Edit tour

Windows Analysis Report
y99ZI1Kjg8

Overview

General Information

Sample Name:	y99ZI1Kjg8 (renamed file extension from none to exe)
Analysis ID:	568312
MD5:	7f5cf247926fa7235507c557e1554716
SHA1:	a787f42670fa0e32810a48726297ef1da9ba5bf6
SHA256:	c61fcd8bed15414529959e8b5484b2c559ac597143c1775b1cec7d493a40369d
Tags:	exeNimbleMamba
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Icon mismatch, binary includes an icon from a different legit application in order to fool users

Connects to a pastebin service (likely for C&C)

Machine Learning detection for sample

Uses 32bit PE files

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

PE file contains strange resources

May sleep (evasive loops) to hinder dynamic analysis

Uses code obfuscation techniques (call, push, ret)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

JA3 SSL client fingerprint seen in connection with other malware

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Enables debug privileges

Classification

Process Tree

System is w10x64

y99ZI1Kjg8.exe (PID: 5104 cmdline: "C:\Users\user\Desktop\y99ZI1Kjg8.exe" MD5: 7F5CF247926FA7235507C557E1554716)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: y99ZI1Kjg8.exe

ReversingLabs: Detection: 23%

Machine Learning detection for sample

Source: y99ZI1Kjg8.exe

Joe Sandbox ML: detected

Source: y99ZI1Kjg8.exe

Static PE information: 32BIT_MACHINE, EXECUTABLE_IMAGE

Source: unknown

HTTPS traffic detected: 51.83.143.177:443 -> 192.168.2.5:49761 version: TLS 1.2

Source: y99ZI1Kjg8.exe

Static PE information: NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

Networking

Connects to a pastebin service (likely for C&C)

Source: unknown	DNS query: name: justpaste.it
Source: unknown	DNS query: name: justpaste.it
Source: unknown	DNS query: name: justpaste.it
Source: unknown	DNS query: name: justpaste.it
Source: unknown	DNS query: name: justpaste.it
Source: unknown	DNS query: name: justpaste.it
Source: unknown	DNS query: name: justpaste.it
Source: unknown	DNS query: name: justpaste.it
Source: unknown	DNS query: name: justpaste.it
Source: unknown	DNS query: name: justpaste.it

Source: global traffic	TCP traffic: 192.168.2.5:49759 -> 129.6.15.28:13
Source: global traffic	TCP traffic: 192.168.2.5:49760 -> 129.6.15.29:13
Source: global traffic	TCP traffic: 192.168.2.5:49765 -> 129.6.15.27:13
Source: global traffic	TCP traffic: 192.168.2.5:49766 -> 128.138.141.172:13
Source: global traffic	TCP traffic: 192.168.2.5:49772 -> 132.163.97.3:13
Source: global traffic	TCP traffic: 192.168.2.5:49779 -> 132.163.97.2:13
Source: global traffic	TCP traffic: 192.168.2.5:49801 -> 132.163.97.1:13
Source: global traffic	TCP traffic: 192.168.2.5:49806 -> 132.163.97.6:13
Source: global traffic	TCP traffic: 192.168.2.5:49828 -> 132.163.96.1:13
Source: global traffic	TCP traffic: 192.168.2.5:50065 -> 132.163.97.4:13
Source: global traffic	TCP traffic: 192.168.2.5:50124 -> 132.163.96.4:13

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.itConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it

Source: Joe Sandbox View

IP Address: 129.6.15.28 129.6.15.28

Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:18 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:26 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:29 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:36 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:37 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:29:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:15 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:18 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:20 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:37 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:50 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:54 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:56 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:30:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:31:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:31:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:31:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 08 Feb 2022 07:31:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: private, must-revalidatepragma: no-cacheexpires: -1X-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: origin-when-cross-origin

Source: y99ZI1Kjg8.exe, 00000000.00000003.467634080.000000001BFFF000.00000004.00000020.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534450518.000000001BFDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: y99ZI1Kjg8.exe, 00000000.00000002.534206818.0000000003920000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533982536.000000000381C000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533857573.0000000003798000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.530842815.0000000003269000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532387042.0000000003464000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532662341.00000000034F4000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534056363.0000000003868000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533702137.0000000003714000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.531633427.0000000003354000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532917908.0000000003584000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://justpaste.it
Source: y99ZI1Kjg8.exe, 00000000.00000002.530819828.0000000003250000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: y99ZI1Kjg8.exe	String found in binary or memory: https://api.dropboxapi.com/2/files/create_folder_v2
Source: y99ZI1Kjg8.exe	String found in binary or memory: https://api.dropboxapi.com/2/files/delete_v2
Source: y99ZI1Kjg8.exe	String found in binary or memory: https://api.dropboxapi.com/2/files/list_folder
Source: y99ZI1Kjg8.exe	String found in binary or memory: https://apia.ipify.org
Source: y99ZI1Kjg8.exe	String found in binary or memory: https://apia.ipify.org9https://myexternalip.com/raw
Source: y99ZI1Kjg8.exe	String found in binary or memory: https://content.dropboxapi.com/2/files/download
Source: y99ZI1Kjg8.exe	String found in binary or memory: https://content.dropboxapi.com/2/files/upload
Source: y99ZI1Kjg8.exe	String found in binary or memory: https://content.dropboxapi.com/2/files/upload1application/octet-stream
Source: y99ZI1Kjg8.exe, 00000000.00000002.530819828.0000000003250000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://justpaste.it
Source: y99ZI1Kjg8.exe	String found in binary or memory: https://justpaste.it/
Source: y99ZI1Kjg8.exe, 00000000.00000002.533896066.00000000037CE000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532258043.000000000341C000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534048356.0000000003864000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.531402348.00000000032FE000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534229287.0000000003944000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534206818.0000000003920000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532630389.00000000034E2000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533982536.000000000381C000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532416081.0000000003476000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533857573.0000000003798000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533958296.000000000380A000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534161989.00000000038EE000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.531474851.0000000003310000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534014350.0000000003840000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532554017.00000000034BE000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533683680.0000000003702000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532287596.000000000342E000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534242933.0000000003956000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.531671418.0000000003366000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533913473.00000000037E0000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532484017.000000000349A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://justpaste.it/RIjMwIzNwIDM
Source: y99ZI1Kjg8.exe, 00000000.00000002.534229287.0000000003944000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534206818.0000000003920000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534161989.00000000038EE000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534242933.0000000003956000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534149242.00000000038E0000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534114301.00000000038C0000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534175720.00000000038FC000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534056363.0000000003868000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534134476.00000000038D2000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534092889.00000000038AE000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534193209.000000000390E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://justpaste.it8
Source: y99ZI1Kjg8.exe	String found in binary or memory: https://myexternalip.com/raw
Source: y99ZI1Kjg8.exe, 00000000.00000002.532079103.00000000033F0000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533896066.00000000037CE000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.531993919.00000000033DC000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532258043.000000000341C000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533521720.00000000036AD000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.531402348.00000000032FE000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532067377.00000000033EC000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534229287.0000000003944000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534206818.0000000003920000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.531204973.00000000032D4000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532630389.00000000034E2000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532180655.0000000003408000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533982536.000000000381C000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532416081.0000000003476000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533078087.0000000003668000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532234229.0000000003414000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533857573.0000000003798000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533958296.000000000380A000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532056334.00000000033E8000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532215393.0000000003410000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.530949101.000000000328C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://notification.justpaste.it/api/v1/stats/unread

Source: unknown

DNS traffic detected: queries for: time-a-g.nist.gov

Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.itConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it
Source: global traffic	HTTP traffic detected: GET /RIjMwIzNwIDM HTTP/1.1Host: justpaste.it

Source: unknown

HTTPS traffic detected: 51.83.143.177:443 -> 192.168.2.5:49761 version: TLS 1.2

Source: y99ZI1Kjg8.exe

Static PE information: 32BIT_MACHINE, EXECUTABLE_IMAGE

Source: y99ZI1Kjg8.exe, 00000000.00000002.529419918.0000000000CBE000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameSysinternals.exe: vs y99ZI1Kjg8.exe
Source: y99ZI1Kjg8.exe, 00000000.00000002.529890929.0000000001199000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs y99ZI1Kjg8.exe
Source: y99ZI1Kjg8.exe	Binary or memory string: OriginalFilenameSysinternals.exe: vs y99ZI1Kjg8.exe

Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: y99ZI1Kjg8.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Code function: 0_2_00007FFA1D946052	0_2_00007FFA1D946052
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Code function: 0_2_00007FFA1D9452A6	0_2_00007FFA1D9452A6
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Code function: 0_2_00007FFA1D940BCD	0_2_00007FFA1D940BCD

Source: y99ZI1Kjg8.exe

ReversingLabs: Detection: 23%

Source: y99ZI1Kjg8.exe

Static PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe

Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\ac26e2af62f23e37e645b5e44068a025\mscorlib.ni.dll

Jump to behavior

Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe

Mutant created: \Sessions\1\BaseNamedObjects\y99ZI1Kjg8

Source: classification engine

Classification label: mal64.troj.winEXE@1/0@271/13

Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: y99ZI1Kjg8.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: y99ZI1Kjg8.exe

Static PE information: NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe

Code function: 0_2_00007FFA1D947714 push ebx; retf

0_2_00007FFA1D94771A

Hooking and other Techniques for Hiding and Protection

Icon mismatch, binary includes an icon from a different legit application in order to fool users

Source: initial sample

Icon embedded in binary file: icon matches a legit application icon: download (62).png

Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe

Window / User API: threadDelayed 706

Jump to behavior

Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe TID: 900

Thread sleep time: -210000s >= -30000s

Jump to behavior

Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_ComputerSystem

Source: y99ZI1Kjg8.exe	Binary or memory string: model1Microsoft\|VMWare\|Virtual
Source: y99ZI1Kjg8.exe	Binary or memory string: 1VMware\|VIRTUAL\|A M I\|XenEselect * from Win32_ComputerSystem
Source: y99ZI1Kjg8.exe, 00000000.00000002.530497379.0000000003192000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware\|VIRTUAL\|A M I\|Xen
Source: y99ZI1Kjg8.exe, 00000000.00000002.530497379.0000000003192000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Microsoft\|VMWare\|Virtual
Source: y99ZI1Kjg8.exe, 00000000.00000002.534416480.000000001BFB0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Queries volume information: C:\Users\user\Desktop\y99ZI1Kjg8.exe VolumeInformation			Jump to behavior
Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\y99ZI1Kjg8.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	1 Web Service	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	2 Virtualization/Sandbox Evasion	LSASS Memory	2 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	11 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	1 Disable or Modify Tools	Security Account Manager	1 Application Window Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	1 Non-Standard Port	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	1 Obfuscated Files or Information	NTDS	1 Remote System Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	3 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	22 System Information Discovery	SSH	Keylogging	Data Transfer Size Limits	3 Non-Application Layer Protocol	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Steganography	Cached Domain Credentials	System Owner/User Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	4 Application Layer Protocol	Jamming or Denial of Service		Abuse Accessibility Features

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
y99ZI1Kjg8.exe	23%	ReversingLabs	ByteCode-MSIL.Trojan.Lazy
y99ZI1Kjg8.exe	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://justpaste.it8	0%	Avira URL Cloud	safe
https://api.dropboxapi.com/2/files/delete_v2	0%	Virustotal		Browse
https://api.dropboxapi.com/2/files/delete_v2	0%	Avira URL Cloud	safe
https://api.dropboxapi.com/2/files/list_folder	0%	Virustotal		Browse
https://api.dropboxapi.com/2/files/list_folder	0%	Avira URL Cloud	safe
https://content.dropboxapi.com/2/files/upload1application/octet-stream	0%	Avira URL Cloud	safe
https://content.dropboxapi.com/2/files/upload	0%	Avira URL Cloud	safe
https://apia.ipify.org9https://myexternalip.com/raw	0%	Avira URL Cloud	safe
https://content.dropboxapi.com/2/files/download	0%	Avira URL Cloud	safe
https://api.dropboxapi.com/2/files/create_folder_v2	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
justpaste.it	51.83.143.177	true	false	high
ntp1.glb.nist.gov	128.138.141.172	true	false	high
time-d-g.nist.gov	129.6.15.27	true	false	high
time-b-g.nist.gov	129.6.15.29	true	false	high
time-a-g.nist.gov	129.6.15.28	true	false	high
time.nist.gov	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://justpaste.it/RIjMwIzNwIDM	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://justpaste.it8	y99ZI1Kjg8.exe, 00000000.00000002.534229287.0000000003944000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534206818.0000000003920000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534161989.00000000038EE000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534242933.0000000003956000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534149242.00000000038E0000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534114301.00000000038C0000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534175720.00000000038FC000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534056363.0000000003868000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534134476.00000000038D2000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534092889.00000000038AE000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534193209.000000000390E000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://justpaste.it	y99ZI1Kjg8.exe, 00000000.00000002.530819828.0000000003250000.00000004.00000800.00020000.00000000.sdmp	false		high
https://api.dropboxapi.com/2/files/delete_v2	y99ZI1Kjg8.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://api.dropboxapi.com/2/files/list_folder	y99ZI1Kjg8.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://content.dropboxapi.com/2/files/upload1application/octet-stream	y99ZI1Kjg8.exe	false	Avira URL Cloud: safe	unknown
https://content.dropboxapi.com/2/files/upload	y99ZI1Kjg8.exe	false	Avira URL Cloud: safe	unknown
https://apia.ipify.org	y99ZI1Kjg8.exe	false		high
https://apia.ipify.org9https://myexternalip.com/raw	y99ZI1Kjg8.exe	false	Avira URL Cloud: safe	unknown
https://content.dropboxapi.com/2/files/download	y99ZI1Kjg8.exe	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	y99ZI1Kjg8.exe, 00000000.00000002.530819828.0000000003250000.00000004.00000800.00020000.00000000.sdmp	false		high
https://justpaste.it/	y99ZI1Kjg8.exe	false		high
https://notification.justpaste.it/api/v1/stats/unread	y99ZI1Kjg8.exe, 00000000.00000002.532079103.00000000033F0000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533896066.00000000037CE000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.531993919.00000000033DC000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532258043.000000000341C000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533521720.00000000036AD000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.531402348.00000000032FE000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532067377.00000000033EC000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534229287.0000000003944000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534206818.0000000003920000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.531204973.00000000032D4000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532630389.00000000034E2000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532180655.0000000003408000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533982536.000000000381C000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532416081.0000000003476000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533078087.0000000003668000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532234229.0000000003414000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533857573.0000000003798000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533958296.000000000380A000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532056334.00000000033E8000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532215393.0000000003410000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.530949101.000000000328C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://myexternalip.com/raw	y99ZI1Kjg8.exe	false		high
http://justpaste.it	y99ZI1Kjg8.exe, 00000000.00000002.534206818.0000000003920000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533982536.000000000381C000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533857573.0000000003798000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.530842815.0000000003269000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532387042.0000000003464000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532662341.00000000034F4000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.534056363.0000000003868000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.533702137.0000000003714000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.531633427.0000000003354000.00000004.00000800.00020000.00000000.sdmp, y99ZI1Kjg8.exe, 00000000.00000002.532917908.0000000003584000.00000004.00000800.00020000.00000000.sdmp	false		high
https://api.dropboxapi.com/2/files/create_folder_v2	y99ZI1Kjg8.exe	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
51.83.143.177	justpaste.it	France	16276	OVHFR	false
129.6.15.29	time-b-g.nist.gov	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
132.163.97.2	unknown	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
129.6.15.28	time-a-g.nist.gov	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
132.163.97.3	unknown	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
132.163.96.4	unknown	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
129.6.15.27	time-d-g.nist.gov	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
132.163.97.4	unknown	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
128.138.141.172	ntp1.glb.nist.gov	United States	104	COLORADO-ASUS	false
132.163.97.6	unknown	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
132.163.96.1	unknown	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false
132.163.97.1	unknown	United States	49	US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	false

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	34.0.0 Boulder Opal
Analysis ID:	568312
Start date:	08.02.2022
Start time:	08:27:59
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 7m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	y99ZI1Kjg8 (renamed file extension from none to exe)
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.troj.winEXE@1/0@271/13
EGA Information:	Failed
HDC Information:	Successful, ratio: 13.5% (good quality ratio 10%) Quality average: 62.2% Quality standard deviation: 42%
HCA Information:	Successful, ratio: 100% Number of executed functions: 58 Number of non-executed functions: 0
Cookbook Comments:	Adjust boot time Enable AMSI

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, BackgroundTransferHost.exe, backgroundTaskHost.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded domains from analysis (whitelisted): ris.api.iris.microsoft.com, client.wns.windows.com, fs.microsoft.com, store-images.s-microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, arc.msn.com
Execution Graph export aborted for target y99ZI1Kjg8.exe, PID 5104 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
08:29:06	API Interceptor	75x Sleep call for process: y99ZI1Kjg8.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link
51.83.143.177	QP6s4u5SZ8.exe	Get hash	malicious	Browse
129.6.15.29	QP6s4u5SZ8.exe	Get hash	malicious	Browse
	VwVVw0oik4	Get hash	malicious	Browse
	TimeSync.exe	Get hash	malicious	Browse
	hak5MjyKgK.exe	Get hash	malicious	Browse
132.163.97.2	QP6s4u5SZ8.exe	Get hash	malicious	Browse
129.6.15.28	QP6s4u5SZ8.exe	Get hash	malicious	Browse
	2X3f1ykTmM.exe	Get hash	malicious	Browse
	kr.exe	Get hash	malicious	Browse
	WjmYak325l.exe	Get hash	malicious	Browse
	F75rJPKdGb.exe	Get hash	malicious	Browse
	ozJy5Zf5cf.exe	Get hash	malicious	Browse
	tgduMePOh0.exe	Get hash	malicious	Browse
	8AcNX5GzVY.exe	Get hash	malicious	Browse
	QkAgFhbO4a.exe	Get hash	malicious	Browse
	zfpLjnr5P9.exe	Get hash	malicious	Browse
	8TTLURnXhM.exe	Get hash	malicious	Browse
	fK5LTFDKXC.exe	Get hash	malicious	Browse
	lHCBcjZBib.exe	Get hash	malicious	Browse
	KTi0r6xqtH.exe	Get hash	malicious	Browse
	Cx1HKT0xhO.exe	Get hash	malicious	Browse
	4i2nattkLT.exe	Get hash	malicious	Browse
	Z9GkJvygEk.exe	Get hash	malicious	Browse
	RZAcKBlQo0.exe	Get hash	malicious	Browse
	F1MwWrwBR7.exe	Get hash	malicious	Browse
	kecFPnbu5K.exe	Get hash	malicious	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
ntp1.glb.nist.gov	QP6s4u5SZ8.exe	Get hash	malicious	Browse	132.163.97.3
	putty.exe	Get hash	malicious	Browse	132.163.96.4
	G1WdS7YlNd.exe	Get hash	malicious	Browse	132.163.97.6
	vXVSbqN7B6.exe	Get hash	malicious	Browse	132.163.96.3
	6ComlsB8Gq.exe	Get hash	malicious	Browse	132.163.96.3
	lrOc7QEBcV.exe	Get hash	malicious	Browse	132.163.96.2
	t21O0lgK1t.exe	Get hash	malicious	Browse	132.163.96.4
	GUg2wGYjhG.exe	Get hash	malicious	Browse	128.138.141.172
	ac1khvFT2V.exe	Get hash	malicious	Browse	128.138.141.172
	dLlF0bPWxx.exe	Get hash	malicious	Browse	132.163.96.4
	eNjIpT5RzD.exe	Get hash	malicious	Browse	132.163.96.3
	Plq7ADczmp.exe	Get hash	malicious	Browse	132.163.96.6
	SecuriteInfo.com.ArtemisC5924E341E9E.exe	Get hash	malicious	Browse	132.163.96.1
	SecuriteInfo.com.Generic.mg.4f18b3ddeaf967b7.exe	Get hash	malicious	Browse	132.163.97.1
	vlcwn.exe	Get hash	malicious	Browse	132.163.96.3
	hak5MjyKgK.exe	Get hash	malicious	Browse	132.163.96.3
time-a-g.nist.gov	QP6s4u5SZ8.exe	Get hash	malicious	Browse	129.6.15.28
	2X3f1ykTmM.exe	Get hash	malicious	Browse	129.6.15.28
	kr.exe	Get hash	malicious	Browse	129.6.15.28
	WjmYak325l.exe	Get hash	malicious	Browse	129.6.15.28
	F75rJPKdGb.exe	Get hash	malicious	Browse	129.6.15.28
	ozJy5Zf5cf.exe	Get hash	malicious	Browse	129.6.15.28
	tgduMePOh0.exe	Get hash	malicious	Browse	129.6.15.28
	8AcNX5GzVY.exe	Get hash	malicious	Browse	129.6.15.28
	QkAgFhbO4a.exe	Get hash	malicious	Browse	129.6.15.28
	zfpLjnr5P9.exe	Get hash	malicious	Browse	129.6.15.28
	8TTLURnXhM.exe	Get hash	malicious	Browse	129.6.15.28
	fK5LTFDKXC.exe	Get hash	malicious	Browse	129.6.15.28
	lHCBcjZBib.exe	Get hash	malicious	Browse	129.6.15.28
	KTi0r6xqtH.exe	Get hash	malicious	Browse	129.6.15.28
	Cx1HKT0xhO.exe	Get hash	malicious	Browse	129.6.15.28
	4i2nattkLT.exe	Get hash	malicious	Browse	129.6.15.28
	Z9GkJvygEk.exe	Get hash	malicious	Browse	129.6.15.28
	RZAcKBlQo0.exe	Get hash	malicious	Browse	129.6.15.28
	F1MwWrwBR7.exe	Get hash	malicious	Browse	129.6.15.28
	kecFPnbu5K.exe	Get hash	malicious	Browse	129.6.15.28
justpaste.it	QP6s4u5SZ8.exe	Get hash	malicious	Browse	51.83.143.177
time-d-g.nist.gov	QP6s4u5SZ8.exe	Get hash	malicious	Browse	129.6.15.27
time-b-g.nist.gov	QP6s4u5SZ8.exe	Get hash	malicious	Browse	129.6.15.29
	TimeSync.exe	Get hash	malicious	Browse	129.6.15.29
	hak5MjyKgK.exe	Get hash	malicious	Browse	129.6.15.29

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
OVHFR	QP6s4u5SZ8.exe	Get hash	malicious	Browse	51.83.143.177
	Notice0802.xlsm	Get hash	malicious	Browse	54.38.242.185
	report 480187140.xlsm	Get hash	malicious	Browse	54.38.242.185
	DETAILS-08022022.xlsm	Get hash	malicious	Browse	54.38.242.185
	tIq0CYj6Ym.dll	Get hash	malicious	Browse	54.38.242.185
	E57ulQiwAe.dll	Get hash	malicious	Browse	54.38.242.185
	pack-0702.xlsm	Get hash	malicious	Browse	54.38.242.185
	lpvFWzd2vF.dll	Get hash	malicious	Browse	54.38.242.185
	h86SjlxQbm.dll	Get hash	malicious	Browse	54.38.242.185
	aTJAxhQs13.dll	Get hash	malicious	Browse	54.38.242.185
	VJndf5eO5Z.dll	Get hash	malicious	Browse	54.38.242.185
	8HIJPWBIXU.dll	Get hash	malicious	Browse	54.38.242.185
	cYuPU2nBZR.dll	Get hash	malicious	Browse	54.38.242.185
	oiZ4B527f2.dll	Get hash	malicious	Browse	54.38.242.185
	x7DBXRJjPx.dll	Get hash	malicious	Browse	54.38.242.185
	0PJhEDFJWD.dll	Get hash	malicious	Browse	54.38.242.185
	IOeSaezC1f.dll	Get hash	malicious	Browse	54.38.242.185
	093Iy2DLBd.dll	Get hash	malicious	Browse	54.38.242.185
	C074RbNqfp.dll	Get hash	malicious	Browse	54.38.242.185
	8HIJPWBIXU.dll	Get hash	malicious	Browse	54.38.242.185
US-NATIONAL-INSTITUTE-OF-STANDARDS-AND-TECHNOLOGYUS	QP6s4u5SZ8.exe	Get hash	malicious	Browse	132.163.96.2
	2X3f1ykTmM.exe	Get hash	malicious	Browse	129.6.15.28
	putty.exe	Get hash	malicious	Browse	132.163.96.4
	jerusalem.ppc	Get hash	malicious	Browse	129.6.121.81
	kr.exe	Get hash	malicious	Browse	129.6.15.28
	u9afRawaNV	Get hash	malicious	Browse	129.6.93.244
	G1WdS7YlNd.exe	Get hash	malicious	Browse	132.163.97.6
	vXVSbqN7B6.exe	Get hash	malicious	Browse	132.163.96.3
	6ComlsB8Gq.exe	Get hash	malicious	Browse	132.163.96.3
	lrOc7QEBcV.exe	Get hash	malicious	Browse	132.163.96.2
	t21O0lgK1t.exe	Get hash	malicious	Browse	132.163.96.4
	WjmYak325l.exe	Get hash	malicious	Browse	129.6.15.28
	F75rJPKdGb.exe	Get hash	malicious	Browse	129.6.15.28
	ozJy5Zf5cf.exe	Get hash	malicious	Browse	129.6.15.28
	tgduMePOh0.exe	Get hash	malicious	Browse	129.6.15.28
	VwVVw0oik4	Get hash	malicious	Browse	129.6.15.29
	8AcNX5GzVY.exe	Get hash	malicious	Browse	129.6.15.28
	QkAgFhbO4a.exe	Get hash	malicious	Browse	129.6.15.28
	zfpLjnr5P9.exe	Get hash	malicious	Browse	129.6.15.28
	8TTLURnXhM.exe	Get hash	malicious	Browse	129.6.15.28

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	QP6s4u5SZ8.exe	Get hash	malicious	Browse	51.83.143.177
	PO - 4501226854,pdf.exe	Get hash	malicious	Browse	51.83.143.177
	Swift mesaj#U0131 4.02.2022.exe	Get hash	malicious	Browse	51.83.143.177
	#U7f8e#U91d1#U532f#U738728.84 (USD 40,257+5% #U7a05#Uff09.exe	Get hash	malicious	Browse	51.83.143.177
	Free Snipping Tool - 5.1.0.0.msi	Get hash	malicious	Browse	51.83.143.177
	vpn_installer.exe	Get hash	malicious	Browse	51.83.143.177
	CJe3dbR1rO.exe	Get hash	malicious	Browse	51.83.143.177
	INV_22498RDHL.exe	Get hash	malicious	Browse	51.83.143.177
	uGjO0f0gAu.exe	Get hash	malicious	Browse	51.83.143.177
	ZI4r47GK8D.exe	Get hash	malicious	Browse	51.83.143.177
	factura bancaria_7654.exe	Get hash	malicious	Browse	51.83.143.177
	YGIk6moSjA.exe	Get hash	malicious	Browse	51.83.143.177
	AutoInstall.exe	Get hash	malicious	Browse	51.83.143.177
	setup.exe	Get hash	malicious	Browse	51.83.143.177
	Vucutvtr.exe	Get hash	malicious	Browse	51.83.143.177
	invoice.Html	Get hash	malicious	Browse	51.83.143.177
	GiftBox..docx	Get hash	malicious	Browse	51.83.143.177
	xYWm6BV3NZ.exe	Get hash	malicious	Browse	51.83.143.177
	OwNqANDnRy.exe	Get hash	malicious	Browse	51.83.143.177
	xYWm6BV3NZ.exe	Get hash	malicious	Browse	51.83.143.177

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	4.47346659129645
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.83% Win32 Executable (generic) a (10002005/4) 49.78% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01%
File name:	y99ZI1Kjg8.exe
File size:	634368
MD5:	7f5cf247926fa7235507c557e1554716
SHA1:	a787f42670fa0e32810a48726297ef1da9ba5bf6
SHA256:	c61fcd8bed15414529959e8b5484b2c559ac597143c1775b1cec7d493a40369d
SHA512:	d6e5810544f8394f1f3e1d427a925b3b8981a6583dcd767ced46b2599c2327d0b225c31821e401c66eba2f4ef207bf82e604c2f098291febeeb33c9788d4a7e4
SSDEEP:	6144:uCz7WVnLHmSA2dPcOaEVoW6k1U5I1Y4DUKqSbrpFpzROJ7V:6VnjmSA2dPcY1QH
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......a............................V.... ........@.. ....................... ............@................................

