0x429d	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:12.681015968 CET	192.168.2.3	8.8.8.8	0x84f7	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:12.985416889 CET	192.168.2.3	8.8.8.8	0x80d3	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:13.692593098 CET	192.168.2.3	8.8.8.8	0x9004	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:14.390110016 CET	192.168.2.3	8.8.8.8	0xe033	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:15.054106951 CET	192.168.2.3	8.8.8.8	0x8864	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:15.360883951 CET	192.168.2.3	8.8.8.8	0x1707	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:15.667500019 CET	192.168.2.3	8.8.8.8	0x3c62	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:15.976187944 CET	192.168.2.3	8.8.8.8	0x4583	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:16.680247068 CET	192.168.2.3	8.8.8.8	0xe973	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:16.983669043 CET	192.168.2.3	8.8.8.8	0x9af6	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:17.292316914 CET	192.168.2.3	8.8.8.8	0xf83c	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:17.597718000 CET	192.168.2.3	8.8.8.8	0xe635	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:18.291930914 CET	192.168.2.3	8.8.8.8	0xd7a9	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:18.599070072 CET	192.168.2.3	8.8.8.8	0xf103	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:18.911001921 CET	192.168.2.3	8.8.8.8	0x6137	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:19.219559908 CET	192.168.2.3	8.8.8.8	0x7c8e	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:19.551544905 CET	192.168.2.3	8.8.8.8	0x1ed2	Standard query (0)	justpaste.it	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:19.948400021 CET	192.168.2.3	8.8.8.8	0xee1	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:20.251527071 CET	192.168.2.3	8.8.8.8	0xb521	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:20.557406902 CET	192.168.2.3	8.8.8.8	0x5047	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:20.862137079 CET	192.168.2.3	8.8.8.8	0x143e	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:21.191745996 CET	192.168.2.3	8.8.8.8	0xdef5	Standard query (0)	time.google.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Feb 8, 2022 08:27:52.918426991 CET	8.8.8.8	192.168.2.3	0x11bf	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:53.598248005 CET	8.8.8.8	192.168.2.3	0x6e1	No error (0)	justpaste.it		51.83.143.177	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:54.711051941 CET	8.8.8.8	192.168.2.3	0xdd65	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:55.388688087 CET	8.8.8.8	192.168.2.3	0x73e4	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:56.095124006 CET	8.8.8.8	192.168.2.3	0xe8c7	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:56.408350945 CET	8.8.8.8	192.168.2.3	0xbcdd	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:57.092468977 CET	8.8.8.8	192.168.2.3	0xf51f	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:57.398580074 CET	8.8.8.8	192.168.2.3	0x9824	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:58.169729948 CET	8.8.8.8	192.168.2.3	0xb17	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:58.475128889 CET	8.8.8.8	192.168.2.3	0xe3d	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:59.196475029 CET	8.8.8.8	192.168.2.3	0xf3cb	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:59.505919933 CET	8.8.8.8	192.168.2.3	0x8e6	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:27:59.813519001 CET	8.8.8.8	192.168.2.3	0xdc05	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:00.549297094 CET	8.8.8.8	192.168.2.3	0x27fa	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:00.854748011 CET	8.8.8.8	192.168.2.3	0x6f20	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:01.543188095 CET	8.8.8.8	192.168.2.3	0x86af	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:03.331826925 CET	8.8.8.8	192.168.2.3	0xc016	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:03.685704947 CET	8.8.8.8	192.168.2.3	0x18c8	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:03.988768101 CET	8.8.8.8	192.168.2.3	0xc331	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:04.337353945 CET	8.8.8.8	192.168.2.3	0x714c	No error (0)	justpaste.it		51.83.143.177	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:04.749453068 CET	8.8.8.8	192.168.2.3	0xbf07	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:05.054231882 CET	8.8.8.8	192.168.2.3	0x7bee	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:05.360949993 CET	8.8.8.8	192.168.2.3	0x8173	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:05.670041084 CET	8.8.8.8	192.168.2.3	0x28df	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:05.670041084 CET	8.8.8.8	192.168.2.3	0x28df	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:06.427854061 CET	8.8.8.8	192.168.2.3	0x3dae	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:06.735728025 CET	8.8.8.8	192.168.2.3	0x9919	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:07.459842920 CET	8.8.8.8	192.168.2.3	0xf06a	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:07.768125057 CET	8.8.8.8	192.168.2.3	0xac8f	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:08.453573942 CET	8.8.8.8	192.168.2.3	0xd40c	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:08.760441065 CET	8.8.8.8	192.168.2.3	0x78c8	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:09.461225033 CET	8.8.8.8	192.168.2.3	0x5f64	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:09.770530939 CET	8.8.8.8	192.168.2.3	0x4c3f	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:10.076137066 CET	8.8.8.8	192.168.2.3	0x7375	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:10.382216930 CET	8.8.8.8	192.168.2.3	0xa9d8	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:10.382216930 CET	8.8.8.8	192.168.2.3	0xa9d8	No error (0)	ntp1.glb.nist.gov		132.163.97.2	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:11.100627899 CET	8.8.8.8	192.168.2.3	0x4093	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:11.409383059 CET	8.8.8.8	192.168.2.3	0xdcef	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:11.718285084 CET	8.8.8.8	192.168.2.3	0x24b0	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:12.025753975 CET	8.8.8.8	192.168.2.3	0xa057	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:12.025753975 CET	8.8.8.8	192.168.2.3	0xa057	No error (0)	ntp1.glb.nist.gov		132.163.96.4	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:12.764189959 CET	8.8.8.8	192.168.2.3	0x8852	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:13.070744991 CET	8.8.8.8	192.168.2.3	0xb389	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:13.374562979 CET	8.8.8.8	192.168.2.3	0x2886	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:13.682014942 CET	8.8.8.8	192.168.2.3	0x59d8	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:13.682014942 CET	8.8.8.8	192.168.2.3	0x59d8	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:14.422661066 CET	8.8.8.8	192.168.2.3	0xa04	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:14.734751940 CET	8.8.8.8	192.168.2.3	0x7cf1	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:15.039362907 CET	8.8.8.8	192.168.2.3	0xa7d5	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:15.342952013 CET	8.8.8.8	192.168.2.3	0x87e9	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:15.342952013 CET	8.8.8.8	192.168.2.3	0x87e9	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:15.664469004 CET	8.8.8.8	192.168.2.3	0xb010	No error (0)	justpaste.it		51.83.143.177	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:16.065620899 CET	8.8.8.8	192.168.2.3	0x3bc1	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:16.374625921 CET	8.8.8.8	192.168.2.3	0x1ba8	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:16.678874969 CET	8.8.8.8	192.168.2.3	0xa9c6	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:16.984400988 CET	8.8.8.8	192.168.2.3	0xc3ec	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:16.984400988 CET	8.8.8.8	192.168.2.3	0xc3ec	No error (0)	ntp1.glb.nist.gov		132.163.97.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:17.708776951 CET	8.8.8.8	192.168.2.3	0xf312	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:18.013664961 CET	8.8.8.8	192.168.2.3	0x3ba2	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:18.323776960 CET	8.8.8.8	192.168.2.3	0x46b5	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:18.635232925 CET	8.8.8.8	192.168.2.3	0xf080	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:18.635232925 CET	8.8.8.8	192.168.2.3	0xf080	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:19.337699890 CET	8.8.8.8	192.168.2.3	0xc92	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:19.641277075 CET	8.8.8.8	192.168.2.3	0xefdb	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:19.949301004 CET	8.8.8.8	192.168.2.3	0x57d2	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:20.258421898 CET	8.8.8.8	192.168.2.3	0x6b25	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:20.258421898 CET	8.8.8.8	192.168.2.3	0x6b25	No error (0)	ntp1.glb.nist.gov		132.163.97.2	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:21.036957026 CET	8.8.8.8	192.168.2.3	0x425a	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:21.340195894 CET	8.8.8.8	192.168.2.3	0xd1eb	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:21.646574020 CET	8.8.8.8	192.168.2.3	0x548	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:21.950380087 CET	8.8.8.8	192.168.2.3	0x316a	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:21.950380087 CET	8.8.8.8	192.168.2.3	0x316a	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:22.670715094 CET	8.8.8.8	192.168.2.3	0x4e1b	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:22.980845928 CET	8.8.8.8	192.168.2.3	0x714a	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:23.287169933 CET	8.8.8.8	192.168.2.3	0x7cb2	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:23.597769976 CET	8.8.8.8	192.168.2.3	0xfbc3	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:23.597769976 CET	8.8.8.8	192.168.2.3	0xfbc3	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:24.283333063 CET	8.8.8.8	192.168.2.3	0xcea8	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:24.590557098 CET	8.8.8.8	192.168.2.3	0x64c8	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:24.897331953 CET	8.8.8.8	192.168.2.3	0x2b13	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:25.202728033 CET	8.8.8.8	192.168.2.3	0xfb56	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:25.202728033 CET	8.8.8.8	192.168.2.3	0xfb56	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:25.887365103 CET	8.8.8.8	192.168.2.3	0x5eb9	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:26.196037054 CET	8.8.8.8	192.168.2.3	0xfa9e	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:26.506649017 CET	8.8.8.8	192.168.2.3	0x782c	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:26.814941883 CET	8.8.8.8	192.168.2.3	0xc858	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:26.814941883 CET	8.8.8.8	192.168.2.3	0xc858	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:27.578934908 CET	8.8.8.8	192.168.2.3	0x3630	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:27.883397102 CET	8.8.8.8	192.168.2.3	0x7875	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:28.190763950 CET	8.8.8.8	192.168.2.3	0x5018	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:28.495975971 CET	8.8.8.8	192.168.2.3	0x2e2c	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:28.495975971 CET	8.8.8.8	192.168.2.3	0x2e2c	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:28.834899902 CET	8.8.8.8	192.168.2.3	0xa4ef	No error (0)	justpaste.it		51.83.143.177	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:29.231352091 CET	8.8.8.8	192.168.2.3	0xaee0	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:29.543729067 CET	8.8.8.8	192.168.2.3	0x705a	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:29.854906082 CET	8.8.8.8	192.168.2.3	0xdd5d	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:30.163103104 CET	8.8.8.8	192.168.2.3	0xf748	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:30.163103104 CET	8.8.8.8	192.168.2.3	0xf748	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:30.856894016 CET	8.8.8.8	192.168.2.3	0x59e0	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:31.159887075 CET	8.8.8.8	192.168.2.3	0xab4e	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:31.467159033 CET	8.8.8.8	192.168.2.3	0x1a3	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:31.773865938 CET	8.8.8.8	192.168.2.3	0xedef	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:31.773865938 CET	8.8.8.8	192.168.2.3	0xedef	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:32.521078110 CET	8.8.8.8	192.168.2.3	0xdcde	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:32.826926947 CET	8.8.8.8	192.168.2.3	0x3b71	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:33.134237051 CET	8.8.8.8	192.168.2.3	0x653d	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:33.440402031 CET	8.8.8.8	192.168.2.3	0x986	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:33.440402031 CET	8.8.8.8	192.168.2.3	0x986	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:34.179614067 CET	8.8.8.8	192.168.2.3	0x53ab	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:34.489187002 CET	8.8.8.8	192.168.2.3	0x869d	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:35.223285913 CET	8.8.8.8	192.168.2.3	0x19f5	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:35.562443018 CET	8.8.8.8	192.168.2.3	0x4b62	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:35.562443018 CET	8.8.8.8	192.168.2.3	0x4b62	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:37.208127022 CET	8.8.8.8	192.168.2.3	0x4db3	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:37.514410019 CET	8.8.8.8	192.168.2.3	0xf987	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:37.859635115 CET	8.8.8.8	192.168.2.3	0x1d23	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:38.164417982 CET	8.8.8.8	192.168.2.3	0xd5c7	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:38.164417982 CET	8.8.8.8	192.168.2.3	0xd5c7	No error (0)	ntp1.glb.nist.gov		132.163.97.2	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:38.895953894 CET	8.8.8.8	192.168.2.3	0x82fb	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:39.201205015 CET	8.8.8.8	192.168.2.3	0x2aa8	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:39.511868954 CET	8.8.8.8	192.168.2.3	0x2aa2	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:39.820607901 CET	8.8.8.8	192.168.2.3	0xead0	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:39.820607901 CET	8.8.8.8	192.168.2.3	0xead0	No error (0)	ntp1.glb.nist.gov		132.163.97.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:40.535607100 CET	8.8.8.8	192.168.2.3	0x2314	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:40.839840889 CET	8.8.8.8	192.168.2.3	0xcece	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:41.148196936 CET	8.8.8.8	192.168.2.3	0x3a10	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:41.454782963 CET	8.8.8.8	192.168.2.3	0xbb2c	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:41.454782963 CET	8.8.8.8	192.168.2.3	0xbb2c	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:42.172485113 CET	8.8.8.8	192.168.2.3	0xe9b1	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:42.479484081 CET	8.8.8.8	192.168.2.3	0x3426	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:42.794970989 CET	8.8.8.8	192.168.2.3	0x47bb	No error (0)	justpaste.it		51.83.143.177	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:43.264826059 CET	8.8.8.8	192.168.2.3	0xa8db	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:43.571499109 CET	8.8.8.8	192.168.2.3	0xd234	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:44.249747992 CET	8.8.8.8	192.168.2.3	0xe8c2	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:44.559381008 CET	8.8.8.8	192.168.2.3	0x85a3	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:45.259538889 CET	8.8.8.8	192.168.2.3	0xb4fd	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:45.566978931 CET	8.8.8.8	192.168.2.3	0x3d7a	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:45.876835108 CET	8.8.8.8	192.168.2.3	0x4417	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:46.184658051 CET	8.8.8.8	192.168.2.3	0xda34	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:46.184658051 CET	8.8.8.8	192.168.2.3	0xda34	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:46.875756979 CET	8.8.8.8	192.168.2.3	0x6d74	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:47.179236889 CET	8.8.8.8	192.168.2.3	0x50e2	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:47.485949039 CET	8.8.8.8	192.168.2.3	0x1e44	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:47.793827057 CET	8.8.8.8	192.168.2.3	0xcb0f	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:47.793827057 CET	8.8.8.8	192.168.2.3	0xcb0f	No error (0)	ntp1.glb.nist.gov		132.163.96.2	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:48.505131960 CET	8.8.8.8	192.168.2.3	0x301f	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:48.816803932 CET	8.8.8.8	192.168.2.3	0xa60f	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:49.130762100 CET	8.8.8.8	192.168.2.3	0x604	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:49.437680006 CET	8.8.8.8	192.168.2.3	0xcbb6	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:49.437680006 CET	8.8.8.8	192.168.2.3	0xcbb6	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:50.157699108 CET	8.8.8.8	192.168.2.3	0xdee6	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:50.464699030 CET	8.8.8.8	192.168.2.3	0xff73	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:50.769280910 CET	8.8.8.8	192.168.2.3	0x9ede	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:51.077056885 CET	8.8.8.8	192.168.2.3	0x4d63	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:51.077056885 CET	8.8.8.8	192.168.2.3	0x4d63	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:51.788038015 CET	8.8.8.8	192.168.2.3	