File Icon


Icon Hash:	e4e0d2d6d2d2c4dc

Static PE Info

General

Entrypoint:	0x40c356
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	32BIT_MACHINE, EXECUTABLE_IMAGE
DLL Characteristics:	NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x61871794 [Sun Nov 7 00:02:28 2021 UTC]
TLS Callbacks:
CLR (.Net) Version:	v4.0.30319
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xc30c	0x4a	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xe000	0x9047d	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xa0000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0xa35c	0xa400	False	0.466773056402	data	5.6954224236	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.rsrc	0xe000	0x9047d	0x90600	False	0.161967329545	data	4.30220136402	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xa0000	0xc	0x200	False	0.044921875	data	0.0815394123432	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
AFX_DIALOG_LAYOUT	0xe0e8	0x2	data	English	United States
AFX_DIALOG_LAYOUT	0xe10e	0x2	data	English	United States
AFX_DIALOG_LAYOUT	0xe134	0x2	data	English	United States
AFX_DIALOG_LAYOUT	0xe15a	0x2	data	English	United States
AFX_DIALOG_LAYOUT	0xe180	0x2	data	English	United States
AFX_DIALOG_LAYOUT	0xe1a6	0x2	data	English	United States
INI	0xe200	0x497	ASCII text, with CRLF line terminators	English	United States
RT_ICON	0xebc3	0x1b2f	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	English	United States
RT_ICON	0x10716	0x10828	dBase IV DBT, blocks size 0, block length 2048, next free block index 40, next free block 0, next used block 0	English	United States
RT_ICON	0x20f62	0x94a8	data	English	United States
RT_ICON	0x2a42e	0x5488	data	English	United States
RT_ICON	0x2f8da	0x4228	dBase IV DBT of \200.DBF, blocks size 0, block length 16896, next free block index 40, next free block 49407, next used block 4294901760	English	United States
RT_ICON	0x33b26	0x25a8	data	English	United States
RT_ICON	0x360f2	0x10a8	data	English	United States
RT_ICON	0x371be	0x988	data	English	United States
RT_ICON	0x37b6a	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x37ff6	0x10a8	data	English	United States
RT_ICON	0x390c2	0x988	data	English	United States
RT_ICON	0x39a6e	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x39efa	0x10a8	data	English	United States
RT_ICON	0x3afc6	0x988	data	English	United States
RT_ICON	0x3b972	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x3bdfe	0x10a8	data	English	United States
RT_ICON	0x3ceca	0x988	data	English	United States
RT_ICON	0x3d876	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x3dd02	0x10a8	data	English	United States
RT_ICON	0x3edce	0x988	data	English	United States
RT_ICON	0x3f77a	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x3fc06	0x4228	dBase IV DBT of \200.DBF, blocks size 0, block length 16896, next free block index 40, next free block 4294967295, next used block 4294967295	English	United States
RT_ICON	0x43e52	0x10a8	data	English	United States
RT_ICON	0x44f1e	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x453aa	0x10a8	data	English	United States
RT_ICON	0x46476	0x988	data	English	United States
RT_ICON	0x46e22	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x472ae	0x10a8	data	English	United States
RT_ICON	0x4837a	0x988	data	English	United States
RT_ICON	0x48d26	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x491b2	0x10a8	data	English	United States
RT_ICON	0x4a27e	0x988	data	English	United States
RT_ICON	0x4ac2a	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x4b0b6	0x10a8	data	English	United States
RT_ICON	0x4c182	0x988	data	English	United States
RT_ICON	0x4cb2e	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x4cfba	0x10a8	data	English	United States
RT_ICON	0x4e086	0x988	data	English	United States
RT_ICON	0x4ea32	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x4eebe	0x10a8	data	English	United States
RT_ICON	0x4ff8a	0x988	data	English	United States
RT_ICON	0x50936	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x50dc2	0x10a8	data	English	United States
RT_ICON	0x51e8e	0x988	data	English	United States
RT_ICON	0x5283a	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x52cc6	0x10a8	data	English	United States
RT_ICON	0x53d92	0x988	data	English	United States
RT_ICON	0x5473e	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x54bca	0x10a8	data	English	United States
RT_ICON	0x55c96	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x56122	0x10a8	data	English	United States
RT_ICON	0x571ee	0x988	data	English	United States
RT_ICON	0x57b9a	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x58026	0x10a8	data	English	United States
RT_ICON	0x590f2	0x988	data	English	United States
RT_ICON	0x59a9e	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x59f2a	0x10a8	data	English	United States
RT_ICON	0x5aff6	0x988	data	English	United States
RT_ICON	0x5b9a2	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x5be2e	0x10a8	data	English	United States
RT_ICON	0x5cefa	0x988	data	English	United States
RT_ICON	0x5d8a6	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x5dd32	0x10a8	data	English	United States
RT_ICON	0x5edfe	0x988	data	English	United States
RT_ICON	0x5f7aa	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x5fc36	0x10a8	data	English	United States
RT_ICON	0x60d02	0x988	data	English	United States
RT_ICON	0x616ae	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x61b3a	0x10a8	data	English	United States
RT_ICON	0x62c06	0x988	data	English	United States
RT_ICON	0x635b2	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x63a3e	0x10a8	data	English	United States
RT_ICON	0x64b0a	0x988	data	English	United States
RT_ICON	0x654b6	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x65942	0x10a8	data	English	United States
RT_ICON	0x66a0e	0x988	data	English	United States
RT_ICON	0x673ba	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x67846	0x10a8	data	English	United States
RT_ICON	0x68912	0x988	data	English	United States
RT_ICON	0x692be	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x6974a	0x10a8	data	English	United States
RT_ICON	0x6a816	0x988	data	English	United States
RT_ICON	0x6b1c2	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x6b64e	0x10a8	data	English	United States
RT_ICON	0x6c71a	0x988	data	English	United States
RT_ICON	0x6d0c6	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x6d552	0x10a8	data	English	United States
RT_ICON	0x6e61e	0x988	data	English	United States
RT_ICON	0x6efca	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x6f456	0x10a8	data	English	United States
RT_ICON	0x70522	0x988	data	English	United States
RT_ICON	0x70ece	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x7135a	0x10a8	data	English	United States
RT_ICON	0x72426	0x988	data	English	United States
RT_ICON	0x72dd2	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x7325e	0x10a8	data	English	United States
RT_ICON	0x7432a	0x988	data	English	United States
RT_ICON	0x74cd6	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x75162	0x10a8	data	English	United States
RT_ICON	0x7622e	0x988	data	English	United States
RT_ICON	0x76bda	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x77066	0x10a8	data	English	United States
RT_ICON	0x78132	0x988	data	English	United States
RT_ICON	0x78ade	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x78f6a	0x10a8	data	English	United States
RT_ICON	0x7a036	0x988	data	English	United States
RT_ICON	0x7a9e2	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x7ae6e	0x10a8	data	English	United States
RT_ICON	0x7bf3a	0x988	data	English	United States
RT_ICON	0x7c8e6	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x7cd72	0x10a8	data	English	United States
RT_ICON	0x7de3e	0x988	data	English	United States
RT_ICON	0x7e7ea	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x7ec76	0x10a8	data	English	United States
RT_ICON	0x7fd42	0x988	data	English	United States
RT_ICON	0x806ee	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x80b7a	0x10a8	data	English	United States
RT_ICON	0x81c46	0x988	data	English	United States
RT_ICON	0x825f2	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x82a7e	0x10a8	data	English	United States
RT_ICON	0x83b4a	0x988	data	English	United States
RT_ICON	0x844f6	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x84982	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x84e0e	0x988	data	English	United States
RT_ICON	0x857ba	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x85c46	0x10a8	data	English	United States
RT_ICON	0x86d12	0x988	data	English	United States
RT_ICON	0x876be	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x87b4a	0x988	data	English	United States
RT_ICON	0x884f6	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x88982	0x988	data	English	United States
RT_ICON	0x8932e	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x897ba	0x988	data	English	United States
RT_ICON	0x8a166	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x8a5f2	0x988	data	English	United States
RT_ICON	0x8af9e	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x8b42a	0x988	data	English	United States
RT_ICON	0x8bdd6	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x8c262	0x988	data	English	United States
RT_ICON	0x8cc0e	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x8d09a	0x10a8	data	English	United States
RT_ICON	0x8e166	0x988	data	English	United States
RT_ICON	0x8eb12	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x8ef9e	0x10a8	data	English	United States
RT_ICON	0x9006a	0x988	data	English	United States
RT_ICON	0x90a16	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x90ea2	0x10a8	data	English	United States
RT_ICON	0x91f6e	0x988	data	English	United States
RT_ICON	0x9291a	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x92da6	0x10a8	data	English	United States
RT_ICON	0x93e72	0x988	data	English	United States
RT_ICON	0x9481e	0x468	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x94caa	0x2868	dBase IV DBT, blocks size 0, block length 10240, next free block index 40, next free block 224, next used block 0	English	United States
RT_ICON	0x97536	0xde8	data	English	United States
RT_ICON	0x98342	0x668	dBase IV DBT of `.DBF, block length 1536, next free block index 40, next free block 2147549184, next used block 0	English	United States
RT_ICON	0x989ce	0x2e8	data	English	United States
RT_ICON	0x98cda	0x1e8	data	English	United States
RT_ICON	0x98ee6	0x128	GLS_BINARY_LSB_FIRST	English	United States
RT_ICON	0x99032	0x988	data	English	United States
RT_MENU	0x999fe	0x580	data	English	United States
RT_MENU	0x99fa2	0x258	data	English	United States
RT_DIALOG	0x9a25e	0x180	data	English	United States
RT_DIALOG	0x9a402	0x60	data	English	United States
RT_DIALOG	0x9a486	0x240	data	English	United States
RT_DIALOG	0x9a6ea	0x134	data	English	United States
RT_DIALOG	0x9a842	0x20e	data	English	United States
RT_DIALOG	0x9aa74	0x22a	data	English	United States
RT_STRING	0x9ad4a	0x8a	data	English	United States
RT_STRING	0x9adf8	0x3e	data	English	United States
RT_STRING	0x9ae5a	0xdc	data	English	United States
RT_STRING	0x9af5a	0x2a8	data	English	United States
RT_STRING	0x9b226	0x102	data	English	United States
RT_STRING	0x9b34c	0xaa	data	English	United States
RT_STRING	0x9b41a	0x2a	data	English	United States
RT_STRING	0x9b468	0x25c	data	English	United States
RT_STRING	0x9b6e8	0x31c	data	English	United States
RT_STRING	0x9ba28	0x210	data	English	United States
RT_STRING	0x9bc5c	0x106	data	English	United States
RT_STRING	0x9bd86	0xe4	data	English	United States
RT_STRING	0x9be8e	0x1f8	data	English	United States
RT_STRING	0x9c0aa	0xae	data	English	United States
RT_STRING	0x9c17c	0x44	data	English	United States
RT_ACCELERATOR	0x9c1fc	0xb0	data	English	United States
RT_GROUP_ICON	0x9c498	0x84	data	English	United States
RT_GROUP_ICON	0x9c540	0x84	data	English	United States
RT_GROUP_ICON	0x9c5e8	0x30	data	English	United States
RT_GROUP_ICON	0x9c63c	0x30	data	English	United States
RT_GROUP_ICON	0x9c690	0x30	data	English	United States
RT_GROUP_ICON	0x9c6e4	0x30	data	English	United States
RT_GROUP_ICON	0x9c738	0x30	data	English	United States
RT_GROUP_ICON	0x9c78c	0x30	data	English	United States
RT_GROUP_ICON	0x9c7e0	0x30	data	English	United States
RT_GROUP_ICON	0x9c834	0x22	data	English	United States
RT_GROUP_ICON	0x9c87a	0x30	data	English	United States
RT_GROUP_ICON	0x9c8ce	0x30	data	English	United States
RT_GROUP_ICON	0x9c922	0x30	data	English	United States
RT_GROUP_ICON	0x9c976	0x30	data	English	United States
RT_GROUP_ICON	0x9c9ca	0x30	data	English	United States
RT_GROUP_ICON	0x9ca1e	0x30	data	English	United States
RT_GROUP_ICON	0x9ca72	0x30	data	English	United States
RT_GROUP_ICON	0x9cac6	0x30	data	English	United States
RT_GROUP_ICON	0x9cb1a	0x30	data	English	United States
RT_GROUP_ICON	0x9cb6e	0x30	data	English	United States
RT_GROUP_ICON	0x9cbc2	0x30	data	English	United States
RT_GROUP_ICON	0x9cc16	0x30	data	English	United States
RT_GROUP_ICON	0x9cc6a	0x22	data	English	United States
RT_GROUP_ICON	0x9ccb0	0x14	data	English	United States
RT_GROUP_ICON	0x9cce8	0x30	data	English	United States
RT_GROUP_ICON	0x9cd3c	0x5a	data	English	United States
RT_GROUP_ICON	0x9cdba	0x14	data	English	United States
RT_GROUP_ICON	0x9cdf2	0x22	data	English	United States
RT_GROUP_ICON	0x9ce38	0x30	data	English	United States
RT_GROUP_ICON	0x9ce8c	0x30	data	English	United States
RT_GROUP_ICON	0x9cee0	0x30	data	English	United States
RT_GROUP_ICON	0x9cf34	0x30	data	English	United States
RT_GROUP_ICON	0x9cf88	0x30	data	English	United States
RT_GROUP_ICON	0x9cfdc	0x30	data	English	United States
RT_GROUP_ICON	0x9d030	0x30	data	English	United States
RT_GROUP_ICON	0x9d084	0x30	data	English	United States
RT_GROUP_ICON	0x9d0d8	0x30	data	English	United States
RT_GROUP_ICON	0x9d12c	0x30	data	English	United States
RT_GROUP_ICON	0x9d180	0x30	data	English	United States
RT_GROUP_ICON	0x9d1d4	0x30	data	English	United States
RT_GROUP_ICON	0x9d228	0x30	data	English	United States
RT_GROUP_ICON	0x9d27c	0x30	data	English	United States
RT_GROUP_ICON	0x9d2d0	0x30	data	English	United States
RT_GROUP_ICON	0x9d324	0x30	data	English	United States
RT_GROUP_ICON	0x9d378	0x30	data	English	United States
RT_GROUP_ICON	0x9d3cc	0x30	data	English	United States
RT_GROUP_ICON	0x9d420	0x30	data	English	United States
RT_GROUP_ICON	0x9d474	0x22	data	English	United States
RT_GROUP_ICON	0x9d4ba	0x30	data	English	United States
RT_GROUP_ICON	0x9d50e	0x30	data	English	United States
RT_GROUP_ICON	0x9d562	0x22	data	English	United States
RT_GROUP_ICON	0x9d5a8	0x22	data	English	United States
RT_GROUP_ICON	0x9d5ee	0x22	data	English	United States
RT_GROUP_ICON	0x9d634	0x22	data	English	United States
RT_GROUP_ICON	0x9d67a	0x30	data	English	United States
RT_VERSION	0x9d6e6	0x36c	data	English	United States
RT_MANIFEST	0x9da96	0x1ea	XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
RT_MANIFEST	0x9dc8c	0x7f1	XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators	English	United States