0x1d5c	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:52.101433992 CET	8.8.8.8	192.168.2.3	0xfc96	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:52.408966064 CET	8.8.8.8	192.168.2.3	0x9fd3	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:52.719074965 CET	8.8.8.8	192.168.2.3	0x3397	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:52.719074965 CET	8.8.8.8	192.168.2.3	0x3397	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:53.941390991 CET	8.8.8.8	192.168.2.3	0xa3da	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:54.250564098 CET	8.8.8.8	192.168.2.3	0x88e9	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:55.650684118 CET	8.8.8.8	192.168.2.3	0x1bf7	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:55.957782030 CET	8.8.8.8	192.168.2.3	0xf37e	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:55.957782030 CET	8.8.8.8	192.168.2.3	0xf37e	No error (0)	ntp1.glb.nist.gov		132.163.97.2	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:56.295495033 CET	8.8.8.8	192.168.2.3	0xcc6c	No error (0)	justpaste.it		51.83.143.177	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:56.940423965 CET	8.8.8.8	192.168.2.3	0x2b53	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:57.253390074 CET	8.8.8.8	192.168.2.3	0xee0e	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:57.562818050 CET	8.8.8.8	192.168.2.3	0xf713	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:57.877495050 CET	8.8.8.8	192.168.2.3	0xa906	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:57.877495050 CET	8.8.8.8	192.168.2.3	0xa906	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:58.576771975 CET	8.8.8.8	192.168.2.3	0x3e9	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:58.887026072 CET	8.8.8.8	192.168.2.3	0xba74	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:59.191616058 CET	8.8.8.8	192.168.2.3	0xb973	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:28:59.497251034 CET	8.8.8.8	192.168.2.3	0x5d0b	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:28:59.497251034 CET	8.8.8.8	192.168.2.3	0x5d0b	No error (0)	ntp1.glb.nist.gov		132.163.97.4	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:00.191183090 CET	8.8.8.8	192.168.2.3	0xcd15	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:00.499985933 CET	8.8.8.8	192.168.2.3	0xf62f	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:00.806318045 CET	8.8.8.8	192.168.2.3	0xbf1	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:01.118156910 CET	8.8.8.8	192.168.2.3	0xbda1	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:01.118156910 CET	8.8.8.8	192.168.2.3	0xbda1	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:01.830852985 CET	8.8.8.8	192.168.2.3	0xac9	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:02.142709017 CET	8.8.8.8	192.168.2.3	0x5701	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:02.448404074 CET	8.8.8.8	192.168.2.3	0x89cd	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:02.758743048 CET	8.8.8.8	192.168.2.3	0xf189	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:02.758743048 CET	8.8.8.8	192.168.2.3	0xf189	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:03.516767025 CET	8.8.8.8	192.168.2.3	0x281b	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:03.831502914 CET	8.8.8.8	192.168.2.3	0x862b	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:04.502985954 CET	8.8.8.8	192.168.2.3	0xef6e	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:04.810429096 CET	8.8.8.8	192.168.2.3	0x78cc	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:05.491266966 CET	8.8.8.8	192.168.2.3	0xa418	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:05.800704956 CET	8.8.8.8	192.168.2.3	0xef22	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:06.106966972 CET	8.8.8.8	192.168.2.3	0x64bf	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:06.418299913 CET	8.8.8.8	192.168.2.3	0xa22	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:06.418299913 CET	8.8.8.8	192.168.2.3	0xa22	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:07.124828100 CET	8.8.8.8	192.168.2.3	0xdcea	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:07.432776928 CET	8.8.8.8	192.168.2.3	0x87c0	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:07.743671894 CET	8.8.8.8	192.168.2.3	0xacee	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:08.047772884 CET	8.8.8.8	192.168.2.3	0x42ef	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:08.047772884 CET	8.8.8.8	192.168.2.3	0x42ef	No error (0)	ntp1.glb.nist.gov		128.138.140.44	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:08.383797884 CET	8.8.8.8	192.168.2.3	0x6db3	No error (0)	justpaste.it		51.83.143.177	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:08.790976048 CET	8.8.8.8	192.168.2.3	0x4e71	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:09.096143961 CET	8.8.8.8	192.168.2.3	0x907b	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:09.404108047 CET	8.8.8.8	192.168.2.3	0x238a	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:09.714718103 CET	8.8.8.8	192.168.2.3	0xd3fb	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:09.714718103 CET	8.8.8.8	192.168.2.3	0xd3fb	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:10.426755905 CET	8.8.8.8	192.168.2.3	0xfb1d	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:10.731374979 CET	8.8.8.8	192.168.2.3	0xdb28	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:11.036099911 CET	8.8.8.8	192.168.2.3	0x124c	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:11.349204063 CET	8.8.8.8	192.168.2.3	0x523	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:11.349204063 CET	8.8.8.8	192.168.2.3	0x523	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:12.085308075 CET	8.8.8.8	192.168.2.3	0xacab	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:12.391235113 CET	8.8.8.8	192.168.2.3	0x429d	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:12.699044943 CET	8.8.8.8	192.168.2.3	0x84f7	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:13.003492117 CET	8.8.8.8	192.168.2.3	0x80d3	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:13.003492117 CET	8.8.8.8	192.168.2.3	0x80d3	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:13.709700108 CET	8.8.8.8	192.168.2.3	0x9004	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:14.408236027 CET	8.8.8.8	192.168.2.3	0xe033	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:15.072272062 CET	8.8.8.8	192.168.2.3	0x8864	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:15.379784107 CET	8.8.8.8	192.168.2.3	0x1707	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:15.685614109 CET	8.8.8.8	192.168.2.3	0x3c62	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:15.994503975 CET	8.8.8.8	192.168.2.3	0x4583	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:15.994503975 CET	8.8.8.8	192.168.2.3	0x4583	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:16.696820021 CET	8.8.8.8	192.168.2.3	0xe973	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:17.002531052 CET	8.8.8.8	192.168.2.3	0x9af6	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:17.309278965 CET	8.8.8.8	192.168.2.3	0xf83c	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:17.616199017 CET	8.8.8.8	192.168.2.3	0xe635	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:17.616199017 CET	8.8.8.8	192.168.2.3	0xe635	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:18.310167074 CET	8.8.8.8	192.168.2.3	0xd7a9	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:18.617275953 CET	8.8.8.8	192.168.2.3	0xf103	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:18.928997993 CET	8.8.8.8	192.168.2.3	0x6137	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:19.237869978 CET	8.8.8.8	192.168.2.3	0x7c8e	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:19.237869978 CET	8.8.8.8	192.168.2.3	0x7c8e	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:19.568542004 CET	8.8.8.8	192.168.2.3	0x1ed2	No error (0)	justpaste.it		51.83.143.177	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:19.965058088 CET	8.8.8.8	192.168.2.3	0xee1	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:20.269874096 CET	8.8.8.8	192.168.2.3	0xb521	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:20.574217081 CET	8.8.8.8	192.168.2.3	0x5047	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:20.880594015 CET	8.8.8.8	192.168.2.3	0x143e	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:20.880594015 CET	8.8.8.8	192.168.2.3	0x143e	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:21.210407019 CET	8.8.8.8	192.168.2.3	0xdef5	No error (0)	time.google.com		216.239.35.4	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:21.210407019 CET	8.8.8.8	192.168.2.3	0xdef5	No error (0)	time.google.com		216.239.35.12	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:21.210407019 CET	8.8.8.8	192.168.2.3	0xdef5	No error (0)	time.google.com		216.239.35.8	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:21.210407019 CET	8.8.8.8	192.168.2.3	0xdef5	No error (0)	time.google.com		216.239.35.0	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

justpaste.it

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49752	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	Direction	Data
2022-02-08 07:27:54 UTC	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it Connection: Keep-Alive
2022-02-08 07:27:54 UTC	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:27:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:27:54 UTC	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49754	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:27:55 UTC	6	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:27:55 UTC	6	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:27:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:27:55 UTC	6	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.3	49785	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:07 UTC	65	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:07 UTC	65	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:07 UTC	65	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.3	49788	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:08 UTC	71	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:08 UTC	71	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:08 UTC	72	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.3	49793	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:09 UTC	78	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:09 UTC	78	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:09 UTC	78	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.3	49798	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:10 UTC	84	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:10 UTC	84	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:10 UTC	85	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.3	49803	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:12 UTC	91	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:12 UTC	91	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:12 UTC	91	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.3	49808	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:14 UTC	98	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:14 UTC	98	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:14 UTC	98	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.3	49813	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:15 UTC	104	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:15 UTC	104	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:15 UTC	104	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.3	49818	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:17 UTC	111	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:17 UTC	111	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:17 UTC	111	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.3	49823	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:19 UTC	117	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:19 UTC	117	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:19 UTC	117	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.3	49828	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:20 UTC	124	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:20 UTC	124	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:20 UTC	124	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.3	49756	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:27:55 UTC	13	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:27:55 UTC	13	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:27:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:27:55 UTC	13	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.3	49833	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:22 UTC	130	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:22 UTC	130	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:22 UTC	131	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.3	49838	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:23 UTC	137	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:24 UTC	137	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:24 UTC	137	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.3	49843	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:25 UTC	143	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:25 UTC	143	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:25 UTC	144	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.3	49848	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:27 UTC	150	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:27 UTC	150	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:27 UTC	150	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.3	49853	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:28 UTC	156	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:29 UTC	156	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:29 UTC	157	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.3	49858	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:30 UTC	163	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:30 UTC	163	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:30 UTC	163	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.3	49864	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:32 UTC	169	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:32 UTC	169	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:32 UTC	170	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.3	49869	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:33 UTC	176	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:33 UTC	176	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:33 UTC	176	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.3	49874	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:36 UTC	182	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:37 UTC	182	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:37 UTC	183	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.3	49881	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:38 UTC	189	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:38 UTC	189	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:38 UTC	189	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.3	49759	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:27:56 UTC	19	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:27:56 UTC	19	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:27:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:27:56 UTC	20	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.3	49892	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:40 UTC	195	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:40 UTC	195	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:40 UTC	196	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.3	49906	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:41 UTC	202	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:42 UTC	202	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:42 UTC	202	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.3	49913	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:42 UTC	209	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:43 UTC	209	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:43 UTC	209	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.3	49921	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:43 UTC	215	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:44 UTC	215	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:44 UTC	215	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.3	49929	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:44 UTC	222	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:45 UTC	222	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:45 UTC	222	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.3	49937	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:46 UTC	228	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:46 UTC	228	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:46 UTC	229	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.3	49942	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:48 UTC	235	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:48 UTC	235	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:48 UTC	235	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.3	49947	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:49 UTC	241	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:49 UTC	241	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:49 UTC	242	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.3	49952	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:51 UTC	248	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:51 UTC	248	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:51 UTC	248	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.3	49957	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:53 UTC	254	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:53 UTC	254	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:53 UTC	255	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.3	49762	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:27:57 UTC	26	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:27:57 UTC	26	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:27:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:27:57 UTC	26	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.3	49967	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:56 UTC	261	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:56 UTC	261	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:56 UTC	261	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.3	49972	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:58 UTC	267	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:58 UTC	267	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:58 UTC	268	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.3	49977	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:59 UTC	274	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:00 UTC	274	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:00 UTC	274	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.3	49982	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:01 UTC	280	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:01 UTC	280	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:01 UTC	281	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.3	49987	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:03 UTC	287	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:03 UTC	287	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:03 UTC	287	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.3	49990	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:04 UTC	293	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:04 UTC	293	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:04 UTC	294	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.3	49993	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:05 UTC	300	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:05 UTC	300	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:05 UTC	300	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.3	49998	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:06 UTC	306	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:06 UTC	307	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:06 UTC	307	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.3	50005	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:08 UTC	313	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:08 UTC	313	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:08 UTC	313	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.3	50017	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:10 UTC	320	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:10 UTC	320	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:10 UTC	320	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.3	49765	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:27:58 UTC	32	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:27:59 UTC	32	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:27:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:27:59 UTC	33	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.3	50030	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:11 UTC	326	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:11 UTC	326	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:11 UTC	326	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.3	50041	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:13 UTC	333	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:13 UTC	333	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:13 UTC	333	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.2.3	50043	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:14 UTC	339	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:14 UTC	339	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:14 UTC	340	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.3	50045	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:14 UTC	346	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:14 UTC	346	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:14 UTC	346	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.2.3	50050	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:16 UTC	352	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:16 UTC	352	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:16 UTC	353	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.3	50055	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:18 UTC	359	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:18 UTC	359	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:18 UTC	359	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.2.3	50060	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:19 UTC	365	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:19 UTC	365	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:19 UTC	366	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.3	49769	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:00 UTC	39	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:00 UTC	39	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:00 UTC	39	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.3	49773	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:01 UTC	45	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:02 UTC	45	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:02 UTC	46	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.3	49777	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:04 UTC	52	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:04 UTC	52	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:04 UTC	52	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.3	49782	51.83.143.177	443	C:\Users\user\Desktop\QP6s4u5SZ8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:28:06 UTC	58	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:28:06 UTC	58	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:28:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:28:06 UTC	59	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

System Behavior

Analysis Process: QP6s4u5SZ8.exePID: 6588, Parent PID: 1716

General

Target ID:	0
Start time:	08:27:45
Start date:	08/02/2022
Path:	C:\Users\user\Desktop\QP6s4u5SZ8.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\QP6s4u5SZ8.exe"
Imagebase:	0x7a0000
File size:	646144 bytes
MD5 hash:	535B08CFD5BB887FDA074D3FF3E5F34F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	low

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: QP6s4u5SZ8.exePID: 6588, Parent PID: 1716COMMON

Executed Functions

Function 00007FFC082F0BCD Relevance: .7, Instructions: 661COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9d07fb6f9c79a18200e8e851d9c843eb903fb6bb144cd62b629cc9923b8a1df
Instruction ID: 8b13f19dba5c24165afb2e0f1bbb31590383f8ed285152a9b8628fecc43bf2f3
Opcode Fuzzy Hash: c9d07fb6f9c79a18200e8e851d9c843eb903fb6bb144cd62b629cc9923b8a1df
Instruction Fuzzy Hash: C712E23190C97F8FE768DA188845AB877D1EF85311B4482B9D45EC76D3DE28BC07CAA4

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F52A6 Relevance: .5, Instructions: 475COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e33be92708ac0a78efc4120c5d134a946a70d45c09c83a33daa839ff93f639c
Instruction ID: a24ddc091ff03e368138193634d9837c46f5bc64c1a5de643bdd3ef6a55c6fa4
Opcode Fuzzy Hash: 6e33be92708ac0a78efc4120c5d134a946a70d45c09c83a33daa839ff93f639c
Instruction Fuzzy Hash: 18F1A430908A9E8FEBA8DF28C8567E937D1FF55311F04827ED84DC7292DA749845CB92

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F6052 Relevance: .5, Instructions: 460COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ebf0b7b1e646980b5ffd62bdaafb9d415bf3db40093867fe8f18b572b4e39f6d
Instruction ID: 3c1bb500470a4b56690b01f81e3694643f64f9e8d608e3f179d629461ce9935a
Opcode Fuzzy Hash: ebf0b7b1e646980b5ffd62bdaafb9d415bf3db40093867fe8f18b572b4e39f6d
Instruction Fuzzy Hash: 88E1A130508A9E8FEBA8DF28C8567E93BE1EF55311F04827ED84DC7292DE749845CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F0797 Relevance: 1.3, Strings: 1, Instructions: 90COMMON

Download Yara Rule

Strings

jt$f, xrefs: 00007FFC082F0738

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID: jt$f
API String ID: 0-1931357500
Opcode ID: 9f94d8971209688d4260fb071a8e03d3a9eaa18a76470013f27500a50dd10718
Instruction ID: c75a99ff367dcdc536554785191104d7efa565e2500fbbcc054ed17a5aafd049
Opcode Fuzzy Hash: 9f94d8971209688d4260fb071a8e03d3a9eaa18a76470013f27500a50dd10718
Instruction Fuzzy Hash: B531E774D0892F9EEBA8DA48C8507BDB7B1FB68301F1085BAC01DE2282DB346985CF54

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F185B Relevance: 1.3, Strings: 1, Instructions: 28COMMON

Download Yara Rule

Strings

$^_, xrefs: 00007FFC082F185D

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID: $^_
API String ID: 0-1300324870
Opcode ID: a3b04efeadc9be7355a31d5b6d97daac43df5e46d103219eab2c594b9b256c18
Instruction ID: 532320bc33f30d0fba203f1bceb4b34150cbb85d0277e8e8f64fb62407546ae3
Opcode Fuzzy Hash: a3b04efeadc9be7355a31d5b6d97daac43df5e46d103219eab2c594b9b256c18
Instruction Fuzzy Hash: C6F08271E0C9AE8FEB56C718446437C7FE1AF59250F5444B9C08EE72D7C9286807C716

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F1468 Relevance: .4, Instructions: 437COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 197e6c00a0ad3d74b9f3318099768e3fb1740270bed22c704aae21a150dd2a02
Instruction ID: 96c6511da9e1b4aaf16a2f41314634444c4f8f4c9e64802a21d143da8867b8b4
Opcode Fuzzy Hash: 197e6c00a0ad3d74b9f3318099768e3fb1740270bed22c704aae21a150dd2a02
Instruction Fuzzy Hash: 9CE16C67D0D2F7DEEA13A72968A50E53F90DF53264B4944B3C0C88A0E3ED19285BC769