Imports

DLL	Import
mscoree.dll	_CorExeMain

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 8, 2022 08:29:04.618189096 CET	49759	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:04.758635044 CET	13	49759	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:04.758732080 CET	49759	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:04.899003029 CET	13	49759	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:04.899106026 CET	49759	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:04.901132107 CET	49759	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:04.925950050 CET	49760	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:05.041421890 CET	13	49759	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:05.066387892 CET	13	49760	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:05.066507101 CET	49760	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:05.206954956 CET	13	49760	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:05.206976891 CET	13	49760	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:05.207068920 CET	49760	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:05.207196951 CET	49760	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:05.347476959 CET	13	49760	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:05.679100990 CET	49761	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:05.679142952 CET	443	49761	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:05.679240942 CET	49761	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:05.962631941 CET	49761	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:05.962658882 CET	443	49761	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:06.051348925 CET	443	49761	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:06.051429033 CET	49761	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:06.055059910 CET	49761	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:06.055078983 CET	443	49761	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:06.055346012 CET	443	49761	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:06.120598078 CET	49761	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:06.388878107 CET	49761	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:06.433867931 CET	443	49761	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:06.514008999 CET	443	49761	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:06.514039993 CET	443	49761	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:06.514049053 CET	443	49761	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:06.514101028 CET	49761	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:06.514106035 CET	443	49761	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:06.514158964 CET	49761	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:06.521471977 CET	49761	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:06.683691978 CET	49763	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:06.826797962 CET	13	49763	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:06.826914072 CET	49763	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:06.968056917 CET	13	49763	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:06.968178988 CET	49763	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:06.968295097 CET	49763	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:06.992280006 CET	49764	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:07.108751059 CET	13	49763	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:07.134205103 CET	13	49764	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:07.134340048 CET	49764	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:07.277107954 CET	13	49764	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:07.277153015 CET	13	49764	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:07.277285099 CET	49764	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:07.277460098 CET	49764	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:07.303855896 CET	49765	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:07.417843103 CET	13	49764	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:07.446037054 CET	13	49765	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:07.446165085 CET	49765	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:07.586888075 CET	13	49765	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:07.586973906 CET	49765	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:07.587467909 CET	49765	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:07.613993883 CET	49766	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:29:07.728156090 CET	13	49765	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:07.762147903 CET	13	49766	128.138.141.172	192.168.2.5
Feb 8, 2022 08:29:07.762322903 CET	49766	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:29:07.910222054 CET	13	49766	128.138.141.172	192.168.2.5
Feb 8, 2022 08:29:07.910252094 CET	13	49766	128.138.141.172	192.168.2.5
Feb 8, 2022 08:29:07.910336018 CET	49766	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:29:07.910545111 CET	49766	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:29:07.924206972 CET	49768	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:07.924249887 CET	443	49768	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:07.924369097 CET	49768	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:07.925630093 CET	49768	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:07.925646067 CET	443	49768	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:08.006207943 CET	443	49768	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:08.010025024 CET	49768	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:08.010060072 CET	443	49768	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:08.058248043 CET	13	49766	128.138.141.172	192.168.2.5
Feb 8, 2022 08:29:08.148346901 CET	443	49768	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:08.148376942 CET	443	49768	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:08.148436069 CET	443	49768	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:08.148519039 CET	49768	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:08.148596048 CET	49768	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:08.149522066 CET	49768	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:08.310883999 CET	49769	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:08.451864958 CET	13	49769	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:08.451991081 CET	49769	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:08.592467070 CET	13	49769	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:08.592588902 CET	49769	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:08.592705011 CET	49769	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:08.618212938 CET	49770	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:08.733145952 CET	13	49769	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:08.758277893 CET	13	49770	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:08.758379936 CET	49770	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:08.898514032 CET	13	49770	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:08.898617029 CET	49770	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:08.898724079 CET	49770	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:08.925779104 CET	49771	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:09.038804054 CET	13	49770	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:09.066220999 CET	13	49771	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:09.066353083 CET	49771	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:09.206712961 CET	13	49771	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:09.206796885 CET	49771	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:09.206935883 CET	49771	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:09.229727030 CET	49772	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:09.347280025 CET	13	49771	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:09.379291058 CET	13	49772	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:09.379369020 CET	49772	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:09.528958082 CET	13	49772	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:09.528989077 CET	13	49772	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:09.529071093 CET	49772	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:09.529269934 CET	49772	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:09.538063049 CET	49774	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:09.538110018 CET	443	49774	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:09.538192034 CET	49774	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:09.538645029 CET	49774	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:09.538664103 CET	443	49774	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:09.619179010 CET	443	49774	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:09.621510983 CET	49774	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:09.621543884 CET	443	49774	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:09.678802967 CET	13	49772	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:09.761641979 CET	443	49774	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:09.761674881 CET	443	49774	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:09.761744022 CET	443	49774	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:09.761768103 CET	49774	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:09.761816978 CET	49774	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:09.814467907 CET	49774	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:09.998476982 CET	49776	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:10.138667107 CET	13	49776	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:10.138797998 CET	49776	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:10.278820992 CET	13	49776	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:10.278939009 CET	49776	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:10.279021025 CET	49776	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:10.303520918 CET	49777	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:10.419022083 CET	13	49776	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:10.443799973 CET	13	49777	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:10.443897963 CET	49777	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:10.584100962 CET	13	49777	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:10.584182024 CET	49777	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:10.584352970 CET	49777	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:10.610476017 CET	49778	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:10.724415064 CET	13	49777	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:10.750698090 CET	13	49778	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:10.750871897 CET	49778	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:10.891087055 CET	13	49778	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:10.891170025 CET	49778	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:10.891346931 CET	49778	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:10.923672915 CET	49779	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:11.031409025 CET	13	49778	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:11.075845003 CET	13	49779	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:11.076035976 CET	49779	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:11.228276968 CET	13	49779	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:11.228302956 CET	13	49779	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:11.228482962 CET	49779	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:11.228641033 CET	49779	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:11.237823009 CET	49780	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:11.237884045 CET	443	49780	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:11.238014936 CET	49780	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:11.238481998 CET	49780	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:11.238509893 CET	443	49780	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:11.316679001 CET	443	49780	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:11.319230080 CET	49780	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:11.319269896 CET	443	49780	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:11.380888939 CET	13	49779	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:11.494390011 CET	443	49780	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:11.494417906 CET	443	49780	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:11.494481087 CET	443	49780	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:11.494532108 CET	49780	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:11.494580984 CET	49780	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:11.495548964 CET	49780	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:11.647722006 CET	49781	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:11.788291931 CET	13	49781	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:11.788477898 CET	49781	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:11.928813934 CET	13	49781	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:11.928941965 CET	49781	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:11.929088116 CET	49781	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:11.951778889 CET	49782	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:12.069421053 CET	13	49781	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:12.092274904 CET	13	49782	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:12.092467070 CET	49782	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:12.232801914 CET	13	49782	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:12.232889891 CET	49782	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:12.232980967 CET	49782	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:12.264914036 CET	49783	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:12.373123884 CET	13	49782	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:12.405283928 CET	13	49783	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:12.405396938 CET	49783	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:12.545697927 CET	13	49783	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:12.545816898 CET	49783	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:12.545908928 CET	49783	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:12.570748091 CET	49784	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:29:12.686235905 CET	13	49783	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:12.715580940 CET	13	49784	128.138.141.172	192.168.2.5
Feb 8, 2022 08:29:12.715677977 CET	49784	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:29:12.859986067 CET	13	49784	128.138.141.172	192.168.2.5
Feb 8, 2022 08:29:12.860019922 CET	13	49784	128.138.141.172	192.168.2.5
Feb 8, 2022 08:29:12.860158920 CET	49784	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:29:13.275038958 CET	49784	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:29:13.289940119 CET	49785	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:13.289997101 CET	443	49785	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:13.290074110 CET	49785	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:13.290427923 CET	49785	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:13.290450096 CET	443	49785	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:13.370037079 CET	443	49785	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:13.371853113 CET	49785	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:13.371886969 CET	443	49785	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:13.419780016 CET	13	49784	128.138.141.172	192.168.2.5
Feb 8, 2022 08:29:13.531620026 CET	443	49785	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:13.531651020 CET	443	49785	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:13.531713963 CET	443	49785	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:13.531739950 CET	49785	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:13.531765938 CET	49785	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:13.532562017 CET	49785	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:13.701056004 CET	49786	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:13.841473103 CET	13	49786	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:13.841598988 CET	49786	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:13.984252930 CET	13	49786	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:13.984277964 CET	13	49786	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:13.984672070 CET	49786	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:13.984710932 CET	49786	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:13.991564035 CET	49787	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:13.991620064 CET	443	49787	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:13.991724014 CET	49787	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:13.992106915 CET	49787	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:13.992120028 CET	443	49787	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:14.071074009 CET	443	49787	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:14.124991894 CET	13	49786	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:14.224776983 CET	49787	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:14.624762058 CET	49787	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:14.624789000 CET	443	49787	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:14.740413904 CET	443	49787	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:14.740453005 CET	443	49787	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:14.740463972 CET	443	49787	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:14.740528107 CET	443	49787	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:14.740544081 CET	49787	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:14.740576982 CET	49787	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:14.741903067 CET	49787	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:15.150329113 CET	49788	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:15.290560007 CET	13	49788	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:15.290662050 CET	49788	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:15.430839062 CET	13	49788	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:15.430860043 CET	13	49788	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:15.430980921 CET	49788	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:15.431178093 CET	49788	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:15.457583904 CET	49789	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:15.571362019 CET	13	49788	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:15.597793102 CET	13	49789	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:15.597961903 CET	49789	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:15.738149881 CET	13	49789	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:15.738239050 CET	49789	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:15.738358974 CET	49789	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:15.770962954 CET	49790	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:15.878559113 CET	13	49789	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:15.911521912 CET	13	49790	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:15.911658049 CET	49790	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:16.052118063 CET	13	49790	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:16.052227974 CET	49790	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:16.052344084 CET	49790	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:16.075480938 CET	49791	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:29:16.192743063 CET	13	49790	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:16.223606110 CET	13	49791	128.138.141.172	192.168.2.5
Feb 8, 2022 08:29:16.223740101 CET	49791	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:29:16.371474028 CET	13	49791	128.138.141.172	192.168.2.5
Feb 8, 2022 08:29:16.371495008 CET	13	49791	128.138.141.172	192.168.2.5
Feb 8, 2022 08:29:16.372594118 CET	49791	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:29:16.372754097 CET	49791	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:29:16.380239010 CET	49792	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:16.380281925 CET	443	49792	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:16.380366087 CET	49792	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:16.380728960 CET	49792	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:16.380740881 CET	443	49792	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:16.457432985 CET	443	49792	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:16.458930016 CET	49792	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:16.458976984 CET	443	49792	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:16.520667076 CET	13	49791	128.138.141.172	192.168.2.5
Feb 8, 2022 08:29:16.628849983 CET	443	49792	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:16.628874063 CET	443	49792	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:16.628930092 CET	443	49792	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:16.628987074 CET	49792	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:16.629026890 CET	49792	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:16.629832029 CET	49792	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:16.816524982 CET	49793	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:16.956943989 CET	13	49793	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:16.957103014 CET	49793	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:17.097517014 CET	13	49793	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:17.097687960 CET	49793	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:17.097829103 CET	49793	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:17.121469975 CET	49794	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:17.238210917 CET	13	49793	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:17.261790991 CET	13	49794	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:17.263550043 CET	49794	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:17.403837919 CET	13	49794	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:17.403980970 CET	49794	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:17.404153109 CET	49794	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:17.430605888 CET	49795	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:17.544333935 CET	13	49794	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:17.571070910 CET	13	49795	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:17.571249962 CET	49795	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:17.711675882 CET	13	49795	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:17.711786032 CET	49795	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:17.711899996 CET	49795	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:17.737921000 CET	49796	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:17.852154970 CET	13	49795	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:17.890064001 CET	13	49796	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:17.890197992 CET	49796	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:18.042500019 CET	13	49796	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:18.042529106 CET	13	49796	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:18.042639017 CET	49796	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:18.042906046 CET	49796	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:18.053078890 CET	49797	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:18.053122997 CET	443	49797	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:18.053252935 CET	49797	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:18.053890944 CET	49797	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:18.053908110 CET	443	49797	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:18.134527922 CET	443	49797	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:18.137094975 CET	49797	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:18.137120008 CET	443	49797	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:18.194926977 CET	13	49796	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:18.336213112 CET	443	49797	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:18.336250067 CET	443	49797	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:18.336312056 CET	443	49797	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:18.336378098 CET	49797	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:18.336409092 CET	49797	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:18.337493896 CET	49797	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:18.503190994 CET	49798	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:18.643466949 CET	13	49798	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:18.643578053 CET	49798	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:18.783776999 CET	13	49798	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:18.783899069 CET	49798	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:18.784060001 CET	49798	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:18.809520960 CET	49799	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:18.924174070 CET	13	49798	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:18.949881077 CET	13	49799	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:18.950000048 CET	49799	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:19.090255976 CET	13	49799	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:19.090358019 CET	49799	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:19.090476990 CET	49799	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:19.117355108 CET	49800	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:19.230607033 CET	13	49799	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:19.258064985 CET	13	49800	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:19.258280993 CET	49800	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:19.398933887 CET	13	49800	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:19.399018049 CET	49800	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:19.399327993 CET	49800	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:19.423031092 CET	49801	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:29:19.539763927 CET	13	49800	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:19.575256109 CET	13	49801	132.163.97.1	192.168.2.5
Feb 8, 2022 08:29:19.575361013 CET	49801	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:29:19.727575064 CET	13	49801	132.163.97.1	192.168.2.5
Feb 8, 2022 08:29:19.727595091 CET	13	49801	132.163.97.1	192.168.2.5
Feb 8, 2022 08:29:19.727659941 CET	49801	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:29:19.727993011 CET	49801	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:29:19.756448030 CET	49802	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:19.756499052 CET	443	49802	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:19.756834030 CET	49802	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:19.757365942 CET	49802	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:19.757386923 CET	443	49802	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:19.838876963 CET	443	49802	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:19.840903997 CET	49802	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:19.840940952 CET	443	49802	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:19.880165100 CET	13	49801	132.163.97.1	192.168.2.5
Feb 8, 2022 08:29:20.020030975 CET	443	49802	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:20.020072937 CET	443	49802	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:20.020147085 CET	443	49802	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:20.020237923 CET	49802	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:20.021425009 CET	49802	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:20.198252916 CET	49803	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:20.338598967 CET	13	49803	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:20.338717937 CET	49803	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:20.479079962 CET	13	49803	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:20.479221106 CET	49803	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:20.479331017 CET	49803	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:20.503396988 CET	49804	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:20.620106936 CET	13	49803	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:20.644017935 CET	13	49804	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:20.644176960 CET	49804	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:20.784699917 CET	13	49804	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:20.784816980 CET	49804	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:20.784965038 CET	49804	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:20.815284014 CET	49805	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:20.925333977 CET	13	49804	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:20.955754995 CET	13	49805	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:20.955959082 CET	49805	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:21.096328974 CET	13	49805	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:21.096421957 CET	49805	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:21.096535921 CET	49805	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:21.121790886 CET	49806	13	192.168.2.5	132.163.97.6
Feb 8, 2022 08:29:21.236963034 CET	13	49805	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:21.271476984 CET	13	49806	132.163.97.6	192.168.2.5
Feb 8, 2022 08:29:21.271652937 CET	49806	13	192.168.2.5	132.163.97.6
Feb 8, 2022 08:29:21.421251059 CET	13	49806	132.163.97.6	192.168.2.5
Feb 8, 2022 08:29:21.421277046 CET	13	49806	132.163.97.6	192.168.2.5
Feb 8, 2022 08:29:21.421432972 CET	49806	13	192.168.2.5	132.163.97.6
Feb 8, 2022 08:29:21.421624899 CET	49806	13	192.168.2.5	132.163.97.6
Feb 8, 2022 08:29:21.430937052 CET	49807	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:21.430989981 CET	443	49807	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:21.431117058 CET	49807	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:21.431796074 CET	49807	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:21.431822062 CET	443	49807	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:21.511835098 CET	443	49807	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:21.514863968 CET	49807	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:21.514910936 CET	443	49807	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:21.571132898 CET	13	49806	132.163.97.6	192.168.2.5
Feb 8, 2022 08:29:21.720709085 CET	443	49807	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:21.720747948 CET	443	49807	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:21.720825911 CET	443	49807	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:21.720844984 CET	49807	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:21.720886946 CET	49807	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:21.722064972 CET	49807	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:21.891889095 CET	49808	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:22.033520937 CET	13	49808	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:22.033663988 CET	49808	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:22.174099922 CET	13	49808	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:22.174226046 CET	49808	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:22.174329996 CET	49808	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:22.199228048 CET	49809	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:22.314676046 CET	13	49808	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:22.339339972 CET	13	49809	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:22.339431047 CET	49809	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:22.479564905 CET	13	49809	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:22.479656935 CET	49809	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:22.479805946 CET	49809	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:22.506460905 CET	49810	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:22.620269060 CET	13	49809	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:22.647036076 CET	13	49810	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:22.649143934 CET	49810	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:22.790405035 CET	13	49810	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:22.791495085 CET	49810	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:22.791580915 CET	49810	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:22.819721937 CET	49811	13	192.168.2.5	132.163.97.6
Feb 8, 2022 08:29:22.932014942 CET	13	49810	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:22.972099066 CET	13	49811	132.163.97.6	192.168.2.5
Feb 8, 2022 08:29:22.972207069 CET	49811	13	192.168.2.5	132.163.97.6
Feb 8, 2022 08:29:23.124619007 CET	13	49811	132.163.97.6	192.168.2.5
Feb 8, 2022 08:29:23.124650955 CET	13	49811	132.163.97.6	192.168.2.5
Feb 8, 2022 08:29:23.124722004 CET	49811	13	192.168.2.5	132.163.97.6
Feb 8, 2022 08:29:23.124897003 CET	49811	13	192.168.2.5	132.163.97.6
Feb 8, 2022 08:29:23.131632090 CET	49812	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:23.131707907 CET	443	49812	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:23.131793976 CET	49812	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:23.132205963 CET	49812	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:23.132237911 CET	443	49812	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:23.211589098 CET	443	49812	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:23.213320017 CET	49812	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:23.213357925 CET	443	49812	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:23.277189970 CET	13	49811	132.163.97.6	192.168.2.5
Feb 8, 2022 08:29:23.361598969 CET	443	49812	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:23.361624956 CET	443	49812	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:23.361685991 CET	443	49812	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:23.361728907 CET	49812	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:23.361761093 CET	49812	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:23.362704992 CET	49812	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:23.524784088 CET	49813	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:23.665780067 CET	13	49813	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:23.665942907 CET	49813	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:23.806318998 CET	13	49813	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:23.806411028 CET	49813	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:23.806515932 CET	49813	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:23.828589916 CET	49814	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:23.946986914 CET	13	49813	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:23.968950033 CET	13	49814	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:23.969046116 CET	49814	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:24.109359026 CET	13	49814	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:24.109484911 CET	49814	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:24.109582901 CET	49814	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:24.134464979 CET	49815	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:24.249782085 CET	13	49814	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:24.274878979 CET	13	49815	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:24.275011063 CET	49815	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:24.415524960 CET	13	49815	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:24.415636063 CET	49815	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:24.415725946 CET	49815	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:24.440053940 CET	49816	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:24.556118965 CET	13	49815	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:24.590010881 CET	13	49816	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:24.590105057 CET	49816	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:24.740031958 CET	13	49816	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:24.740060091 CET	13	49816	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:24.740458012 CET	49816	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:24.740598917 CET	49816	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:24.754407883 CET	49817	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:24.754450083 CET	443	49817	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:24.754524946 CET	49817	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:24.754848003 CET	49817	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:24.754863024 CET	443	49817	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:24.831828117 CET	443	49817	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:24.833969116 CET	49817	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:24.834005117 CET	443	49817	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:24.890317917 CET	13	49816	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:25.008361101 CET	443	49817	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:25.008403063 CET	443	49817	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:25.008459091 CET	49817	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:25.008481026 CET	443	49817	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:25.008493900 CET	443	49817	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:25.008514881 CET	49817	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:25.008541107 CET	49817	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:25.009274960 CET	49817	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:25.171130896 CET	49818	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:25.311480999 CET	13	49818	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:25.311623096 CET	49818	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:25.451978922 CET	13	49818	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:25.452078104 CET	49818	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:25.452174902 CET	49818	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:25.477488041 CET	49819	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:25.592395067 CET	13	49818	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:25.617944956 CET	13	49819	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:25.618190050 CET	49819	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:25.758560896 CET	13	49819	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:25.758757114 CET	49819	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:25.758862972 CET	49819	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:25.783379078 CET	49820	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:25.899224043 CET	13	49819	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:25.923846960 CET	13	49820	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:25.925354958 CET	49820	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:26.065602064 CET	13	49820	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:26.065730095 CET	49820	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:26.065865040 CET	49820	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:26.091428995 CET	49823	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:26.206218004 CET	13	49820	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:26.243565083 CET	13	49823	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:26.246776104 CET	49823	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:26.399101973 CET	13	49823	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:26.399146080 CET	13	49823	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:26.399225950 CET	49823	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:26.399333000 CET	49823	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:26.405864954 CET	49824	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:26.405910969 CET	443	49824	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:26.406021118 CET	49824	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:26.406375885 CET	49824	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:26.406394005 CET	443	49824	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:26.487283945 CET	443	49824	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:26.492193937 CET	49824	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:26.492239952 CET	443	49824	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:26.551316023 CET	13	49823	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:26.652020931 CET	443	49824	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:26.652045012 CET	443	49824	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:26.652102947 CET	443	49824	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:26.652225971 CET	49824	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:26.652331114 CET	49824	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:26.653162956 CET	49824	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:26.813880920 CET	49825	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:26.954072952 CET	13	49825	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:26.954268932 CET	49825	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:27.094423056 CET	13	49825	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:27.094527006 CET	49825	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:27.094633102 CET	49825	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:27.118890047 CET	49826	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:27.234646082 CET	13	49825	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:27.259546995 CET	13	49826	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:27.259644032 CET	49826	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:27.400285959 CET	13	49826	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:27.400372028 CET	49826	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:27.400463104 CET	49826	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:27.428850889 CET	49827	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:27.541188002 CET	13	49826	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:27.569402933 CET	13	49827	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:27.569530964 CET	49827	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:27.710179090 CET	13	49827	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:27.710267067 CET	49827	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:27.710365057 CET	49827	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:27.734807014 CET	49828	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:27.851850033 CET	13	49827	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:27.886059999 CET	13	49828	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:27.886136055 CET	49828	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:28.034671068 CET	13	49828	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:28.034717083 CET	13	49828	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:28.034775019 CET	49828	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:28.034887075 CET	49828	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:28.041882038 CET	49829	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:28.041934013 CET	443	49829	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:28.042011976 CET	49829	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:28.042321920 CET	49829	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:28.042340040 CET	443	49829	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:28.124171019 CET	443	49829	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:28.125672102 CET	49829	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:28.125724077 CET	443	49829	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:28.183360100 CET	13	49828	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:28.281492949 CET	443	49829	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:28.281543970 CET	443	49829	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:28.281680107 CET	49829	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:28.281697035 CET	443	49829	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:28.281763077 CET	49829	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:28.282042980 CET	443	49829	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:28.282140017 CET	443	49829	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:28.282213926 CET	49829	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:28.283548117 CET	49829	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:28.448964119 CET	49830	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:28.589148998 CET	13	49830	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:28.590075970 CET	49830	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:28.730169058 CET	13	49830	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:28.731261969 CET	49830	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:28.731311083 CET	49830	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:28.758037090 CET	49831	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:28.871454954 CET	13	49830	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:28.898309946 CET	13	49831	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:28.902091980 CET	49831	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:29.042336941 CET	13	49831	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:29.042443991 CET	49831	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:29.042534113 CET	49831	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:29.068239927 CET	49832	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:29.182647943 CET	13	49831	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:29.208853006 CET	13	49832	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:29.212110996 CET	49832	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:29.352711916 CET	13	49832	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:29.353786945 CET	49832	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:29.353907108 CET	49832	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:29.384723902 CET	49833	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:29.494278908 CET	13	49832	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:29.537142038 CET	13	49833	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:29.537259102 CET	49833	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:29.689562082 CET	13	49833	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:29.689584970 CET	13	49833	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:29.689749956 CET	49833	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:29.689966917 CET	49833	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:29.697652102 CET	49834	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:29.697709084 CET	443	49834	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:29.697829962 CET	49834	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:29.698229074 CET	49834	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:29.698246956 CET	443	49834	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:29.779887915 CET	443	49834	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:29.782301903 CET	49834	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:29.782341957 CET	443	49834	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:29.842297077 CET	13	49833	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:29.958162069 CET	443	49834	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:29.958233118 CET	443	49834	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:29.958434105 CET	443	49834	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:29.958504915 CET	49834	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:29.958612919 CET	49834	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:29.959430933 CET	49834	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:30.118444920 CET	49835	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:30.258641958 CET	13	49835	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:30.258789062 CET	49835	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:30.398947001 CET	13	49835	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:30.399024963 CET	49835	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:30.399113894 CET	49835	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:30.424928904 CET	49836	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:30.539138079 CET	13	49835	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:30.565509081 CET	13	49836	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:30.565766096 CET	49836	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:30.706595898 CET	13	49836	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:30.706710100 CET	49836	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:30.706794977 CET	49836	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:30.769306898 CET	49837	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:30.847309113 CET	13	49836	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:30.909821033 CET	13	49837	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:30.909910917 CET	49837	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:31.050467014 CET	13	49837	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:31.050580978 CET	49837	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:31.050657034 CET	49837	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:31.075098991 CET	49838	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:31.191164017 CET	13	49837	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:31.227221966 CET	13	49838	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:31.227323055 CET	49838	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:31.379503965 CET	13	49838	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:31.379549026 CET	13	49838	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:31.379638910 CET	49838	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:31.779750109 CET	49838	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:31.787520885 CET	49839	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:31.787571907 CET	443	49839	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:31.787735939 CET	49839	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:31.788259983 CET	49839	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:31.788274050 CET	443	49839	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:31.865004063 CET	443	49839	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:31.866640091 CET	49839	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:31.866667032 CET	443	49839	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:31.931948900 CET	13	49838	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:32.007441998 CET	443	49839	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:32.007463932 CET	443	49839	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:32.007519007 CET	443	49839	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:32.007529974 CET	49839	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:32.007566929 CET	49839	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:32.008461952 CET	49839	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:32.728986979 CET	49840	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:32.869889975 CET	13	49840	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:32.870052099 CET	49840	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:33.010696888 CET	13	49840	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:33.010783911 CET	49840	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:33.203835964 CET	49840	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:33.298104048 CET	49841	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:33.344729900 CET	13	49840	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:33.438569069 CET	13	49841	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:33.438698053 CET	49841	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:33.578963041 CET	13	49841	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:33.579063892 CET	49841	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:33.579161882 CET	49841	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:33.603677034 CET	49842	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:33.719683886 CET	13	49841	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:33.743983984 CET	13	49842	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:33.744146109 CET	49842	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:33.884373903 CET	13	49842	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:33.884535074 CET	49842	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:33.884583950 CET	49842	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:33.915282011 CET	49843	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:34.025095940 CET	13	49842	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:34.067608118 CET	13	49843	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:34.067739010 CET	49843	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:34.220005989 CET	13	49843	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:34.220042944 CET	13	49843	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:34.220253944 CET	49843	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:34.220349073 CET	49843	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:34.253189087 CET	49844	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:34.253259897 CET	443	49844	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:34.253356934 CET	49844	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:34.253695965 CET	49844	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:34.253730059 CET	443	49844	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:34.334341049 CET	443	49844	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:34.336348057 CET	49844	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:34.336385965 CET	443	49844	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:34.372594118 CET	13	49843	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:34.484390974 CET	443	49844	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:34.484447956 CET	443	49844	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:34.484555960 CET	443	49844	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:34.484667063 CET	49844	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:34.486133099 CET	49844	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:34.644733906 CET	49845	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:34.785115004 CET	13	49845	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:34.785218954 CET	49845	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:34.925662041 CET	13	49845	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:34.926898956 CET	49845	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:34.927064896 CET	49845	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:34.952756882 CET	49846	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:35.067439079 CET	13	49845	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:35.092880964 CET	13	49846	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:35.093005896 CET	49846	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:35.233059883 CET	13	49846	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:35.236548901 CET	49846	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:35.236638069 CET	49846	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:35.270797968 CET	49847	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:35.376691103 CET	13	49846	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:35.411304951 CET	13	49847	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:35.411469936 CET	49847	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:35.551887035 CET	13	49847	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:35.551950932 CET	49847	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:35.552083969 CET	49847	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:35.576703072 CET	49848	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:35.692488909 CET	13	49847	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:35.723963022 CET	13	49848	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:35.724067926 CET	49848	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:35.870953083 CET	13	49848	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:35.870999098 CET	13	49848	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:35.871081114 CET	49848	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:35.871242046 CET	49848	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:35.877707005 CET	49849	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:35.877747059 CET	443	49849	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:35.877836943 CET	49849	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:35.878218889 CET	49849	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:35.878233910 CET	443	49849	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:35.957669973 CET	443	49849	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:35.959788084 CET	49849	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:35.959842920 CET	443	49849	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:36.018197060 CET	13	49848	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:36.108330965 CET	443	49849	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:36.108361959 CET	443	49849	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:36.108412981 CET	49849	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:36.108428955 CET	443	49849	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:36.108443022 CET	443	49849	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:36.108470917 CET	49849	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:36.108488083 CET	49849	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:36.109524012 CET	49849	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:36.259001017 CET	49850	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:36.399672031 CET	13	49850	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:36.399864912 CET	49850	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:36.540340900 CET	13	49850	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:36.540431976 CET	49850	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:36.540533066 CET	49850	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:36.564104080 CET	49851	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:36.680957079 CET	13	49850	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:36.704610109 CET	13	49851	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:36.704833031 CET	49851	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:36.845369101 CET	13	49851	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:36.845490932 CET	49851	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:36.845570087 CET	49851	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:36.873286009 CET	49852	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:36.987196922 CET	13	49851	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:37.013978004 CET	13	49852	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:37.014084101 CET	49852	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:37.154464960 CET	13	49852	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:37.154658079 CET	49852	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:37.154683113 CET	49852	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:37.179754019 CET	49853	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:37.295166969 CET	13	49852	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:37.332216978 CET	13	49853	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:37.332307100 CET	49853	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:37.484783888 CET	13	49853	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:37.484833002 CET	13	49853	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:37.485727072 CET	49853	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:37.485800028 CET	49853	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:37.492028952 CET	49854	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:37.492094040 CET	443	49854	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:37.492201090 CET	49854	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:37.492687941 CET	49854	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:37.492721081 CET	443	49854	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:37.575278044 CET	443	49854	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:37.578353882 CET	49854	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:37.578411102 CET	443	49854	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:37.638178110 CET	13	49853	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:37.720179081 CET	443	49854	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:37.720226049 CET	443	49854	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:37.720315933 CET	443	49854	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:37.720397949 CET	49854	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:37.720484972 CET	49854	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:37.721664906 CET	49854	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:37.876801014 CET	49855	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:38.017297983 CET	13	49855	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:38.017548084 CET	49855	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:38.157965899 CET	13	49855	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:38.158076048 CET	49855	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:38.158169031 CET	49855	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:38.183749914 CET	49856	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:38.298549891 CET	13	49855	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:38.324075937 CET	13	49856	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:38.328941107 CET	49856	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:38.469356060 CET	13	49856	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:38.469513893 CET	49856	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:38.469640017 CET	49856	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:38.492883921 CET	49857	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:38.610001087 CET	13	49856	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:38.633255005 CET	13	49857	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:38.633474112 CET	49857	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:38.773884058 CET	13	49857	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:38.774107933 CET	49857	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:38.774255037 CET	49857	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:38.801579952 CET	49858	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:38.914604902 CET	13	49857	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:38.954014063 CET	13	49858	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:38.954209089 CET	49858	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:39.106466055 CET	13	49858	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:39.106498003 CET	13	49858	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:39.106678963 CET	49858	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:39.106801033 CET	49858	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:39.112759113 CET	49859	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:39.112845898 CET	443	49859	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:39.112972021 CET	49859	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:39.113440037 CET	49859	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:39.113461018 CET	443	49859	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:39.196187973 CET	443	49859	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:39.197886944 CET	49859	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:39.197932959 CET	443	49859	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:39.261918068 CET	13	49858	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:39.354902029 CET	443	49859	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:39.354928970 CET	443	49859	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:39.354990959 CET	443	49859	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:39.355021954 CET	49859	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:39.355057001 CET	49859	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:39.355772018 CET	49859	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:39.507347107 CET	49860	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:39.647635937 CET	13	49860	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:39.647814989 CET	49860	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:39.788198948 CET	13	49860	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:39.788289070 CET	49860	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:39.788578987 CET	49860	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:39.810260057 CET	49861	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:39.928822041 CET	13	49860	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:39.950666904 CET	13	49861	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:39.950804949 CET	49861	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:40.091633081 CET	13	49861	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:40.091725111 CET	49861	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:40.091825962 CET	49861	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:40.116497040 CET	49862	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:40.232830048 CET	13	49861	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:40.257061005 CET	13	49862	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:40.257232904 CET	49862	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:40.397514105 CET	13	49862	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:40.397645950 CET	49862	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:40.397797108 CET	49862	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:40.420129061 CET	49863	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:40.538470984 CET	13	49862	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:40.568038940 CET	13	49863	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:40.568232059 CET	49863	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:40.716203928 CET	13	49863	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:40.716233969 CET	13	49863	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:40.720191956 CET	49863	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:40.720400095 CET	49863	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:40.736380100 CET	49864	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:40.736421108 CET	443	49864	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:40.736527920 CET	49864	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:40.737318039 CET	49864	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:40.737339020 CET	443	49864	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:40.820213079 CET	443	49864	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:40.824202061 CET	49864	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:40.824235916 CET	443	49864	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:40.868310928 CET	13	49863	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:40.976938963 CET	443	49864	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:40.976989985 CET	443	49864	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:40.977087021 CET	49864	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:40.977092981 CET	443	49864	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:40.978507042 CET	49864	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:40.978842974 CET	49864	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:41.129111052 CET	49865	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:41.269721031 CET	13	49865	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:41.272900105 CET	49865	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:41.413717031 CET	13	49865	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:41.417078018 CET	49865	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:41.417176008 CET	49865	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:41.442898989 CET	49866	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:41.557717085 CET	13	49865	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:41.583431005 CET	13	49866	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:41.583560944 CET	49866	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:41.724067926 CET	13	49866	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:41.724200010 CET	49866	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:41.724458933 CET	49866	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:41.754591942 CET	49867	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:41.864810944 CET	13	49866	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:41.894821882 CET	13	49867	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:41.894916058 CET	49867	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:42.035372972 CET	13	49867	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:42.035526037 CET	49867	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:42.035609007 CET	49867	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:42.058243036 CET	49868	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:42.175811052 CET	13	49867	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:42.206469059 CET	13	49868	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:42.206645012 CET	49868	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:42.354562044 CET	13	49868	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:42.354588032 CET	13	49868	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:42.354733944 CET	49868	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:42.354911089 CET	49868	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:42.362284899 CET	49869	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:42.362317085 CET	443	49869	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:42.362417936 CET	49869	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:42.362854958 CET	49869	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:42.362868071 CET	443	49869	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:42.440160036 CET	443	49869	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:42.441828966 CET	49869	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:42.441860914 CET	443	49869	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:42.502783060 CET	13	49868	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:42.586415052 CET	443	49869	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:42.586441040 CET	443	49869	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:42.586554050 CET	443	49869	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:42.586555958 CET	49869	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:42.586602926 CET	49869	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:42.587500095 CET	49869	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:42.742510080 CET	49870	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:42.883069992 CET	13	49870	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:42.883168936 CET	49870	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:43.023734093 CET	13	49870	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:43.023865938 CET	49870	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:43.023933887 CET	49870	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:43.048435926 CET	49871	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:43.164470911 CET	13	49870	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:43.188937902 CET	13	49871	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:43.189043999 CET	49871	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:43.329484940 CET	13	49871	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:43.329652071 CET	49871	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:43.329715967 CET	49871	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:43.353560925 CET	49872	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:43.470174074 CET	13	49871	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:43.493956089 CET	13	49872	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:43.494107008 CET	49872	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:43.634582043 CET	13	49872	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:43.637304068 CET	49872	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:43.637352943 CET	49872	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:43.660865068 CET	49873	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:43.777904034 CET	13	49872	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:43.812926054 CET	13	49873	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:43.813301086 CET	49873	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:43.965387106 CET	13	49873	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:43.965410948 CET	13	49873	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:43.965531111 CET	49873	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:43.965675116 CET	49873	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:43.970752954 CET	49874	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:43.970807076 CET	443	49874	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:43.972913980 CET	49874	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:43.973341942 CET	49874	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:43.973361969 CET	443	49874	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:44.053096056 CET	443	49874	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:44.055768967 CET	49874	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:44.055795908 CET	443	49874	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:44.117578983 CET	13	49873	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:44.199733019 CET	443	49874	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:44.199762106 CET	443	49874	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:44.199843884 CET	443	49874	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:44.199867010 CET	49874	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:44.201313019 CET	49874	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:44.201675892 CET	49874	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:44.349539995 CET	49876	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:44.489811897 CET	13	49876	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:44.490889072 CET	49876	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:44.631124020 CET	13	49876	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:44.631233931 CET	49876	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:44.631334066 CET	49876	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:44.655308962 CET	49877	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:44.771477938 CET	13	49876	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:44.796098948 CET	13	49877	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:44.796241999 CET	49877	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:44.936899900 CET	13	49877	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:44.936979055 CET	49877	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:44.937058926 CET	49877	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:44.963031054 CET	49878	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:45.078249931 CET	13	49877	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:45.103391886 CET	13	49878	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:45.103579044 CET	49878	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:45.243844032 CET	13	49878	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:45.243973017 CET	49878	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:45.244121075 CET	49878	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:45.267225027 CET	49879	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:45.384368896 CET	13	49878	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:45.419562101 CET	13	49879	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:45.419667959 CET	49879	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:45.571994066 CET	13	49879	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:45.572062016 CET	13	49879	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:45.572175026 CET	49879	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:45.572419882 CET	49879	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:45.581609011 CET	49880	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:45.581640959 CET	443	49880	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:45.581733942 CET	49880	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:45.582165003 CET	49880	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:45.582180977 CET	443	49880	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:45.663538933 CET	443	49880	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:45.666246891 CET	49880	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:45.666279078 CET	443	49880	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:45.724781990 CET	13	49879	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:45.849015951 CET	443	49880	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:45.849057913 CET	443	49880	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:45.849123955 CET	443	49880	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:45.849134922 CET	49880	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:45.849169970 CET	49880	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:45.850218058 CET	49880	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:46.007303953 CET	49881	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:46.147891045 CET	13	49881	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:46.147984028 CET	49881	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:46.288594007 CET	13	49881	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:46.288736105 CET	49881	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:46.288952112 CET	49881	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:46.314898014 CET	49884	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:46.429452896 CET	13	49881	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:46.455517054 CET	13	49884	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:46.455760956 CET	49884	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:46.596354961 CET	13	49884	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:46.597052097 CET	49884	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:46.597132921 CET	49884	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:46.622076988 CET	49885	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:46.737816095 CET	13	49884	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:46.762830973 CET	13	49885	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:46.763607979 CET	49885	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:46.904305935 CET	13	49885	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:46.905242920 CET	49885	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:46.905385971 CET	49885	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:46.932370901 CET	49886	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:29:47.046071053 CET	13	49885	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:47.076812983 CET	13	49886	128.138.141.172	192.168.2.5