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F0357 Relevance: .4, Instructions: 361COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7644bb700a653587ada76a2305e378a16cc37a2a302100868a5f389bdcc4b973
Instruction ID: b228c6e5a3b5953b03be890a7d1015bad3cea8ff4c1f1692f29497bc02ce7ac0
Opcode Fuzzy Hash: 7644bb700a653587ada76a2305e378a16cc37a2a302100868a5f389bdcc4b973
Instruction Fuzzy Hash: E851FA7190D9AE8FDB44DB1898646E87FA1FF99310F0405BAC08DD71D3DF68684ACB68

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F5C66 Relevance: .3, Instructions: 333COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc7d21b3bfd1f92e6120a547a6b5f999799ce0a9378f6511f9bc92e55d94d2a9
Instruction ID: 3b0755e73e4c57d06f7f8fec70a9d21b3995f18e27096ed75974f46c6dd13894
Opcode Fuzzy Hash: dc7d21b3bfd1f92e6120a547a6b5f999799ce0a9378f6511f9bc92e55d94d2a9
Instruction Fuzzy Hash: 33B1C57050CA8E8FDB69DF2888567E93BE0EF55311F04827EE84DC7292CA749845CB92

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F91C2 Relevance: .3, Instructions: 317COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 056ecac30ff5752bf9f02d361d5b468b2bc674ae7515453e87ec0d0ee0a06eb9
Instruction ID: 7b80843d0b7ac5ec58d05cd4ace557b31a24dc9bcfeb9914a8704f5ba3a536af
Opcode Fuzzy Hash: 056ecac30ff5752bf9f02d361d5b468b2bc674ae7515453e87ec0d0ee0a06eb9
Instruction Fuzzy Hash: 89A1A431A1CA2E8FDB88EF18D499AA4B7E1FF59310B0441B9D04EC7192DE24BC85CB55

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F8806 Relevance: .3, Instructions: 270COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a76dbbdf4356f5053fbda72395d01b8ad831fdfc3ec3bb117d3d66e725b6a314
Instruction ID: 849b8e19e0be66046112bae0a09182ce411c00b5b13132d30eb9d159c3ec584a
Opcode Fuzzy Hash: a76dbbdf4356f5053fbda72395d01b8ad831fdfc3ec3bb117d3d66e725b6a314
Instruction Fuzzy Hash: 5B91C13161CA6A8FDF48EB28D496DA5B7E1FF69310B0545B9C00BC7293DE24F846CB85

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F6883 Relevance: .3, Instructions: 255COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8974e81f345c80863cbb3430579d4cce70b29d9aa070e4bccd441fff4db8e15f
Instruction ID: fb06285818c701cb4a2a5bd33d995a9b053c2473b52c115a0ea4638807ff9bec
Opcode Fuzzy Hash: 8974e81f345c80863cbb3430579d4cce70b29d9aa070e4bccd441fff4db8e15f
Instruction Fuzzy Hash: B981843161892ECFEF89EB18C065AB873E1FF68351B0445B9D00EC72D2DE28AC45CB95

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F0995 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4caf3f0001afbb2ca9cf4943dd3aa4950ff1a930ea5775fc1cc5e0e677682681
Instruction ID: fa2579d950f308162e4c3e29c152be689d496c1020a9758ea224330782128a04
Opcode Fuzzy Hash: 4caf3f0001afbb2ca9cf4943dd3aa4950ff1a930ea5775fc1cc5e0e677682681
Instruction Fuzzy Hash: 0C718C7191CA6F8EEBA8DB64C4546B9BBE1EF49310F50457AC00ED71D3EF286842CB24

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F2BAA Relevance: .2, Instructions: 184COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b18cd78372de8917b4eb2460126d6da7bf35eeed26586d4c8c39b0ccb7e1fbe3
Instruction ID: d900cf1d2797c01195af34000119609044b550f2713a1fecd61e4c2605778b64
Opcode Fuzzy Hash: b18cd78372de8917b4eb2460126d6da7bf35eeed26586d4c8c39b0ccb7e1fbe3
Instruction Fuzzy Hash: 1E513C30918A5C8FDB98DB58D855BE9BBF1FF59310F0082AAD44DE3252CE34A985CF81

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F7A85 Relevance: .2, Instructions: 179COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1314a60d548ee80be9eac87b84dd70fce5e83ceaf56cf87a08ae2fb010d03c0
Instruction ID: 33cec4762b49dcd417881d7be9d8512ef456a6ea6c8a09de219b09b4edadcc83
Opcode Fuzzy Hash: f1314a60d548ee80be9eac87b84dd70fce5e83ceaf56cf87a08ae2fb010d03c0
Instruction Fuzzy Hash: D3515C3190C9AF8FEB85E728D4646B47BA0FF96310B1944B9C04DC71D3DD28AC46C769

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F18A0 Relevance: .2, Instructions: 177COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 525042531de32f576adc1ea9726f8dfaa0c4a745403490a33620da724c43dc22
Instruction ID: 709b67dab6b23fc845a70ab5ce5aab1511585cb7a0699d994dff33255a4c5f7e
Opcode Fuzzy Hash: 525042531de32f576adc1ea9726f8dfaa0c4a745403490a33620da724c43dc22
Instruction Fuzzy Hash: 5751B43150C96ACFDF89EB18C4A9EA477A0FF69350B0946B9C04EC71D3CE24E845CB99

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F6E15 Relevance: .2, Instructions: 165COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01963012e423f48974151092ba5902dac0b905f47187b60ead269c1b1e0d61b9
Instruction ID: e08fa2e6f2e4a1a7cddb94809dfb06ed8445e6a5d524318992080c15649b8e62
Opcode Fuzzy Hash: 01963012e423f48974151092ba5902dac0b905f47187b60ead269c1b1e0d61b9
Instruction Fuzzy Hash: B841613291CA3E8FDF68DB18C4959B977A0EF68350B54817AD00FD71C2CA24AC01CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F1BA1 Relevance: .2, Instructions: 164COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce0f516d4449fce4a4f5d6c252c7e4a75ac971d89d32e1e7090134f8fd17c472
Instruction ID: c41f69ea2311738149d82ec43a9dfe8cb3a307857f1a69c0a9ef682e1f3e450d
Opcode Fuzzy Hash: ce0f516d4449fce4a4f5d6c252c7e4a75ac971d89d32e1e7090134f8fd17c472
Instruction Fuzzy Hash: 42514230A1892ECFEB85E72CC0566F977E2FF99311B5540B4D44EC72A2DE68AC42CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F1B94 Relevance: .2, Instructions: 164COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbbb402d2b916ddbc2f026edce0c53329a91509b5adcb94cddefce1fe825e7ad
Instruction ID: 0b0a41161e3eaf8849e8fc5c0b074913cb2d6afaed06064df9c11f56faa88269
Opcode Fuzzy Hash: dbbb402d2b916ddbc2f026edce0c53329a91509b5adcb94cddefce1fe825e7ad
Instruction Fuzzy Hash: 6A510A30A1892ECFEB95E72CC0556B977E2FF98301B944079D44EC72D2DE29AC42CB54

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F786B Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 05a824f942fa11f2802e8b79c6f778b143d8e2d62c49efb993014e1f139b8409
Instruction ID: 65c92679fc2043fe881a3c36dadafd3ad0963f204c2f3f19662e8bfab53081d2
Opcode Fuzzy Hash: 05a824f942fa11f2802e8b79c6f778b143d8e2d62c49efb993014e1f139b8409
Instruction Fuzzy Hash: 9F317363D0E2BE9FEB01A729A8A50F97FE0DF86210B1445F7D44CCA0A3ED185D4EC265

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F05A2 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3ae921c2397c845132f92d478d2c499754f487713857dbfab42b3b404b5c51b3
Instruction ID: 5b1b975d949b798f07ac9ed4cb78556046e7bda72af382b32a270ff05214d9a5
Opcode Fuzzy Hash: 3ae921c2397c845132f92d478d2c499754f487713857dbfab42b3b404b5c51b3
Instruction Fuzzy Hash: FB31957190CAAD8FDB99DB18C464AE8BBA1FF59310F0405BED04DE7193CE685845CB29