Feb 8, 2022 08:29:47.076931953 CET	49886	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:29:47.221002102 CET	13	49886	128.138.141.172	192.168.2.5
Feb 8, 2022 08:29:47.221024990 CET	13	49886	128.138.141.172	192.168.2.5
Feb 8, 2022 08:29:47.222099066 CET	49886	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:29:47.222165108 CET	49886	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:29:47.251279116 CET	49887	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:47.251326084 CET	443	49887	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:47.251895905 CET	49887	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:47.252214909 CET	49887	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:47.252238989 CET	443	49887	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:47.332847118 CET	443	49887	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:47.335048914 CET	49887	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:47.335099936 CET	443	49887	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:47.366462946 CET	13	49886	128.138.141.172	192.168.2.5
Feb 8, 2022 08:29:47.547384024 CET	443	49887	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:47.547427893 CET	443	49887	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:47.547521114 CET	443	49887	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:47.547604084 CET	49887	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:47.548779011 CET	49887	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:47.697906971 CET	49888	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:47.838567972 CET	13	49888	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:47.838687897 CET	49888	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:47.979295015 CET	13	49888	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:47.979413986 CET	49888	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:47.979528904 CET	49888	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:48.001651049 CET	49889	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:48.120054960 CET	13	49888	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:48.142272949 CET	13	49889	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:48.142422915 CET	49889	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:48.283004045 CET	13	49889	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:48.283081055 CET	49889	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:48.283176899 CET	49889	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:48.305167913 CET	49890	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:48.423533916 CET	13	49889	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:48.445612907 CET	13	49890	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:48.445715904 CET	49890	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:48.586121082 CET	13	49890	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:48.586275101 CET	49890	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:48.595226049 CET	49890	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:48.735515118 CET	13	49890	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:48.769494057 CET	49891	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:48.918282032 CET	13	49891	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:48.918385029 CET	49891	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:49.066838980 CET	13	49891	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:49.066868067 CET	13	49891	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:49.066972017 CET	49891	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:49.067127943 CET	49891	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:49.072575092 CET	49892	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:49.072606087 CET	443	49892	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:49.072695017 CET	49892	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:49.073024988 CET	49892	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:49.073035955 CET	443	49892	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:49.154247999 CET	443	49892	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:49.155759096 CET	49892	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:49.155801058 CET	443	49892	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:49.216388941 CET	13	49891	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:49.322932005 CET	443	49892	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:49.322964907 CET	443	49892	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:49.323040962 CET	443	49892	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:49.323048115 CET	49892	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:49.323082924 CET	49892	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:49.323936939 CET	49892	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:49.957571983 CET	49893	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:50.097930908 CET	13	49893	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:50.098507881 CET	49893	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:50.238863945 CET	13	49893	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:50.239171028 CET	49893	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:50.239247084 CET	49893	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:50.267502069 CET	49894	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:50.379647970 CET	13	49893	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:50.407821894 CET	13	49894	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:50.408256054 CET	49894	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:50.548351049 CET	13	49894	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:50.552717924 CET	49894	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:50.609425068 CET	49894	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:50.749664068 CET	13	49894	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:51.289922953 CET	49895	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:51.430185080 CET	13	49895	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:51.430377960 CET	49895	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:51.570813894 CET	13	49895	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:51.570971966 CET	49895	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:51.719508886 CET	49895	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:51.745592117 CET	49896	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:51.859905958 CET	13	49895	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:51.896667004 CET	13	49896	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:51.896802902 CET	49896	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:52.047796011 CET	13	49896	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:52.047854900 CET	13	49896	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:52.047971964 CET	49896	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:52.048090935 CET	49896	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:52.053742886 CET	49897	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:52.053793907 CET	443	49897	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:52.053900003 CET	49897	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:52.054311037 CET	49897	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:52.054328918 CET	443	49897	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:52.130068064 CET	443	49897	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:52.131733894 CET	49897	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:52.131766081 CET	443	49897	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:52.199091911 CET	13	49896	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:52.299071074 CET	443	49897	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:52.299118042 CET	443	49897	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:52.299226046 CET	443	49897	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:52.299319983 CET	49897	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:52.299333096 CET	49897	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:52.301902056 CET	49897	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:52.466294050 CET	49898	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:52.606542110 CET	13	49898	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:52.606668949 CET	49898	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:52.746874094 CET	13	49898	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:52.746939898 CET	49898	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:52.747056007 CET	49898	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:52.771342039 CET	49899	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:52.887232065 CET	13	49898	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:52.911459923 CET	13	49899	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:52.911542892 CET	49899	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:53.051691055 CET	13	49899	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:53.051769972 CET	49899	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:53.051860094 CET	49899	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:53.075675964 CET	49900	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:53.191910982 CET	13	49899	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:53.215923071 CET	13	49900	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:53.216032028 CET	49900	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:53.356242895 CET	13	49900	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:53.356412888 CET	49900	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:53.356463909 CET	49900	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:53.379676104 CET	49903	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:53.497483015 CET	13	49900	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:53.528250933 CET	13	49903	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:53.528379917 CET	49903	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:53.676904917 CET	13	49903	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:53.676948071 CET	13	49903	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:53.677066088 CET	49903	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:53.677196980 CET	49903	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:53.683100939 CET	49904	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:53.683172941 CET	443	49904	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:53.684149027 CET	49904	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:53.684504986 CET	49904	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:53.684530973 CET	443	49904	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:53.765640974 CET	443	49904	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:53.768312931 CET	49904	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:53.768352985 CET	443	49904	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:53.825717926 CET	13	49903	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:53.909657001 CET	443	49904	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:53.909689903 CET	443	49904	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:53.909759045 CET	443	49904	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:53.909790039 CET	49904	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:53.909816027 CET	49904	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:53.910504103 CET	49904	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:54.104000092 CET	49906	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:54.244642973 CET	13	49906	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:54.246186972 CET	49906	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:54.386784077 CET	13	49906	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:54.386976957 CET	49906	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:54.387099981 CET	49906	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:54.414957047 CET	49907	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:54.527590036 CET	13	49906	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:54.555723906 CET	13	49907	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:54.556359053 CET	49907	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:54.696966887 CET	13	49907	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:54.697040081 CET	49907	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:54.697242022 CET	49907	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:54.719424009 CET	49908	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:54.837827921 CET	13	49907	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:54.860003948 CET	13	49908	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:54.860168934 CET	49908	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:55.000734091 CET	13	49908	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:55.000875950 CET	49908	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:55.000957012 CET	49908	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:55.024638891 CET	49909	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:55.141423941 CET	13	49908	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:55.176788092 CET	13	49909	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:55.176889896 CET	49909	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:55.328952074 CET	13	49909	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:55.328975916 CET	13	49909	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:55.329675913 CET	49909	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:55.329757929 CET	49909	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:29:55.337588072 CET	49910	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:55.337640047 CET	443	49910	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:55.337749004 CET	49910	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:55.339106083 CET	49910	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:55.339131117 CET	443	49910	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:55.419070005 CET	443	49910	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:55.420790911 CET	49910	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:55.420828104 CET	443	49910	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:55.481806993 CET	13	49909	132.163.97.3	192.168.2.5
Feb 8, 2022 08:29:55.598022938 CET	443	49910	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:55.598053932 CET	443	49910	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:55.598120928 CET	443	49910	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:55.598145008 CET	49910	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:55.598176003 CET	49910	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:55.599126101 CET	49910	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:55.764900923 CET	49911	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:55.905250072 CET	13	49911	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:55.905412912 CET	49911	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:56.045811892 CET	13	49911	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:56.045886993 CET	49911	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:56.046017885 CET	49911	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:56.074048996 CET	49912	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:56.186399937 CET	13	49911	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:56.214337111 CET	13	49912	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:56.214497089 CET	49912	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:56.355165958 CET	13	49912	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:56.355272055 CET	49912	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:56.355371952 CET	49912	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:56.382793903 CET	49915	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:56.496970892 CET	13	49912	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:56.524014950 CET	13	49915	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:56.524137020 CET	49915	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:56.665432930 CET	13	49915	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:56.666651964 CET	49915	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:56.666831017 CET	49915	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:56.691098928 CET	49916	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:56.807002068 CET	13	49915	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:56.843409061 CET	13	49916	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:56.844482899 CET	49916	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:56.996833086 CET	13	49916	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:56.996856928 CET	13	49916	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:56.996951103 CET	49916	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:56.997153997 CET	49916	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:29:57.003328085 CET	49917	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:57.003370047 CET	443	49917	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:57.003451109 CET	49917	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:57.003921032 CET	49917	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:57.003931999 CET	443	49917	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:57.081116915 CET	443	49917	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:57.084650993 CET	49917	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:57.084685087 CET	443	49917	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:57.149333000 CET	13	49916	132.163.97.2	192.168.2.5
Feb 8, 2022 08:29:57.240070105 CET	443	49917	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:57.240098000 CET	443	49917	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:57.240154982 CET	443	49917	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:57.240238905 CET	49917	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:57.240299940 CET	49917	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:57.241245985 CET	49917	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:57.399832964 CET	49920	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:57.540241957 CET	13	49920	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:57.540426970 CET	49920	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:57.680749893 CET	13	49920	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:57.680893898 CET	49920	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:57.681008101 CET	49920	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:57.707252026 CET	49922	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:57.821291924 CET	13	49920	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:57.847601891 CET	13	49922	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:57.847806931 CET	49922	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:57.988081932 CET	13	49922	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:57.988167048 CET	49922	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:57.988378048 CET	49922	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:58.012768030 CET	49924	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:58.128586054 CET	13	49922	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:58.153125048 CET	13	49924	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:58.153300047 CET	49924	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:58.293684006 CET	13	49924	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:58.293819904 CET	49924	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:58.293992043 CET	49924	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:58.320391893 CET	49925	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:58.435878038 CET	13	49924	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:58.468780994 CET	13	49925	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:58.468930006 CET	49925	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:58.617360115 CET	13	49925	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:58.617389917 CET	13	49925	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:58.617960930 CET	49925	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:58.618071079 CET	49925	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:29:58.626389027 CET	49927	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:58.626431942 CET	443	49927	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:58.626502991 CET	49927	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:58.629820108 CET	49927	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:58.629842043 CET	443	49927	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:58.712230921 CET	443	49927	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:58.714701891 CET	49927	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:58.714734077 CET	443	49927	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:58.766396046 CET	13	49925	132.163.96.1	192.168.2.5
Feb 8, 2022 08:29:58.864396095 CET	443	49927	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:58.864434004 CET	443	49927	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:58.864521980 CET	443	49927	51.83.143.177	192.168.2.5
Feb 8, 2022 08:29:58.864531040 CET	49927	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:58.864573002 CET	49927	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:58.865531921 CET	49927	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:29:59.037697077 CET	49928	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:59.178141117 CET	13	49928	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:59.178281069 CET	49928	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:59.318696976 CET	13	49928	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:59.318789959 CET	49928	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:59.318907022 CET	49928	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:29:59.345890045 CET	49929	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:59.459247112 CET	13	49928	129.6.15.28	192.168.2.5
Feb 8, 2022 08:29:59.486087084 CET	13	49929	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:59.486192942 CET	49929	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:59.626523018 CET	13	49929	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:59.627347946 CET	49929	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:59.627449036 CET	49929	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:29:59.653949976 CET	49930	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:59.767760038 CET	13	49929	129.6.15.29	192.168.2.5
Feb 8, 2022 08:29:59.794641018 CET	13	49930	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:59.794800997 CET	49930	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:59.935516119 CET	13	49930	129.6.15.27	192.168.2.5
Feb 8, 2022 08:29:59.935672045 CET	49930	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:59.935816050 CET	49930	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:29:59.961863995 CET	49933	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:00.076344013 CET	13	49930	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:00.111473083 CET	13	49933	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:00.111692905 CET	49933	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:00.261174917 CET	13	49933	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:00.261204958 CET	13	49933	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:00.261356115 CET	49933	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:00.261558056 CET	49933	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:00.270967007 CET	49935	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:00.271023989 CET	443	49935	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:00.271117926 CET	49935	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:00.271670103 CET	49935	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:00.271682978 CET	443	49935	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:00.352855921 CET	443	49935	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:00.356128931 CET	49935	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:00.356157064 CET	443	49935	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:00.411286116 CET	13	49933	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:00.512020111 CET	443	49935	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:00.512093067 CET	443	49935	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:00.512195110 CET	49935	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:00.512239933 CET	443	49935	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:00.512270927 CET	443	49935	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:00.512356997 CET	49935	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:00.513071060 CET	49935	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:00.679627895 CET	49937	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:00.820271969 CET	13	49937	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:00.820406914 CET	49937	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:00.960968971 CET	13	49937	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:00.961041927 CET	49937	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:00.961204052 CET	49937	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:00.984918118 CET	49939	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:01.101667881 CET	13	49937	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:01.125473022 CET	13	49939	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:01.125621080 CET	49939	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:01.266227007 CET	13	49939	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:01.266346931 CET	49939	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:01.266473055 CET	49939	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:01.292195082 CET	49942	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:01.406944990 CET	13	49939	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:01.432723045 CET	13	49942	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:01.432832003 CET	49942	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:01.573206902 CET	13	49942	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:01.573342085 CET	49942	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:01.573492050 CET	49942	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:01.598468065 CET	49944	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:01.713788986 CET	13	49942	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:01.747100115 CET	13	49944	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:01.747250080 CET	49944	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:01.894826889 CET	13	49944	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:01.894849062 CET	13	49944	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:01.894937992 CET	49944	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:01.895170927 CET	49944	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:01.929256916 CET	49947	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:01.929308891 CET	443	49947	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:01.929416895 CET	49947	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:01.930083990 CET	49947	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:01.930102110 CET	443	49947	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:02.011687040 CET	443	49947	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:02.013262987 CET	49947	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:02.013286114 CET	443	49947	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:02.042794943 CET	13	49944	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:02.179843903 CET	443	49947	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:02.179871082 CET	443	49947	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:02.179929972 CET	443	49947	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:02.180063963 CET	49947	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:02.180097103 CET	49947	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:02.180978060 CET	49947	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:02.338880062 CET	49949	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:02.479372978 CET	13	49949	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:02.479485989 CET	49949	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:02.619888067 CET	13	49949	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:02.619997025 CET	49949	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:02.620145082 CET	49949	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:02.645435095 CET	49953	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:02.760775089 CET	13	49949	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:02.787417889 CET	13	49953	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:02.787883043 CET	49953	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:02.928148985 CET	13	49953	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:02.930011034 CET	49953	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:02.930104017 CET	49953	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:02.956227064 CET	49955	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:03.070334911 CET	13	49953	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:03.096272945 CET	13	49955	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:03.096431017 CET	49955	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:03.236526966 CET	13	49955	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:03.237669945 CET	49955	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:03.237982988 CET	49955	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:03.262871027 CET	49957	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:03.378103971 CET	13	49955	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:03.415205002 CET	13	49957	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:03.415863991 CET	49957	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:03.568059921 CET	13	49957	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:03.568080902 CET	13	49957	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:03.568195105 CET	49957	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:03.568401098 CET	49957	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:03.575807095 CET	49960	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:03.575855970 CET	443	49960	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:03.575978041 CET	49960	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:03.576455116 CET	49960	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:03.576466084 CET	443	49960	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:03.652652025 CET	443	49960	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:03.654867887 CET	49960	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:03.654900074 CET	443	49960	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:03.720627069 CET	13	49957	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:03.807415962 CET	443	49960	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:03.807449102 CET	443	49960	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:03.807509899 CET	443	49960	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:03.807549000 CET	49960	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:03.807610035 CET	49960	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:03.808557987 CET	49960	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:03.968106031 CET	49962	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:04.108422995 CET	13	49962	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:04.108592033 CET	49962	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:04.248927116 CET	13	49962	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:04.249007940 CET	49962	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:04.249130964 CET	49962	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:04.276423931 CET	49965	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:04.389337063 CET	13	49962	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:04.416712999 CET	13	49965	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:04.416861057 CET	49965	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:04.557085037 CET	13	49965	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:04.557149887 CET	49965	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:04.557320118 CET	49965	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:04.582997084 CET	49967	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:04.697525978 CET	13	49965	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:04.723407030 CET	13	49967	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:04.723495960 CET	49967	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:04.863804102 CET	13	49967	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:04.863913059 CET	49967	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:04.864109039 CET	49967	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:04.889861107 CET	49969	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:30:05.004322052 CET	13	49967	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:05.037889004 CET	13	49969	132.163.97.1	192.168.2.5
Feb 8, 2022 08:30:05.037992954 CET	49969	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:30:05.185978889 CET	13	49969	132.163.97.1	192.168.2.5
Feb 8, 2022 08:30:05.185997963 CET	13	49969	132.163.97.1	192.168.2.5
Feb 8, 2022 08:30:05.186573982 CET	49969	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:30:05.186646938 CET	49969	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:30:05.192507029 CET	49972	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:05.192569017 CET	443	49972	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:05.192661047 CET	49972	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:05.193099976 CET	49972	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:05.193124056 CET	443	49972	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:05.274065971 CET	443	49972	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:05.276285887 CET	49972	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:05.276372910 CET	443	49972	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:05.334505081 CET	13	49969	132.163.97.1	192.168.2.5
Feb 8, 2022 08:30:05.420229912 CET	443	49972	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:05.420291901 CET	443	49972	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:05.420376062 CET	49972	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:05.420398951 CET	443	49972	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:05.420447111 CET	49972	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:05.420470953 CET	443	49972	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:05.420515060 CET	49972	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:05.421230078 CET	49972	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:05.593631983 CET	49973	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:05.733954906 CET	13	49973	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:05.734119892 CET	49973	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:05.874347925 CET	13	49973	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:05.874535084 CET	49973	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:05.874561071 CET	49973	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:05.898627043 CET	49974	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:06.014816046 CET	13	49973	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:06.039277077 CET	13	49974	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:06.041244030 CET	49974	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:06.181709051 CET	13	49974	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:06.181778908 CET	49974	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:06.181907892 CET	49974	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:06.204761028 CET	49975	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:06.322411060 CET	13	49974	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:06.345293999 CET	13	49975	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:06.345402956 CET	49975	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:06.485922098 CET	13	49975	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:06.486083031 CET	49975	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:06.486187935 CET	49975	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:06.508661985 CET	49976	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:06.626566887 CET	13	49975	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:06.660556078 CET	13	49976	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:06.660656929 CET	49976	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:06.811544895 CET	13	49976	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:06.811578989 CET	13	49976	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:06.811636925 CET	49976	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:06.811798096 CET	49976	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:06.817406893 CET	49982	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:06.817450047 CET	443	49982	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:06.817549944 CET	49982	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:06.817948103 CET	49982	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:06.817965984 CET	443	49982	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:06.895688057 CET	443	49982	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:06.897342920 CET	49982	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:06.897373915 CET	443	49982	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:06.962886095 CET	13	49976	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:07.063507080 CET	443	49982	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:07.063532114 CET	443	49982	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:07.063586950 CET	443	49982	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:07.063683987 CET	49982	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:07.063762903 CET	49982	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:07.065161943 CET	49982	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:07.211081028 CET	49983	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:07.352170944 CET	13	49983	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:07.352351904 CET	49983	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:07.492618084 CET	13	49983	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:07.492697954 CET	49983	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:07.492856979 CET	49983	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:07.517136097 CET	49984	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:07.633795977 CET	13	49983	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:07.658046007 CET	13	49984	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:07.658282042 CET	49984	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:07.799432039 CET	13	49984	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:07.803618908 CET	49984	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:07.803683043 CET	49984	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:07.835180044 CET	49985	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:07.944780111 CET	13	49984	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:07.976485014 CET	13	49985	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:07.977184057 CET	49985	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:08.118575096 CET	13	49985	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:08.118694067 CET	49985	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:08.118776083 CET	49985	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:08.146091938 CET	49986	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:30:08.259711027 CET	13	49985	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:08.299077034 CET	13	49986	132.163.97.1	192.168.2.5
Feb 8, 2022 08:30:08.299195051 CET	49986	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:30:08.451466084 CET	13	49986	132.163.97.1	192.168.2.5
Feb 8, 2022 08:30:08.451504946 CET	13	49986	132.163.97.1	192.168.2.5
Feb 8, 2022 08:30:08.451579094 CET	49986	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:30:08.451788902 CET	49986	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:30:08.460072994 CET	49987	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:08.460104942 CET	443	49987	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:08.460218906 CET	49987	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:08.460829020 CET	49987	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:08.460849047 CET	443	49987	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:08.538333893 CET	443	49987	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:08.540569067 CET	49987	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:08.540586948 CET	443	49987	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:08.604029894 CET	13	49986	132.163.97.1	192.168.2.5
Feb 8, 2022 08:30:08.691494942 CET	443	49987	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:08.691524029 CET	443	49987	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:08.691591978 CET	443	49987	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:08.691715956 CET	49987	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:08.693319082 CET	49987	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:08.865098953 CET	49988	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:09.005440950 CET	13	49988	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:09.005897999 CET	49988	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:09.146234989 CET	13	49988	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:09.146670103 CET	49988	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:09.146819115 CET	49988	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:09.287041903 CET	13	49988	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:09.294691086 CET	49989	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:09.435252905 CET	13	49989	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:09.435396910 CET	49989	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:09.575956106 CET	13	49989	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:09.576550961 CET	49989	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:09.576611042 CET	49989	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:09.600095987 CET	49990	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:09.717108965 CET	13	49989	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:09.740602970 CET	13	49990	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:09.741406918 CET	49990	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:09.881911993 CET	13	49990	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:09.882110119 CET	49990	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:09.882437944 CET	49990	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:09.907984972 CET	49991	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:10.022902012 CET	13	49990	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:10.054801941 CET	13	49991	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:10.054943085 CET	49991	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:10.201792002 CET	13	49991	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:10.201807976 CET	13	49991	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:10.202763081 CET	49991	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:10.202838898 CET	49991	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:10.211349964 CET	49992	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:10.211381912 CET	443	49992	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:10.211739063 CET	49992	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:10.212915897 CET	49992	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:10.212929010 CET	443	49992	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:10.292857885 CET	443	49992	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:10.297219038 CET	49992	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:10.297249079 CET	443	49992	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:10.349572897 CET	13	49991	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:10.456815958 CET	443	49992	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:10.456851959 CET	443	49992	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:10.456931114 CET	443	49992	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:10.456954002 CET	49992	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:10.457145929 CET	49992	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:10.458561897 CET	49992	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:10.624068975 CET	49993	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:10.764427900 CET	13	49993	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:10.764614105 CET	49993	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:10.904824018 CET	13	49993	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:10.905050039 CET	49993	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:10.905062914 CET	49993	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:10.930237055 CET	49994	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:11.045308113 CET	13	49993	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:11.070467949 CET	13	49994	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:11.070593119 CET	49994	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:11.210866928 CET	13	49994	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:11.211030960 CET	49994	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:11.211213112 CET	49994	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:11.237677097 CET	49995	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:11.351227999 CET	13	49994	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:11.378393888 CET	13	49995	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:11.378515959 CET	49995	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:11.519228935 CET	13	49995	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:11.519320011 CET	49995	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:11.519465923 CET	49995	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:11.546602964 CET	49996	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:11.660130978 CET	13	49995	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:11.694494009 CET	13	49996	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:11.694590092 CET	49996	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:11.842389107 CET	13	49996	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:11.842408895 CET	13	49996	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:11.842505932 CET	49996	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:11.842729092 CET	49996	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:11.850903034 CET	49997	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:11.850969076 CET	443	49997	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:11.851123095 CET	49997	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:11.851838112 CET	49997	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:11.851872921 CET	443	49997	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:11.932872057 CET	443	49997	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:11.935019016 CET	49997	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:11.935050011 CET	443	49997	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:11.990514994 CET	13	49996	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:12.134695053 CET	443	49997	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:12.134733915 CET	443	49997	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:12.134809971 CET	443	49997	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:12.134850025 CET	49997	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:12.134874105 CET	49997	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:12.136136055 CET	49997	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:12.304141998 CET	49998	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:12.444631100 CET	13	49998	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:12.444785118 CET	49998	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:12.585212946 CET	13	49998	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:12.585346937 CET	49998	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:12.585598946 CET	49998	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:12.611757994 CET	49999	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:12.725949049 CET	13	49998	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:12.752149105 CET	13	49999	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:12.752430916 CET	49999	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:12.893057108 CET	13	49999	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:12.893192053 CET	49999	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:12.893337965 CET	49999	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:12.929639101 CET	50001	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:13.033574104 CET	13	49999	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:13.070156097 CET	13	50001	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:13.070350885 CET	50001	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:13.210736990 CET	13	50001	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:13.211833954 CET	50001	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:13.211947918 CET	50001	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:13.236365080 CET	50002	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:13.352325916 CET	13	50001	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:13.388468981 CET	13	50002	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:13.388686895 CET	50002	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:13.540895939 CET	13	50002	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:13.540944099 CET	13	50002	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:13.541049004 CET	50002	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:13.541367054 CET	50002	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:13.549385071 CET	50003	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:13.549448967 CET	443	50003	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:13.549559116 CET	50003	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:13.550319910 CET	50003	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:13.550343037 CET	443	50003	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:13.631633043 CET	443	50003	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:13.633691072 CET	50003	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:13.633733034 CET	443	50003	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:13.693388939 CET	13	50002	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:13.798000097 CET	443	50003	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:13.798033953 CET	443	50003	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:13.798109055 CET	443	50003	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:13.798114061 CET	50003	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:13.798156977 CET	50003	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:13.799300909 CET	50003	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:13.954312086 CET	50004	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:14.094517946 CET	13	50004	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:14.094638109 CET	50004	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:14.235985994 CET	13	50004	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:14.236268997 CET	50004	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:14.236722946 CET	50004	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:14.264854908 CET	50005	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:14.376895905 CET	13	50004	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:14.405350924 CET	13	50005	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:14.405494928 CET	50005	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:14.545938969 CET	13	50005	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:14.546021938 CET	50005	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:14.546150923 CET	50005	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:14.570971012 CET	50006	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:14.686528921 CET	13	50005	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:14.711337090 CET	13	50006	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:14.711518049 CET	50006	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:14.851947069 CET	13	50006	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:14.852108002 CET	50006	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:14.852289915 CET	50006	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:14.879049063 CET	50007	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:14.992826939 CET	13	50006	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:15.025929928 CET	13	50007	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:15.026096106 CET	50007	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:15.172770023 CET	13	50007	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:15.172795057 CET	13	50007	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:15.172967911 CET	50007	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:15.173149109 CET	50007	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:15.207556963 CET	50008	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:15.207600117 CET	443	50008	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:15.207675934 CET	50008	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:15.208153009 CET	50008	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:15.208168983 CET	443	50008	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:15.290370941 CET	443	50008	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:15.293900013 CET	50008	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:15.293931961 CET	443	50008	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:15.319777012 CET	13	50007	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:15.433988094 CET	443	50008	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:15.434015989 CET	443	50008	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:15.434083939 CET	443	50008	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:15.434145927 CET	50008	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:15.434166908 CET	50008	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:15.435062885 CET	50008	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:15.588535070 CET	50009	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:15.728945971 CET	13	50009	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:15.729089975 CET	50009	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:15.869585991 CET	13	50009	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:15.869806051 CET	50009	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:15.869934082 CET	50009	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:15.897011995 CET	50011	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:16.010502100 CET	13	50009	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:16.037411928 CET	13	50011	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:16.037604094 CET	50011	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:16.177803040 CET	13	50011	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:16.177977085 CET	50011	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:16.178080082 CET	50011	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:16.200128078 CET	50012	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:16.318272114 CET	13	50011	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:16.341909885 CET	13	50012	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:16.342010975 CET	50012	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:16.482538939 CET	13	50012	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:16.482940912 CET	50012	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:16.483102083 CET	50012	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:16.509592056 CET	50013	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:30:16.623461962 CET	13	50012	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:16.661887884 CET	13	50013	132.163.97.2	192.168.2.5
Feb 8, 2022 08:30:16.662008047 CET	50013	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:30:16.814208031 CET	13	50013	132.163.97.2	192.168.2.5
Feb 8, 2022 08:30:16.814227104 CET	13	50013	132.163.97.2	192.168.2.5
Feb 8, 2022 08:30:16.814408064 CET	50013	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:30:16.814618111 CET	50013	13	192.168.2.5	132.163.97.2
Feb 8, 2022 08:30:16.820997000 CET	50014	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:16.821029902 CET	443	50014	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:16.821132898 CET	50014	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:16.821636915 CET	50014	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:16.821652889 CET	443	50014	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:16.901880026 CET	443	50014	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:16.904345036 CET	50014	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:16.904395103 CET	443	50014	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:16.966927052 CET	13	50013	132.163.97.2	192.168.2.5
Feb 8, 2022 08:30:17.065470934 CET	443	50014	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:17.065525055 CET	443	50014	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:17.065639019 CET	443	50014	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:17.065654993 CET	50014	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:17.065699100 CET	50014	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:17.066914082 CET	50014	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:17.222508907 CET	50015	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:17.362775087 CET	13	50015	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:17.362879038 CET	50015	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:17.503058910 CET	13	50015	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:17.503175020 CET	50015	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:17.503397942 CET	50015	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:17.619956017 CET	50016	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:17.643887997 CET	13	50015	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:17.760099888 CET	13	50016	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:17.760201931 CET	50016	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:17.900269032 CET	13	50016	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:17.900341034 CET	50016	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:17.900501013 CET	50016	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:17.958482981 CET	50017	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:18.040477037 CET	13	50016	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:18.098922014 CET	13	50017	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:18.099033117 CET	50017	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:18.239401102 CET	13	50017	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:18.239559889 CET	50017	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:18.239665031 CET	50017	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:18.267628908 CET	50018	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:30:18.380000114 CET	13	50017	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:18.419826984 CET	13	50018	132.163.97.1	192.168.2.5
Feb 8, 2022 08:30:18.419941902 CET	50018	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:30:18.571953058 CET	13	50018	132.163.97.1	192.168.2.5
Feb 8, 2022 08:30:18.571979046 CET	13	50018	132.163.97.1	192.168.2.5
Feb 8, 2022 08:30:18.572124004 CET	50018	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:30:18.572267056 CET	50018	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:30:18.581213951 CET	50019	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:18.581263065 CET	443	50019	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:18.581350088 CET	50019	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:18.581806898 CET	50019	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:18.581830025 CET	443	50019	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:18.662374020 CET	443	50019	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:18.664494991 CET	50019	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:18.664534092 CET	443	50019	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:18.724241972 CET	13	50018	132.163.97.1	192.168.2.5
Feb 8, 2022 08:30:18.842058897 CET	443	50019	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:18.842092037 CET	443	50019	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:18.842161894 CET	443	50019	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:18.842228889 CET	50019	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:18.842267990 CET	50019	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:18.843333006 CET	50019	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:19.004810095 CET	50020	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:19.145320892 CET	13	50020	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:19.148372889 CET	50020	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:19.288877010 CET	13	50020	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:19.290494919 CET	50020	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:19.290610075 CET	50020	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:19.315058947 CET	50021	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:19.431488991 CET	13	50020	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:19.455323935 CET	13	50021	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:19.455446005 CET	50021	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:19.595649004 CET	13	50021	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:19.595777988 CET	50021	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:19.595892906 CET	50021	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:19.620388985 CET	50022	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:19.736036062 CET	13	50021	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:19.760750055 CET	13	50022	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:19.760926008 CET	50022	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:19.901320934 CET	13	50022	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:19.901406050 CET	50022	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:19.901498079 CET	50022	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:19.925792933 CET	50023	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:20.041805983 CET	13	50022	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:20.075537920 CET	13	50023	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:20.075683117 CET	50023	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:20.224271059 CET	13	50023	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:20.224292040 CET	13	50023	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:20.224360943 CET	50023	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:20.224490881 CET	50023	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:20.229835987 CET	50024	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:20.229886055 CET	443	50024	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:20.229983091 CET	50024	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:20.230617046 CET	50024	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:20.230633020 CET	443	50024	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:20.313792944 CET	443	50024	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:20.315718889 CET	50024	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:20.315761089 CET	443	50024	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:20.372952938 CET	13	50023	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:20.473277092 CET	443	50024	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:20.473303080 CET	443	50024	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:20.473361969 CET	443	50024	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:20.473417044 CET	50024	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:20.473458052 CET	50024	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:20.474246025 CET	50024	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:20.634540081 CET	50025	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:20.775202990 CET	13	50025	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:20.775352955 CET	50025	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:20.915821075 CET	13	50025	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:20.915899992 CET	50025	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:20.916019917 CET	50025	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:20.938745975 CET	50026	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:21.056466103 CET	13	50025	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:21.078973055 CET	13	50026	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:21.079086065 CET	50026	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:21.219402075 CET	13	50026	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:21.219544888 CET	50026	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:21.219645977 CET	50026	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:21.245316982 CET	50027	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:21.359740973 CET	13	50026	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:21.385931969 CET	13	50027	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:21.386080980 CET	50027	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:21.526685953 CET	13	50027	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:21.526846886 CET	50027	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:21.527061939 CET	50027	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:21.553911924 CET	50028	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:21.667771101 CET	13	50027	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:21.703723907 CET	13	50028	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:21.703897953 CET	50028	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:21.852060080 CET	13	50028	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:21.852087021 CET	13	50028	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:21.852236986 CET	50028	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:21.852690935 CET	50028	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:21.861545086 CET	50029	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:21.861608028 CET	443	50029	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:21.861701012 CET	50029	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:21.862152100 CET	50029	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:21.862168074 CET	443	50029	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:21.942280054 CET	443	50029	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:21.945046902 CET	50029	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:21.945097923 CET	443	50029	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:22.001177073 CET	13	50028	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:22.122349024 CET	443	50029	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:22.122380972 CET	443	50029	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:22.122453928 CET	443	50029	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:22.122567892 CET	50029	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:22.122617960 CET	50029	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:22.174927950 CET	50029	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:22.426166058 CET	50030	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:22.566577911 CET	13	50030	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:22.567248106 CET	50030	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:22.707583904 CET	13	50030	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:22.707603931 CET	13	50030	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:22.707703114 CET	50030	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:22.707889080 CET	50030	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:22.716289997 CET	50031	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:22.716325998 CET	443	50031	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:22.716408014 CET	50031	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:22.717087984 CET	50031	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:22.717102051 CET	443	50031	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:22.795381069 CET	443	50031	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:22.798135996 CET	50031	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:22.798158884 CET	443	50031	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:22.848264933 CET	13	50030	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:22.989839077 CET	443	50031	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:22.989876032 CET	443	50031	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:22.989938021 CET	443	50031	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:22.990089893 CET	50031	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:22.990200043 CET	50031	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:22.991801023 CET	50031	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:23.166363955 CET	50032	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:23.306936026 CET	13	50032	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:23.307132006 CET	50032	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:23.447650909 CET	13	50032	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:23.447681904 CET	13	50032	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:23.447864056 CET	50032	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:23.734210014 CET	50032	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:23.742691040 CET	50033	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:23.742754936 CET	443	50033	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:23.742889881 CET	50033	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:23.743329048 CET	50033	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:23.743365049 CET	443	50033	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:23.825442076 CET	443	50033	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:23.827692032 CET	50033	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:23.827730894 CET	443	50033	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:23.874757051 CET	13	50032	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:23.979278088 CET	443	50033	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:23.979353905 CET	443	50033	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:23.979451895 CET	50033	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:23.979459047 CET	443	50033	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:23.979507923 CET	50033	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:23.980643988 CET	50033	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:24.136640072 CET	50034	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:24.276745081 CET	13	50034	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:24.276865959 CET	50034	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:24.417294025 CET	13	50034	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:24.417315006 CET	13	50034	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:24.417442083 CET	50034	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:24.934664965 CET	50034	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:24.942817926 CET	50035	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:24.942848921 CET	443	50035	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:24.942934036 CET	50035	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:24.943293095 CET	50035	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:24.943305016 CET	443	50035	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:25.022753954 CET	443	50035	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:25.024322987 CET	50035	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:25.024349928 CET	443	50035	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:25.074739933 CET	13	50034	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:25.179055929 CET	443	50035	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:25.179100037 CET	443	50035	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:25.179194927 CET	443	50035	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:25.179256916 CET	50035	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:25.179332972 CET	50035	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:25.386246920 CET	50035	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:25.558218956 CET	50036	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:25.698798895 CET	13	50036	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:25.699016094 CET	50036	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:25.839463949 CET	13	50036	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:25.839503050 CET	13	50036	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:25.839670897 CET	50036	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:25.839951992 CET	50036	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:25.866420984 CET	50037	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:25.980236053 CET	13	50036	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:26.006916046 CET	13	50037	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:26.007040024 CET	50037	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:26.147416115 CET	13	50037	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:26.147521973 CET	50037	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:26.147675991 CET	50037	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:26.171391964 CET	50038	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:26.288007021 CET	13	50037	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:26.312051058 CET	13	50038	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:26.312218904 CET	50038	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:26.452936888 CET	13	50038	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:26.453008890 CET	50038	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:26.453147888 CET	50038	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:26.478585005 CET	50039	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:26.593767881 CET	13	50038	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:26.629426956 CET	13	50039	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:26.629683018 CET	50039	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:26.780666113 CET	13	50039	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:26.780709982 CET	13	50039	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:26.784415007 CET	50039	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:26.784455061 CET	50039	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:26.814897060 CET	50040	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:26.814937115 CET	443	50040	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:26.815135002 CET	50040	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:26.815551996 CET	50040	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:26.815570116 CET	443	50040	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:26.895603895 CET	443	50040	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:26.898786068 CET	50040	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:26.898830891 CET	443	50040	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:26.935493946 CET	13	50039	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:27.035316944 CET	443	50040	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:27.035365105 CET	443	50040	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:27.035456896 CET	443	50040	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:27.035629034 CET	50040	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:27.037024975 CET	50040	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:27.213069916 CET	50041	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:27.353880882 CET	13	50041	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:27.354053020 CET	50041	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:27.494600058 CET	13	50041	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:27.494623899 CET	13	50041	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:27.495141983 CET	50041	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:27.495222092 CET	50041	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:27.523322105 CET	50042	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:27.635771990 CET	13	50041	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:27.663868904 CET	13	50042	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:27.664004087 CET	50042	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:27.804546118 CET	13	50042	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:27.804651022 CET	50042	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:27.804760933 CET	50042	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:27.828083038 CET	50043	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:27.945187092 CET	13	50042	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:27.968355894 CET	13	50043	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:27.968442917 CET	50043	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:28.108882904 CET	13	50043	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:28.109038115 CET	50043	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:28.109143019 CET	50043	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:28.130673885 CET	50044	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:30:28.249458075 CET	13	50043	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:28.282690048 CET	13	50044	132.163.97.1	192.168.2.5
Feb 8, 2022 08:30:28.282799959 CET	50044	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:30:28.434911013 CET	13	50044	132.163.97.1	192.168.2.5
Feb 8, 2022 08:30:28.434942961 CET	13	50044	132.163.97.1	192.168.2.5
Feb 8, 2022 08:30:28.437131882 CET	50044	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:30:28.437211990 CET	50044	13	192.168.2.5	132.163.97.1
Feb 8, 2022 08:30:28.444577932 CET	50045	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:28.444636106 CET	443	50045	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:28.444746971 CET	50045	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:28.445158958 CET	50045	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:28.445174932 CET	443	50045	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:28.525547981 CET	443	50045	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:28.527638912 CET	50045	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:28.527682066 CET	443	50045	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:28.589965105 CET	13	50044	132.163.97.1	192.168.2.5
Feb 8, 2022 08:30:28.681031942 CET	443	50045	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:28.681066990 CET	443	50045	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:28.681145906 CET	443	50045	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:28.681184053 CET	50045	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:28.681262970 CET	50045	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:28.682296038 CET	50045	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:28.839766026 CET	50046	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:28.980473995 CET	13	50046	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:28.983236074 CET	50046	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:29.123449087 CET	13	50046	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:29.123472929 CET	13	50046	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:29.123716116 CET	50046	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:29.124111891 CET	50046	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:29.153608084 CET	50047	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:29.264437914 CET	13	50046	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:29.294307947 CET	13	50047	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:29.294562101 CET	50047	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:29.435216904 CET	13	50047	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:29.435419083 CET	50047	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:29.435611010 CET	50047	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:29.465888023 CET	50048	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:29.576184988 CET	13	50047	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:29.606128931 CET	13	50048	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:29.606286049 CET	50048	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:29.746581078 CET	13	50048	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:29.746685982 CET	50048	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:29.746831894 CET	50048	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:29.770601988 CET	50049	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:29.887010098 CET	13	50048	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:29.916104078 CET	13	50049	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:29.916250944 CET	50049	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:30.062203884 CET	13	50049	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:30.062228918 CET	13	50049	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:30.062463045 CET	50049	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:30.062596083 CET	50049	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:30.068274975 CET	50050	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:30.068344116 CET	443	50050	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:30.068428040 CET	50050	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:30.068767071 CET	50050	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:30.068788052 CET	443	50050	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:30.147564888 CET	443	50050	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:30.149163008 CET	50050	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:30.149193048 CET	443	50050	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:30.207309961 CET	13	50049	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:30.300229073 CET	443	50050	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:30.300261021 CET	443	50050	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:30.300337076 CET	443	50050	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:30.300426960 CET	50050	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:30.300476074 CET	50050	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:30.301394939 CET	50050	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:30.466204882 CET	50051	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:30.606515884 CET	13	50051	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:30.606663942 CET	50051	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:30.747128010 CET	13	50051	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:30.747260094 CET	50051	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:30.747384071 CET	50051	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:30.771434069 CET	50052	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:30.887522936 CET	13	50051	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:30.912007093 CET	13	50052	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:30.912117004 CET	50052	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:31.052541018 CET	13	50052	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:31.052651882 CET	50052	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:31.052738905 CET	50052	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:31.076740980 CET	50053	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:31.193022966 CET	13	50052	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:31.217355967 CET	13	50053	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:31.217479944 CET	50053	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:31.358067036 CET	13	50053	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:31.358279943 CET	50053	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:31.358443975 CET	50053	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:31.383729935 CET	50054	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:31.498920918 CET	13	50053	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:31.534758091 CET	13	50054	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:31.534848928 CET	50054	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:31.685753107 CET	13	50054	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:31.685777903 CET	13	50054	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:31.685868979 CET	50054	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:31.686268091 CET	50054	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:31.697992086 CET	50055	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:31.698065042 CET	443	50055	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:31.698191881 CET	50055	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:31.698637962 CET	50055	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:31.698663950 CET	443	50055	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:31.779370070 CET	443	50055	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:31.782752991 CET	50055	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:31.782789946 CET	443	50055	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:31.837162018 CET	13	50054	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:31.948350906 CET	443	50055	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:31.948410988 CET	443	50055	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:31.948565006 CET	443	50055	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:31.948601007 CET	50055	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:31.948681116 CET	50055	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:31.950567007 CET	50055	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:32.109087944 CET	50056	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:32.249367952 CET	13	50056	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:32.249495983 CET	50056	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:32.389967918 CET	13	50056	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:32.389998913 CET	13	50056	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:32.390240908 CET	50056	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:32.390444994 CET	50056	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:32.402285099 CET	50057	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:32.402370930 CET	443	50057	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:32.402527094 CET	50057	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:32.402867079 CET	50057	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:32.402896881 CET	443	50057	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:32.481947899 CET	443	50057	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:32.483542919 CET	50057	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:32.483583927 CET	443	50057	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:32.531521082 CET	13	50056	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:32.631865025 CET	443	50057	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:32.631908894 CET	443	50057	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:32.632002115 CET	443	50057	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:32.632097960 CET	50057	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:32.632196903 CET	50057	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:32.633009911 CET	50057	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:32.792422056 CET	50058	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:32.933657885 CET	13	50058	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:32.933813095 CET	50058	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:33.074084044 CET	13	50058	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:33.074117899 CET	13	50058	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:33.074233055 CET	50058	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:33.074429989 CET	50058	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:33.082576990 CET	50059	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:33.082627058 CET	443	50059	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:33.082701921 CET	50059	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:33.083182096 CET	50059	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:33.083213091 CET	443	50059	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:33.166141987 CET	443	50059	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:33.168309927 CET	50059	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:33.168340921 CET	443	50059	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:33.215869904 CET	13	50058	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:33.335903883 CET	443	50059	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:33.335937023 CET	443	50059	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:33.336014986 CET	443	50059	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:33.336050034 CET	50059	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:33.336080074 CET	50059	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:33.336844921 CET	50059	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:33.497936010 CET	50060	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:33.641496897 CET	13	50060	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:33.641638041 CET	50060	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:33.782808065 CET	13	50060	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:33.782871008 CET	13	50060	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:33.782927036 CET	50060	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:33.783102989 CET	50060	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:33.789031982 CET	50061	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:33.789073944 CET	443	50061	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:33.789151907 CET	50061	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:33.789644003 CET	50061	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:33.789669037 CET	443	50061	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:33.866380930 CET	443	50061	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:33.868227959 CET	50061	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:33.868262053 CET	443	50061	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:33.923729897 CET	13	50060	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:34.022185087 CET	443	50061	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:34.022218943 CET	443	50061	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:34.022295952 CET	443	50061	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:34.022342920 CET	50061	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:34.022372961 CET	50061	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:34.023071051 CET	50061	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:34.173255920 CET	50062	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:34.313674927 CET	13	50062	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:34.313905001 CET	50062	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:34.454246998 CET	13	50062	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:34.454286098 CET	13	50062	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:34.454402924 CET	50062	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:34.454740047 CET	50062	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:34.486066103 CET	50063	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:34.595217943 CET	13	50062	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:34.626538992 CET	13	50063	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:34.626693964 CET	50063	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:34.766976118 CET	13	50063	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:34.767487049 CET	50063	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:34.767601013 CET	50063	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:34.793785095 CET	50064	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:34.907758951 CET	13	50063	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:34.934178114 CET	13	50064	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:34.934454918 CET	50064	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:35.074660063 CET	13	50064	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:35.075841904 CET	50064	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:35.075910091 CET	50064	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:35.101263046 CET	50065	13	192.168.2.5	132.163.97.4
Feb 8, 2022 08:30:35.216197968 CET	13	50064	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:35.249015093 CET	13	50065	132.163.97.4	192.168.2.5
Feb 8, 2022 08:30:35.249742031 CET	50065	13	192.168.2.5	132.163.97.4
Feb 8, 2022 08:30:35.397774935 CET	13	50065	132.163.97.4	192.168.2.5
Feb 8, 2022 08:30:35.397799969 CET	13	50065	132.163.97.4	192.168.2.5
Feb 8, 2022 08:30:35.398235083 CET	50065	13	192.168.2.5	132.163.97.4
Feb 8, 2022 08:30:35.398418903 CET	50065	13	192.168.2.5	132.163.97.4
Feb 8, 2022 08:30:35.410548925 CET	50066	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:35.410602093 CET	443	50066	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:35.410725117 CET	50066	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:35.411550045 CET	50066	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:35.411571980 CET	443	50066	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:35.487090111 CET	443	50066	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:35.489520073 CET	50066	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:35.489552975 CET	443	50066	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:35.546308041 CET	13	50065	132.163.97.4	192.168.2.5
Feb 8, 2022 08:30:35.651330948 CET	443	50066	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:35.651362896 CET	443	50066	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:35.651432991 CET	50066	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:35.651444912 CET	443	50066	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:35.651462078 CET	443	50066	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:35.651487112 CET	50066	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:35.651511908 CET	50066	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:35.652293921 CET	50066	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:35.797097921 CET	50067	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:35.937551975 CET	13	50067	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:35.937648058 CET	50067	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:36.078145981 CET	13	50067	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:36.078169107 CET	13	50067	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:36.078253984 CET	50067	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:36.078434944 CET	50067	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:36.102544069 CET	50069	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:36.218997002 CET	13	50067	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:36.242727041 CET	13	50069	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:36.242822886 CET	50069	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:36.382946968 CET	13	50069	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:36.383066893 CET	50069	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:36.383166075 CET	50069	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:36.406780958 CET	50070	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:36.523332119 CET	13	50069	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:36.547147036 CET	13	50070	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:36.547257900 CET	50070	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:36.687659979 CET	13	50070	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:36.687787056 CET	50070	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:36.687901020 CET	50070	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:36.711313963 CET	50071	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:36.828241110 CET	13	50070	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:36.857959032 CET	13	50071	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:36.858067036 CET	50071	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:37.004734039 CET	13	50071	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:37.004750967 CET	13	50071	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:37.005038023 CET	50071	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:37.005156040 CET	50071	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:37.036242962 CET	50072	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:37.036274910 CET	443	50072	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:37.036902905 CET	50072	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:37.037254095 CET	50072	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:37.037266016 CET	443	50072	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:37.114804983 CET	443	50072	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:37.117525101 CET	50072	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:37.117553949 CET	443	50072	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:37.151575089 CET	13	50071	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:37.276197910 CET	443	50072	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:37.276243925 CET	443	50072	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:37.276344061 CET	443	50072	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:37.276370049 CET	50072	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:37.276403904 CET	50072	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:37.277199984 CET	50072	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:37.434035063 CET	50073	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:37.574249029 CET	13	50073	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:37.574351072 CET	50073	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:37.714530945 CET	13	50073	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:37.714551926 CET	13	50073	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:37.715832949 CET	50073	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:37.715976000 CET	50073	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:37.744316101 CET	50074	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:37.856255054 CET	13	50073	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:37.884913921 CET	13	50074	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:37.888016939 CET	50074	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:38.028445959 CET	13	50074	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:38.028548002 CET	50074	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:38.028765917 CET	50074	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:38.053366899 CET	50075	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:38.169329882 CET	13	50074	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:38.194081068 CET	13	50075	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:38.194271088 CET	50075	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:38.334806919 CET	13	50075	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:38.334954977 CET	50075	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:38.335237026 CET	50075	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:38.366456032 CET	50076	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:38.475822926 CET	13	50075	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:38.524055004 CET	13	50076	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:38.526041985 CET	50076	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:38.682729006 CET	13	50076	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:38.682754040 CET	13	50076	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:38.682851076 CET	50076	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:38.683202982 CET	50076	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:38.694202900 CET	50077	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:38.694274902 CET	443	50077	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:38.694360018 CET	50077	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:38.694732904 CET	50077	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:38.694760084 CET	443	50077	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:38.770639896 CET	443	50077	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:38.774503946 CET	50077	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:38.774532080 CET	443	50077	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:38.840626955 CET	13	50076	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:38.940253019 CET	443	50077	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:38.940274000 CET	443	50077	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:38.940341949 CET	443	50077	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:38.940603971 CET	50077	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:38.940623999 CET	50077	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:38.942167997 CET	50077	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:39.080605030 CET	50078	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:39.221244097 CET	13	50078	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:39.221421957 CET	50078	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:39.361773968 CET	13	50078	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:39.361918926 CET	50078	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:39.361999035 CET	50078	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:39.386379957 CET	50079	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:39.502166986 CET	13	50078	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:39.526745081 CET	13	50079	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:39.526839972 CET	50079	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:39.667295933 CET	13	50079	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:39.667366028 CET	50079	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:39.667470932 CET	50079	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:39.691452026 CET	50080	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:39.807773113 CET	13	50079	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:39.832175970 CET	13	50080	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:39.832309008 CET	50080	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:39.973115921 CET	13	50080	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:39.973263025 CET	50080	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:39.973388910 CET	50080	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:39.997698069 CET	50082	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:40.113807917 CET	13	50080	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:40.149878025 CET	13	50082	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:40.150027990 CET	50082	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:40.302211046 CET	13	50082	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:40.302243948 CET	13	50082	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:40.302345991 CET	50082	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:40.302603006 CET	50082	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:40.313736916 CET	50083	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:40.313796997 CET	443	50083	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:40.313962936 CET	50083	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:40.314644098 CET	50083	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:40.314670086 CET	443	50083	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:40.395807981 CET	443	50083	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:40.398116112 CET	50083	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:40.398152113 CET	443	50083	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:40.454787016 CET	13	50082	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:40.553953886 CET	443	50083	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:40.553981066 CET	443	50083	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:40.554043055 CET	443	50083	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:40.554083109 CET	50083	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:40.554126024 CET	50083	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:40.555129051 CET	50083	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:40.708451986 CET	50085	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:40.848808050 CET	13	50085	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:40.848956108 CET	50085	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:40.989444017 CET	13	50085	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:40.989546061 CET	50085	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:40.989674091 CET	50085	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:41.019592047 CET	50087	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:41.129966974 CET	13	50085	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:41.160114050 CET	13	50087	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:41.160315037 CET	50087	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:41.300719976 CET	13	50087	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:41.300745964 CET	13	50087	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:41.300869942 CET	50087	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:41.301342964 CET	50087	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:41.312753916 CET	50089	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:41.312815905 CET	443	50089	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:41.312953949 CET	50089	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:41.313438892 CET	50089	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:41.313460112 CET	443	50089	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:41.392752886 CET	443	50089	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:41.394582987 CET	50089	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:41.394622087 CET	443	50089	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:41.441781998 CET	13	50087	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:41.551086903 CET	443	50089	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:41.551115036 CET	443	50089	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:41.551175117 CET	443	50089	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:41.551270962 CET	50089	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:41.552592039 CET	50089	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:41.694047928 CET	50090	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:41.834466934 CET	13	50090	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:41.834630966 CET	50090	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:41.975116968 CET	13	50090	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:41.975286961 CET	50090	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:41.975385904 CET	50090	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:42.005778074 CET	50091	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:42.115708113 CET	13	50090	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:42.146305084 CET	13	50091	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:42.146398067 CET	50091	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:42.286928892 CET	13	50091	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:42.286974907 CET	13	50091	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:42.287061930 CET	50091	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:42.294356108 CET	50091	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:42.434973955 CET	13	50091	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:43.133961916 CET	50092	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:43.134001970 CET	443	50092	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:43.134104967 CET	50092	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:43.134571075 CET	50092	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:43.134587049 CET	443	50092	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:43.216873884 CET	443	50092	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:43.222101927 CET	50092	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:43.222170115 CET	443	50092	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:43.376503944 CET	443	50092	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:43.376573086 CET	443	50092	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:43.376697063 CET	50092	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:43.376712084 CET	443	50092	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:43.377247095 CET	50092	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:43.378710985 CET	50092	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:43.523013115 CET	50093	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:43.663472891 CET	13	50093	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:43.663655043 CET	50093	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:43.804152012 CET	13	50093	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:43.804286003 CET	50093	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:43.804549932 CET	50093	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:43.834186077 CET	50094	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:43.944900990 CET	13	50093	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:43.974432945 CET	13	50094	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:43.974606991 CET	50094	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:44.114867926 CET	13	50094	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:44.114892960 CET	13	50094	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:44.115027905 CET	50094	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:44.115256071 CET	50094	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:44.133764029 CET	50095	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:44.133812904 CET	443	50095	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:44.133920908 CET	50095	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:44.134623051 CET	50095	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:44.134641886 CET	443	50095	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:44.215634108 CET	443	50095	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:44.220362902 CET	50095	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:44.220418930 CET	443	50095	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:44.255357981 CET	13	50094	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:44.366671085 CET	443	50095	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:44.366725922 CET	443	50095	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:44.366857052 CET	443	50095	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:44.366905928 CET	50095	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:44.367055893 CET	50095	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:44.368994951 CET	50095	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:44.550324917 CET	50096	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:44.690669060 CET	13	50096	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:44.690804958 CET	50096	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:44.831173897 CET	13	50096	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:44.831489086 CET	50096	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:44.831682920 CET	50096	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:44.862464905 CET	50097	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:44.972002029 CET	13	50096	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:45.003148079 CET	13	50097	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:45.003386021 CET	50097	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:45.144829988 CET	13	50097	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:45.144869089 CET	13	50097	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:45.145133972 CET	50097	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:45.145299911 CET	50097	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:45.151982069 CET	50098	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:45.152021885 CET	443	50098	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:45.152090073 CET	50098	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:45.152595997 CET	50098	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:45.152623892 CET	443	50098	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:45.229424953 CET	443	50098	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:45.231209993 CET	50098	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:45.231251001 CET	443	50098	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:45.285923958 CET	13	50097	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:45.394721031 CET	443	50098	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:45.394753933 CET	443	50098	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:45.394829035 CET	443	50098	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:45.394829035 CET	50098	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:45.394881010 CET	50098	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:45.395724058 CET	50098	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:45.530847073 CET	50099	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:45.671063900 CET	13	50099	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:45.671369076 CET	50099	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:45.811599016 CET	13	50099	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:45.811774969 CET	50099	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:45.811963081 CET	50099	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:45.844680071 CET	50100	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:45.952047110 CET	13	50099	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:45.985335112 CET	13	50100	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:45.985543966 CET	50100	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:46.126152992 CET	13	50100	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:46.126182079 CET	13	50100	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:46.126382113 CET	50100	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:46.126543999 CET	50100	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:46.135921001 CET	50101	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:46.135968924 CET	443	50101	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:46.136255980 CET	50101	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:46.136631012 CET	50101	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:46.136653900 CET	443	50101	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:46.215342045 CET	443	50101	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:46.219212055 CET	50101	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:46.219285011 CET	443	50101	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:46.266902924 CET	13	50100	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:46.378477097 CET	443	50101	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:46.378525972 CET	443	50101	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:46.378642082 CET	443	50101	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:46.378665924 CET	50101	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:46.378715992 CET	50101	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:46.379813910 CET	50101	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:46.528072119 CET	50102	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:46.668746948 CET	13	50102	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:46.668952942 CET	50102	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:46.809525967 CET	13	50102	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:46.809695959 CET	50102	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:46.809906960 CET	50102	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:46.832186937 CET	50103	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:46.950450897 CET	13	50102	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:46.972630978 CET	13	50103	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:46.972929001 CET	50103	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:47.113338947 CET	13	50103	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:47.113389015 CET	13	50103	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:47.113605022 CET	50103	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:47.113785982 CET	50103	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:47.145081043 CET	50104	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:47.145127058 CET	443	50104	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:47.145271063 CET	50104	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:47.145781994 CET	50104	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:47.145796061 CET	443	50104	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:47.223031044 CET	443	50104	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:47.225147963 CET	50104	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:47.225178003 CET	443	50104	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:47.254041910 CET	13	50103	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:47.434818983 CET	443	50104	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:47.434866905 CET	443	50104	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:47.434973955 CET	50104	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:47.434998989 CET	443	50104	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:47.435023069 CET	443	50104	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:47.435095072 CET	50104	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:47.435165882 CET	50104	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:47.436579943 CET	50104	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:47.580214024 CET	50105	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:47.720942974 CET	13	50105	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:47.721040964 CET	50105	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:47.861649990 CET	13	50105	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:47.861789942 CET	50105	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:47.861888885 CET	50105	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:47.885742903 CET	50106	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:48.002558947 CET	13	50105	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:48.026163101 CET	13	50106	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:48.026288033 CET	50106	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:48.166656971 CET	13	50106	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:48.166687965 CET	13	50106	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:48.166809082 CET	50106	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:48.167074919 CET	50106	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:48.192092896 CET	50107	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:48.307346106 CET	13	50106	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:48.332475901 CET	13	50107	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:48.332660913 CET	50107	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:48.473082066 CET	13	50107	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:48.473167896 CET	50107	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:48.473263025 CET	50107	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:48.494551897 CET	50108	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:48.613486052 CET	13	50107	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:48.639525890 CET	13	50108	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:48.639658928 CET	50108	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:48.784152031 CET	13	50108	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:48.784176111 CET	13	50108	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:48.784312010 CET	50108	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:48.784441948 CET	50108	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:48.790132046 CET	50109	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:48.790201902 CET	443	50109	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:48.790340900 CET	50109	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:48.790797949 CET	50109	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:48.790829897 CET	443	50109	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:48.870944977 CET	443	50109	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:48.873897076 CET	50109	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:48.873938084 CET	443	50109	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:48.929037094 CET	13	50108	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:49.037686110 CET	443	50109	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:49.037748098 CET	443	50109	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:49.037900925 CET	443	50109	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:49.038028955 CET	50109	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:49.038130045 CET	50109	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:49.038845062 CET	50109	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:49.187798023 CET	50110	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:49.328052044 CET	13	50110	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:49.328198910 CET	50110	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:49.468518019 CET	13	50110	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:49.469336987 CET	50110	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:49.469495058 CET	50110	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:49.494563103 CET	50111	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:49.609724998 CET	13	50110	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:49.634839058 CET	13	50111	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:49.635019064 CET	50111	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:49.775283098 CET	13	50111	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:49.775326967 CET	13	50111	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:49.775429010 CET	50111	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:49.775791883 CET	50111	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:49.808029890 CET	50112	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:49.916058064 CET	13	50111	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:49.948483944 CET	13	50112	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:49.948679924 CET	50112	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:50.089627028 CET	13	50112	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:50.089864016 CET	50112	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:50.090126038 CET	50112	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:50.121500969 CET	50113	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:50.230623007 CET	13	50112	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:50.268426895 CET	13	50113	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:50.268676043 CET	50113	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:50.415447950 CET	13	50113	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:50.415498972 CET	13	50113	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:50.415630102 CET	50113	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:50.415884018 CET	50113	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:30:50.425940037 CET	50114	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:50.425976992 CET	443	50114	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:50.426140070 CET	50114	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:50.426582098 CET	50114	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:50.426604033 CET	443	50114	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:50.503158092 CET	443	50114	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:50.505552053 CET	50114	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:50.505578041 CET	443	50114	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:50.562534094 CET	13	50113	132.163.96.1	192.168.2.5
Feb 8, 2022 08:30:50.661665916 CET	443	50114	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:50.661748886 CET	443	50114	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:50.661854982 CET	50114	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:50.661881924 CET	443	50114	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:50.661947966 CET	443	50114	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:50.661952019 CET	50114	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:50.662013054 CET	50114	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:50.663292885 CET	50114	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:50.799753904 CET	50115	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:50.940478086 CET	13	50115	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:50.940593004 CET	50115	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:51.081310034 CET	13	50115	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:51.081361055 CET	13	50115	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:51.081439972 CET	50115	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:51.081577063 CET	50115	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:51.087630033 CET	50116	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:51.087676048 CET	443	50116	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:51.087747097 CET	50116	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:51.088092089 CET	50116	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:51.088115931 CET	443	50116	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:51.166847944 CET	443	50116	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:51.168400049 CET	50116	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:51.168426037 CET	443	50116	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:51.222146034 CET	13	50115	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:51.327908993 CET	443	50116	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:51.327936888 CET	443	50116	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:51.327999115 CET	443	50116	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:51.328008890 CET	50116	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:51.328058004 CET	50116	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:51.329211950 CET	50116	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:51.476763964 CET	50117	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:51.618689060 CET	13	50117	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:51.618941069 CET	50117	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:51.759378910 CET	13	50117	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:51.759440899 CET	13	50117	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:51.759552002 CET	50117	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:51.759789944 CET	50117	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:51.768408060 CET	50118	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:51.768486023 CET	443	50118	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:51.768698931 CET	50118	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:51.769475937 CET	50118	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:51.769510031 CET	443	50118	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:51.849733114 CET	443	50118	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:51.853698015 CET	50118	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:51.853732109 CET	443	50118	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:51.900111914 CET	13	50117	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:52.031287909 CET	443	50118	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:52.031331062 CET	443	50118	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:52.031429052 CET	443	50118	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:52.031470060 CET	50118	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:52.031529903 CET	50118	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:52.032236099 CET	50118	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:52.181797028 CET	50119	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:52.322017908 CET	13	50119	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:52.322159052 CET	50119	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:52.462270021 CET	13	50119	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:52.462296963 CET	13	50119	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:52.462404013 CET	50119	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:52.462686062 CET	50119	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:52.469738007 CET	50120	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:52.469800949 CET	443	50120	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:52.469897032 CET	50120	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:52.470560074 CET	50120	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:52.470590115 CET	443	50120	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:52.552547932 CET	443	50120	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:52.555917025 CET	50120	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:52.555959940 CET	443	50120	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:52.602700949 CET	13	50119	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:52.724490881 CET	443	50120	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:52.724543095 CET	443	50120	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:52.724637985 CET	50120	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:52.724647045 CET	443	50120	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:52.724709034 CET	50120	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:52.725953102 CET	50120	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:52.866986036 CET	50121	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:53.007363081 CET	13	50121	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:53.007535934 CET	50121	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:53.148174047 CET	13	50121	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:53.148201942 CET	13	50121	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:53.148304939 CET	50121	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:53.148485899 CET	50121	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:53.172123909 CET	50122	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:53.288712978 CET	13	50121	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:53.312551022 CET	13	50122	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:53.312652111 CET	50122	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:53.453248978 CET	13	50122	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:53.453301907 CET	13	50122	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:53.453378916 CET	50122	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:53.453560114 CET	50122	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:53.484457016 CET	50123	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:53.593646049 CET	13	50122	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:53.624902010 CET	13	50123	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:53.625022888 CET	50123	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:53.765458107 CET	13	50123	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:53.765647888 CET	50123	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:53.765676975 CET	50123	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:53.790565968 CET	50124	13	192.168.2.5	132.163.96.4
Feb 8, 2022 08:30:53.906204939 CET	13	50123	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:53.941752911 CET	13	50124	132.163.96.4	192.168.2.5
Feb 8, 2022 08:30:53.941879034 CET	50124	13	192.168.2.5	132.163.96.4
Feb 8, 2022 08:30:54.093276024 CET	13	50124	132.163.96.4	192.168.2.5
Feb 8, 2022 08:30:54.093307972 CET	13	50124	132.163.96.4	192.168.2.5
Feb 8, 2022 08:30:54.093544006 CET	50124	13	192.168.2.5	132.163.96.4
Feb 8, 2022 08:30:54.093923092 CET	50124	13	192.168.2.5	132.163.96.4
Feb 8, 2022 08:30:54.128092051 CET	50125	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:54.128139973 CET	443	50125	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:54.128273010 CET	50125	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:54.128700972 CET	50125	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:54.128710985 CET	443	50125	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:54.203236103 CET	443	50125	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:54.204790115 CET	50125	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:54.204816103 CET	443	50125	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:54.244904995 CET	13	50124	132.163.96.4	192.168.2.5
Feb 8, 2022 08:30:54.381170988 CET	443	50125	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:54.381200075 CET	443	50125	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:54.381257057 CET	443	50125	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:54.381370068 CET	50125	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:54.382534027 CET	50125	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:54.533288002 CET	50126	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:54.673818111 CET	13	50126	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:54.673986912 CET	50126	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:54.814480066 CET	13	50126	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:54.814534903 CET	13	50126	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:54.814650059 CET	50126	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:54.814878941 CET	50126	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:54.841272116 CET	50127	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:54.955266953 CET	13	50126	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:54.981616020 CET	13	50127	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:54.982383013 CET	50127	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:55.122652054 CET	13	50127	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:55.122890949 CET	50127	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:55.122930050 CET	50127	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:55.148394108 CET	50128	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:55.263166904 CET	13	50127	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:55.289047003 CET	13	50128	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:55.289225101 CET	50128	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:55.429501057 CET	13	50128	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:55.431885958 CET	50128	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:55.432060003 CET	50128	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:55.463500977 CET	50129	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:55.572410107 CET	13	50128	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:55.617136955 CET	13	50129	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:55.617234945 CET	50129	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:55.769723892 CET	13	50129	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:55.769761086 CET	13	50129	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:55.769877911 CET	50129	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:55.798455000 CET	50129	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:30:55.806262016 CET	50130	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:55.806303978 CET	443	50130	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:55.806385994 CET	50130	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:55.806845903 CET	50130	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:55.806859016 CET	443	50130	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:55.882941961 CET	443	50130	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:55.936393976 CET	50130	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:55.950932980 CET	13	50129	128.138.141.172	192.168.2.5
Feb 8, 2022 08:30:55.998550892 CET	50130	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:55.998578072 CET	443	50130	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:56.120637894 CET	443	50130	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:56.120691061 CET	443	50130	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:56.120718956 CET	443	50130	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:56.120759964 CET	50130	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:56.120779037 CET	443	50130	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:56.120794058 CET	50130	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:56.120794058 CET	443	50130	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:56.120821953 CET	50130	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:56.120855093 CET	50130	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:56.121762037 CET	50130	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:56.273721933 CET	50131	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:56.413964987 CET	13	50131	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:56.414069891 CET	50131	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:56.554399014 CET	13	50131	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:56.554435015 CET	13	50131	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:56.554513931 CET	50131	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:56.554698944 CET	50131	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:56.581229925 CET	50132	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:56.694778919 CET	13	50131	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:56.721479893 CET	13	50132	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:56.721579075 CET	50132	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:56.861881971 CET	13	50132	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:56.862543106 CET	50132	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:56.862709999 CET	50132	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:56.888828993 CET	50133	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:57.002907991 CET	13	50132	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:57.029438019 CET	13	50133	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:57.030272007 CET	50133	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:57.170819044 CET	13	50133	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:57.174000025 CET	50133	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:57.464529037 CET	50133	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:57.488981009 CET	50134	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:57.605143070 CET	13	50133	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:57.636912107 CET	13	50134	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:57.637981892 CET	50134	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:57.785828114 CET	13	50134	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:57.785865068 CET	13	50134	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:57.785999060 CET	50134	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:57.786303043 CET	50134	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:30:57.820709944 CET	50135	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:57.820765972 CET	443	50135	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:57.820905924 CET	50135	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:57.821751118 CET	50135	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:57.821770906 CET	443	50135	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:57.897351980 CET	443	50135	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:57.899486065 CET	50135	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:57.899518967 CET	443	50135	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:57.933976889 CET	13	50134	132.163.97.3	192.168.2.5
Feb 8, 2022 08:30:58.047614098 CET	443	50135	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:58.047653913 CET	443	50135	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:58.047760963 CET	443	50135	51.83.143.177	192.168.2.5
Feb 8, 2022 08:30:58.047823906 CET	50135	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:58.047861099 CET	50135	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:58.052243948 CET	50135	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:30:58.898865938 CET	50136	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:59.039475918 CET	13	50136	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:59.039664030 CET	50136	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:59.180259943 CET	13	50136	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:59.180479050 CET	50136	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:59.276634932 CET	50136	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:30:59.301433086 CET	50137	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:59.417423010 CET	13	50136	129.6.15.28	192.168.2.5
Feb 8, 2022 08:30:59.441922903 CET	13	50137	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:59.442192078 CET	50137	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:59.582586050 CET	13	50137	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:59.582700014 CET	50137	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:59.582870007 CET	50137	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:30:59.611027956 CET	50138	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:59.723237991 CET	13	50137	129.6.15.29	192.168.2.5
Feb 8, 2022 08:30:59.751488924 CET	13	50138	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:59.751578093 CET	50138	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:59.891935110 CET	13	50138	129.6.15.27	192.168.2.5
Feb 8, 2022 08:30:59.892092943 CET	50138	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:59.892164946 CET	50138	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:30:59.916701078 CET	50139	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:31:00.032422066 CET	13	50138	129.6.15.27	192.168.2.5
Feb 8, 2022 08:31:00.069119930 CET	13	50139	132.163.97.3	192.168.2.5
Feb 8, 2022 08:31:00.069245100 CET	50139	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:31:00.221493006 CET	13	50139	132.163.97.3	192.168.2.5
Feb 8, 2022 08:31:00.221662998 CET	13	50139	132.163.97.3	192.168.2.5
Feb 8, 2022 08:31:00.221744061 CET	50139	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:31:00.221873999 CET	50139	13	192.168.2.5	132.163.97.3
Feb 8, 2022 08:31:00.239905119 CET	50140	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:00.239948988 CET	443	50140	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:00.240035057 CET	50140	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:00.240483046 CET	50140	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:00.240515947 CET	443	50140	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:00.314127922 CET	443	50140	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:00.316291094 CET	50140	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:00.316334009 CET	443	50140	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:00.374017000 CET	13	50139	132.163.97.3	192.168.2.5
Feb 8, 2022 08:31:00.480494976 CET	443	50140	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:00.480521917 CET	443	50140	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:00.480576992 CET	443	50140	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:00.480602026 CET	50140	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:00.480623960 CET	50140	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:00.481637001 CET	50140	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:00.626940012 CET	50141	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:31:00.767240047 CET	13	50141	129.6.15.28	192.168.2.5
Feb 8, 2022 08:31:00.767368078 CET	50141	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:31:00.907685041 CET	13	50141	129.6.15.28	192.168.2.5
Feb 8, 2022 08:31:00.907782078 CET	50141	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:31:00.907994986 CET	50141	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:31:00.932018995 CET	50142	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:31:01.048266888 CET	13	50141	129.6.15.28	192.168.2.5
Feb 8, 2022 08:31:01.072617054 CET	13	50142	129.6.15.29	192.168.2.5
Feb 8, 2022 08:31:01.072805882 CET	50142	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:31:01.213377953 CET	13	50142	129.6.15.29	192.168.2.5
Feb 8, 2022 08:31:01.213521957 CET	50142	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:31:01.213612080 CET	50142	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:31:01.238960028 CET	50143	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:31:01.354101896 CET	13	50142	129.6.15.29	192.168.2.5
Feb 8, 2022 08:31:01.380307913 CET	13	50143	129.6.15.27	192.168.2.5
Feb 8, 2022 08:31:01.380585909 CET	50143	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:31:01.520917892 CET	13	50143	129.6.15.27	192.168.2.5
Feb 8, 2022 08:31:01.521015882 CET	50143	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:31:01.521140099 CET	50143	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:31:01.545377016 CET	50144	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:31:01.661405087 CET	13	50143	129.6.15.27	192.168.2.5
Feb 8, 2022 08:31:01.692228079 CET	13	50144	132.163.96.1	192.168.2.5
Feb 8, 2022 08:31:01.692353964 CET	50144	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:31:01.839308023 CET	13	50144	132.163.96.1	192.168.2.5
Feb 8, 2022 08:31:01.839376926 CET	13	50144	132.163.96.1	192.168.2.5
Feb 8, 2022 08:31:01.839440107 CET	50144	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:31:01.839559078 CET	50144	13	192.168.2.5	132.163.96.1
Feb 8, 2022 08:31:01.844856024 CET	50145	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:01.844930887 CET	443	50145	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:01.845062971 CET	50145	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:01.845438957 CET	50145	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:01.845465899 CET	443	50145	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:01.926227093 CET	443	50145	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:01.928366899 CET	50145	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:01.928405046 CET	443	50145	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:01.986363888 CET	13	50144	132.163.96.1	192.168.2.5
Feb 8, 2022 08:31:02.080430031 CET	443	50145	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:02.080470085 CET	443	50145	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:02.080543995 CET	443	50145	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:02.080600023 CET	50145	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:02.080657959 CET	50145	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:02.081912041 CET	50145	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:02.207469940 CET	50146	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:31:02.348272085 CET	13	50146	129.6.15.28	192.168.2.5
Feb 8, 2022 08:31:02.348576069 CET	50146	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:31:02.488941908 CET	13	50146	129.6.15.28	192.168.2.5
Feb 8, 2022 08:31:02.489022017 CET	50146	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:31:02.489108086 CET	50146	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:31:02.507710934 CET	50147	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:31:02.629231930 CET	13	50146	129.6.15.28	192.168.2.5
Feb 8, 2022 08:31:02.647818089 CET	13	50147	129.6.15.29	192.168.2.5
Feb 8, 2022 08:31:02.647942066 CET	50147	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:31:02.788044930 CET	13	50147	129.6.15.29	192.168.2.5
Feb 8, 2022 08:31:02.788140059 CET	50147	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:31:02.788171053 CET	50147	13	192.168.2.5	129.6.15.29
Feb 8, 2022 08:31:02.808497906 CET	50148	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:31:02.929600000 CET	13	50147	129.6.15.29	192.168.2.5
Feb 8, 2022 08:31:02.948801994 CET	13	50148	129.6.15.27	192.168.2.5
Feb 8, 2022 08:31:02.950998068 CET	50148	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:31:03.091329098 CET	13	50148	129.6.15.27	192.168.2.5
Feb 8, 2022 08:31:03.091449022 CET	50148	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:31:03.091546059 CET	50148	13	192.168.2.5	129.6.15.27
Feb 8, 2022 08:31:03.109841108 CET	50149	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:31:03.231813908 CET	13	50148	129.6.15.27	192.168.2.5
Feb 8, 2022 08:31:03.258038998 CET	13	50149	128.138.141.172	192.168.2.5
Feb 8, 2022 08:31:03.258246899 CET	50149	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:31:03.405977964 CET	13	50149	128.138.141.172	192.168.2.5
Feb 8, 2022 08:31:03.406008959 CET	13	50149	128.138.141.172	192.168.2.5
Feb 8, 2022 08:31:03.406095982 CET	50149	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:31:03.406198978 CET	50149	13	192.168.2.5	128.138.141.172
Feb 8, 2022 08:31:03.408101082 CET	50150	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:03.408143997 CET	443	50150	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:03.408252954 CET	50150	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:03.408627033 CET	50150	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:03.408641100 CET	443	50150	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:03.484318972 CET	443	50150	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:03.485917091 CET	50150	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:03.485944986 CET	443	50150	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:03.553656101 CET	13	50149	128.138.141.172	192.168.2.5
Feb 8, 2022 08:31:03.646408081 CET	443	50150	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:03.646454096 CET	443	50150	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:03.646549940 CET	443	50150	51.83.143.177	192.168.2.5
Feb 8, 2022 08:31:03.646585941 CET	50150	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:03.646610022 CET	50150	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:03.647146940 CET	50150	443	192.168.2.5	51.83.143.177
Feb 8, 2022 08:31:18.677963972 CET	50152	13	192.168.2.5	129.6.15.28
Feb 8, 2022 08:31:18.819812059 CET	13	50152	129.6.15.28	192.168.2.5
Feb 8, 2022 08:31:18.819958925 CET	50152	13	192.168.2.5	129.6.15.28