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F0587 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6cb0a8dee69a004274212d4a32e83814549d72ce0a5c6139cd0a811510a20867
Instruction ID: 75e5096077ae1b7dea26985980894a4c936daa20147fc3aacd6d29b5ead3d291
Opcode Fuzzy Hash: 6cb0a8dee69a004274212d4a32e83814549d72ce0a5c6139cd0a811510a20867
Instruction Fuzzy Hash: 4E31847190CAAD8FDB99DB18C464AE8BBE1FF59310F0405BED04DE72D3CA685844CB29

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F6E30 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6cf43684221a81dd4c377f16474cdeccedbe373e419ecfadb7f8b723a8097abf
Instruction ID: 894b93dc8cc95b7f9d798eb141fc893dfe9b8c8be2f473b5336c6e881660a13c
Opcode Fuzzy Hash: 6cf43684221a81dd4c377f16474cdeccedbe373e419ecfadb7f8b723a8097abf
Instruction Fuzzy Hash: 67215E3291C93ECFDF64DB18D895A7577A0FF68350B554179D00ED32C2CA25AC01CBA9

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F8B9E Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8e301659f8de725afbf41cbe6286dbf37e5a8129f2d1f7ee22986d2f98b377f
Instruction ID: d41388134f77623d1e2f6aa19e56206759471d85475f1fb2905121b9a5e78d68
Opcode Fuzzy Hash: e8e301659f8de725afbf41cbe6286dbf37e5a8129f2d1f7ee22986d2f98b377f
Instruction Fuzzy Hash: 52219F6080D6BF8FE35A86288811534FBD0AF46390B1886B6C84DC71D3D9286843C7BA

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F86FD Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3375126dee603454e145a75f7bb9af373ac9a71cf06263baa7907e0e81b95694
Instruction ID: 02a04fe0133e89bb4152d33fd98dfa4bef0b1cabfe8ecffca0592697a127428e
Opcode Fuzzy Hash: 3375126dee603454e145a75f7bb9af373ac9a71cf06263baa7907e0e81b95694
Instruction Fuzzy Hash: 14216D6584E3EA6FD35747304C246A1BFA4AF43360B0A81FBD0888A4E3CA48541BC7B3

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F7975 Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 96f61afce45550b133e3ff61d2c3ca81a4f35beaff1dfa0877032132cfaa20ee
Instruction ID: 0916f78293dc5395b332dff177d0ab52154f4e59939b8ea84a287d9e863162ff
Opcode Fuzzy Hash: 96f61afce45550b133e3ff61d2c3ca81a4f35beaff1dfa0877032132cfaa20ee
Instruction Fuzzy Hash: 7221843040D6EA8FEB958B24C864A757BB0FF56310F4945BED04ACB1D3DA286845CB6A

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F683A Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 47e673d0374b1049a41b0c71e7d0d34adf64ea9fec3ed0c22319d3f380fc2494
Instruction ID: 54838a7a77d4ac2fbbb6a6320b3b2cf0c43338efc2790f7340b9726b8c548a22
Opcode Fuzzy Hash: 47e673d0374b1049a41b0c71e7d0d34adf64ea9fec3ed0c22319d3f380fc2494
Instruction Fuzzy Hash: A3116321A1CD3ECBEA99E72880651B973D2FF993407104578C04ED36D3DD28AC02CB95

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F90C8 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8dbe71c1fa811f6780155618540007f7cda38de73f34ad06e066a11cfe66c551
Instruction ID: ec6c485c105bf571755b291d99dd324a8c697c74ef9e48edbd80dde4a9aae9e3
Opcode Fuzzy Hash: 8dbe71c1fa811f6780155618540007f7cda38de73f34ad06e066a11cfe66c551
Instruction Fuzzy Hash: 77110A60B2D92A8BEB44E72DC4E2B7976C6EF9C740F414875D00DC3AC6CC28BC4187A2

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F1069 Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec9f98558773af84acf373b8463e92069d498ca3befa01ce93d850169f4f181c
Instruction ID: 890cb24f4013a6e369f8937b078726afdc0d750233d630a0e853dff7b50fe4ef
Opcode Fuzzy Hash: ec9f98558773af84acf373b8463e92069d498ca3befa01ce93d850169f4f181c
Instruction Fuzzy Hash: 81111E31A08A1C8FDB98DF1CD485AADB7E1FB99311F0041ABE04ED7662DE31AC41CB44

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F67FB Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ec4fc75a3c3c1f92c05c4a99a5f30fb7e1df1ecb11921631db1483725ea47e8
Instruction ID: db64fb1ee3ed8dc0a14b5c4c721b2139c578d0514404387ff264adcb6cd46ca5
Opcode Fuzzy Hash: 0ec4fc75a3c3c1f92c05c4a99a5f30fb7e1df1ecb11921631db1483725ea47e8
Instruction Fuzzy Hash: 4201E161D0C6BFDFFB65962888A41B97BA0EF95360F0445BAD04DC31C3CC28680AC3A9

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F1012 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79e7619ef7638fef97a02f3370debb19091515bd98057a4f2b24dda64b3e658c
Instruction ID: 268388aa1544693700f58ba2283eb6f6e2e6fb517366cfe2b3ca2db6d549efe3
Opcode Fuzzy Hash: 79e7619ef7638fef97a02f3370debb19091515bd98057a4f2b24dda64b3e658c
Instruction Fuzzy Hash: 26015E31A0C6188FD758DB1DE4466ADB3E1FB89221F00427BE09ED3662CE21A8528B45

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F0088 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 420e842089e61694b6ac414a57ad64062b356688282c4455282f1ad6832539f0
Instruction ID: 43472bbe43a188c423dd1342e8c03e8518e4d17bd9e4ef013334feef7a585cf9
Opcode Fuzzy Hash: 420e842089e61694b6ac414a57ad64062b356688282c4455282f1ad6832539f0
Instruction Fuzzy Hash: C301296191D93F8FE6A8D6188451A78E2D0BF58390F648975D80EC72C3DD28B882D7AD

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F1D1C Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 86c600a81dbc544801428a9c7ed6fb296a5dbc641ce7d6504967987c27325ca7
Instruction ID: 98ffe06c9178ea107d0561b2414d52cdfd6e7f19c32680c90d44fc9e20b7ff44
Opcode Fuzzy Hash: 86c600a81dbc544801428a9c7ed6fb296a5dbc641ce7d6504967987c27325ca7
Instruction Fuzzy Hash: 9D01E930A1883ECFDF95EB589051AFD73A1EF98300B804075D40ED72D2CE29A812DB65

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F0686 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d496d28df5a6c489c834528453651252e997ea0b4c7417e3b1d3117d2e459bd3
Instruction ID: 2b1f9741dbe58406e5f8bf833f5e790bc8f76a909288d97b584313f9bfc28173
Opcode Fuzzy Hash: d496d28df5a6c489c834528453651252e997ea0b4c7417e3b1d3117d2e459bd3
Instruction Fuzzy Hash: 4401E274D0892D8FDF98DF98C495AACBBB1FB68301F10416E800EE7691CB71A981DF40

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F9539 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76a9126e8c080e504cfb523d5ea766f949df457f09ef18bb4f7bd8c594815ce4
Instruction ID: 3086e04fe6959fb84e12f0357bf98dca6db46b5331a2f4fd25c2d318cd5c9648
Opcode Fuzzy Hash: 76a9126e8c080e504cfb523d5ea766f949df457f09ef18bb4f7bd8c594815ce4
Instruction Fuzzy Hash: C4F0E53110C60C5FEB08EA18EC4ADF677A8FB97334B00015EE14EC7022E222B963CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F06AB Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 505f679b2222746a159b535d6aa7e77f7dfb9bee7381a4be716bdad1be2bf1f8
Instruction ID: 5e0345b33afa8a1d5aab9bf714be41ce8592494b2c801a3b91977b2298b5d035
Opcode Fuzzy Hash: 505f679b2222746a159b535d6aa7e77f7dfb9bee7381a4be716bdad1be2bf1f8
Instruction Fuzzy Hash: 1B01C67090892D8FCFE8DF18C895BA9B7B1EB69301F5081D9814EE3691DB719E85CF41