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 8, 2022 08:29:04.591945887 CET	65447	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:04.610378981 CET	53	65447	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:04.906224966 CET	52441	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:04.924412012 CET	53	52441	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:05.638916016 CET	62176	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:05.663517952 CET	53	62176	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:06.663149118 CET	59596	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:06.682131052 CET	53	59596	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:06.974119902 CET	65296	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:06.990794897 CET	53	65296	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:07.283468962 CET	63183	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:07.301770926 CET	53	63183	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:07.594095945 CET	60151	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:07.612236977 CET	53	60151	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:08.290585995 CET	56969	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:08.308836937 CET	53	56969	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:08.598810911 CET	55161	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:08.616893053 CET	53	55161	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:08.906162024 CET	54757	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:08.924190998 CET	53	54757	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:09.211817980 CET	49992	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:09.228141069 CET	53	49992	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:09.978202105 CET	55016	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:09.996802092 CET	53	55016	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:10.283570051 CET	64345	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:10.301565886 CET	53	64345	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:10.590569019 CET	57128	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:10.608850956 CET	53	57128	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:10.896797895 CET	54791	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:10.921928883 CET	53	54791	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:11.627536058 CET	50463	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:11.645795107 CET	53	50463	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:11.933686972 CET	50394	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:11.950275898 CET	53	50394	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:12.236912966 CET	58530	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:12.255031109 CET	53	58530	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:12.549869061 CET	53813	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:12.567984104 CET	53	53813	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:13.683026075 CET	63732	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:13.699415922 CET	53	63732	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:15.127943039 CET	57344	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:15.146584034 CET	53	57344	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:15.439177990 CET	54450	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:15.455751896 CET	53	54450	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:15.744254112 CET	59261	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:15.762666941 CET	53	59261	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:16.058017969 CET	57151	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:16.074189901 CET	53	57151	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:16.797939062 CET	59413	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:16.814311981 CET	53	59413	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:17.103535891 CET	60516	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:17.120280027 CET	53	60516	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:17.409883976 CET	51649	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:17.428172112 CET	53	51649	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:17.717897892 CET	65086	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:17.736054897 CET	53	65086	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:18.482867956 CET	56432	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:18.501390934 CET	53	56432	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:18.791338921 CET	52929	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:18.807925940 CET	53	52929	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:19.096399069 CET	64317	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:19.114917994 CET	53	64317	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:19.404629946 CET	61004	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:19.421041965 CET	53	61004	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:19.738826036 CET	56895	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:19.754920959 CET	53	56895	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:20.176428080 CET	62372	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:20.195283890 CET	53	62372	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:20.484399080 CET	61515	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:20.500647068 CET	53	61515	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:20.793617964 CET	56675	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:20.812264919 CET	53	56675	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:21.101955891 CET	57172	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:21.120093107 CET	53	57172	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:21.870778084 CET	55267	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:21.889199972 CET	53	55267	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:22.179385900 CET	50969	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:22.197562933 CET	53	50969	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:22.486777067 CET	64362	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:22.504878998 CET	53	64362	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:22.795730114 CET	54766	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:22.814795017 CET	53	54766	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:23.505373955 CET	61446	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:23.523502111 CET	53	61446	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:23.810815096 CET	57515	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:23.827358961 CET	53	57515	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:24.113574982 CET	58199	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:24.132103920 CET	53	58199	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:24.420414925 CET	65221	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:24.438849926 CET	53	65221	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:25.148027897 CET	61573	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:25.169708967 CET	53	61573	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:25.457447052 CET	56562	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:25.475786924 CET	53	56562	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:25.763447046 CET	53591	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:25.779859066 CET	53	53591	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:26.071247101 CET	56032	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:26.089629889 CET	53	56032	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:26.793929100 CET	61150	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:26.812438011 CET	53	61150	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:27.099010944 CET	63458	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:27.117391109 CET	53	63458	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:27.404922962 CET	50422	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:27.426060915 CET	53	50422	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:27.714368105 CET	53247	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:27.733257055 CET	53	53247	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:28.428754091 CET	58544	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:28.447741032 CET	53	58544	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:28.737481117 CET	53814	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:28.755742073 CET	53	53814	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:29.046269894 CET	51305	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:29.065095901 CET	53	51305	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:29.364423990 CET	53670	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:29.382622004 CET	53	53670	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:30.100872040 CET	55160	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:30.116986036 CET	53	55160	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:30.405529976 CET	61414	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:30.423696995 CET	53	61414	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:30.750345945 CET	63847	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:30.766948938 CET	53	63847	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:31.054964066 CET	61523	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:31.073266029 CET	53	61523	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:32.709228039 CET	50551	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:32.727581024 CET	53	50551	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:33.260582924 CET	62847	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:33.277039051 CET	53	62847	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:33.583514929 CET	57712	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:33.601684093 CET	53	57712	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:33.895139933 CET	61064	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:33.913638115 CET	53	61064	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:34.235922098 CET	61891	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:34.252136946 CET	53	61891	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:34.627000093 CET	61585	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:34.643537045 CET	53	61585	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:34.935290098 CET	65163	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:34.951586962 CET	53	65163	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:35.250720978 CET	58969	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:35.269546032 CET	53	58969	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:35.557028055 CET	53977	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:35.575164080 CET	53	53977	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:36.239101887 CET	57147	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:36.257402897 CET	53	57147	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:36.544565916 CET	52381	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:36.562882900 CET	53	52381	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:36.850075006 CET	49231	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:36.866906881 CET	53	49231	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:37.158653975 CET	53217	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:37.177100897 CET	53	53217	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:37.858966112 CET	52554	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:37.875256062 CET	53	52554	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:38.162699938 CET	49603	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:38.180840969 CET	53	49603	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:38.474535942 CET	64476	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:38.491013050 CET	53	64476	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:38.781423092 CET	49975	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:38.800049067 CET	53	49975	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:39.487624884 CET	57701	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:39.504618883 CET	53	57701	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:39.792985916 CET	60334	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:39.809062004 CET	53	60334	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:40.096838951 CET	64958	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:40.114931107 CET	53	64958	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:40.401771069 CET	58504	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:40.418155909 CET	53	58504	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:41.109608889 CET	64971	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:41.127935886 CET	53	64971	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:41.422517061 CET	58041	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:41.441191912 CET	53	58041	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:41.734160900 CET	57764	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:41.752964973 CET	53	57764	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:42.040013075 CET	57973	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:42.056983948 CET	53	57973	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:42.722146034 CET	63286	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:42.740406036 CET	53	63286	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:43.029036045 CET	52589	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:43.047157049 CET	53	52589	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:43.334070921 CET	54875	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:43.352080107 CET	53	54875	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:43.641736031 CET	49862	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:43.659778118 CET	53	49862	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:44.329866886 CET	60159	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:44.348047972 CET	53	60159	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:44.635715961 CET	49464	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:44.654028893 CET	53	49464	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:44.942209005 CET	64650	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:44.961200953 CET	53	64650	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:45.249099016 CET	52633	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:45.265480995 CET	53	52633	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:45.987241983 CET	56124	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:46.005794048 CET	53	56124	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:46.294924021 CET	55552	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:46.313066006 CET	53	55552	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:46.603172064 CET	60813	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:46.619605064 CET	53	60813	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:46.910702944 CET	50930	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:46.928816080 CET	53	50930	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:47.232173920 CET	51582	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:47.250206947 CET	53	51582	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:47.679929972 CET	56831	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:47.696403027 CET	53	56831	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:47.983586073 CET	56981	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:48.000513077 CET	53	56981	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:48.287112951 CET	63599	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:48.303741932 CET	53	63599	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:48.599539995 CET	61009	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:48.615721941 CET	53	61009	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:49.939392090 CET	57676	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:49.955837011 CET	53	57676	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:50.243280888 CET	50687	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:50.261986017 CET	53	50687	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:51.269737005 CET	53246	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:51.288045883 CET	53	53246	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:51.725810051 CET	60242	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:51.743974924 CET	53	60242	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:52.445352077 CET	49674	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:52.461934090 CET	53	49674	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:52.750891924 CET	50811	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:52.769355059 CET	53	50811	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:53.055697918 CET	64331	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:53.073724031 CET	53	64331	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:53.360346079 CET	63680	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:53.378427029 CET	53	63680	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:54.084283113 CET	55029	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:54.102682114 CET	53	55029	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:54.392168999 CET	51986	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:54.409311056 CET	53	51986	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:54.701273918 CET	64913	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:54.718121052 CET	53	64913	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:55.005012035 CET	58438	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:55.023433924 CET	53	58438	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:55.746159077 CET	49414	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:55.762639046 CET	53	49414	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:56.053262949 CET	61135	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:56.071374893 CET	53	61135	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:56.361226082 CET	49373	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:56.381056070 CET	53	49373	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:56.670867920 CET	59258	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:56.689261913 CET	53	59258	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:57.380171061 CET	52434	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:57.398472071 CET	53	52434	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:57.685767889 CET	56456	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:57.705466032 CET	53	56456	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:57.993848085 CET	53715	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:58.010823011 CET	53	53715	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:58.299424887 CET	60677	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:58.318711042 CET	53	60677	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:59.018590927 CET	59658	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:59.036031961 CET	53	59658	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:59.326204062 CET	56873	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:59.344367981 CET	53	56873	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:59.633205891 CET	51402	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:59.649193048 CET	53	51402	8.8.8.8	192.168.2.5
Feb 8, 2022 08:29:59.941099882 CET	59026	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:29:59.959309101 CET	53	59026	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:00.658991098 CET	58616	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:00.677771091 CET	53	58616	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:00.967150927 CET	49232	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:00.983330011 CET	53	49232	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:01.272490978 CET	55390	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:01.290165901 CET	53	55390	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:01.578985929 CET	61057	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:01.597112894 CET	53	61057	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:01.909018040 CET	62975	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:01.927730083 CET	53	62975	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:02.319941044 CET	62623	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:02.336688042 CET	53	62623	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:02.625941992 CET	60626	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:02.643879890 CET	53	60626	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:02.935009003 CET	64199	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:02.953514099 CET	53	64199	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:03.243124962 CET	64289	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:03.259514093 CET	53	64289	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:03.948318958 CET	63509	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:03.966461897 CET	53	63509	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:04.254416943 CET	62707	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:04.272530079 CET	53	62707	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:04.563050985 CET	60328	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:04.581568956 CET	53	60328	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:04.870284081 CET	51927	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:04.888443947 CET	53	51927	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:05.573801041 CET	62279	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:05.592226028 CET	53	62279	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:05.878979921 CET	58156	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:05.897165060 CET	53	58156	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:06.187346935 CET	61329	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:06.203542948 CET	53	61329	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:06.490917921 CET	55689	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:06.507474899 CET	53	55689	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:07.191361904 CET	59651	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:07.209446907 CET	53	59651	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:07.498766899 CET	54342	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:07.515487909 CET	53	54342	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:07.810919046 CET	62853	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:07.829969883 CET	53	62853	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:08.125164986 CET	55957	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:08.143611908 CET	53	55957	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:08.844923019 CET	56417	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:08.863013983 CET	53	56417	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:09.153145075 CET	63649	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:09.289750099 CET	53	63649	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:09.580682993 CET	63385	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:09.597206116 CET	53	63385	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:09.888844967 CET	57985	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:09.905209064 CET	53	57985	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:10.603193998 CET	53746	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:10.622051001 CET	53	53746	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:10.910068989 CET	63772	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:10.928139925 CET	53	63772	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:11.217667103 CET	53339	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:11.235939026 CET	53	53339	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:11.524897099 CET	64282	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:11.543076992 CET	53	64282	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:12.284384966 CET	60790	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:12.302651882 CET	53	60790	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:12.592092037 CET	65223	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:12.610189915 CET	53	65223	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:12.911340952 CET	57450	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:12.928111076 CET	53	57450	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:13.217981100 CET	59162	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:13.234419107 CET	53	59162	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:13.934195042 CET	61752	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:13.952370882 CET	53	61752	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:14.244678974 CET	64745	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:14.262782097 CET	53	64745	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:14.552388906 CET	50720	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:14.569390059 CET	53	50720	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:14.858995914 CET	58046	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:14.877223015 CET	53	58046	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:15.185034037 CET	50299	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:15.206358910 CET	53	50299	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:15.571003914 CET	51951	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:15.587243080 CET	53	51951	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:15.876033068 CET	55037	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:15.894289017 CET	53	55037	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:16.182111025 CET	50823	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:16.198354959 CET	53	50823	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:16.489140987 CET	52439	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:16.507302046 CET	53	52439	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:17.201911926 CET	65003	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:17.220226049 CET	53	65003	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:17.507754087 CET	62613	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:17.618026972 CET	53	62613	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:17.938057899 CET	61280	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:17.956691027 CET	53	61280	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:18.243697882 CET	56205	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:18.260231018 CET	53	56205	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:18.984910965 CET	51129	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:19.003398895 CET	53	51129	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:19.297144890 CET	56571	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:19.313231945 CET	53	56571	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:19.602047920 CET	62923	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:19.618662119 CET	53	62923	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:19.905673027 CET	64231	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:19.923770905 CET	53	64231	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:20.614797115 CET	53021	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:20.633038044 CET	53	53021	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:20.920840025 CET	56546	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:20.937254906 CET	53	56546	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:21.225254059 CET	64112	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:21.243835926 CET	53	64112	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:21.533724070 CET	64254	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:21.552072048 CET	53	64254	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:22.407877922 CET	63226	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:22.424299955 CET	53	63226	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:23.146764040 CET	55746	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:23.164829016 CET	53	55746	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:24.118447065 CET	50459	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:24.134846926 CET	53	50459	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:25.537621021 CET	52789	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:25.555763006 CET	53	52789	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:25.845254898 CET	54396	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:25.863724947 CET	53	54396	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:26.153107882 CET	52929	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:26.169959068 CET	53	52929	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:26.458995104 CET	62682	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:26.476954937 CET	53	62682	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:26.794951916 CET	63287	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:26.813643932 CET	53	63287	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:27.192562103 CET	54561	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:27.210947037 CET	53	54561	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:27.504786968 CET	54241	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:27.521205902 CET	53	54241	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:27.810113907 CET	54694	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:27.826807976 CET	53	54694	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:28.113161087 CET	59529	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:28.129539967 CET	53	59529	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:28.821655035 CET	57609	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:28.837766886 CET	53	57609	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:29.133641005 CET	56901	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:29.150368929 CET	53	56901	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:29.445647955 CET	49284	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:29.462493896 CET	53	49284	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:29.750873089 CET	52266	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:29.769045115 CET	53	52266	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:30.445390940 CET	59227	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:30.464078903 CET	53	59227	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:30.751801968 CET	58369	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:30.769934893 CET	53	58369	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:31.056981087 CET	61315	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:31.075464010 CET	53	61315	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:31.366125107 CET	58287	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:31.382345915 CET	53	58287	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:32.088113070 CET	56207	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:32.106513023 CET	53	56207	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:32.774451971 CET	50843	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:32.790957928 CET	53	50843	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:33.473463058 CET	50946	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:33.495337963 CET	53	50946	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:34.150981903 CET	61217	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:34.169363022 CET	53	61217	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:34.464799881 CET	51502	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:34.482919931 CET	53	51502	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:34.772084951 CET	59557	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:34.788729906 CET	53	59557	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:35.081255913 CET	58902	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:35.099266052 CET	53	58902	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:35.777785063 CET	49637	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:35.795780897 CET	53	49637	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:36.083074093 CET	62420	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:36.101110935 CET	53	62420	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:36.387176037 CET	64375	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:36.405443907 CET	53	64375	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:36.692097902 CET	61811	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:36.710122108 CET	53	61811	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:37.014856100 CET	56775	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:37.033682108 CET	53	56775	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:37.414266109 CET	62877	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:37.432565928 CET	53	62877	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:37.723040104 CET	62081	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:37.743043900 CET	53	62081	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:38.033627033 CET	55668	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:38.051697016 CET	53	55668	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:38.347326994 CET	55470	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:38.363651991 CET	53	55470	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:39.059184074 CET	58891	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:39.077672958 CET	53	58891	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:39.366111994 CET	61620	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:39.385189056 CET	53	61620	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:39.671493053 CET	50330	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:39.690202951 CET	53	50330	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:39.977807999 CET	64158	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:39.996026039 CET	53	64158	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:40.687536955 CET	60275	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:40.706090927 CET	53	60275	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:40.998688936 CET	60237	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:41.016957998 CET	53	60237	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:41.674367905 CET	55845	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:41.692672014 CET	53	55845	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:41.979577065 CET	63347	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:41.998116016 CET	53	63347	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:43.503309011 CET	62936	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:43.521483898 CET	53	62936	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:43.813277006 CET	59585	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:43.831394911 CET	53	59585	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:44.529139042 CET	63493	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:44.547627926 CET	53	63493	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:44.840372086 CET	53593	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:44.858738899 CET	53	53593	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:45.511986017 CET	63121	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:45.528275013 CET	53	63121	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:45.823577881 CET	61048	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:45.842356920 CET	53	61048	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:46.506390095 CET	63907	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:46.524698973 CET	53	63907	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:46.814049006 CET	61623	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:46.830351114 CET	53	61623	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:47.124147892 CET	49733	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:47.142839909 CET	53	49733	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:47.560414076 CET	62958	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:47.578845978 CET	53	62958	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:47.865838051 CET	58386	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:47.884169102 CET	53	58386	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:48.173583984 CET	58712	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:48.190500021 CET	53	58712	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:48.477169037 CET	60631	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:48.493321896 CET	53	60631	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:49.168289900 CET	60775	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:49.186503887 CET	53	60775	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:49.477144003 CET	53617	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:49.493319035 CET	53	53617	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:49.785883904 CET	63959	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:49.804992914 CET	53	63959	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:50.100224972 CET	62411	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:50.118369102 CET	53	62411	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:50.782196999 CET	59382	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:50.798418999 CET	53	59382	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:51.456469059 CET	54724	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:51.474915981 CET	53	54724	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:52.160785913 CET	54125	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:52.178996086 CET	53	54125	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:52.848063946 CET	58415	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:52.864631891 CET	53	58415	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:53.153815031 CET	51452	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:53.169931889 CET	53	51452	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:53.458082914 CET	56152	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:53.476317883 CET	53	56152	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:53.770195961 CET	52943	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:53.788331032 CET	53	52943	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:54.512749910 CET	61148	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:54.531980991 CET	53	61148	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:54.822212934 CET	55369	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:54.838411093 CET	53	55369	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:55.128427982 CET	57975	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:55.146537066 CET	53	57975	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:55.439486027 CET	53466	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:55.457645893 CET	53	53466	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:56.253201008 CET	59688	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:56.271379948 CET	53	59688	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:56.560142994 CET	50996	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:56.578202009 CET	53	50996	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:56.868495941 CET	52827	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:56.887038946 CET	53	52827	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:57.469258070 CET	54780	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:57.487409115 CET	53	54780	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:57.800993919 CET	58032	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:57.819283009 CET	53	58032	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:58.878843069 CET	63210	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:58.897356987 CET	53	63210	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:59.281183004 CET	50926	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:59.299801111 CET	53	50926	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:59.590672016 CET	59019	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:59.609632969 CET	53	59019	8.8.8.8	192.168.2.5
Feb 8, 2022 08:30:59.898356915 CET	63681	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:30:59.914840937 CET	53	63681	8.8.8.8	192.168.2.5
Feb 8, 2022 08:31:00.606842995 CET	60961	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:31:00.625547886 CET	53	60961	8.8.8.8	192.168.2.5
Feb 8, 2022 08:31:00.912941933 CET	54475	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:31:00.929841042 CET	53	54475	8.8.8.8	192.168.2.5
Feb 8, 2022 08:31:01.219572067 CET	50387	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:31:01.237711906 CET	53	50387	8.8.8.8	192.168.2.5
Feb 8, 2022 08:31:01.526798010 CET	59907	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:31:01.542973995 CET	53	59907	8.8.8.8	192.168.2.5
Feb 8, 2022 08:31:02.190284967 CET	50479	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:31:02.206736088 CET	53	50479	8.8.8.8	192.168.2.5
Feb 8, 2022 08:31:02.490607023 CET	56626	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:31:02.507051945 CET	53	56626	8.8.8.8	192.168.2.5
Feb 8, 2022 08:31:02.789514065 CET	49821	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:31:02.807843924 CET	53	49821	8.8.8.8	192.168.2.5
Feb 8, 2022 08:31:03.093014956 CET	60435	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:31:03.109143019 CET	53	60435	8.8.8.8	192.168.2.5
Feb 8, 2022 08:31:18.660820007 CET	59979	53	192.168.2.5	8.8.8.8
Feb 8, 2022 08:31:18.676975965 CET	53	59979	8.8.8.8	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Feb 8, 2022 08:29:04.591945887 CET	192.168.2.5	8.8.8.8	0xf05a	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:04.906224966 CET	192.168.2.5	8.8.8.8	0x2d18	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:05.638916016 CET	192.168.2.5	8.8.8.8	0x5dde	Standard query (0)	justpaste.it	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:06.663149118 CET	192.168.2.5	8.8.8.8	0x6cce	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:06.974119902 CET	192.168.2.5	8.8.8.8	0xf56c	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:07.283468962 CET	192.168.2.5	8.8.8.8	0x5b37	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:07.594095945 CET	192.168.2.5	8.8.8.8	0x6f13	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:08.290585995 CET	192.168.2.5	8.8.8.8	0x6d00	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:08.598810911 CET	192.168.2.5	8.8.8.8	0xe91	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:08.906162024 CET	192.168.2.5	8.8.8.8	0x341e	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:09.211817980 CET	192.168.2.5	8.8.8.8	0xeee3	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:09.978202105 CET	192.168.2.5	8.8.8.8	0x270	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:10.283570051 CET	192.168.2.5	8.8.8.8	0xa3a5	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:10.590569019 CET	192.168.2.5	8.8.8.8	0x4690	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:10.896797895 CET	192.168.2.5	8.8.8.8	0x9dc6	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:11.627536058 CET	192.168.2.5	8.8.8.8	0xbec3	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:11.933686972 CET	192.168.2.5	8.8.8.8	0x3bbf	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:12.236912966 CET	192.168.2.5	8.8.8.8	0x742	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:12.549869061 CET	192.168.2.5	8.8.8.8	0xdcc1	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:13.683026075 CET	192.168.2.5	8.8.8.8	0x359	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:15.127943039 CET	192.168.2.5	8.8.8.8	0x5a6c	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:15.439177990 CET	192.168.2.5	8.8.8.8	0xb77f	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:15.744254112 CET	192.168.2.5	8.8.8.8	0xfcfa	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:16.058017969 CET	192.168.2.5	8.8.8.8	0x8a7	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:16.797939062 CET	192.168.2.5	8.8.8.8	0x334a	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:17.103535891 CET	192.168.2.5	8.8.8.8	0x745a	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:17.409883976 CET	192.168.2.5	8.8.8.8	0xfdef	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:17.717897892 CET	192.168.2.5	8.8.8.8	0xc0e2	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:18.482867956 CET	192.168.2.5	8.8.8.8	0x9f96	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:18.791338921 CET	192.168.2.5	8.8.8.8	0xf76b	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:19.096399069 CET	192.168.2.5	8.8.8.8	0x7af0	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:19.404629946 CET	192.168.2.5	8.8.8.8	0x836c	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:19.738826036 CET	192.168.2.5	8.8.8.8	0x1ad3	Standard query (0)	justpaste.it	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:20.176428080 CET	192.168.2.5	8.8.8.8	0xfc6f	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:20.484399080 CET	192.168.2.5	8.8.8.8	0x94f2	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:20.793617964 CET	192.168.2.5	8.8.8.8	0xa033	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:21.101955891 CET	192.168.2.5	8.8.8.8	0xc935	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:21.870778084 CET	192.168.2.5	8.8.8.8	0x62da	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:22.179385900 CET	192.168.2.5	8.8.8.8	0xc953	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:22.486777067 CET	192.168.2.5	8.8.8.8	0xf49a	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:22.795730114 CET	192.168.2.5	8.8.8.8	0x51aa	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:23.505373955 CET	192.168.2.5	8.8.8.8	0x6bd0	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:23.810815096 CET	192.168.2.5	8.8.8.8	0xfd9e	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:24.113574982 CET	192.168.2.5	8.8.8.8	0xc4a1	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:24.420414925 CET	192.168.2.5	8.8.8.8	0x6b5f	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:25.148027897 CET	192.168.2.5	8.8.8.8	0x42fa	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:25.457447052 CET	192.168.2.5	8.8.8.8	0x13d8	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:25.763447046 CET	192.168.2.5	8.8.8.8	0x5e1e	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:26.071247101 CET	192.168.2.5	8.8.8.8	0xdb2c	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:26.793929100 CET	192.168.2.5	8.8.8.8	0x18cd	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:27.099010944 CET	192.168.2.5	8.8.8.8	0xbf43	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:27.404922962 CET	192.168.2.5	8.8.8.8	0xd739	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:27.714368105 CET	192.168.2.5	8.8.8.8	0x946a	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:28.428754091 CET	192.168.2.5	8.8.8.8	0x2565	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:28.737481117 CET	192.168.2.5	8.8.8.8	0xb8d9	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:29.046269894 CET	192.168.2.5	8.8.8.8	0xa647	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:29.364423990 CET	192.168.2.5	8.8.8.8	0x4df6	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:30.100872040 CET	192.168.2.5	8.8.8.8	0xaee4	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:30.405529976 CET	192.168.2.5	8.8.8.8	0xc94e	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:30.750345945 CET	192.168.2.5	8.8.8.8	0x2e0d	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:31.054964066 CET	192.168.2.5	8.8.8.8	0xbdb	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:32.709228039 CET	192.168.2.5	8.8.8.8	0x9f6	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:33.260582924 CET	192.168.2.5	8.8.8.8	0x99e1	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:33.583514929 CET	192.168.2.5	8.8.8.8	0xdf8a	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:33.895139933 CET	192.168.2.5	8.8.8.8	0xb433	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:34.235922098 CET	192.168.2.5	8.8.8.8	0xcf4c	Standard query (0)	justpaste.it	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:34.627000093 CET	192.168.2.5	8.8.8.8	0x200f	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:34.935290098 CET	192.168.2.5	8.8.8.8	0xa240	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:35.250720978 CET	192.168.2.5	8.8.8.8	0x5403	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:35.557028055 CET	192.168.2.5	8.8.8.8	0x4e54	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:36.239101887 CET	192.168.2.5	8.8.8.8	0x5fe8	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:36.544565916 CET	192.168.2.5	8.8.8.8	0xd17a	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:36.850075006 CET	192.168.2.5	8.8.8.8	0x73f7	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:37.158653975 CET	192.168.2.5	8.8.8.8	0xb11d	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:37.858966112 CET	192.168.2.5	8.8.8.8	0x49b1	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:38.162699938 CET	192.168.2.5	8.8.8.8	0x57a2	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:38.474535942 CET	192.168.2.5	8.8.8.8	0x79c4	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:38.781423092 CET	192.168.2.5	8.8.8.8	0x2981	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:39.487624884 CET	192.168.2.5	8.8.8.8	0xfa18	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:39.792985916 CET	192.168.2.5	8.8.8.8	0xac6	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:40.096838951 CET	192.168.2.5	8.8.8.8	0x40a3	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:40.401771069 CET	192.168.2.5	8.8.8.8	0xc98b	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:41.109608889 CET	192.168.2.5	8.8.8.8	0x876b	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:41.422517061 CET	192.168.2.5	8.8.8.8	0x7723	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:41.734160900 CET	192.168.2.5	8.8.8.8	0x4343	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:42.040013075 CET	192.168.2.5	8.8.8.8	0x1303	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:42.722146034 CET	192.168.2.5	8.8.8.8	0x94f9	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:43.029036045 CET	192.168.2.5	8.8.8.8	0x3170	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:43.334070921 CET	192.168.2.5	8.8.8.8	0x1d96	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:43.641736031 CET	192.168.2.5	8.8.8.8	0x39d8	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:44.329866886 CET	192.168.2.5	8.8.8.8	0xf387	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:44.635715961 CET	192.168.2.5	8.8.8.8	0x5f75	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:44.942209005 CET	192.168.2.5	8.8.8.8	0x6f80	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:45.249099016 CET	192.168.2.5	8.8.8.8	0xd9de	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:45.987241983 CET	192.168.2.5	8.8.8.8	0x499d	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:46.294924021 CET	192.168.2.5	8.8.8.8	0x3743	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:46.603172064 CET	192.168.2.5	8.8.8.8	0x95f1	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:46.910702944 CET	192.168.2.5	8.8.8.8	0xf796	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:47.232173920 CET	192.168.2.5	8.8.8.8	0xf903	Standard query (0)	justpaste.it	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:47.679929972 CET	192.168.2.5	8.8.8.8	0x514e	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:47.983586073 CET	192.168.2.5	8.8.8.8	0x2d85	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:48.287112951 CET	192.168.2.5	8.8.8.8	0x4b2e	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:48.599539995 CET	192.168.2.5	8.8.8.8	0x4784	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:49.939392090 CET	192.168.2.5	8.8.8.8	0x62f5	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:50.243280888 CET	192.168.2.5	8.8.8.8	0xdd0c	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:51.269737005 CET	192.168.2.5	8.8.8.8	0x3ecd	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:51.725810051 CET	192.168.2.5	8.8.8.8	0xa42b	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:52.445352077 CET	192.168.2.5	8.8.8.8	0xe313	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:52.750891924 CET	192.168.2.5	8.8.8.8	0x4a01	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:53.055697918 CET	192.168.2.5	8.8.8.8	0xd3ab	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:53.360346079 CET	192.168.2.5	8.8.8.8	0xae26	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:54.084283113 CET	192.168.2.5	8.8.8.8	0xe6e6	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:54.392168999 CET	192.168.2.5	8.8.8.8	0xcf66	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:54.701273918 CET	192.168.2.5	8.8.8.8	0xca15	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:55.005012035 CET	192.168.2.5	8.8.8.8	0xdd07	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:55.746159077 CET	192.168.2.5	8.8.8.8	0x8a06	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:56.053262949 CET	192.168.2.5	8.8.8.8	0x9482	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:56.361226082 CET	192.168.2.5	8.8.8.8	0xf773	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:56.670867920 CET	192.168.2.5	8.8.8.8	0xb88c	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:57.380171061 CET	192.168.2.5	8.8.8.8	0x5425	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:57.685767889 CET	192.168.2.5	8.8.8.8	0xdfc8	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:57.993848085 CET	192.168.2.5	8.8.8.8	0x50c0	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:58.299424887 CET	192.168.2.5	8.8.8.8	0xce97	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:59.018590927 CET	192.168.2.5	8.8.8.8	0xf807	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:59.326204062 CET	192.168.2.5	8.8.8.8	0x84e3	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:59.633205891 CET	192.168.2.5	8.8.8.8	0x8c7e	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:59.941099882 CET	192.168.2.5	8.8.8.8	0x8e4f	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:00.658991098 CET	192.168.2.5	8.8.8.8	0x5566	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:00.967150927 CET	192.168.2.5	8.8.8.8	0x25e3	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:01.272490978 CET	192.168.2.5	8.8.8.8	0x78b8	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:01.578985929 CET	192.168.2.5	8.8.8.8	0xfdd2	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:01.909018040 CET	192.168.2.5	8.8.8.8	0xd763	Standard query (0)	justpaste.it	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:02.319941044 CET	192.168.2.5	8.8.8.8	0x41d1	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:02.625941992 CET	192.168.2.5	8.8.8.8	0xc356	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:02.935009003 CET	192.168.2.5	8.8.8.8	0xb2dc	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:03.243124962 CET	192.168.2.5	8.8.8.8	0xd2fa	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:03.948318958 CET	192.168.2.5	8.8.8.8	0x9732	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:04.254416943 CET	192.168.2.5	8.8.8.8	0xdfd0	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:04.563050985 CET	192.168.2.5	8.8.8.8	0x71ee	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:04.870284081 CET	192.168.2.5	8.8.8.8	0xeb2c	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:05.573801041 CET	192.168.2.5	8.8.8.8	0x2d4	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:05.878979921 CET	192.168.2.5	8.8.8.8	0xd393	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:06.187346935 CET	192.168.2.5	8.8.8.8	0x3bcc	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:06.490917921 CET	192.168.2.5	8.8.8.8	0xdcde	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:07.191361904 CET	192.168.2.5	8.8.8.8	0xda85	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:07.498766899 CET	192.168.2.5	8.8.8.8	0x86c	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:07.810919046 CET	192.168.2.5	8.8.8.8	0x5f0b	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:08.125164986 CET	192.168.2.5	8.8.8.8	0x8538	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:08.844923019 CET	192.168.2.5	8.8.8.8	0x238f	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:09.153145075 CET	192.168.2.5	8.8.8.8	0xa714	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:09.580682993 CET	192.168.2.5	8.8.8.8	0x1252	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:09.888844967 CET	192.168.2.5	8.8.8.8	0x184a	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:10.603193998 CET	192.168.2.5	8.8.8.8	0x258b	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:10.910068989 CET	192.168.2.5	8.8.8.8	0x1c61	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:11.217667103 CET	192.168.2.5	8.8.8.8	0xfab2	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:11.524897099 CET	192.168.2.5	8.8.8.8	0x2db6	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:12.284384966 CET	192.168.2.5	8.8.8.8	0x6056	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:12.592092037 CET	192.168.2.5	8.8.8.8	0x953e	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:12.911340952 CET	192.168.2.5	8.8.8.8	0xc39c	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:13.217981100 CET	192.168.2.5	8.8.8.8	0x1e31	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:13.934195042 CET	192.168.2.5	8.8.8.8	0x7a19	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:14.244678974 CET	192.168.2.5	8.8.8.8	0x97d3	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:14.552388906 CET	192.168.2.5	8.8.8.8	0x8800	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:14.858995914 CET	192.168.2.5	8.8.8.8	0x816f	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:15.185034037 CET	192.168.2.5	8.8.8.8	0xa404	Standard query (0)	justpaste.it	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:15.571003914 CET	192.168.2.5	8.8.8.8	0x8769	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:15.876033068 CET	192.168.2.5	8.8.8.8	0xad12	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:16.182111025 CET	192.168.2.5	8.8.8.8	0x8430	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:16.489140987 CET	192.168.2.5	8.8.8.8	0x350	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:17.201911926 CET	192.168.2.5	8.8.8.8	0xccc0	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:17.507754087 CET	192.168.2.5	8.8.8.8	0x643a	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:17.938057899 CET	192.168.2.5	8.8.8.8	0xad97	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:18.243697882 CET	192.168.2.5	8.8.8.8	0xac1b	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:18.984910965 CET	192.168.2.5	8.8.8.8	0xc028	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:19.297144890 CET	192.168.2.5	8.8.8.8	0xfb94	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:19.602047920 CET	192.168.2.5	8.8.8.8	0x4c3c	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:19.905673027 CET	192.168.2.5	8.8.8.8	0xd9d5	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:20.614797115 CET	192.168.2.5	8.8.8.8	0xeb34	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:20.920840025 CET	192.168.2.5	8.8.8.8	0xbb4a	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:21.225254059 CET	192.168.2.5	8.8.8.8	0x1ad3	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:21.533724070 CET	192.168.2.5	8.8.8.8	0x5745	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:22.407877922 CET	192.168.2.5	8.8.8.8	0x7220	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:23.146764040 CET	192.168.2.5	8.8.8.8	0x89e2	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:24.118447065 CET	192.168.2.5	8.8.8.8	0x720b	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:25.537621021 CET	192.168.2.5	8.8.8.8	0xaf35	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:25.845254898 CET	192.168.2.5	8.8.8.8	0x5d47	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:26.153107882 CET	192.168.2.5	8.8.8.8	0xc38c	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:26.458995104 CET	192.168.2.5	8.8.8.8	0x8164	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:26.794951916 CET	192.168.2.5	8.8.8.8	0x1a10	Standard query (0)	justpaste.it	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:27.192562103 CET	192.168.2.5	8.8.8.8	0x289f	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:27.504786968 CET	192.168.2.5	8.8.8.8	0xfd8b	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:27.810113907 CET	192.168.2.5	8.8.8.8	0x30a1	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:28.113161087 CET	192.168.2.5	8.8.8.8	0x5263	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:28.821655035 CET	192.168.2.5	8.8.8.8	0xf05c	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:29.133641005 CET	192.168.2.5	8.8.8.8	0xca1c	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:29.445647955 CET	192.168.2.5	8.8.8.8	0x4682	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:29.750873089 CET	192.168.2.5	8.8.8.8	0x8f48	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:30.445390940 CET	192.168.2.5	8.8.8.8	0x3113	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:30.751801968 CET	192.168.2.5	8.8.8.8	0x6ce9	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:31.056981087 CET	192.168.2.5	8.8.8.8	0x91de	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:31.366125107 CET	192.168.2.5	8.8.8.8	0x33a9	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:32.088113070 CET	192.168.2.5	8.8.8.8	0x5b5c	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:32.774451971 CET	192.168.2.5	8.8.8.8	0xc5d0	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:33.473463058 CET	192.168.2.5	8.8.8.8	0xfee9	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:34.150981903 CET	192.168.2.5	8.8.8.8	0xb64f	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:34.464799881 CET	192.168.2.5	8.8.8.8	0x8fd8	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:34.772084951 CET	192.168.2.5	8.8.8.8	0xeaa7	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:35.081255913 CET	192.168.2.5	8.8.8.8	0x4847	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:35.777785063 CET	192.168.2.5	8.8.8.8	0x9420	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:36.083074093 CET	192.168.2.5	8.8.8.8	0x659b	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:36.387176037 CET	192.168.2.5	8.8.8.8	0x22c6	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:36.692097902 CET	192.168.2.5	8.8.8.8	0x8d52	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:37.014856100 CET	192.168.2.5	8.8.8.8	0x97ef	Standard query (0)	justpaste.it	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:37.414266109 CET	192.168.2.5	8.8.8.8	0xc914	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:37.723040104 CET	192.168.2.5	8.8.8.8	0xa08b	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:38.033627033 CET	192.168.2.5	8.8.8.8	0xdb7a	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:38.347326994 CET	192.168.2.5	8.8.8.8	0xa057	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:39.059184074 CET	192.168.2.5	8.8.8.8	0xa63d	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:39.366111994 CET	192.168.2.5	8.8.8.8	0x8bac	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:39.671493053 CET	192.168.2.5	8.8.8.8	0x223c	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:39.977807999 CET	192.168.2.5	8.8.8.8	0xd023	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:40.687536955 CET	192.168.2.5	8.8.8.8	0x9035	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:40.998688936 CET	192.168.2.5	8.8.8.8	0x1eb5	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:41.674367905 CET	192.168.2.5	8.8.8.8	0xcf64	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:41.979577065 CET	192.168.2.5	8.8.8.8	0x292f	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:43.503309011 CET	192.168.2.5	8.8.8.8	0x5bc0	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:43.813277006 CET	192.168.2.5	8.8.8.8	0x497f	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:44.529139042 CET	192.168.2.5	8.8.8.8	0xd260	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:44.840372086 CET	192.168.2.5	8.8.8.8	0x82e7	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:45.511986017 CET	192.168.2.5	8.8.8.8	0xbfcc	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:45.823577881 CET	192.168.2.5	8.8.8.8	0x2d12	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:46.506390095 CET	192.168.2.5	8.8.8.8	0x314b	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:46.814049006 CET	192.168.2.5	8.8.8.8	0x5298	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:47.124147892 CET	192.168.2.5	8.8.8.8	0x2478	Standard query (0)	justpaste.it	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:47.560414076 CET	192.168.2.5	8.8.8.8	0x74d7	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:47.865838051 CET	192.168.2.5	8.8.8.8	0x6179	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:48.173583984 CET	192.168.2.5	8.8.8.8	0x2419	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:48.477169037 CET	192.168.2.5	8.8.8.8	0xdc5c	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:49.168289900 CET	192.168.2.5	8.8.8.8	0x7e42	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:49.477144003 CET	192.168.2.5	8.8.8.8	0x8141	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:49.785883904 CET	192.168.2.5	8.8.8.8	0x961b	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:50.100224972 CET	192.168.2.5	8.8.8.8	0x385e	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:50.782196999 CET	192.168.2.5	8.8.8.8	0x23fa	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:51.456469059 CET	192.168.2.5	8.8.8.8	0xf21f	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:52.160785913 CET	192.168.2.5	8.8.8.8	0x1f23	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:52.848063946 CET	192.168.2.5	8.8.8.8	0x9cd4	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:53.153815031 CET	192.168.2.5	8.8.8.8	0xa4be	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:53.458082914 CET	192.168.2.5	8.8.8.8	0xf957	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:53.770195961 CET	192.168.2.5	8.8.8.8	0xab39	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:54.512749910 CET	192.168.2.5	8.8.8.8	0xa016	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:54.822212934 CET	192.168.2.5	8.8.8.8	0xb46f	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:55.128427982 CET	192.168.2.5	8.8.8.8	0x1eea	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:55.439486027 CET	192.168.2.5	8.8.8.8	0x947a	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:56.253201008 CET	192.168.2.5	8.8.8.8	0x3134	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:56.560142994 CET	192.168.2.5	8.8.8.8	0x6ee4	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:56.868495941 CET	192.168.2.5	8.8.8.8	0x2597	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:57.469258070 CET	192.168.2.5	8.8.8.8	0x2124	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:57.800993919 CET	192.168.2.5	8.8.8.8	0x895d	Standard query (0)	justpaste.it	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:58.878843069 CET	192.168.2.5	8.8.8.8	0xf319	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:59.281183004 CET	192.168.2.5	8.8.8.8	0xc35e	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:59.590672016 CET	192.168.2.5	8.8.8.8	0xd77b	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:59.898356915 CET	192.168.2.5	8.8.8.8	0x11e6	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:31:00.606842995 CET	192.168.2.5	8.8.8.8	0x9af8	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:31:00.912941933 CET	192.168.2.5	8.8.8.8	0x1f0a	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:31:01.219572067 CET	192.168.2.5	8.8.8.8	0xeb46	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:31:01.526798010 CET	192.168.2.5	8.8.8.8	0xb6de	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:31:02.190284967 CET	192.168.2.5	8.8.8.8	0x701c	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:31:02.490607023 CET	192.168.2.5	8.8.8.8	0x468b	Standard query (0)	time-b-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:31:02.789514065 CET	192.168.2.5	8.8.8.8	0x8e29	Standard query (0)	time-d-g.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:31:03.093014956 CET	192.168.2.5	8.8.8.8	0x9eed	Standard query (0)	time.nist.gov	A (IP address)	IN (0x0001)
Feb 8, 2022 08:31:18.660820007 CET	192.168.2.5	8.8.8.8	0xb0aa	Standard query (0)	time-a-g.nist.gov	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Feb 8, 2022 08:29:04.610378981 CET	8.8.8.8	192.168.2.5	0xf05a	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:04.924412012 CET	8.8.8.8	192.168.2.5	0x2d18	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:05.663517952 CET	8.8.8.8	192.168.2.5	0x5dde	No error (0)	justpaste.it		51.83.143.177	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:06.682131052 CET	8.8.8.8	192.168.2.5	0x6cce	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:06.990794897 CET	8.8.8.8	192.168.2.5	0xf56c	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:07.301770926 CET	8.8.8.8	192.168.2.5	0x5b37	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:07.612236977 CET	8.8.8.8	192.168.2.5	0x6f13	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:07.612236977 CET	8.8.8.8	192.168.2.5	0x6f13	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:08.308836937 CET	8.8.8.8	192.168.2.5	0x6d00	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:08.616893053 CET	8.8.8.8	192.168.2.5	0xe91	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:08.924190998 CET	8.8.8.8	192.168.2.5	0x341e	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:09.228141069 CET	8.8.8.8	192.168.2.5	0xeee3	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:09.228141069 CET	8.8.8.8	192.168.2.5	0xeee3	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:09.996802092 CET	8.8.8.8	192.168.2.5	0x270	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:10.301565886 CET	8.8.8.8	192.168.2.5	0xa3a5	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:10.608850956 CET	8.8.8.8	192.168.2.5	0x4690	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:10.921928883 CET	8.8.8.8	192.168.2.5	0x9dc6	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:10.921928883 CET	8.8.8.8	192.168.2.5	0x9dc6	No error (0)	ntp1.glb.nist.gov		132.163.97.2	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:11.645795107 CET	8.8.8.8	192.168.2.5	0xbec3	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:11.950275898 CET	8.8.8.8	192.168.2.5	0x3bbf	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:12.255031109 CET	8.8.8.8	192.168.2.5	0x742	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:12.567984104 CET	8.8.8.8	192.168.2.5	0xdcc1	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:12.567984104 CET	8.8.8.8	192.168.2.5	0xdcc1	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:13.699415922 CET	8.8.8.8	192.168.2.5	0x359	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:15.146584034 CET	8.8.8.8	192.168.2.5	0x5a6c	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:15.455751896 CET	8.8.8.8	192.168.2.5	0xb77f	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:15.762666941 CET	8.8.8.8	192.168.2.5	0xfcfa	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:16.074189901 CET	8.8.8.8	192.168.2.5	0x8a7	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:16.074189901 CET	8.8.8.8	192.168.2.5	0x8a7	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:16.814311981 CET	8.8.8.8	192.168.2.5	0x334a	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:17.120280027 CET	8.8.8.8	192.168.2.5	0x745a	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:17.428172112 CET	8.8.8.8	192.168.2.5	0xfdef	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:17.736054897 CET	8.8.8.8	192.168.2.5	0xc0e2	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:17.736054897 CET	8.8.8.8	192.168.2.5	0xc0e2	No error (0)	ntp1.glb.nist.gov		132.163.97.2	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:18.501390934 CET	8.8.8.8	192.168.2.5	0x9f96	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:18.807925940 CET	8.8.8.8	192.168.2.5	0xf76b	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:19.114917994 CET	8.8.8.8	192.168.2.5	0x7af0	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:19.421041965 CET	8.8.8.8	192.168.2.5	0x836c	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:19.421041965 CET	8.8.8.8	192.168.2.5	0x836c	No error (0)	ntp1.glb.nist.gov		132.163.97.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:19.754920959 CET	8.8.8.8	192.168.2.5	0x1ad3	No error (0)	justpaste.it		51.83.143.177	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:20.195283890 CET	8.8.8.8	192.168.2.5	0xfc6f	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:20.500647068 CET	8.8.8.8	192.168.2.5	0x94f2	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:20.812264919 CET	8.8.8.8	192.168.2.5	0xa033	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:21.120093107 CET	8.8.8.8	192.168.2.5	0xc935	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:21.120093107 CET	8.8.8.8	192.168.2.5	0xc935	No error (0)	ntp1.glb.nist.gov		132.163.97.6	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:21.889199972 CET	8.8.8.8	192.168.2.5	0x62da	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:22.197562933 CET	8.8.8.8	192.168.2.5	0xc953	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:22.504878998 CET	8.8.8.8	192.168.2.5	0xf49a	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:22.814795017 CET	8.8.8.8	192.168.2.5	0x51aa	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:22.814795017 CET	8.8.8.8	192.168.2.5	0x51aa	No error (0)	ntp1.glb.nist.gov		132.163.97.6	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:23.523502111 CET	8.8.8.8	192.168.2.5	0x6bd0	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:23.827358961 CET	8.8.8.8	192.168.2.5	0xfd9e	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:24.132103920 CET	8.8.8.8	192.168.2.5	0xc4a1	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:24.438849926 CET	8.8.8.8	192.168.2.5	0x6b5f	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:24.438849926 CET	8.8.8.8	192.168.2.5	0x6b5f	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:25.169708967 CET	8.8.8.8	192.168.2.5	0x42fa	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:25.475786924 CET	8.8.8.8	192.168.2.5	0x13d8	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:25.779859066 CET	8.8.8.8	192.168.2.5	0x5e1e	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:26.089629889 CET	8.8.8.8	192.168.2.5	0xdb2c	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:26.089629889 CET	8.8.8.8	192.168.2.5	0xdb2c	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:26.812438011 CET	8.8.8.8	192.168.2.5	0x18cd	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:27.117391109 CET	8.8.8.8	192.168.2.5	0xbf43	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:27.426060915 CET	8.8.8.8	192.168.2.5	0xd739	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:27.733257055 CET	8.8.8.8	192.168.2.5	0x946a	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:27.733257055 CET	8.8.8.8	192.168.2.5	0x946a	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:28.447741032 CET	8.8.8.8	192.168.2.5	0x2565	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:28.755742073 CET	8.8.8.8	192.168.2.5	0xb8d9	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:29.065095901 CET	8.8.8.8	192.168.2.5	0xa647	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:29.382622004 CET	8.8.8.8	192.168.2.5	0x4df6	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:29.382622004 CET	8.8.8.8	192.168.2.5	0x4df6	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:30.116986036 CET	8.8.8.8	192.168.2.5	0xaee4	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:30.423696995 CET	8.8.8.8	192.168.2.5	0xc94e	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:30.766948938 CET	8.8.8.8	192.168.2.5	0x2e0d	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:31.073266029 CET	8.8.8.8	192.168.2.5	0xbdb	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:31.073266029 CET	8.8.8.8	192.168.2.5	0xbdb	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:32.727581024 CET	8.8.8.8	192.168.2.5	0x9f6	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:33.277039051 CET	8.8.8.8	192.168.2.5	0x99e1	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:33.601684093 CET	8.8.8.8	192.168.2.5	0xdf8a	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:33.913638115 CET	8.8.8.8	192.168.2.5	0xb433	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:33.913638115 CET	8.8.8.8	192.168.2.5	0xb433	No error (0)	ntp1.glb.nist.gov		132.163.97.2	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:34.252136946 CET	8.8.8.8	192.168.2.5	0xcf4c	No error (0)	justpaste.it		51.83.143.177	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:34.643537045 CET	8.8.8.8	192.168.2.5	0x200f	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:34.951586962 CET	8.8.8.8	192.168.2.5	0xa240	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:35.269546032 CET	8.8.8.8	192.168.2.5	0x5403	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:35.575164080 CET	8.8.8.8	192.168.2.5	0x4e54	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:35.575164080 CET	8.8.8.8	192.168.2.5	0x4e54	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:36.257402897 CET	8.8.8.8	192.168.2.5	0x5fe8	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:36.562882900 CET	8.8.8.8	192.168.2.5	0xd17a	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:36.866906881 CET	8.8.8.8	192.168.2.5	0x73f7	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:37.177100897 CET	8.8.8.8	192.168.2.5	0xb11d	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:37.177100897 CET	8.8.8.8	192.168.2.5	0xb11d	No error (0)	ntp1.glb.nist.gov		132.163.97.2	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:37.875256062 CET	8.8.8.8	192.168.2.5	0x49b1	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:38.180840969 CET	8.8.8.8	192.168.2.5	0x57a2	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:38.491013050 CET	8.8.8.8	192.168.2.5	0x79c4	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:38.800049067 CET	8.8.8.8	192.168.2.5	0x2981	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:38.800049067 CET	8.8.8.8	192.168.2.5	0x2981	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:39.504618883 CET	8.8.8.8	192.168.2.5	0xfa18	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:39.809062004 CET	8.8.8.8	192.168.2.5	0xac6	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:40.114931107 CET	8.8.8.8	192.168.2.5	0x40a3	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:40.418155909 CET	8.8.8.8	192.168.2.5	0xc98b	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:40.418155909 CET	8.8.8.8	192.168.2.5	0xc98b	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:41.127935886 CET	8.8.8.8	192.168.2.5	0x876b	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:41.441191912 CET	8.8.8.8	192.168.2.5	0x7723	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:41.752964973 CET	8.8.8.8	192.168.2.5	0x4343	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:42.056983948 CET	8.8.8.8	192.168.2.5	0x1303	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:42.056983948 CET	8.8.8.8	192.168.2.5	0x1303	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:42.740406036 CET	8.8.8.8	192.168.2.5	0x94f9	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:43.047157049 CET	8.8.8.8	192.168.2.5	0x3170	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:43.352080107 CET	8.8.8.8	192.168.2.5	0x1d96	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:43.659778118 CET	8.8.8.8	192.168.2.5	0x39d8	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:43.659778118 CET	8.8.8.8	192.168.2.5	0x39d8	No error (0)	ntp1.glb.nist.gov		132.163.97.2	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:44.348047972 CET	8.8.8.8	192.168.2.5	0xf387	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:44.654028893 CET	8.8.8.8	192.168.2.5	0x5f75	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:44.961200953 CET	8.8.8.8	192.168.2.5	0x6f80	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:45.265480995 CET	8.8.8.8	192.168.2.5	0xd9de	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:45.265480995 CET	8.8.8.8	192.168.2.5	0xd9de	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:46.005794048 CET	8.8.8.8	192.168.2.5	0x499d	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:46.313066006 CET	8.8.8.8	192.168.2.5	0x3743	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:46.619605064 CET	8.8.8.8	192.168.2.5	0x95f1	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:46.928816080 CET	8.8.8.8	192.168.2.5	0xf796	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:46.928816080 CET	8.8.8.8	192.168.2.5	0xf796	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:47.250206947 CET	8.8.8.8	192.168.2.5	0xf903	No error (0)	justpaste.it		51.83.143.177	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:47.696403027 CET	8.8.8.8	192.168.2.5	0x514e	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:48.000513077 CET	8.8.8.8	192.168.2.5	0x2d85	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:48.303741932 CET	8.8.8.8	192.168.2.5	0x4b2e	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:48.615721941 CET	8.8.8.8	192.168.2.5	0x4784	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:48.615721941 CET	8.8.8.8	192.168.2.5	0x4784	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:49.955837011 CET	8.8.8.8	192.168.2.5	0x62f5	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:50.261986017 CET	8.8.8.8	192.168.2.5	0xdd0c	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:51.288045883 CET	8.8.8.8	192.168.2.5	0x3ecd	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:51.743974924 CET	8.8.8.8	192.168.2.5	0xa42b	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:51.743974924 CET	8.8.8.8	192.168.2.5	0xa42b	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:52.461934090 CET	8.8.8.8	192.168.2.5	0xe313	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:52.769355059 CET	8.8.8.8	192.168.2.5	0x4a01	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:53.073724031 CET	8.8.8.8	192.168.2.5	0xd3ab	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:53.378427029 CET	8.8.8.8	192.168.2.5	0xae26	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:53.378427029 CET	8.8.8.8	192.168.2.5	0xae26	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:54.102682114 CET	8.8.8.8	192.168.2.5	0xe6e6	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:54.409311056 CET	8.8.8.8	192.168.2.5	0xcf66	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:54.718121052 CET	8.8.8.8	192.168.2.5	0xca15	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:55.023433924 CET	8.8.8.8	192.168.2.5	0xdd07	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:55.023433924 CET	8.8.8.8	192.168.2.5	0xdd07	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:55.762639046 CET	8.8.8.8	192.168.2.5	0x8a06	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:56.071374893 CET	8.8.8.8	192.168.2.5	0x9482	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:56.381056070 CET	8.8.8.8	192.168.2.5	0xf773	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:56.689261913 CET	8.8.8.8	192.168.2.5	0xb88c	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:56.689261913 CET	8.8.8.8	192.168.2.5	0xb88c	No error (0)	ntp1.glb.nist.gov		132.163.97.2	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:57.398472071 CET	8.8.8.8	192.168.2.5	0x5425	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:57.705466032 CET	8.8.8.8	192.168.2.5	0xdfc8	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:58.010823011 CET	8.8.8.8	192.168.2.5	0x50c0	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:58.318711042 CET	8.8.8.8	192.168.2.5	0xce97	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:58.318711042 CET	8.8.8.8	192.168.2.5	0xce97	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:59.036031961 CET	8.8.8.8	192.168.2.5	0xf807	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:59.344367981 CET	8.8.8.8	192.168.2.5	0x84e3	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:59.649193048 CET	8.8.8.8	192.168.2.5	0x8c7e	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:29:59.959309101 CET	8.8.8.8	192.168.2.5	0x8e4f	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:29:59.959309101 CET	8.8.8.8	192.168.2.5	0x8e4f	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:00.677771091 CET	8.8.8.8	192.168.2.5	0x5566	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:00.983330011 CET	8.8.8.8	192.168.2.5	0x25e3	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:01.290165901 CET	8.8.8.8	192.168.2.5	0x78b8	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:01.597112894 CET	8.8.8.8	192.168.2.5	0xfdd2	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:01.597112894 CET	8.8.8.8	192.168.2.5	0xfdd2	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:01.927730083 CET	8.8.8.8	192.168.2.5	0xd763	No error (0)	justpaste.it		51.83.143.177	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:02.336688042 CET	8.8.8.8	192.168.2.5	0x41d1	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:02.643879890 CET	8.8.8.8	192.168.2.5	0xc356	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:02.953514099 CET	8.8.8.8	192.168.2.5	0xb2dc	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:03.259514093 CET	8.8.8.8	192.168.2.5	0xd2fa	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:03.259514093 CET	8.8.8.8	192.168.2.5	0xd2fa	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:03.966461897 CET	8.8.8.8	192.168.2.5	0x9732	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:04.272530079 CET	8.8.8.8	192.168.2.5	0xdfd0	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:04.581568956 CET	8.8.8.8	192.168.2.5	0x71ee	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:04.888443947 CET	8.8.8.8	192.168.2.5	0xeb2c	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:04.888443947 CET	8.8.8.8	192.168.2.5	0xeb2c	No error (0)	ntp1.glb.nist.gov		132.163.97.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:05.592226028 CET	8.8.8.8	192.168.2.5	0x2d4	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:05.897165060 CET	8.8.8.8	192.168.2.5	0xd393	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:06.203542948 CET	8.8.8.8	192.168.2.5	0x3bcc	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:06.507474899 CET	8.8.8.8	192.168.2.5	0xdcde	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:06.507474899 CET	8.8.8.8	192.168.2.5	0xdcde	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:07.209446907 CET	8.8.8.8	192.168.2.5	0xda85	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:07.515487909 CET	8.8.8.8	192.168.2.5	0x86c	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:07.829969883 CET	8.8.8.8	192.168.2.5	0x5f0b	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:08.143611908 CET	8.8.8.8	192.168.2.5	0x8538	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:08.143611908 CET	8.8.8.8	192.168.2.5	0x8538	No error (0)	ntp1.glb.nist.gov		132.163.97.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:08.863013983 CET	8.8.8.8	192.168.2.5	0x238f	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:09.289750099 CET	8.8.8.8	192.168.2.5	0xa714	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:09.597206116 CET	8.8.8.8	192.168.2.5	0x1252	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:09.905209064 CET	8.8.8.8	192.168.2.5	0x184a	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:09.905209064 CET	8.8.8.8	192.168.2.5	0x184a	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:10.622051001 CET	8.8.8.8	192.168.2.5	0x258b	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:10.928139925 CET	8.8.8.8	192.168.2.5	0x1c61	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:11.235939026 CET	8.8.8.8	192.168.2.5	0xfab2	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:11.543076992 CET	8.8.8.8	192.168.2.5	0x2db6	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:11.543076992 CET	8.8.8.8	192.168.2.5	0x2db6	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:12.302651882 CET	8.8.8.8	192.168.2.5	0x6056	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:12.610189915 CET	8.8.8.8	192.168.2.5	0x953e	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:12.928111076 CET	8.8.8.8	192.168.2.5	0xc39c	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:13.234419107 CET	8.8.8.8	192.168.2.5	0x1e31	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:13.234419107 CET	8.8.8.8	192.168.2.5	0x1e31	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:13.952370882 CET	8.8.8.8	192.168.2.5	0x7a19	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:14.262782097 CET	8.8.8.8	192.168.2.5	0x97d3	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:14.569390059 CET	8.8.8.8	192.168.2.5	0x8800	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:14.877223015 CET	8.8.8.8	192.168.2.5	0x816f	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:14.877223015 CET	8.8.8.8	192.168.2.5	0x816f	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:15.206358910 CET	8.8.8.8	192.168.2.5	0xa404	No error (0)	justpaste.it		51.83.143.177	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:15.587243080 CET	8.8.8.8	192.168.2.5	0x8769	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:15.894289017 CET	8.8.8.8	192.168.2.5	0xad12	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:16.198354959 CET	8.8.8.8	192.168.2.5	0x8430	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:16.507302046 CET	8.8.8.8	192.168.2.5	0x350	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:16.507302046 CET	8.8.8.8	192.168.2.5	0x350	No error (0)	ntp1.glb.nist.gov		132.163.97.2	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:17.220226049 CET	8.8.8.8	192.168.2.5	0xccc0	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:17.618026972 CET	8.8.8.8	192.168.2.5	0x643a	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:17.956691027 CET	8.8.8.8	192.168.2.5	0xad97	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:18.260231018 CET	8.8.8.8	192.168.2.5	0xac1b	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:18.260231018 CET	8.8.8.8	192.168.2.5	0xac1b	No error (0)	ntp1.glb.nist.gov		132.163.97.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:19.003398895 CET	8.8.8.8	192.168.2.5	0xc028	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:19.313231945 CET	8.8.8.8	192.168.2.5	0xfb94	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:19.618662119 CET	8.8.8.8	192.168.2.5	0x4c3c	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:19.923770905 CET	8.8.8.8	192.168.2.5	0xd9d5	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:19.923770905 CET	8.8.8.8	192.168.2.5	0xd9d5	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:20.633038044 CET	8.8.8.8	192.168.2.5	0xeb34	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:20.937254906 CET	8.8.8.8	192.168.2.5	0xbb4a	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:21.243835926 CET	8.8.8.8	192.168.2.5	0x1ad3	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:21.552072048 CET	8.8.8.8	192.168.2.5	0x5745	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:21.552072048 CET	8.8.8.8	192.168.2.5	0x5745	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:22.424299955 CET	8.8.8.8	192.168.2.5	0x7220	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:23.164829016 CET	8.8.8.8	192.168.2.5	0x89e2	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:24.134846926 CET	8.8.8.8	192.168.2.5	0x720b	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:25.555763006 CET	8.8.8.8	192.168.2.5	0xaf35	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:25.863724947 CET	8.8.8.8	192.168.2.5	0x5d47	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:26.169959068 CET	8.8.8.8	192.168.2.5	0xc38c	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:26.476954937 CET	8.8.8.8	192.168.2.5	0x8164	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:26.476954937 CET	8.8.8.8	192.168.2.5	0x8164	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:26.813643932 CET	8.8.8.8	192.168.2.5	0x1a10	No error (0)	justpaste.it		51.83.143.177	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:27.210947037 CET	8.8.8.8	192.168.2.5	0x289f	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:27.521205902 CET	8.8.8.8	192.168.2.5	0xfd8b	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:27.826807976 CET	8.8.8.8	192.168.2.5	0x30a1	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:28.129539967 CET	8.8.8.8	192.168.2.5	0x5263	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:28.129539967 CET	8.8.8.8	192.168.2.5	0x5263	No error (0)	ntp1.glb.nist.gov		132.163.97.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:28.837766886 CET	8.8.8.8	192.168.2.5	0xf05c	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:29.150368929 CET	8.8.8.8	192.168.2.5	0xca1c	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:29.462493896 CET	8.8.8.8	192.168.2.5	0x4682	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:29.769045115 CET	8.8.8.8	192.168.2.5	0x8f48	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:29.769045115 CET	8.8.8.8	192.168.2.5	0x8f48	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:30.464078903 CET	8.8.8.8	192.168.2.5	0x3113	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:30.769934893 CET	8.8.8.8	192.168.2.5	0x6ce9	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:31.075464010 CET	8.8.8.8	192.168.2.5	0x91de	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:31.382345915 CET	8.8.8.8	192.168.2.5	0x33a9	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:31.382345915 CET	8.8.8.8	192.168.2.5	0x33a9	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:32.106513023 CET	8.8.8.8	192.168.2.5	0x5b5c	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:32.790957928 CET	8.8.8.8	192.168.2.5	0xc5d0	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:33.495337963 CET	8.8.8.8	192.168.2.5	0xfee9	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:34.169363022 CET	8.8.8.8	192.168.2.5	0xb64f	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:34.482919931 CET	8.8.8.8	192.168.2.5	0x8fd8	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:34.788729906 CET	8.8.8.8	192.168.2.5	0xeaa7	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:35.099266052 CET	8.8.8.8	192.168.2.5	0x4847	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:35.099266052 CET	8.8.8.8	192.168.2.5	0x4847	No error (0)	ntp1.glb.nist.gov		132.163.97.4	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:35.795780897 CET	8.8.8.8	192.168.2.5	0x9420	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:36.101110935 CET	8.8.8.8	192.168.2.5	0x659b	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:36.405443907 CET	8.8.8.8	192.168.2.5	0x22c6	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:36.710122108 CET	8.8.8.8	192.168.2.5	0x8d52	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:36.710122108 CET	8.8.8.8	192.168.2.5	0x8d52	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:37.033682108 CET	8.8.8.8	192.168.2.5	0x97ef	No error (0)	justpaste.it		51.83.143.177	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:37.432565928 CET	8.8.8.8	192.168.2.5	0xc914	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:37.743043900 CET	8.8.8.8	192.168.2.5	0xa08b	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:38.051697016 CET	8.8.8.8	192.168.2.5	0xdb7a	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:38.363651991 CET	8.8.8.8	192.168.2.5	0xa057	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:38.363651991 CET	8.8.8.8	192.168.2.5	0xa057	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:39.077672958 CET	8.8.8.8	192.168.2.5	0xa63d	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:39.385189056 CET	8.8.8.8	192.168.2.5	0x8bac	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:39.690202951 CET	8.8.8.8	192.168.2.5	0x223c	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:39.996026039 CET	8.8.8.8	192.168.2.5	0xd023	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:39.996026039 CET	8.8.8.8	192.168.2.5	0xd023	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:40.706090927 CET	8.8.8.8	192.168.2.5	0x9035	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:41.016957998 CET	8.8.8.8	192.168.2.5	0x1eb5	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:41.692672014 CET	8.8.8.8	192.168.2.5	0xcf64	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:41.998116016 CET	8.8.8.8	192.168.2.5	0x292f	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:43.521483898 CET	8.8.8.8	192.168.2.5	0x5bc0	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:43.831394911 CET	8.8.8.8	192.168.2.5	0x497f	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:44.547627926 CET	8.8.8.8	192.168.2.5	0xd260	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:44.858738899 CET	8.8.8.8	192.168.2.5	0x82e7	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:45.528275013 CET	8.8.8.8	192.168.2.5	0xbfcc	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:45.842356920 CET	8.8.8.8	192.168.2.5	0x2d12	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:46.524698973 CET	8.8.8.8	192.168.2.5	0x314b	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:46.830351114 CET	8.8.8.8	192.168.2.5	0x5298	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:47.142839909 CET	8.8.8.8	192.168.2.5	0x2478	No error (0)	justpaste.it		51.83.143.177	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:47.578845978 CET	8.8.8.8	192.168.2.5	0x74d7	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:47.884169102 CET	8.8.8.8	192.168.2.5	0x6179	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:48.190500021 CET	8.8.8.8	192.168.2.5	0x2419	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:48.493321896 CET	8.8.8.8	192.168.2.5	0xdc5c	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:48.493321896 CET	8.8.8.8	192.168.2.5	0xdc5c	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:49.186503887 CET	8.8.8.8	192.168.2.5	0x7e42	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:49.493319035 CET	8.8.8.8	192.168.2.5	0x8141	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:49.804992914 CET	8.8.8.8	192.168.2.5	0x961b	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:50.118369102 CET	8.8.8.8	192.168.2.5	0x385e	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:50.118369102 CET	8.8.8.8	192.168.2.5	0x385e	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:50.798418999 CET	8.8.8.8	192.168.2.5	0x23fa	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:51.474915981 CET	8.8.8.8	192.168.2.5	0xf21f	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:52.178996086 CET	8.8.8.8	192.168.2.5	0x1f23	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:52.864631891 CET	8.8.8.8	192.168.2.5	0x9cd4	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:53.169931889 CET	8.8.8.8	192.168.2.5	0xa4be	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:53.476317883 CET	8.8.8.8	192.168.2.5	0xf957	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:53.788331032 CET	8.8.8.8	192.168.2.5	0xab39	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:53.788331032 CET	8.8.8.8	192.168.2.5	0xab39	No error (0)	ntp1.glb.nist.gov		132.163.96.4	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:54.531980991 CET	8.8.8.8	192.168.2.5	0xa016	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:54.838411093 CET	8.8.8.8	192.168.2.5	0xb46f	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:55.146537066 CET	8.8.8.8	192.168.2.5	0x1eea	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:55.457645893 CET	8.8.8.8	192.168.2.5	0x947a	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:55.457645893 CET	8.8.8.8	192.168.2.5	0x947a	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:56.271379948 CET	8.8.8.8	192.168.2.5	0x3134	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:56.578202009 CET	8.8.8.8	192.168.2.5	0x6ee4	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:56.887038946 CET	8.8.8.8	192.168.2.5	0x2597	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:57.487409115 CET	8.8.8.8	192.168.2.5	0x2124	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:57.487409115 CET	8.8.8.8	192.168.2.5	0x2124	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:57.819283009 CET	8.8.8.8	192.168.2.5	0x895d	No error (0)	justpaste.it		51.83.143.177	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:58.897356987 CET	8.8.8.8	192.168.2.5	0xf319	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:59.299801111 CET	8.8.8.8	192.168.2.5	0xc35e	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:59.609632969 CET	8.8.8.8	192.168.2.5	0xd77b	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:30:59.914840937 CET	8.8.8.8	192.168.2.5	0x11e6	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:30:59.914840937 CET	8.8.8.8	192.168.2.5	0x11e6	No error (0)	ntp1.glb.nist.gov		132.163.97.3	A (IP address)	IN (0x0001)
Feb 8, 2022 08:31:00.625547886 CET	8.8.8.8	192.168.2.5	0x9af8	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:31:00.929841042 CET	8.8.8.8	192.168.2.5	0x1f0a	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:31:01.237711906 CET	8.8.8.8	192.168.2.5	0xeb46	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:31:01.542973995 CET	8.8.8.8	192.168.2.5	0xb6de	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:31:01.542973995 CET	8.8.8.8	192.168.2.5	0xb6de	No error (0)	ntp1.glb.nist.gov		132.163.96.1	A (IP address)	IN (0x0001)
Feb 8, 2022 08:31:02.206736088 CET	8.8.8.8	192.168.2.5	0x701c	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)
Feb 8, 2022 08:31:02.507051945 CET	8.8.8.8	192.168.2.5	0x468b	No error (0)	time-b-g.nist.gov		129.6.15.29	A (IP address)	IN (0x0001)
Feb 8, 2022 08:31:02.807843924 CET	8.8.8.8	192.168.2.5	0x8e29	No error (0)	time-d-g.nist.gov		129.6.15.27	A (IP address)	IN (0x0001)
Feb 8, 2022 08:31:03.109143019 CET	8.8.8.8	192.168.2.5	0x9eed	No error (0)	time.nist.gov	ntp1.glb.nist.gov		CNAME (Canonical name)	IN (0x0001)
Feb 8, 2022 08:31:03.109143019 CET	8.8.8.8	192.168.2.5	0x9eed	No error (0)	ntp1.glb.nist.gov		128.138.141.172	A (IP address)	IN (0x0001)
Feb 8, 2022 08:31:18.676975965 CET	8.8.8.8	192.168.2.5	0xb0aa	No error (0)	time-a-g.nist.gov		129.6.15.28	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

justpaste.it

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.5	49761	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	Direction	Data
2022-02-08 07:29:06 UTC	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it Connection: Keep-Alive
2022-02-08 07:29:06 UTC	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:06 UTC	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.5	49768	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:08 UTC	6	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:08 UTC	6	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:08 UTC	6	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.5	49812	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:23 UTC	65	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:23 UTC	65	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:23 UTC	65	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.5	49817	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:24 UTC	71	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:25 UTC	71	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:25 UTC	72	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.5	49824	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:26 UTC	78	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:26 UTC	78	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:26 UTC	78	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.5	49829	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:28 UTC	84	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:28 UTC	84	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:28 UTC	85	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.5	49834	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:29 UTC	91	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:29 UTC	91	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:29 UTC	91	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.5	49839	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:31 UTC	97	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:32 UTC	98	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:32 UTC	98	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.5	49844	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:34 UTC	104	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:34 UTC	104	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:34 UTC	104	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.5	49849	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:35 UTC	111	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:36 UTC	111	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:36 UTC	111	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.5	49854	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:37 UTC	117	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:37 UTC	117	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:37 UTC	117	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.5	49859	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:39 UTC	124	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:39 UTC	124	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:39 UTC	124	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.5	49774	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:09 UTC	13	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:09 UTC	13	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:09 UTC	13	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.5	49864	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:40 UTC	130	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:40 UTC	130	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:40 UTC	131	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.5	49869	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:42 UTC	137	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:42 UTC	137	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:42 UTC	137	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.5	49874	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:44 UTC	143	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:44 UTC	143	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:44 UTC	144	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.5	49880	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:45 UTC	150	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:45 UTC	150	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:45 UTC	150	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.5	49887	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:47 UTC	156	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:47 UTC	156	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:47 UTC	157	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.5	49892	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:49 UTC	163	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:49 UTC	163	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:49 UTC	163	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.5	49897	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:52 UTC	169	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:52 UTC	169	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:52 UTC	170	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.5	49904	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:53 UTC	176	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:53 UTC	176	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:53 UTC	176	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.5	49910	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:55 UTC	182	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:55 UTC	182	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:55 UTC	183	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.5	49917	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:57 UTC	189	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:57 UTC	189	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:57 UTC	189	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.5	49780	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:11 UTC	19	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:11 UTC	19	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:11 UTC	20	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.5	49927	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:58 UTC	195	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:58 UTC	195	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:58 UTC	196	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.5	49935	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:00 UTC	202	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:00 UTC	202	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:00 UTC	202	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.5	49947	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:02 UTC	209	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:02 UTC	209	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:02 UTC	209	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.5	49960	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:03 UTC	215	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:03 UTC	215	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:03 UTC	215	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.5	49972	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:05 UTC	222	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:05 UTC	222	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:05 UTC	222	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.5	49982	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:06 UTC	228	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:07 UTC	228	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:07 UTC	228	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.5	49987	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:08 UTC	235	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:08 UTC	235	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:08 UTC	235	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.5	49992	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:10 UTC	241	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:10 UTC	241	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:10 UTC	242	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.5	49997	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:11 UTC	248	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:12 UTC	248	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:12 UTC	248	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.5	50003	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:13 UTC	254	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:13 UTC	254	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:13 UTC	255	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.5	49785	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:13 UTC	26	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:13 UTC	26	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:13 UTC	26	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.5	50008	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:15 UTC	261	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:15 UTC	261	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:15 UTC	261	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.5	50014	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:16 UTC	267	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:17 UTC	267	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:17 UTC	268	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.5	50019	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:18 UTC	274	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:18 UTC	274	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:18 UTC	274	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.5	50024	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:20 UTC	280	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:20 UTC	280	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:20 UTC	281	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.5	50029	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:21 UTC	287	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:22 UTC	287	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:22 UTC	287	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.5	50031	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:22 UTC	293	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:22 UTC	293	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:22 UTC	294	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.5	50033	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:23 UTC	300	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:23 UTC	300	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:23 UTC	300	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.5	50035	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:25 UTC	306	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:25 UTC	306	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:25 UTC	307	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.5	50040	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:26 UTC	313	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:27 UTC	313	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:27 UTC	313	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.5	50045	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:28 UTC	320	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:28 UTC	320	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:28 UTC	320	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.5	49787	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:14 UTC	32	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:14 UTC	32	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:14 UTC	33	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.5	50050	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:30 UTC	326	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:30 UTC	326	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:30 UTC	326	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.5	50055	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:31 UTC	333	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:31 UTC	333	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:31 UTC	333	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.2.5	50057	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:32 UTC	339	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:32 UTC	339	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:32 UTC	339	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.5	50059	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:33 UTC	346	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:33 UTC	346	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:33 UTC	346	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.2.5	50061	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:33 UTC	352	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:34 UTC	352	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:34 UTC	353	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.5	50066	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:35 UTC	359	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:35 UTC	359	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:35 UTC	359	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.2.5	50072	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:37 UTC	365	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:37 UTC	365	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:37 UTC	366	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.2.5	50077	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:38 UTC	372	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:38 UTC	372	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:38 UTC	372	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.2.5	50083	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:40 UTC	378	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:40 UTC	378	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:40 UTC	379	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.2.5	50089	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:41 UTC	385	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:41 UTC	385	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:41 UTC	385	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.5	49792	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:16 UTC	39	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:16 UTC	39	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:16 UTC	39	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.2.5	50092	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:43 UTC	391	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:43 UTC	391	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:43 UTC	392	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.2.5	50095	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:44 UTC	398	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:44 UTC	398	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:44 UTC	398	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.2.5	50098	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:45 UTC	404	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:45 UTC	404	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:45 UTC	405	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.2.5	50101	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:46 UTC	411	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:46 UTC	411	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:46 UTC	411	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.2.5	50104	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:47 UTC	417	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:47 UTC	418	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:47 UTC	418	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.2.5	50109	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:48 UTC	424	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:49 UTC	424	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:49 UTC	424	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.2.5	50114	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:50 UTC	431	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:50 UTC	431	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:50 UTC	431	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	192.168.2.5	50116	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:51 UTC	437	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:51 UTC	437	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:51 UTC	437	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.2.5	50118	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:51 UTC	444	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:52 UTC	444	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:52 UTC	444	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	192.168.2.5	50120	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:52 UTC	450	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:52 UTC	450	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:52 UTC	451	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.5	49797	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:18 UTC	45	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:18 UTC	45	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:18 UTC	46	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.2.5	50125	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:54 UTC	457	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:54 UTC	457	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:54 UTC	457	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	192.168.2.5	50130	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:55 UTC	463	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:56 UTC	463	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:56 UTC	464	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.2.5	50135	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:30:57 UTC	470	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:30:58 UTC	470	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:30:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:30:58 UTC	470	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.2.5	50140	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:31:00 UTC	476	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:31:00 UTC	476	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:31:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:31:00 UTC	477	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.2.5	50145	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:31:01 UTC	483	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:31:02 UTC	483	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:31:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:31:02 UTC	483	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.2.5	50150	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:31:03 UTC	489	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:31:03 UTC	489	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:31:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:31:03 UTC	490	IN	Data Raw: 31 38 37 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 Data Ascii: 1874<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
76	192.168.2.5	50153	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:31:19 UTC	496	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:31:19 UTC	496	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:31:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:31:19 UTC	496	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.5	49802	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:19 UTC	52	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:20 UTC	52	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:20 UTC	52	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.5	49807	51.83.143.177	443	C:\Users\user\Desktop\y99ZI1Kjg8.exe