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F184E Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4de31699675650323952a8ad1ce437e41399db21923d4ad4160663bf107c85d2
Instruction ID: fb323bbaa82ba69726029729ead654da4ffb2fd99e14ebf1f1c87347bbcacc72
Opcode Fuzzy Hash: 4de31699675650323952a8ad1ce437e41399db21923d4ad4160663bf107c85d2
Instruction Fuzzy Hash: B7E02262F1C92F8AF70A824C28501F933C6EB9A320F848136C40EC72C2EC18AC57D3E5

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F7F81 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 760ddad4d209c0cfb878e8bc73c05fd155d57eb88b6e650ee98b6a7cfb5a60de
Instruction ID: ffd9ced54539690f032db3e89cdf2372fb42f4597807e9ca96c66682bc408104
Opcode Fuzzy Hash: 760ddad4d209c0cfb878e8bc73c05fd155d57eb88b6e650ee98b6a7cfb5a60de
Instruction Fuzzy Hash: B9F05E32A4C53A8EEA5DA714E4918FA7360FF45360B558136D00BC70D3CE18B452C665

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F7CE3 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75a2daaebcd3c43343193139c9fc5b6db7d6cf5390811b43e556a127f5b6647f
Instruction ID: 0f212627da9385d7fb75afc9231a9b99d4da15b49ff6269fb684b9fc13711510
Opcode Fuzzy Hash: 75a2daaebcd3c43343193139c9fc5b6db7d6cf5390811b43e556a127f5b6647f
Instruction Fuzzy Hash: 43E0D821B0CC3F4FE694E55DB4555B86390EB943117508237C50FC61C6DE197887C398

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F67B0 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bbbeaea3370c5af07b30f8a67e01bb4bf95b59c602271765fbc558f0ef077bf5
Instruction ID: acb29ff397b4e587afba2078638c7f8aced275a11387beb650f2f167f273249b
Opcode Fuzzy Hash: bbbeaea3370c5af07b30f8a67e01bb4bf95b59c602271765fbc558f0ef077bf5
Instruction Fuzzy Hash: 8AF0E254C0D2FBAFE72697B0086A5EABFA4DF53310F0441B6E444C70D3D968541AC275

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F7FA5 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e5f73105bfe00d042fdaee32e6ef44a693d9dc38d1b24b34a782424b6cd0a12f
Instruction ID: 67a27898593a3cd0a31e1ace22fdc943bf9b0434bf362bdb1c9d54b14e5cf29a
Opcode Fuzzy Hash: e5f73105bfe00d042fdaee32e6ef44a693d9dc38d1b24b34a782424b6cd0a12f
Instruction Fuzzy Hash: 6DF05E2190C8BFCEEA58D7189464978B390EF49310B1586B9D04FC71D3CE196806CB29

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F1DD9 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d21a897947fad60890e0956181af7376b414a196feeb909d70e565ed5156b5a
Instruction ID: b1a9437c996af1b1ecd04a960f515cf9f3f0f95479cc0d6fccce6a1c86b3fdb1
Opcode Fuzzy Hash: 5d21a897947fad60890e0956181af7376b414a196feeb909d70e565ed5156b5a
Instruction Fuzzy Hash: F3E02B30808A5D8FDB01EB54D4045D4BBA4FB49716F8400BED40CC7092D3365455C755

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F7F35 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d29c14d1a782a91264672db25fef0b10c0a9b19bd2964a08e51a7787f4c8bc56
Instruction ID: 9158d1b5d790bf889be56d5e974b74d6740fa4b8be697d31ad9bdeaa20ff7316
Opcode Fuzzy Hash: d29c14d1a782a91264672db25fef0b10c0a9b19bd2964a08e51a7787f4c8bc56
Instruction Fuzzy Hash: 61E09AA080E3EEAEDB3253200C095AA3F74EF53210F0A00BBE088C61C3D928141AC676

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F7E4E Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70c45696ab2560b0c002b6090c4115266942968ba809f75a288c55a3a8702c7f
Instruction ID: f56c50764aac4b8108cd1c7fed9cc10b9eafa2633cd1e92b2bc2f8eed4280f86
Opcode Fuzzy Hash: 70c45696ab2560b0c002b6090c4115266942968ba809f75a288c55a3a8702c7f
Instruction Fuzzy Hash: 38E0D831B0C86F8FEB94DA18A4915792392EB98310B9481B7C00ECB2C6DD299D43CF95

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F06D7 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1f6c58efb3ee5c84d71efefb08e8c06f742733fa28cd10891c7d38b1d2b141d9
Instruction ID: e8070afadf81983112b0d5aa73e3d0614b75ef6c972ae9f94bc535ede06b326c
Opcode Fuzzy Hash: 1f6c58efb3ee5c84d71efefb08e8c06f742733fa28cd10891c7d38b1d2b141d9
Instruction Fuzzy Hash: 63F0F27090992D8FDFA9DB08C854FA8B7B1FB68301F1042E9800EE3291DB319A95CF54

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F7EF9 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8adccc61eb6b64a44f63c5ac5ce69ff8dde3d62160925ea918f64760b739d9b2
Instruction ID: 11b68dcbae28f9bc15dcb2632fb1a9c81380595d38d4e7e1130b3a82ddb5ba6c
Opcode Fuzzy Hash: 8adccc61eb6b64a44f63c5ac5ce69ff8dde3d62160925ea918f64760b739d9b2
Instruction Fuzzy Hash: 06F0ED6144E7D68FCB07973888A58947FB0EE6721034A45DBC086CF5B3D51D589AC752

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F877F Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 330c8eb7ca2e2d68cd77e050a2808b4a6bd98bbd22a67d76a41c597612d5289a
Instruction ID: af3d3939ae41ded46e04632d9728570d89ee45b2c8e5d91ba84090c270ecbcb2
Opcode Fuzzy Hash: 330c8eb7ca2e2d68cd77e050a2808b4a6bd98bbd22a67d76a41c597612d5289a
Instruction Fuzzy Hash: F3E06D32A0C96ECFE750EB2888516A9B790FF48310F0905B5D08DC72DBDD28B805EB62

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F99FC Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52df4324120cf7a375ae07304e472280434f29af29cdf83cfaec9ebe19d068b5
Instruction ID: 768b4bf3fcdda515a6ed484012619579ea8c970da257aeba8ac1d22c9d9ce323
Opcode Fuzzy Hash: 52df4324120cf7a375ae07304e472280434f29af29cdf83cfaec9ebe19d068b5
Instruction Fuzzy Hash: 06E01A21A1C97F9FE6A4E61C801473469C1AF5C70075688B1945ED72DACD14EC45CB69

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F0956 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b05a93dafe425b61048aeddea8ff0da9f81b8a4fa7375e4a3e5e3c38879bdfdb
Instruction ID: a8fe5fc8bb0e74bbf84cfb57b153a0186b01c202018978069f52e319ef9702d7
Opcode Fuzzy Hash: b05a93dafe425b61048aeddea8ff0da9f81b8a4fa7375e4a3e5e3c38879bdfdb
Instruction Fuzzy Hash: F7F0303180E7EE8EF7169B7048654A97FB0AF42304F5880F7D449D61D3DB28160AD76A

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F077A Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed798675f26688095edcf82e16f4933be5398069b50df7f14a9f17a092d3f4d8
Instruction ID: f9b88ef4c2f1258e236b624b3d060c66800ead56ef9b1deb743d858e407ddaa7
Opcode Fuzzy Hash: ed798675f26688095edcf82e16f4933be5398069b50df7f14a9f17a092d3f4d8
Instruction Fuzzy Hash: 5EF01560D5887FCEEBA8DB188855BB966A0BF68300F6081B4801DD2597EE282D86DF51