Timestamp	kBytes transferred	Direction	Data
2022-02-08 07:29:21 UTC	58	OUT	GET /RIjMwIzNwIDM HTTP/1.1 Host: justpaste.it
2022-02-08 07:29:21 UTC	58	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 08 Feb 2022 07:29:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Cache-Control: private, must-revalidate pragma: no-cache expires: -1 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin
2022-02-08 07:29:21 UTC	59	IN	Data Raw: 36 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 Data Ascii: 6cc<!doctype html><html lang="en" class="h-100"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="content-language

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

System Behavior

Analysis Process: y99ZI1Kjg8.exePID: 5104, Parent PID: 6060

General

Target ID:	0
Start time:	08:28:57
Start date:	08/02/2022
Path:	C:\Users\user\Desktop\y99ZI1Kjg8.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\y99ZI1Kjg8.exe"
Imagebase:	0xcb0000
File size:	634368 bytes
MD5 hash:	7F5CF247926FA7235507C557E1554716
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	low

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: y99ZI1Kjg8.exePID: 5104, Parent PID: 6060COMMON

Executed Functions

Function 00007FFA1D940BCD Relevance: .7, Instructions: 665COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17cbb1e08b01670d07f16e20112df608f578cb0d60ed7b36dde6af847f71b7d9
Instruction ID: 41408de7249f61736660039f64a791c54f36a44e7ae522c939f9b8858c3515cc
Opcode Fuzzy Hash: 17cbb1e08b01670d07f16e20112df608f578cb0d60ed7b36dde6af847f71b7d9
Instruction Fuzzy Hash: 83122A39A1CD598FE768DB1885455B97BD0EF86331F0182B9D46DC7993FF28A8068BC0

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D9452A6 Relevance: .5, Instructions: 473COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f156ec61c486b7a45dc4c27019f9990967069edb310f87f2408eef41a0231bc2
Instruction ID: 8f0798dfa3ab94fb71f6400f479c6c6c582402bce9851d5c8b52de3db190173c
Opcode Fuzzy Hash: f156ec61c486b7a45dc4c27019f9990967069edb310f87f2408eef41a0231bc2
Instruction Fuzzy Hash: 24F1A430518A8D8FEBA8DF28C845BE97BD1FF55310F04826EE85DC7692DB74A8458B81

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D946052 Relevance: .5, Instructions: 458COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 951d196fb10aeee16dae1912cce831f208cdcdfa5840fd6ac20837e898481f9b
Instruction ID: a6e4b3aedafa9af84ce1fbaafee7b0629d6c2f33a1fdf84572544374a043f9eb
Opcode Fuzzy Hash: 951d196fb10aeee16dae1912cce831f208cdcdfa5840fd6ac20837e898481f9b
Instruction Fuzzy Hash: DEE1C170608A8D8FEBA8DF28C8557E97BD1EB59310F00826ED85DC7692DF74A845CBC1

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D94185B Relevance: 1.3, Strings: 1, Instructions: 28COMMON

Download Yara Rule

Strings

$^_, xrefs: 00007FFA1D94185D

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID: $^_
API String ID: 0-1300324870
Opcode ID: 94f180799fb2e9e56f9217dbc5e0bdc035aa4fc081024492642c4d300d902443
Instruction ID: 2261cbf5838dec41914d595c63245cb174a12a1b217fae7f0a2d44a1f3b6c3c3
Opcode Fuzzy Hash: 94f180799fb2e9e56f9217dbc5e0bdc035aa4fc081024492642c4d300d902443
Instruction Fuzzy Hash: E5F0E2A0E0CE8A8FD785D718486076C7FE1AF5A320F1481B5C04DE7697EA285802CB52

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D940357 Relevance: .4, Instructions: 357COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4375842909aff81a7afccd631d16beb21b2a691d4e2f550e0cc6ac65bb075a8d
Instruction ID: a545e8c6261d103ede130910338586eeeddfbb9423a6dbb357d400be8db8bb26
Opcode Fuzzy Hash: 4375842909aff81a7afccd631d16beb21b2a691d4e2f550e0cc6ac65bb075a8d
Instruction Fuzzy Hash: 5B41397690DA998FDB49DB5CC8606E87FB1EF56320F0901BAC08DD7583EB282848CF55

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D940375 Relevance: .3, Instructions: 343COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e157cba85a34d7e610b01364b3692a4787de4c4ea98c38204d5cf5fe5ec7281
Instruction ID: 041d7101ef261e47524fff73dbb3345b4ff8058538afd44c7ee89e136b81d633
Opcode Fuzzy Hash: 9e157cba85a34d7e610b01364b3692a4787de4c4ea98c38204d5cf5fe5ec7281
Instruction Fuzzy Hash: 3A41297590DA898FDB49DB58C8646E87FB1FF56320F0801BAC04DD7183EE282848CF55

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D945C66 Relevance: .3, Instructions: 332COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 765491a0885a0cc40fca5c16fe0225c0b8e72dcc082b77a7cc0bac8490c7bec9
Instruction ID: 12c455998687299a60b4133dc3e803921854bbcb3b8c74ca939492f77848e25a
Opcode Fuzzy Hash: 765491a0885a0cc40fca5c16fe0225c0b8e72dcc082b77a7cc0bac8490c7bec9
Instruction Fuzzy Hash: 1EB1C530618A8D8FDBA8DF28D8557E93BD1EF55310F04826EE44DC7692DB74A845CB82

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D9490C2 Relevance: .3, Instructions: 317COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40dbae596952e9fbb52caa9a9659bb5408ae344c9c35364ae16bfd0c75a81f04
Instruction ID: 18ef78e1525f8bac0cbe541e948910a1a8fba017a39e78fbbfa0bb6f51406fe6
Opcode Fuzzy Hash: 40dbae596952e9fbb52caa9a9659bb5408ae344c9c35364ae16bfd0c75a81f04
Instruction Fuzzy Hash: 76A1C531A18A499FD788EB18C499EA8B7E1FF1A310B4541BDD00EC7597EF24AC85CF81

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D9409BB Relevance: .2, Instructions: 238COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc0b70b769d83dfede6615d5c64fed0f060b3dbf9b33f28d19d601de02135b01
Instruction ID: de5a12da4d01c03029fe17a6275aef297ab1493feb4190327902870167a8499a
Opcode Fuzzy Hash: dc0b70b769d83dfede6615d5c64fed0f060b3dbf9b33f28d19d601de02135b01
Instruction Fuzzy Hash: 46810235D1CA5A8EEB54DB648954ABD7FB0FF46320F5581BAC01ED3593EF286841CB80

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D9486D3 Relevance: .2, Instructions: 217COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b242d86549d39ec594ee49950adddc71d11c28d192aace767d3a916aa56993d
Instruction ID: 3f4eeaed6ea9165ff701d8205b20bb260907443fab125db36422f3530bddcb51
Opcode Fuzzy Hash: 2b242d86549d39ec594ee49950adddc71d11c28d192aace767d3a916aa56993d
Instruction Fuzzy Hash: 6C71E43191CE558FDB49EB28C495D647BE0FF6A320B1581A8D01ECB697DF28E845CB81

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D942BAA Relevance: .2, Instructions: 188COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ce81b59520ab6b6f23e7d7d76a8cdd3379f8ba85c9c755acc3e4aa3ded34ed6
Instruction ID: 2ce4e561a405aca1322720a6b1553f1e6e5331996e6c177bfbcdb43780fc2d72
Opcode Fuzzy Hash: 6ce81b59520ab6b6f23e7d7d76a8cdd3379f8ba85c9c755acc3e4aa3ded34ed6
Instruction Fuzzy Hash: 05514C31918A1C8FDB58EF58D845BE9BBF1FB59310F0082AAD40DE3252DF74A9858F81

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D947985 Relevance: .2, Instructions: 179COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e49f9edac62f143de7dd14d9ea11c24d74d2717f9b082087d004ab5f8be12231
Instruction ID: 2d55fd670ec1ce3ddc7304a6d41b61caf50a73973703f8343a822a980e43f320
Opcode Fuzzy Hash: e49f9edac62f143de7dd14d9ea11c24d74d2717f9b082087d004ab5f8be12231
Instruction Fuzzy Hash: BB515B3590CE8A8FDB45E7288494AB87BA0FF52324B5581F9D00CC75D7EE28AC45CBD2

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D9418A0 Relevance: .2, Instructions: 177COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cfbe59742b1ca372e32a04dadba89eb5ac036790f5203e04b977a7e0458ca904
Instruction ID: c6426c76c298e2ebdcb1ca85cf6f082159bddfd0478d829996587f2ecfb0fe48
Opcode Fuzzy Hash: cfbe59742b1ca372e32a04dadba89eb5ac036790f5203e04b977a7e0458ca904
Instruction Fuzzy Hash: 4451E63150C94ACFDB99EB5CC494EA47BA1FF76310B0942A8D00EC7597DE24E844CB96

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D9486F6 Relevance: .2, Instructions: 167COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2bf2146f9b01b8865129c0c043e97656d0fde2bd22f04c10391ac12486f2a083
Instruction ID: 6abb84ae71ae81192a61de5e6cbd216b322263f7afc0fe1eb29a43fa69f53ea6
Opcode Fuzzy Hash: 2bf2146f9b01b8865129c0c043e97656d0fde2bd22f04c10391ac12486f2a083
Instruction Fuzzy Hash: 0D51E73191CE85CFDB4AEB28C495D647FE0FF29310B1581A9D05ECB597DB28A845CB82

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D941BA1 Relevance: .2, Instructions: 164COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec2a01f7770e359b4a35b032c8252351e86be8e21355e79f826b69e39e3e72ec
Instruction ID: 604ae56bb154288c93ee4a7b71e2950892b14695b48addca85fc219d8eccdec9
Opcode Fuzzy Hash: ec2a01f7770e359b4a35b032c8252351e86be8e21355e79f826b69e39e3e72ec
Instruction Fuzzy Hash: 80516531B2490A8FEBC5FB2CC055AB977E1FF9A311B5541B4D40DD72A6EF28AC428B40

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D941B94 Relevance: .2, Instructions: 164COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 22d14d33620daa8fbf1ec87a65eebec25d3ff9e0c5b61e2d27e8f8e30b5417dd
Instruction ID: ca6b02b4bc92259bd7b55324a388ab3b1d84de4057e68ab7aebbf5b39d16ebab
Opcode Fuzzy Hash: 22d14d33620daa8fbf1ec87a65eebec25d3ff9e0c5b61e2d27e8f8e30b5417dd
Instruction Fuzzy Hash: DF518136B288098FDB94FB2CC055BB977E2EF99300B5541B5D00DD3296EF28AC428B80

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D947440 Relevance: .2, Instructions: 162COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e4c5549bbbcf4c6c7d8e7e640171e651ebfe5ba3207eb7f2537c811e0b1d7510
Instruction ID: 08aed09b29d89a9518d7e22b3d30e189a79285703ba4e463cc4be0a245d8b6ac
Opcode Fuzzy Hash: e4c5549bbbcf4c6c7d8e7e640171e651ebfe5ba3207eb7f2537c811e0b1d7510
Instruction Fuzzy Hash: C241FF1791D6E20BDB01B779A8968FE3F509F03334B1441B6E09D494E3BD4DA4CD89AE

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D946D30 Relevance: .2, Instructions: 155COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7837a06d70c4746a5c7100f42b811c84d6b19986b58bba763c97549e00ae47f7
Instruction ID: 3f48bb606743a25130cf4c4bb30422c8dee8f4daca5566ec811148ef84321291
Opcode Fuzzy Hash: 7837a06d70c4746a5c7100f42b811c84d6b19986b58bba763c97549e00ae47f7
Instruction Fuzzy Hash: 52419475A1CD19CFDB68EB0CC9509B97BE0FB5A320B554276D01EC3586EE24AC04CBD5

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D9405A2 Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8cb32307b80643b3f2947c248943be74cb6af4b157deb3fb767ef43485e8b5de
Instruction ID: a4dfdedc3b57a0b3979ba774e2faf4fcf8b9818aea90949bde986d9efcffbf5e
Opcode Fuzzy Hash: 8cb32307b80643b3f2947c248943be74cb6af4b157deb3fb767ef43485e8b5de
Instruction Fuzzy Hash: B731B53180CA998FDB99EB58C865AEC7FB1FF56320F0802BED04DD7592DA281844CF56

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D940587 Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f22c478950925d9237ddc2b06a81dd9af2206d09786060fac846c010b24dae29
Instruction ID: 9b37b9da8cf117f3f9e4d6c276b8110dc3a8f141cd34cee3a49429b0e183e301
Opcode Fuzzy Hash: f22c478950925d9237ddc2b06a81dd9af2206d09786060fac846c010b24dae29
Instruction Fuzzy Hash: 9A31A77190CA598FDB99EB58C865AEC7BB1FF66320F0402BED04ED3682DA285844CF55

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D940797 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f1981c0cd637122c587a7b07f18f6c03af6c55e63896a0e26fbeb4dc681fb7a
Instruction ID: 10fcdd5681f282c7a594d05a24c3fdda5825279d1323bc142ea32444244a7efc
Opcode Fuzzy Hash: 3f1981c0cd637122c587a7b07f18f6c03af6c55e63896a0e26fbeb4dc681fb7a
Instruction Fuzzy Hash: D4310D74D0892E8EDBA8DB48C9407BDBBB1FB59310F11C5BAD01DE3681EB3459858F80

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D948AA2 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27348341bd746605f4882c014d70dde494f049789b47859a88010dfbfde5c378
Instruction ID: 0829ccb58d9c4bc6d34e27d70b57c48d1f144b8241f19d0890ee6d6ef44b502f
Opcode Fuzzy Hash: 27348341bd746605f4882c014d70dde494f049789b47859a88010dfbfde5c378
Instruction Fuzzy Hash: A9210764C0DA828FE362832845015757FA0AF07360F1A82F6C06DCB9D3FE5C6841CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D9485A5 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b6842a87903ebbc840ba405c03f3176321ceca717d41f4e311c6745de06da42
Instruction ID: c8db2c31705b4d94072fb86afe06e893fed13bfefd6474253cb209e7459d6012
Opcode Fuzzy Hash: 6b6842a87903ebbc840ba405c03f3176321ceca717d41f4e311c6745de06da42
Instruction Fuzzy Hash: D321127444F7C69FC747877498649A0BFA4AF5333170B81EBD0988E8A3D75C584ACBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D948FC8 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80576e648e39c35a6ed8c834a2ca1a714170ee60db4b50453242dc82868a0fc2
Instruction ID: 676abd86c38c684e461b0c706daf5e517234050b2a2573f05598d88ea7a8ab42
Opcode Fuzzy Hash: 80576e648e39c35a6ed8c834a2ca1a714170ee60db4b50453242dc82868a0fc2
Instruction Fuzzy Hash: 91117C5AB28E565BEB48B31C84D2B7973C7EB8D710F4484B8D10DC32CADD18AC090BA6

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D941069 Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9635e64491c781b2c25d04c6d18a9c766115173010fb966c31e2d865ebde4add
Instruction ID: 7c08e8b5459905d079fc0330a7ebae6640868fa176178bebebca8eb3f54ba512
Opcode Fuzzy Hash: 9635e64491c781b2c25d04c6d18a9c766115173010fb966c31e2d865ebde4add
Instruction Fuzzy Hash: 67111E71B08A088FDB98DF5CD495AADB7E1FB99321F0041ABE04ED7662DF31AC418B40

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D947898 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11fbe57e9ce8992abce35cee66fa03d7f6aaffe594f995e268a5d779e25daeb0
Instruction ID: 2175781769dc00d45bd081fc1e2a30341a9ddae390eccb8c0cee2a4bea3a5f24
Opcode Fuzzy Hash: 11fbe57e9ce8992abce35cee66fa03d7f6aaffe594f995e268a5d779e25daeb0
Instruction Fuzzy Hash: F711933141CA4ADFDB989B288854A297BA0FB56320F45457CD01EC35C2EB24A844CFD2

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D9477EA Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e593593e4004f3a2670eea2372e0cbc3f438c5cc4c0ce392dcbb8a724d015fc0
Instruction ID: 5b955ac604ca42603d230016f2f924f2364a0676845e0bd13e77368c36771948
Opcode Fuzzy Hash: e593593e4004f3a2670eea2372e0cbc3f438c5cc4c0ce392dcbb8a724d015fc0
Instruction Fuzzy Hash: 3611702182C68E4FDB51AB6898805FD7FA0EF17310F4186B7D05ED61D3EA2869488B96

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D9467F3 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f0d4ca4c67e2979588fdcb0145b44fd41f1fc291f4f80993808249696ed1275
Instruction ID: dd2457c1f0f06808f6684d513629ed42e728f341e27019dfb7b47362cb6406e5
Opcode Fuzzy Hash: 7f0d4ca4c67e2979588fdcb0145b44fd41f1fc291f4f80993808249696ed1275
Instruction Fuzzy Hash: F81102A591CF96CAE7659B2888444B97FA0EF47320F0586BAD01EC31D7EE1C6809C7E1

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D940088 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c22bdf059899a1e670cf921c6b5cb5bc2abda4ef72fef288026e3b4ac23795b2
Instruction ID: c20cd4d38879168ceff45124373f8542e97f5fa3b89e70aa7da3cdeb9aec6402
Opcode Fuzzy Hash: c22bdf059899a1e670cf921c6b5cb5bc2abda4ef72fef288026e3b4ac23795b2
Instruction Fuzzy Hash: FE01A168D1CC178FE2A497188501539AA90FF0A3A0F5685B5D42ECBD87FF1CA840DFE5

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D941D1C Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a43f7d9276bd8173d8edbac41cc3359c23f96d25f59c895be502a6e8bb8564f2
Instruction ID: 8da82d1b5f7e00f22ffeee6d33482a9fd8c99159613d1a00e816fa5b24bf85ac
Opcode Fuzzy Hash: a43f7d9276bd8173d8edbac41cc3359c23f96d25f59c895be502a6e8bb8564f2
Instruction Fuzzy Hash: 74018075F18C198FDF94EB188151ABD77E1EF4A311B014171E01EE3683DF28A8018B80

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D940686 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d496d28df5a6c489c834528453651252e997ea0b4c7417e3b1d3117d2e459bd3
Instruction ID: 6c2cef42de8221e36e58d47b2abc631c59c24cc712f619135b88be4d4abeedd2
Opcode Fuzzy Hash: d496d28df5a6c489c834528453651252e997ea0b4c7417e3b1d3117d2e459bd3
Instruction Fuzzy Hash: 2001E074D0892C8FDF98EF98C495AACBBB1FB69301F11419E801EE7691DB71A981DF40

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D949439 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed1092a8af4baa3bffb072499874a79e10a0b9f2e0baf18d9d27ab3aa749a8ba
Instruction ID: da8f136add4f7f4a6838673879f8eb8ecac32f5870cee0f20fa286f036c9ea58
Opcode Fuzzy Hash: ed1092a8af4baa3bffb072499874a79e10a0b9f2e0baf18d9d27ab3aa749a8ba
Instruction Fuzzy Hash: 90F0E53110C50C9FEB08EA19EC4ADF677A8FB97334B00015EE14EC7022E222A963CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D949434 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70a28bcb464d1b141153026c3e5f6bde188915d03cb71e53a6839a5a862edccd
Instruction ID: d5b4927c6702410067f4be8a32c2d121ab1a836142709a6fad358cc9bd778cef
Opcode Fuzzy Hash: 70a28bcb464d1b141153026c3e5f6bde188915d03cb71e53a6839a5a862edccd
Instruction Fuzzy Hash: B3F0A73510D50C5FEB0CEA1DE84ADF677A4FB56334B00015EE54EC7012E221A956CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D947E01 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bec430403cfd86c095639a89f4071d523239c9a17b491714d1198473e912c76a
Instruction ID: 35e38365a5247de4879ae7b88bd11b5338364164e5fc163f277df0f162747314
Opcode Fuzzy Hash: bec430403cfd86c095639a89f4071d523239c9a17b491714d1198473e912c76a
Instruction Fuzzy Hash: CCF0283550C906CEE759A35890915F93B60FF4B330B0141BAD00F86883EE1CA440CAE5

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D948625 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c75a4f3c3802aa51683c3129f4df5c4cc8eab19fbd24d6fca806c6da8ddf1f78
Instruction ID: b15a4660d34f7c28bf881ed1f41aec00f279975e22c037af6846e36a86089b2c
Opcode Fuzzy Hash: c75a4f3c3802aa51683c3129f4df5c4cc8eab19fbd24d6fca806c6da8ddf1f78
Instruction Fuzzy Hash: 41F0A76580DBD82ED72257648C199FA3F34EF43320F45416AE09A86093ED59151AC7E2

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D9406AB Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 505f679b2222746a159b535d6aa7e77f7dfb9bee7381a4be716bdad1be2bf1f8
Instruction ID: 80d9c133e9467c4de7cbd780c91d571545aab1b6953406274cb3fb0e5705287b
Opcode Fuzzy Hash: 505f679b2222746a159b535d6aa7e77f7dfb9bee7381a4be716bdad1be2bf1f8
Instruction Fuzzy Hash: 0D010074A0892C8FCFE8DF18C895BA9B7B1EB69311F1081D9804EE3651DA319A84CF41

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D94184E Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de11ba5fbb53684065bc9881cc90acd71da95d03ee9e929b05ba44fd7074f77d
Instruction ID: 9701ca322c3ee1e7932a8adb60c451c6e78a3015f8c36e6ffd793595ff466322
Opcode Fuzzy Hash: de11ba5fbb53684065bc9881cc90acd71da95d03ee9e929b05ba44fd7074f77d
Instruction Fuzzy Hash: 80E022A7F1DD0A0AE348434C18516FA37D6EB9A730B958236C01DD32C2FE186C8A46C0

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D947BE3 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c24add2a54c9b7e1580c943b70c01eb1d64d5b5e33898f2eec557f10ef987130
Instruction ID: 97b9c58d854bbfa62f82b5c8f3bdb1dc990afe5d7a47bce038a85d4494ad44b2
Opcode Fuzzy Hash: c24add2a54c9b7e1580c943b70c01eb1d64d5b5e33898f2eec557f10ef987130
Instruction Fuzzy Hash: EEE0D826B1CC0F4FFA95E78CA5955BC6790EB553317608137D11FC2686EF186D8647C0

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D9467B0 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba788b849855737a526cfd7cc688a21efb833da891200a08977f7f635f003f01
Instruction ID: c11f8d90b1e1be3d02ee51f6c9b10afccc19b3d97bf1e2687a212f1a1eaf5deb
Opcode Fuzzy Hash: ba788b849855737a526cfd7cc688a21efb833da891200a08977f7f635f003f01
Instruction Fuzzy Hash: F9F027A4C1D6865EE7165B704D4A8FABFA4DF03320F0142B6E0ADC30D3EA5C6009C6F1

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D941DD9 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bbdea1c0a2a421f1dcae5410aecb4dab520a541b1bf6b8fe95bcda618925f96d
Instruction ID: 95c2538f90b4aaeac127114047bc54b9962a7cadce5ba15593452d7fd9a16f2e
Opcode Fuzzy Hash: bbdea1c0a2a421f1dcae5410aecb4dab520a541b1bf6b8fe95bcda618925f96d
Instruction Fuzzy Hash: F7E02B78908B5C8FCB00EF54D4045DABFA4FB4A32AF4401A9D00CD7061D3365444C7C1

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D9406D7 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1f6c58efb3ee5c84d71efefb08e8c06f742733fa28cd10891c7d38b1d2b141d9
Instruction ID: 3a8fc53e41de067a779897137869f10c156dd86497727a5d7b8dc5781e840bcf
Opcode Fuzzy Hash: 1f6c58efb3ee5c84d71efefb08e8c06f742733fa28cd10891c7d38b1d2b141d9
Instruction Fuzzy Hash: 48F0FF7490992D8FDFA9DB08C894FA8B7B1FB69301F1042E9800EE3651DB31AE95CF40

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D94993C Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9616476330e5ac9b443faa67198376e7c7f4043485a3c89f2e6cc29674621250
Instruction ID: 8531192d8f336497e20d1e4238e44b6a9f0667bfb4be0f918ae1ba8bee960730
Opcode Fuzzy Hash: 9616476330e5ac9b443faa67198376e7c7f4043485a3c89f2e6cc29674621250
Instruction Fuzzy Hash: CFE09A2AA0CD1AAFD2F4DB18411063469C0AF4A36071784B8902EC7687EF04EC004BC1

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D94866F Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: faa2ee999d1205649bb8698c011499a88efec39ab7ce918b131c90145a4f3c20
Instruction ID: f120a55fc1780558dd0b3c3396862b1e3fd3e307e430f53129dc3bb84b41eb9e
Opcode Fuzzy Hash: faa2ee999d1205649bb8698c011499a88efec39ab7ce918b131c90145a4f3c20
Instruction Fuzzy Hash: 5BE0ED25A1CE86CFE788FB5888655A83B90FF0B320B9442B1D00DC7193EE2C78018B92

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D940956 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68cb3b8be2acc4e82841be6e1332d833a25fff8bd356bd51b82539aa56f1cbb9
Instruction ID: 90911f52f624dfbeba6932271074857338f4fdb236e1946845568ca75e858975
Opcode Fuzzy Hash: 68cb3b8be2acc4e82841be6e1332d833a25fff8bd356bd51b82539aa56f1cbb9
Instruction Fuzzy Hash: CBF0A03981E7D98EE7029F7049260A87F70AF03310F1980E7D4AD86493EB281A088B82

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D947DB5 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 205d408bfc7c18ce7b1bf64d0c4c28a395faf0aa9ebb9972ab88ea2742605fff
Instruction ID: dc2125386041b0481473385ac2af4d52a6aa5e3e84f877e87691a4bcc8b53c71
Opcode Fuzzy Hash: 205d408bfc7c18ce7b1bf64d0c4c28a395faf0aa9ebb9972ab88ea2742605fff
Instruction Fuzzy Hash: 0DE0DF30819A945FD3215B10480A9AA3E60EF02330F5342AAE05D4A493E6181404CAD1

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D94077A Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d3b1e15d1194ee72202767d35152c4025bd0e9d5ff942383491036778b934b52
Instruction ID: 812df6612db5177ba0cf01efd36266475545df2efab0f9bade24455029155830
Opcode Fuzzy Hash: d3b1e15d1194ee72202767d35152c4025bd0e9d5ff942383491036778b934b52
Instruction Fuzzy Hash: C0F08C6591896FCEE7A4DB088840BBC76A0BF15300F61C0B4801D83997EE2418815F81

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D947D18 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f3089968aa481a44933d291b274e8a73e790e4657c205cb35c4785208eef4af
Instruction ID: e0dcb030848a96c5b329e91ca4b986e0960bcd509f53e22069f40248ced8dd37
Opcode Fuzzy Hash: 7f3089968aa481a44933d291b274e8a73e790e4657c205cb35c4785208eef4af
Instruction Fuzzy Hash: B7E0CD22A2CC0D4FEF55A71890409BD6341EF9632477582B2D00EC61CBEF1CA946C7C4

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D9400F0 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b3ca604212df1e15265c847aa92e4e0b7a608fd0ae2b069e7c1ff4fc27c9b531
Instruction ID: 513cf9bb04a7713086cb5ef160f19b881e2bf0b45252b685b2f366b476848ac4
Opcode Fuzzy Hash: b3ca604212df1e15265c847aa92e4e0b7a608fd0ae2b069e7c1ff4fc27c9b531
Instruction Fuzzy Hash: 5FD05E68C2D91D69EA346751490AABF3D28DF47730F124239F05E46443FA143408D9E1

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D9417DB Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41741a7434e986a61db9cc6324153d9bb3be8147fdd5d41d52c885e856eeb8f0
Instruction ID: 8700d7d35fb76de1992d36412d9a2bdc4a317e0cddb0c79354d06fb1cb4196c2
Opcode Fuzzy Hash: 41741a7434e986a61db9cc6324153d9bb3be8147fdd5d41d52c885e856eeb8f0
Instruction Fuzzy Hash: 25D0A739A0CE1C8AD770979481003FD77A1DB54320F01463B801EF3692DF7424445BC2

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D94992E Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d104452ea17e054072440382e2f3d4fa4f4b48a6f6a61075140a3790ad8c795a
Instruction ID: 82c198dbe8b10aa383323811e15122bbf6830309f2d62fcdb25413bd821b303e
Opcode Fuzzy Hash: d104452ea17e054072440382e2f3d4fa4f4b48a6f6a61075140a3790ad8c795a
Instruction Fuzzy Hash: C8E0865581DB87DAF3356B601957AF95E425F43330F458479D15D4B9C3DD2C20048BE3

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D949B3A Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38d8eaab163d7797bef6d32ddbc1149f5b65acd2459590ee375bd3f2b21367f2
Instruction ID: d0e8a5542e983bde7defc4a19dbb86aa68b55e2f0f6c57aec9e7fec3b029c733
Opcode Fuzzy Hash: 38d8eaab163d7797bef6d32ddbc1149f5b65acd2459590ee375bd3f2b21367f2
Instruction Fuzzy Hash: CCD0C71A81DB87D9F324BBA41E5BBF85E426F83330F408078D01E0AAC7DD2C20048AA3

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D949096 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8fbf03584456a4c360019225ed371ce537cf988080deb5e763e00db8b96e7b97
Instruction ID: 07f0bf38a9ccd87e1ee9f9f69643f802ac78752b477da91bc8612020517fcde9
Opcode Fuzzy Hash: 8fbf03584456a4c360019225ed371ce537cf988080deb5e763e00db8b96e7b97
Instruction Fuzzy Hash: FAD05E5A80CB83DAE699D32849255686F61AF2B320B4956B8E04E438D7EA1874005AD7

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D941D6C Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 466abb27582d00e397bebcdf3e6915a328fbec4abc29ebbad309c5ef5ebb56cd
Instruction ID: ee9918b83565cef4e488e67b19d352948c784a027c45599219340a75eb79358f
Opcode Fuzzy Hash: 466abb27582d00e397bebcdf3e6915a328fbec4abc29ebbad309c5ef5ebb56cd
Instruction Fuzzy Hash: 20B0920AF6CA1A0AF5A0E3280145A7C00D28F8A311B55D3B2EC1ED2ADBED0C2C821681

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D94181F Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91659eac0609c59d0027d356c52776ca3a8abc7c8fcf65cfd745d5f219b0c2df
Instruction ID: f1acfb7979c0a9e1e3ba41be147418131faced8ecb491f15c588b2a52ddae495
Opcode Fuzzy Hash: 91659eac0609c59d0027d356c52776ca3a8abc7c8fcf65cfd745d5f219b0c2df
Instruction Fuzzy Hash: 8EC08C4882E6D24FD7220B6405A10383F608F03320B1A8DF3C0DC0B4C7EA0E2488EBE1

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D949937 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 53fce80232b81ad983f51234e89ea801e601b81d6502b133e801597660acbb77
Instruction ID: 88e3acc61f505066e5941ee3d3e5a5097ff87547f0bf0b697ca5e57c43d89585
Opcode Fuzzy Hash: 53fce80232b81ad983f51234e89ea801e601b81d6502b133e801597660acbb77
Instruction Fuzzy Hash: 7FB01204F2CC077AE474531401803BC44819F4E360F62C07CC41FC15C3FE0C250116C4

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D94793A Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 506922f34145aa2ed22d355554992665e650a6d59e741e6620a0ef7a1d3d94d0
Instruction ID: 0daff0fd393e5ebadffc9392bf0d4e096addfd2e3a260ad3232882cc82053cba
Opcode Fuzzy Hash: 506922f34145aa2ed22d355554992665e650a6d59e741e6620a0ef7a1d3d94d0
Instruction Fuzzy Hash: FBB09B65C0D5475DE6215771160017C2E105F17370B138076D06D81C83FB141104DED2

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D9486A0 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fdbdb430e286f31068c834c210762de78846eada53d832de4d8d1adb406ce93f
Instruction ID: eb00ef11a732311daa38e6b94fa03828adfc6797d1b63d9e3f36cb51d24366c0
Opcode Fuzzy Hash: fdbdb430e286f31068c834c210762de78846eada53d832de4d8d1adb406ce93f
Instruction Fuzzy Hash: 9AA01108E0CE2200F8E8A3A0020803C0C820F0B330BAACA30C02F8AAC3FE0C2000A882

Uniqueness

Uniqueness Score: -1.00%

Function 00007FFA1D941D0F Relevance: .0, Instructions: 2COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.534981803.00007FFA1D940000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA1D940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffa1d940000_y99ZI1Kjg8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 63897573655b973bdcdea76ef3ed8d5ec4eab16113804c19dec459c0026c347c
Instruction ID: bb3eb885d025d9d98ad86246a00619667ddd5d9ee0f6ce96ae97ecb27e32ce53
Opcode Fuzzy Hash: 63897573655b973bdcdea76ef3ed8d5ec4eab16113804c19dec459c0026c347c
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to achieve execution. WMI is a Windows administration feature that provides a uniform environment for local and remote access to Windows system components. It relies on the WMI service for local and remote access and the server message block (SMB) and Remote Procedure Call Service (RPCS) for remote access. RPCS operates over port 135.
Tactics:	Execution
Data Sources:	Authentication logs, Netflow/Enclave netflow, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an existing, legitimate external Web service as a means for relaying data to/from a compromised system. Popular websites and social media acting as a mechanism for C2 may give a significant amount of cover due to the likelihood that hosts within a network are already communicating with them prior to a compromise. Using common services, such as those offered by Google or Twitter, makes it easier for adversaries to hide in expected noise. Web service providers commonly use SSL/TLS encryption, giving adversaries an added level of protection.
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network protocol analysis, Packet capture, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report y99ZI1Kjg8

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Possible Origin

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

System Behavior

Windows Analysis Report
y99ZI1Kjg8