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F85D2 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4367fac3c51c3ce8407e0decdbc47814fca01efeff8167b272e8260df6af2c78
Instruction ID: c45956d9f0a702eb80722c1919d459f244d2e9dd43a6e10b14d931baf23dcd59
Opcode Fuzzy Hash: 4367fac3c51c3ce8407e0decdbc47814fca01efeff8167b272e8260df6af2c78
Instruction Fuzzy Hash: CFE0863264C5194FEB0D9B18E045DE87350EF96370701007BC14BC7093DA15A551CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F00F0 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac6784122812c45eb5f25cf99b07649b26ead5f9eb3e31e3cd004dd62a22b871
Instruction ID: 88309dd6fd94e679b817a3b9cb4548c4d20369d4e15b885e349e72d885c140cb
Opcode Fuzzy Hash: ac6784122812c45eb5f25cf99b07649b26ead5f9eb3e31e3cd004dd62a22b871
Instruction Fuzzy Hash: E8D05E6081D57F6EE63066614C0AABB3968DF42610F104139F04E922C3D9143406C1B9

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F99EA Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b7f7177920629f1b9c11a6f322de12fa503bedf6bc8cb34a33d57f20d02c0cc
Instruction ID: 482dd9a12f3a15343ff2fbbd7b7187a958b22fc4094862a01e5961f55393ad83
Opcode Fuzzy Hash: 1b7f7177920629f1b9c11a6f322de12fa503bedf6bc8cb34a33d57f20d02c0cc
Instruction Fuzzy Hash: F7E0DF4180C6BFCAF361A7A084263B96FC09F56300F1408B5C14D8B6C3CC2C2086C7BB

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F17DB Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41741a7434e986a61db9cc6324153d9bb3be8147fdd5d41d52c885e856eeb8f0
Instruction ID: 5afdc9b081bb32f0d43997d27779da40acb552833c54af73647138db31b13443
Opcode Fuzzy Hash: 41741a7434e986a61db9cc6324153d9bb3be8147fdd5d41d52c885e856eeb8f0
Instruction Fuzzy Hash: EFD05E31908A7E8AD765955480003FD72A19B44310F00053A800EE32D2CE642456D7D2

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F75A3 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3787c1dd4d894cfbd25acf0a280ba0f1d1527a4ac08db3a10b4778dda2a43dd
Instruction ID: ef62ed4b32e471a81b877a9256f3fe1f8b9dace76057e756cafaac85cb257ccb
Opcode Fuzzy Hash: e3787c1dd4d894cfbd25acf0a280ba0f1d1527a4ac08db3a10b4778dda2a43dd
Instruction Fuzzy Hash: 5BD0121095E4BF4AE114A62558A20B87750AF41215FF588B7C04DC50C3DD0F2847D66A

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F6835 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 255b32c6adfde8a5dcf9a96d1c7391ed5dde4a638e75bf9a4d9e01ec68a102eb
Instruction ID: bb032c4a1219b8cdc42eb7e70dc6f8abc87517b82b0efe927e4b8548144b4ebb
Opcode Fuzzy Hash: 255b32c6adfde8a5dcf9a96d1c7391ed5dde4a638e75bf9a4d9e01ec68a102eb
Instruction Fuzzy Hash: 84C00220A08C2B9B9B55AA15805496AB3A1EB783047248578D00BC25C5DE24E556DB98

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F1D6C Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6caf1f1edf0b373ad2e610d69c2a17fb11ecc6b647385cba58c92ab37e6ebf4d
Instruction ID: e4589af517e146ebcec5755b2dd9bd3ee2b3ca75c8ff988ab6b1f9b6e447e5ba
Opcode Fuzzy Hash: 6caf1f1edf0b373ad2e610d69c2a17fb11ecc6b647385cba58c92ab37e6ebf4d
Instruction Fuzzy Hash: 48B09211E4C93ECAA8A1E12801592BC00C28F88318B5496B6D40EC22DBEC1C2C82D2A1

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F687A Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a2d0e831eb48b65539e6eb354690a3c172928034195d1635a126b6ce9827fd0d
Instruction ID: 48010699a81ae79378074c11edb8d959d9cf7812bb1b3383d3d8b9aa1aa1d600
Opcode Fuzzy Hash: a2d0e831eb48b65539e6eb354690a3c172928034195d1635a126b6ce9827fd0d
Instruction Fuzzy Hash: F4C04C1071C97BAFE5699B6844215BC6691AF59304B5548B5D10EC61C3DD086805D235

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F181F Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91659eac0609c59d0027d356c52776ca3a8abc7c8fcf65cfd745d5f219b0c2df
Instruction ID: 0ade263aa4cf40bbc84872447601cb204ab12441ec6034919ecd844ccfda8cad
Opcode Fuzzy Hash: 91659eac0609c59d0027d356c52776ca3a8abc7c8fcf65cfd745d5f219b0c2df
Instruction Fuzzy Hash: D4C04C1481D2F79FE7231B6548A10787FA48F07204B98C8F7D0C58B0DBC90E25AAE6B9

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F87B5 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 958dc419ec4d440d2388d7af57ac1e14f39eef1847c0ceba047cae3e0c2ba273
Instruction ID: 90bfecffecc10e8c515b04905f28c5499b3616ca23e1a2118ec5f9c851500b67
Opcode Fuzzy Hash: 958dc419ec4d440d2388d7af57ac1e14f39eef1847c0ceba047cae3e0c2ba273
Instruction Fuzzy Hash: D5B09240918A3F99A5606334000127880836B88280B608430D00EC61C3EC186402D128

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F99F7 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1f879c99db169765d673968661f6742ea6ee851bdbbd99f377fd8f21aad40eed
Instruction ID: 2152705d78f34f7bf438a4b2ef02ee859a774636e631824a3eb88d038087e339
Opcode Fuzzy Hash: 1f879c99db169765d673968661f6742ea6ee851bdbbd99f377fd8f21aad40eed
Instruction Fuzzy Hash: 7DB01208F1C83F59A4545214001037C48C19F4C744F70C434C00FC11C3DD0C2443D27C

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F7A3A Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d6dc589535261f47ba1040e0b0dc54ff0f5bd99d75cbc2197448d36c8e158f7d
Instruction ID: 69891594cf4f7ed6c3b79548476dd7b16f57d9e066f51f042962e3088574f2d9
Opcode Fuzzy Hash: d6dc589535261f47ba1040e0b0dc54ff0f5bd99d75cbc2197448d36c8e158f7d
Instruction Fuzzy Hash: C8B09B91C0C1B75DE3111A714D1117819505F27340F118077C445C15D3E9151116D63E

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F87B0 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 531a21b860e1fda973c454dd1d8c85e3d6cf723a15afe6eda8f71484d093e5ef
Instruction ID: 5823c0a4c02027fb45138715cf1dce533aecfd99f9cbceac9cf20fb9ba005d12
Opcode Fuzzy Hash: 531a21b860e1fda973c454dd1d8c85e3d6cf723a15afe6eda8f71484d093e5ef
Instruction Fuzzy Hash: FBA00105E1CA7F95E9A462A4041927D80829F44200B64C535E40FD62CBEE6C6487E56D

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFC082F1D0F Relevance: .0, Instructions: 2COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.560506978.00007FFC082F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC082F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc082f0000_QP6s4u5SZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f20dadd4fb291598fbfbba543428cf76cee9947656cd5d64723f14737e70614
Instruction ID: 27115420ef809b56d239705e39912e5c62d3eb8961e90cc5032ef4355c67f784
Opcode Fuzzy Hash: 8f20dadd4fb291598fbfbba543428cf76cee9947656cd5d64723f14737e70614
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to achieve execution. WMI is a Windows administration feature that provides a uniform environment for local and remote access to Windows system components. It relies on the WMI service for local and remote access and the server message block (SMB) and Remote Procedure Call Service (RPCS) for remote access. RPCS operates over port 135.
Tactics:	Execution
Data Sources:	Authentication logs, Netflow/Enclave netflow, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an existing, legitimate external Web service as a means for relaying data to/from a compromised system. Popular websites and social media acting as a mechanism for C2 may give a significant amount of cover due to the likelihood that hosts within a network are already communicating with them prior to a compromise. Using common services, such as those offered by Google or Twitter, makes it easier for adversaries to hide in expected noise. Web service providers commonly use SSL/TLS encryption, giving adversaries an added level of protection.
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network protocol analysis, Packet capture, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report QP6s4u5SZ8

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Possible Origin

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

System Behavior

Analysis Process: QP6s4u5SZ8.exePID: 6588, Parent PID: 1716

Windows Analysis Report
QP6s4u5SZ8